PPC460EX-SUB800N AMCC, PPC460EX-SUB800N Datasheet - Page 13

• Manufacturer Part Number: PPC460EX-SUB800N
• Manufacturer: AMCC

Revision 1.19 – June 17, 2009
Features include:
Security Function (Optional)
The built-in security function is a cryptographic engine attached to the PLB with built-in DMA and interrupt
controllers.
Features include:
AMCC Proprietary
Preliminary Data Sheet
• PLB4 (128-bit)
• AHB
• OPB
• DCR
• Federal Information Processing Standard (FIPS) 140-2 design
• Support for an unlimited number of Security Associations (SA)
• Different SA formats for each supported protocol (IPsec/SSL/TLS/sRTP)
• Internet Protocol Security (IPSec) features
• Secure Socket Layer (SSL) and Transport Layer Security (TLS) features and Datagram Transport Layer
• Secure Real-Time Protocol (sRTP) features
• Media Access Control Security (MACSec) features
Security (DTLS) features
– 128-bit implementation of the PLB architecture
– Separate and simultaneous read and write data paths
– 64-bit address
– Simultaneous control, address, and data phases
– Four levels of pipelining
– Byte-enable capability supporting unaligned transfers
– 32- and 64-byte burst transfers
– 200MHz, maximum 12.8GB/s (simultaneous read and write)
– Processor:bus clock ratios of N:1
– 32-bit data path
– 32-bit address
– Synchronous to the PLB
– Up to 200MHz, maximum 800MB/s
– 32-bit data path with dynamic sizing for 32-, 16-, and 8-bit width
– 32-bit address
– 100MHz
– 32-bit data path
– 10-bit address
– Full packet transforms, Encapsulated Security Payload (ESP) and Authentication Header (AH)
– Complete header and trailer processing (IPv4 and IPv6)
– Multi-mode automatic padding
– "Mutable bit" handler for AH, including IPv4 option and IPv6 extension headers
– Extended Sequence Number (ESN) processing for ESP and AH
– Packet transforms
– One-pass hash-then-encrypt for SSL and TLS packet transforms for inbound packet using Stream Cipher
– Packet transforms
– Roll Over Counter (ROC) removal and TAG insertion
– Variable bypass offset of header length per packet
– MSDU (User data) encryption 0, 30, or 50 bytes offset
– Header insertion and removal
– SecTAG header with or without Secure Channel Identifier (SCI) field
– 128-bit key, 96-bit IV (nonce) and 128-bit ICV
– IV from SA record or from input buffer (as part of SecTAG)
– ICV generation and validation
460EX – PPC460EX Embedded Processor
13