Virtual Private Networking (VPN) technology has been in use for over twenty years now and Elliptic has developed a broad spectrum of solutions for this market segment. For low performance applications, customers usually choose individual symmetric IP cores and sequence the cores directly by the embedded processor. As the bandwidth requirement increases however, customers must employ engines offering more offload.
Elliptic's most powerful packet processing engines for IPsec are the SPP-230, the SPP-330 and the CLP-30. The SPP-230 and SPP-330 security engines are well suited for a variety of applications, including mobile backhaul, LTE small cells, residential gateways, VPN and gateway appliances, terminal servers and thin clients, and they address the security, performance and cost needs as operators transition to 4G networks to support the growing mobile data traffic. The CLP-30 offers increased throughput options and has the ability to implement multiple pipelines, multiple DMA ports as well as IPv6 support. The CLP-30 can scale up to 10 Gbps of throughput.
Most applications require IPsec processing from hundreds of Mbps to Gbps range and target cost sensitive markets. Elliptic's CLP-600 Security Protocol Accelerator (SPAcc) is perfect for this requirement. This engine implements two AMBA/AHB/AXI interfaces, state-of-the-art scatter-gather DMA, optimal processing of the cipher/hash operations, interrupt coalescence and has the unique attribute that it can be configured at build time with additional cipher/hash options to support other security protocols such as SRTP, SSL/TLS/DTLS, WiMAX and 3GPP. This flexibility has propelled this engine together with the SPP-330 to become Elliptic's most popular VPN solutions.
To complement the IPsec product portfolio, Elliptic also offers SSL, TLS and DTLS record processing engines. SSL/TLS VPNs have taken market share away from IPsec and as such SoC designers frequently add SSL capability to their VPN solution to cover both markets. The SPP-200 PDU processor is a perfect solution for medium performance gateway applications in the 100 Mbps to 1 Gbps range. The SPP-330 IPsec/TLS Multi-protocol PDU Processor is another alternative solution that provides support for multiple protocols.
To guide customers in the integration of the hardware IPsec engines into Linux IPsec, Elliptic offers the ESS-03 Linux IPsec Middleware. Licensed as C source code, developers can quickly implement a VPN solution with offload capability then fully optimize the solution based on the final target environment.
Security Protocol Accelerators and Processors
- CLP-30: High Throughput Pipelined IPsec Engine
- SPP-200: SSL/TLS/DTLS PDU Processor
- SPP-230: ESP/AH PDU Processor
- SPP-330: IPsec/TLS Multi-protocol PDU Processor
- CLP-600: IPsec/TLS/SRTP Security Protocol Accelerator
Ellipsys Cryptography Middleware
- CLP-45: Configurable Lookaside AES Cipher
- CLP-20: High Throughput AES-CCM Core
- CLP-200: Pipelined GCM-AES Core
- CLP-02: DES/3DES Cipher
- CLP-08: High Throughput DES/3DES Core
- CLP-19: Ultra-high Throughput DES/3DES Core
- CLP-04: ARC4 Cipher
- CLP-26: Configurable SHA and MD5 Hash Core
- CLP-100: Flow-Through Hash Core
- CLP-300: RSA and Elliptic Curve Public Key Accelerator
- CLP-27: Compact True Random Number Generator
A highly programmable and unique Security Protocol Accelerator specifically designed to efficiently process data for high capacity wireless and network applications. The engine is perfectly suited for applications that deal with multiple active connections and significant traffic load on different contexts, such as 4G LTE-Advanced wireless cellular base stations and femtocells.