Zoom sur l'image

Security Crypto Engine

par: AMD

The AMD Security Crypto Engine (SCE) is a flexible and customizable cryptography engine targeting numerous customer applications.

Part Number:
- EM-DI-25G-SCE-PROJ
- EM-DI-50G-SCE-PROJ
- EM-DI-100G-SCE-PROJ
Design Tools Support: Vivado Software
Licence: Core License Agreement
Device Support: Artix UltraScale+, Kintex UltraScale, Kintex UltraScale+, Virtex UltraScale, Virtex UltraScale+

Access Secure Site

Overview
Documentation

Product Description

The AMD Security Crypto Engine (SCE) is a flexible and customizable cryptography engine targeting numerous customer applications. The IP can be configured to support MACsec, IPsec, or a Bulk method of encryption and cecryption (BulkCrypto).

Key Features and Benefits

Features of SCE IP are summarized in the following. Certain features, such as the number of security associations (SA) and user interface bus width can be modified depending on the application.

Maximum recommended bandwidth: 100 Gb/s
Ingress-side and Egress-side AXI4-Stream interfaces
Supporting multiple cryptography protocols
- MACsec
- IPsec
- BulkCrypto
Supports multiple cipher suites
- GCM-AES-128 (128-bit key)
- GCM-AES-256 (256-bit key)
- GCM-AES-XPN-128 (128-bit key with Extended Packet Numbering of 64 bits) for IPsec and MACsec only
- GCM-AES-XPN-256 (256-bit key with Extended Packet Numbering of 64 bits) for IPsec and MACsec only
Supports integrity and confidentiality operation modes:
- GMAC (integrity protection only)
- GCM-AES (integrity and confidentiality protection)
Configurable confidentiality offset (that is, encryption starts with an offset):
- 0, 30, and 50 bytes for MACsec (the number of payload bytes after SecTAG that are not
  encrypted)
- Offsets of between 0 to 63 bytes for BulkCrypto
Total of 512 Security Associations (SA) with internal key storage
- 256 Secure Channels (SC) assuming two SAs per SC
- 128 Secure Channels (SC) assuming four SAs per SC
Up to 1 million SAs with external key storage (external SAs)

Documentation

Vivado IP Release Notes

This article contains a list of all 'Vivado™ IP Release Notes - All IP Change Log Information' answer records and the associated Vivado Tools release.

View Release Note