Hardware

CLP Security Modules

CLP-24: High Throughput AES-GCM Core - 5 Gbps

The CLP-24 is based on the Galois/Counter Mode (GCM) algorithm which in this design provides for throughputs well above 2.5Gbps for authenticated encryption. GCM uses a block cipher in counter mode together with Galois Field based authentication to get past the performance limitations encountered when using block ciphers for authentication (e.g. AES-CBC-MAC). Elliptic's AES-GCM core uses a binary Galois Field Multiplier (GFM) for authentication, together with a high-performance AES counter mode cipher to provide high-speed encryption. It provides both AES-GCM and GMAC-AES functionality.

Key Features:

• Throughput up to 4.7Gbps at 200MHz and 7Gbps at 300MHz
• GCM-AES as specified in draft IEEE standard 802.1AE and IETF RFC 4106
• 97K ASIC gates
• Support for three key sizes - 128, 192 and 256 bit keys.
• Multiple message authentication modes:
  • Authenticated encryption and decryption
  • Stand-alone MAC
• Test bench and synthesis scripts provided

Applications:

• IPsec per RFC4106
• 802.1AE link security in LAN switches
• WAN Security - OC-48 and OC-192
• EPON - Passive Optical Networking

Search