Discretix Cryptographic Engines
Discretix cryptographic engines are widely deployed in leading
system-on-chip solutions. Discretix provides high-quality,
ready-to-use cryptographic engines, to support variety of
applications. Included in Discretix’s family of cryptographic
engines are symmetric ciphers, asymmetric ciphers, Hash and
random number generators.
DxAES - General Description
The cryptographic engines implement the AES algorithm
for all three key sizes (128-bit, 192-bit and 256-bit). The
AES engine supports multiple modes including: Electronic
Code Book (ECB), Cipher Block Chaining (CBC), Cipher Block
Chaining Message Authentication Code (CBC-MAC) and Counter
(CTR). The engine also supports a dual-tunnel configuration,
where decryption with one key is concatenated by encryption
with another key, avoiding multiple data fetches. DxAES has
three interfaces: configuration (CPU), Data-In and Data-Out.
The CPU interface is a synchronous slave bus which allows
an external processor to access the engine’s configuration
registers. The Data-In and Data-Out interfaces are FIFO-type
interfaces, which are used to stream-in cipher/plain data to
be processed, and stream-out plain/cipher output data. AMBA
AHB interfaces for Data-In and Data-Out are also available.
AES Block Diagram
|
Download Brochure
|
Key Applications |
 |
Digital Right Management schemes (OMA DRM, PlayReady) |
 |
WLAN applications (IEEE 802.11) |
 |
IPSec and SSL/TLS |
 |
WiMax applications (IEEE 802.16) |
 |
Storage – SAN/NAS applications (IEEE P1619) |
|
| Benefits |
 |
Silicon proven – deployed in numerous devices and platforms |
 |
Vast experience with multiple tier-1 customers |
 |
Mature technology from the embedded security market leader |
 |
Fast time to market, easily integrated |
 |
Highly optimized implementation ensures minimal gate count and reduced power consumption |
 |
Excellent technical support |
|
| Certifications |
 |
FIPS ready |
 |
Common Criteria EAL4+ ready |
|
| Deliverables |
 |
Synthesizable Verilog RTL source code |
 |
Synthesis script and constraints |
 |
RTL Test Bench (test vectors and expected results) |
 |
User Manual with hardware integration guidelines and application notes |
|
|
AES Configuration Options
The DxAES engine is available in various configurations, supporting a wide range of throughput requirements and desired gate counts.
|
Name
|
Configuration¹ |
Dual Tunnel |
Keys |
Throughput |
Maximum Clock Frequency |
Gate Count²
|
|
bits/cycle |
Maximum
(in Mbps) |
|
DxAES-01
|
ECB,
CBC,
CBC-MAC,
CTR |
- |
128 |
3.05
|
670 |
220MHz |
16K |
|
DxAES-02 |
- |
128 |
10.67 |
2400 |
225MHz |
24K |
|
DxAES-03 |
- |
128
192
256 |
3.05
2.56
2.21 |
670
510
440 |
200MHz |
21K |
|
DxAES-04 |
- |
128
192
256 |
10.67
9.14
8.00 |
2025
1735
1520 |
190MHz |
31K |
|
DxAES-05 |
+ |
128
192
256 |
1.52
1.28
1.11 |
335
255
220 |
200MHz |
27K |
|
DxAES-06 |
+ |
128
192
256 |
5.33
4.57
4.00 |
1010
865
760 |
190MHz |
37K |
- Optional support for XCBC mode in all configurations with additional 1.2K Gate
- Technology and synthesis dependent; based on the use of design compiler and low
power 0.09μm TSMC technology; measured at 100MHz
Key Features
- Throughput up to 2400 Mbps
- Supports ECB, CBC, CBC-MAC and CTR modes (according to FIPS SP 800-38A)
- Supports 128, 192 and 256 bits key sizes
- Support for dual-tunneling
- Includes HW Key expansion
|
- Internal register file
- Area: 16K - 37K ASIC gates
- Asynchronous 32 or 128-bit data interface
- FIPS PUB 197 compliant
- Optional support for AMBA AHB data interface
- Optional support for XCBC mode
|
Download Brochure
|