The EIP-98 Multi-Protocol Engine is a protocol aware packet engine IP for accelerating IPSec, SSL/TLS, DTLS, SRTP and MACsec up to 2000Mbps in multi-core application or communication processors offering a large selection of cipher algorithms. Designed for fast integration, maximum CPU offload and offering full transforms, the EIP-98 packet engine provides a reliable and cost-effective embedded IP solution that is easy to integrate into multi-core SoC designs.
Protocol aware IPsec/TLS/MACsec/DTLS Packet Engine with classifier and look-aside interface for multi-core application processors
2000Mbps, programmable, maximum CPU offload by classifier, supports new and legacy crypto algorithms, AMBA interface
Supported by Driver development kit, QuickSec IPsec toolkit, Linaro ODP
The EIP-98 Multi-Protocol Engine is a protocol aware packet engine IP with a look-aside bus interface, an IPsec classifier and a packet transform engine. The Multi-Protocol engine is used as a bus master in the data plane of the system and processes packets with very little CPU intervention. This engine supports an AMBA (AXI, AHB, TCM) or a PLB SoC bus interface and can be delivered in different configurations to support IPsec as well as SSL/TLS. Compared to the Protocol-IP-93 it offers higher performance, more algorithms, protocol flexibility through token instructions and supports multi-core CPUs. Compared to the Protocol-IP-97 it offers the same performance, but due to its on board classifier, it provides much higher CPU offload.
The EIP-98 is designed to off-load the host processor to improve the speed of protocol operations and reduce power in gigabit application processors for: VPN routers; home media gateways; IoT gateways; femtocells; VPN appliances; surveillance cameras; and FTTH routers.
Performance for large packet sizes is 2000 Mbps for any supported protocol, with minimal CPU load for existing flows. IPsec performance for small packet sizes is 1000 Mbps. System clock speed is 500 MHz. Gate count is between 600 and 700k gates depending on the configuration. The Classifier runs embedded upgradable firmware.
IPsec transformation (IPv4 and IPv6):
SSL3.0 / TLS1.0 / TSL1.1 / TLS1.2 / DTLS1.0 / DTLS1.2:
SRTP packet transforms according to RFC3711:
The cryptographic engine supports the following cryptographic algorithms:
The hash engine supports the following algorithms:
The pseudo random number generator supports:
The host interface with DMA controller supports:
Master and slave interface:
FREE Webinar: Understanding Fault Injection Attacks and Their Mitigation