Print Send information

Hardware

PDU Processors

The IEEE has ratified the 802.1AE Media Access Control Security (MACsec) standard which offers connectionless user data confidentiality, frame data integrity, and data origin authenticity for LANs, metropolitan optical networks and other applications. The data plane protocol defines the frame format for data encapsulation, encryption, and authenticity using the high performance authenticating cipher GCM-AES. Elliptic's first product in this space - the LLP-04 is an ultra-high throughput engine capable of bandwidth up to 45 Gbps full-duplex.

Elliptic plans to introduce smaller engines targeted at applications requiring bandwidth in the 1 to 20 Gbps range.

The LLP-02 802.16/WiMAX Security PDU Processor was the first member of a family of flow through security cores. The WiMAX security standard as currently captured in IEEE standard 802.16e-2005 was ratified in December 2005. The LLP-02 implements all security aspects of this standard in a flow-through or 'bump-in the-MAC' architecture thereby simplifying and speeding time to market for SoC designers implementing WiMAX SoCs.

The LLP-03 PDU Processor is the newest member of the family. The WiMAX Forum recently introduced a mobile profile for security which implements a single authenticating cipher (AES-CCM). This permits SoC designs to implement a smaller, more cost-effective solution for mobile Subscriber Station and Base Station applications.

Elliptic's family of ESP/AH engines are also classified as PDU processors. In this case, the engines implement the packet transforms required for IPsec Encapsulating Security Protocol and Authentication Header as defined in IETF RFC 4301 Security Architecture for the Internet Protocol. There are two engines in this family - the CLP-25 which offers high performance IPsec processing for gateway applications and the CLP-36 which is a cost reduced version of the CLP-25 with smaller gate count, memory requirement and lower throughput. The CLP-36 is ideal for handsets or low performance gateway applications. Both engines offer crypto offload capabilities which allow them to support protocols such as SRTP.