Hardware

CLP Security Modules

CLP-02: DES/3DES Cipher

One of the most popular ciphers in use today is 3DES. 3DES is a variant of the Digital Encryption Standard (DES) cipher improved through the implementation of additional cipher rounds and key mixing. The CLP-02 DES/3DES core combines both algorithms into a single block which is selectable via a mode bit. This core is a robust, proven solution that is in volume production at major foundries.

Key Features:

• Implements the FIPS 46-3 standard
• Input memory block is configurable with shadow memory to allow input of next block while DES operation in progress
• Automatic generation of key context from key data
• Key memory accessible through memory interface
• Electronic Codebook (ECB) or Cipher Block Chaining (CBC) modes
• Test bench provided

Applications:

• IPSec designs in residential gateways, multi-service access products
• Storage - SAN/NAS applications
• Military communications systems

General Description

The CLP-02 DES/3DES core combines both algorithms into a single block which is selectable via a mode bit. The core supports both Electronic Code Book (ECB) and Cipher Block Chaining (CBC) modes of operation. The DES context consists of a single 64 bit key and a 64 bit initialization vector (IV). The 3-DES context consists of three 64 bit keys and a 64 bit IV. The IV is only used for (3)DES when it is operating in CBC mode. The context is accessed through the control processor port on the core.

The following table outlines the resource utilization and performance achieved by the CLP-02 in target Lattice FPGAs.

Lattice FPGA	Resource Requirement (Slices)	Maximum Clock (MHz)	Throughput at Max. Clock (Mbps)
ECP-DSP ECP33E05	1199	87	95
LFXP20E-5	1198	87	95

Search