Synopsys MACsec Security Modules for Ethernet

Data security between Ethernet connected devices is expanding due to multiple factors: exponential growth of data containing sensitive and private information, new laws and regulations, and also technology advances in markets such as cloud computing, mobile/5G and automotive, to support faster, more scalable and ultimately more efficient networking architectures.

Media Access Control Security (MACsec) is the foundational Ethernet (Layer2) security protocol to protect network communication against DoS attacks, eavesdropping and man-in-the-middle attacks by enabling a bi-directional secure link.

Synopsys’ MACsec Security Modules provide confidentiality, integrity, origin authentication and replay protection based on scalable AES-GCM cryptography enabling end-to-end security for Ethernet traffic. Synopsys MACsec Security Modules are complete inline full-duplex solutions that seamlessly integrate with the Synopsys Ethernet MAC & PCS IP, supporting scalable data rates with low latency.

By adding Synopsys MACsec Security Modules to Synopsys Ethernet IP Solutions, designers of networking SoCs can protect networking traffic, enabling end-to-end security of data in motion between Ethernet-connected devices.

Besides traditional MACsec solutions, Synopsys also offers the first automotive-certified MACsec for both functional safety (ASIL B) and cybersecurity (ISO/SAE 21434) compliance. This IP variant protects against random and systematic faults, where reliability and fault tolerance are paramount. It meets the stringent safety process and documentation requirements of ISO 26262, with ASIL D level of compliance for systematic faults, the highest safety integrity level for automotive applications.

Synopsys Automotive MACsec IP has been fully certified by SGS-TÜV for SAE/ISO 21434 cybersecurity process and ASIL B compliance.

Learn about the broad portfolio of Security Solutions for Interfaces.


Synopsys MACsec Security Modules for Ethernet Datasheet

 

Highlights
Products
Downloads and Documentation
  • Supports IEEE 802.1AE - MACsec standard
  • Supports IEEE 802.1Q – Frame preemption, VLAN in-the-clear
  • Extended packet numbering as per IEEE 802.1AEbn standard
  • Seamless integration with Synopsys Ethernet and PCS IPs
  • Per frame processing, including encapsulation/decapsulation and frame validation
  • Scalable throughput up to 100+ Gbps
  • Based on state-of-the-art, highly optimized AES-GCM crypto
  • Configurable for optimal latency and PPA
  • Scalable number of secure channels and secure associations
  • FIPS 140-3 certification ready
  • Jumbo frames support
  • SecTag insertion & removal
  • Supports multiple VLAN tags lookup modes
  • MII/SGMII/GMII/XGMII/XLGMII/RMII/RGMII interfaces
10G-100G MACsec Security ModuleSTARs Subscribe
1G-25G MACsec Security ModuleSTARs Subscribe
Description: 10G-100G MACsec Security Module
Name: dwc_10g_100g_macsec_security_module
Version: 1.06a
ECCN: 5D002.b2/ENC
STARs: Open and/or Closed STARs
Product Type: DesignWare Cores
Documentation: Contact Us for More Information
Toolsets: Qualified Toolsets
Download: dw_iip_DWC_macsec
Product Code: H316-0
Description: 1G-25G MACsec Security Module
Name: dwc_1g_25g_macsec_security_module
Version: 1.06a
ECCN: 5D002.b2/ENC
STARs: Open and/or Closed STARs
Product Type: DesignWare Cores
Documentation: Contact Us for More Information
Toolsets: Qualified Toolsets
Download: dw_iip_DWC_macsec
Product Code: H315-0