high-performance security solutions with motorola network processors and corrent security processors there is a clear move to heighten security in all indus- tries ? migrating from unprotected networks to ones that support only encrypted or authenticated data. corporations are expected to spend over $12 billion to ensure that sensitive corporate information is kept secure as they shift their mission-critical applications to the internet. network equipment vendors initially implemented secu- rity through software, enabling their customers to add security standards such as internet protocol security (ipsec) or secure sockets layer (ssl) to existing systems without changing hardware. while this allowed systems to claim virtual private network (vpn) support, it quickly became apparent that customers actually intending to use their systems for terminating secure tunnels would be disappointed by security software running on general purpose hardware. network processors have been more successful in implementing security capabilities with their software-optimized architectures, but internet speed-ups and increasing security demands have led to a requirement for special purpose devices that can provide hardware acceleration of security functions. security processors are designed to accelerate the computationally intensive algorithms associated with encrypted and authenticated communications. they off-load the security functions from a network processor by serving as a coprocessor to the npu (operating in a ?look-aside? fashion) or serving as a stand-alone processor within a network processing pipeline (oper- ating ?in-line?). look-aside security processors tend to interoperate and take instruction from the host/control processor, often working through the npu. in-line secu- rity processors interoperate directly with the forwarding path of an npu to do fast path security processing. these processors are ?packet aware? and can interpret encapsu- lating security payload (esp) and authentication headers (ah) and apply all the necessary processing to pass a packet without aid of the npu. the fast path to secure internet communications motorola?s c-port tm network processor family may be used in applications requiring wire-speed security capa- bilities in the gigabit ethernet to oc-48c range. to this end, motorola has developed an alliance with corrent tm corporation to enable smooth integration of high- performance security functions with the c-port family. corrent is a fabless semiconductor company that develops high-speed silicon solutions that accelerate and secure internet communications. the corrent packet armor tm family provides ipsec secu- rity solutions for enabling vpns in access and routing devices. these security processors can be implemented in both look-aside and in-line configurations in system designs. specific features of the packet armor family include: gigabit to oc-192 ipsec capabilities security authentication engine ? up to 5m sas/sec pci/spi-3 interfaces along with spi-4.2 supports des, 3des, aes encryption algorithms supports sha-1 and md5 hmac hash algorithms on chip modulo engine true 3-grade digital randomizer (pending fips-140-1) smart networks alliance solutions brief featuring corrent f r e e s c a l e s e m i c o n d u c t o r , i freescale semiconductor, inc. f o r m o r e i n f o r m a t i o n o n t h i s p r o d u c t , g o t o : w w w . f r e e s c a l e . c o m n c . . .
powerful, flexible security combination from high-performance architectures to flexible configurations, the combination of motorola ? s c-port family with corrent ? s packet armor family provides a powerful and flexible ipsec security solution. while the c-5e np can perform the packet/cell parsing, classification, traffic management, and transformation functions, the packet armor family ? s packet processing engine improves overall system performance by alleviating the processing burden associated with ipsec and ssl at gigabit and above data rates. the c-5e np can connect to high-performance security processors in three ways: through the physical interfaces using look-aside mode, through the physical interfaces using in-line mode, and through the fabric interface using look-aside mode. this flexi- bility provides the system designer with various options for implementing a powerful security solution with the corrent packet armor family. the alliance between motorola and corrent helps customers reap the benefits of a high-performance security solution by providing: application notes and reference design for integrating the c-5e np with corrent ? s packet armor family. coordinated development service and support for joint designs for more information, go to: www.motorola.com/networkprocessors www.corrent.com ? motorola, inc. 2002. c-port, c-5e and c-ware are all trademarks of c-port corporation. motorola and the stylized motorola logo are registered trademarks of motorola inc. all other product or service names are the property of their respective owners. corrent-fact/d rev 02, july 2002 smart networks alliance motorola?s smart networks alliance is designed to enable the broadest suite of solutions for communications oem customers leveraging the smart networks platform. members of the smart networks alliance exist for almost any hardware, software or tools category, including companion chips, hardware tools, software development tools, networking software, rtos, and emulators. for more information, go to: www.motorola.com/smartnetworks/alliance combining corrent's packet armor family of security processors with motorola?s c-5e network processor provides a range of high- performance security capabilities from 1gbe to oc-48c bandwidths. phy c-port c-5e np packetarmor security processor link-layer i/f phy cp cp xp glue ? in-line ? security processor configuration f r e e s c a l e s e m i c o n d u c t o r , i freescale semiconductor, inc. f o r m o r e i n f o r m a t i o n o n t h i s p r o d u c t , g o t o : w w w . f r e e s c a l e . c o m n c . . .
|
