ASIC design of IPSec hardware accelerator for network security

Author

Ha, Chang-Soo ; Lee, Jong Hyoung ; Leem, Duck Soo ; Park, Myoung-Soo ; Choi, Byeong-Yoon

Author_Institution

Dept. of Comput. Eng., Dong-Eui Univ., Busan, South Korea

fYear

2004

Firstpage

168

Lastpage

171

Abstract

This paper describes ASIC design of IPSec hardware accelerator for network security which can execute tunnel-mode AH and ESP algorithm of IPSec protocol suite. The processor supports AES-128/192/256, TDES, HMAC-MD5 and HMAC-SHA-1 algorithm to encrypt and authenticate the packet data and operates as hardware coprocessor to accelerate cryptographic routine of FreeS/WAN software. The IPSec hardware accelerator consists of AMBA interface, 2KB packet memory, parameter registers, global controller, and cryptographic module. It was designed using 0.25μm CMOS standard cell library and consists of about 78K gates and 2KB memory. Its throughput of ESPAES128-HMAC-SHA1 operation is approximately 200 Mbps at 125MHz for 120-byte test packet.

Keywords

CMOS digital integrated circuits; IP networks; Internet; application specific integrated circuits; authorisation; coprocessors; cryptography; data integrity; hardware-software codesign; transport protocols; 2 KB; 200 Mbit/s; AMBA interface; ASIC design; CMOS standard cell library; ESP algorithm; FreeS/WAN software; IPSec hardware accelerator; IPSec protocol suite; Internet Protocol Security; authentication; cryptographic module; cryptographic routine; data integrity; global controller; hardware coprocessor; hardware implementation; hardware-software partitioning; network processor; network security; one-way hash function; packet data; packet memory; parameter registers; tunnel-mode AH; Acceleration; Algorithm design and analysis; Application specific integrated circuits; Coprocessors; Cryptographic protocols; Cryptography; Data security; Electrostatic precipitators; Hardware; Software algorithms;

fLanguage

English

Publisher

ieee

Conference_Titel

Advanced System Integrated Circuits 2004. Proceedings of 2004 IEEE Asia-Pacific Conference on

Print_ISBN

0-7803-8637-X

Type

conf

DOI

10.1109/APASIC.2004.1349439

Filename

1349439