With the recent progress of the IoT (Internet of Things), security functionality is required for various devices. In terms of security functionality, the protection of confidential information stored on network-connected devices and deterrence of unauthorized access or illegal operations are extremely important. Achieving this requires the prevention of software falsification, monitoring by hardware, encryption of the network path, and so on. However, encryption calculation and authentication computing for these security functions impose a very heavy load upon the software. Therefore it is not easy to implement such functionality. To solve this issue, we offer the best subsystem for implementing security functionality.
Outline
A subsystem based on Flexware Engine™ realizes various encryption authentication functions. In addition to accelerating general-purpose encryption and authentication processing, the subsystem is capable of accelerating complex processes, such as TLS and IPsec. As high load processes are executed by the dedicated hardware, this subsystem achieves 8 to 16 times higher performance compared to software processing.
Features
- Support for various encryption and authentication algorithms (DES/3DES, AES, ARC4, MD5, SHA1/256/512, etc.)
- Diverse hardware offloading and acceleration functions (TCP/IP checksum, TCP segmentation, IPsec frame, TLS record, etc.)
- Support for the connection of Gigabit Ethernet MAC (optional)
- Acceleration of exponentiation, multiplication, division and remainder calculation required for RSA by a public key encryption calculation acceleration macro (F_PKA) (optional)
- The public key encryption calculation acceleration macro (F_PKA) is also available as a stand-alone macro
- Platform (OS) independent SDK
- Diverse hardware offloading and acceleration functions (TCP/IP checksum, TCP segmentation, IPsec frame, TLS record, etc.)
- Support for the connection of Gigabit Ethernet MAC (optional)
- Acceleration of exponentiation, multiplication, division and remainder calculation required for RSA by a public key encryption calculation acceleration macro (F_PKA) (optional)
- The public key encryption calculation acceleration macro (F_PKA) is also available as a stand-alone macro
- Platform (OS) independent SDK
| IPsec | TLS | Generic | ||
|---|---|---|---|---|
| Encryption | DES-ECB / 3DES-ECB | ○ | ||
| DES-CBC / 3DES-CBC | ○ | ○ | ○ | |
| AES-ECB | ○＊1 | |||
| AES-CBC | ○＊1 | ○＊2 | ○＊1 | |
| AES-CTR | ○＊1 | |||
| ARC4 | ○ | ○ | ||
| AES-XTS | ○＊2 | |||
| AES-GCM | ○＊1 | ○＊2 | ||
| Authentication | MD5 | ○（HMAC） | ○（HMAC） | ○ |
| SHA1 / SHA256 | ○（HMAC） | ○（HMAC） | ○ | |
| SHA512 | ○ | |||
| AES-XCBC-MAC-96 | ○＊3 | |||
key length:
＊1：128 / 192 / 256 bit
＊2：128 / 256 bit
＊3：128 bit
＊1：128 / 192 / 256 bit
＊2：128 / 256 bit
＊3：128 bit
[Actual Security Subsystem Performance Values]
