+1 613 254 5456
adjust font size Increase Font Size Reset Font Size Decrease Font Size

SPP-230: ESP/AH PDU Processor

The SPP-230: ESP/AH PDU Processor, a member of Elliptic's Security Protocol Processors (SPP) family, is a highly integrated security product that accelerates IPsec packet processing operations to achieve multi Gbps throughput by providing complete ESP and AH packet transforms on IP packets.

The ESP/AH PDU Processor is a scalable and cost effective engine that meets the security requirements for wireline and wireless backhaul networks with many powerful features including scatter-gather DMA, QoS for enhanced traffic management support and virtualization designed to allow sharing between multiple CPUs. The engine is targeted at SoC suppliers for networking infrastructure applications including mobile base stations, cell site routers and gateways.

The SPP-230 supports IPv4 and IPv6 modes and in addition to the protocol specific offload, there are options for further offload for cipher, hash, MAC functions, as well as public key operations and TRNG functions. The SPP-230 parses and processes the header information, performs the cryptographic operations and maintains the security state in a structure designated as a Security Association (SA). The processor has the ability to gather a packet distributed in memory for processing, operate on the packet then scatter the processed packet back to memory.

 

Features
  • Highly configurable, proven security processor
  • Complete ESP and AH packet transforms, including header insertion and removal
  • Full IPv4 and IPv6 support
  • Tunnel and transport modes supported
  • Adds/strips padding
  • Replay check with 32, 64, 128 or 256 packet window
  • Built-in scatter/gather DMA capability offloads system CPU
  • Optimal bus utilization
  • Increased throughput through parallel hashing and encryption
  • Command and status FIFO depth selection offers interrupt coalescence
  • Dual-clock domain capability to run crypto content in a different clock domain
  • Support for big- or little-endian
  • Configurable 32- or 64-bit bus interfaces
    • AMBA AXI
      • Low-Power
    • AMBA AHB
    • Lower level
Benefits
  • Silicon proven
  • Highly integrated
  • SoC/ASIC developers and embedded system OEMs benefit from
    • Reduced time to market
    • Reduced risk
    • Highly tuned solutions for performance, power and size
  • IP developed by industry experts through a structured and rigorous development and verification program
Applications
  • Networking/VPN
  • Corporate WAN Access
  • Mobile backhaul
  • Gateway/PON
  • Routers
  • Contact Elliptic for more information
Downloads

Featured Products

media ETS-020: tVault HDCP 2.2
A proven HDCP-based content protection solution that provides robust security inside Trusted Execution Environments (TEEs) and enforces the protection of sensitive information to ensure that it is stored, processed and accessed only by authorized applications.The solution integrates seamlessly within frameworks such as ARM TrustZone™, where the critical security components are embedded in a trusted and secure OS environment. The non-critical components are executed by the rich OS, such as Android.
tower CLP-630: Multi-Packet Manager Security Engine
A highly programmable and unique Security Protocol Accelerator specifically designed to efficiently process data for high capacity wireless and network applications. The engine is perfectly suited for applications that deal with multiple active connections and significant traffic load on different contexts, such as 4G LTE-Advanced wireless cellular base stations and femtocells.