Data security between Ethernet connected devices is expanding due to multiple factors: exponential growth of data containing sensitive and private information, new laws and regulations, and also technology advances in markets such as cloud computing, mobile/5G and automotive, to support faster, more scalable and ultimately more efficient networking architectures.

Media Access Control Security (MACsec) is the foundational Ethernet (Layer2) security protocol to protect network communication against DoS attacks, eavesdropping and man-in-the-middle attacks by enabling a bi-directional secure link.

Synopsys’ MACsec Security Modules provide confidentiality, integrity, origin authentication and replay protection based on scalable AES-GCM cryptography enabling end-to-end security for Ethernet traffic. Synopsys MACsec Security Modules are complete inline full-duplex solutions that seamlessly integrate with the Synopsys Ethernet MAC & PCS IP, supporting scalable data rates with low latency.

By adding Synopsys MACsec Security Modules to Synopsys Ethernet IP Solutions, designers of networking SoCs can protect networking traffic, enabling end-to-end security of data in motion between Ethernet-connected devices.

Besides traditional MACsec solutions, Synopsys also offers the first automotive-certified MACsec for both functional safety (ASIL B) and cybersecurity (ISO/SAE 21434) compliance. This IP variant protects against random and systematic faults, where reliability and fault tolerance are paramount. It meets the stringent safety process and documentation requirements of ISO 26262, with ASIL D level of compliance for systematic faults, the highest safety integrity level for automotive applications.

Synopsys Automotive MACsec IP has been fully certified by SGS-TÜV for SAE/ISO 21434 cybersecurity process and ASIL B compliance.

Learn about the broad portfolio of Security Solutions for Interfaces.


Highlights & Key Features

  • Supports IEEE 802.1AE - MACsec standard
  • Supports IEEE 802.1Q – Frame preemption, VLAN in-the-clear
  • Extended packet numbering as per IEEE 802.1AEbn standard
  • Seamless integration with Synopsys Ethernet and PCS IPs
  • Per frame processing, including encapsulation/decapsulation and frame validation
  • Scalable throughput up to 100+ Gbps
  • Based on state-of-the-art, highly optimized AES-GCM crypto
  • Configurable for optimal latency and PPA
  • Scalable number of secure channels and secure associations
  • FIPS 140-3 certification ready
  • Jumbo frames support
  • SecTag insertion & removal
  • Supports multiple VLAN tags lookup modes
  • MII/SGMII/GMII/XGMII/XLGMII/RMII/RGMII interfaces

Product Details

Resources


Find Your IP

Search for IP

Quickly identify and access the right IP solutions for your project needs.


Foundation IP Selector

Find embedded memory and logic IP for your SoC design.

Non-Volatile Memory IP Selector

Find silicon-proven NVM IP for your SoC design needs.