Hardware

CLP Security Modules

CLP-30: High Throughput Pipelined IPsec Core

The CLP-30 IPsec Offload Engine features a new enhanced architecture aimed at achieving IPsec packet processing ranging from 200 Mbps to 20 Gbps (with small packet traffic). The new design increases bandwidth and throughput compared to the CLP-25 by implementing separate inbound and outbound packet processing engines, offering cipher and hash options and the ability to support multiple packets in flight. The CLP-30 supports a SoC bus master interface for DMA transfer of packet and security association data to and from memory and a slave interface that for command and status information. SoC designers find the concept of protocol-aware cryptographic offload as the right architectural approach as it offers a flexible and scalable approach unlike the high gate count, hard-wired, in-line engines currently available on the market.

Key Features:

• Pipelined offload engine with separate inbound and outbound engines
• Highly configurable - multiple pipeline and interface options available
• Supports throughput up to 20 Gbps
• AH & ESP processing
• Transport and tunnel processing
• Extended Sequence Number support
• AES-CBC mode cipher supporting 128, 192 and 256-bit key sizes
• DES-CBC mode cipher supporting 56 and 168-bit (3DES) key sizes
• HMAC-MD5 and HMAC-SHA-1 mode hash
• Optional support for GCM-AES and SHA-256
• Support for AMBA and other SoC buses

Applications:

• IPsec in Gateway and PON applications
• VPN Appliances
• Edge Routers
• Carrier grade VPN services blades

検索