Process Node: 90 nm

The SafeXcel IP Inline Security Engine is the ideal choice for communications processors and general-purpose processors that require maximum data plane offload to
dedicated security hardware. The Inline Security Engine delivers precisely the throughput
levels the market requires, ranging from 400 Mbps for small 64-byte packets to 1 Gbps for
1500-byte packets. For designs that already include or don’t require packet classification
and flow processing, the product is also available in a configuration that includes only
the inline cryptographic processing functionality.

The SafeXcel IP Inline Security Engine provides full data plane processing up to the
IP/IPsec layer. This capability is enabled by the engine’s unique Packet Classifiers /
Flow Processors and is not offered by other security IP vendors. While traditional
offerings need to rely on external classification, i.e. classification performed by
another processor, the SafeXcel IP Inline Security Engine includes micro-programmed
hardware assist for this time-consuming task.

The Inline Packet Engine supports well known algorithms DES, 3DES, AES, SHA-1, MD5, and
IPsec, as well as SRTP, SHA-256, and AES-GCM. In order to achieve Gigabit rate
throughputs, the Inline Packet Engine uses a three-stage processing pipeline. For control
plane functions that require public-key acceleration and true random number generation,
SafeNet provides separate SafeXcel IP modules that operate under control by a host
processor.

FEATURES & BENEFITS

• Silicon-Proven IP Design
• Includes Packet Classification and Flow Processing
• Superior throughput across all packet sizes
• Flexible modular architecture
• Support for complete IP header modifications and updates

Telecom, Mobile, Commuications, NPU’s