|
|
FONT RESIZE |
Middleware
IPsec
The ESS-03 is part of the Ellipsys Security Architecture (ESA) which offers a comprehensive set of security software for embedded applications. The ESS-03 offers a reference design for integrating any of the CLP-25, CLP-30 or CLP-36 ESP/AH Offload Engines into Linux IPsec. Linux IPsec is a robust, open platform that has been widely adopted by embedded software developers. The challenge in integrating hardware offload has been finding the optimum method of substituting hardware offload function for software processes. The ESS-03 facilitates an offload solution for both IPv4 and IPv6 implementations of IPsec and is available in C source code to speed time to market through a complete reference solution from Elliptic
Linux offers a complete IPsec solution which is tightly integrated into the TCP/IP stack and offers a complete solution for the data plane packet manipulation required for IPsec. Ellipsys Linux IPsec offers a reference design for data plane IPsec and supports fast data path hardware offload for both IPv4 and IPv6 implementations. IPv4 IPsec offload is done through the substitution of hardware ESP/AH header processing for the native software functions. IPv6 IPsec offload is done through crypto offload of the base algorithms such as AES, 3DES and HMAC/SHA-1.
- Seamlessly integrates hardware offload into Linux IPsec
- Supports IPv4 IPsec PDU processing hardware offload
- Replacement of fast path ESP/AH function with hardware
- Supports IPv6 IPsec hardware offload
- Replacement of fast path cipher and hash operations with hardware
- Reference code licensed in C Source Code
- Developed for Linux Fedora Core 6 with the 2.6.22 kernel
- FPGA based evaluation platform available with the EVAL-01 Evaluation Card
