Overview

Comcores MACsec IP provides Ethernet Layer 2 Security for port authentication, data confidentiality and data integrity as standardized in IEEE 802.1AE. It protects components in Ethernet networks especially high-speed Ethernet used in cloud, data center, 5G, industrial and automotive. The MACsec IP is a fully compliant solution that provides line-rate encryption and supports VLAN-in-Clear.

The core is configurable to have multiple Security Entities, SecYs, in a single IP to support multiple Connectivity Associations per port for traffic differentiation, and is prepared for easy interfacing with Comcores or third-party MAC, PCS and TSN Switch IPs.

The MACsec Engine implements 64-bit AXI-S input and output data interfaces. It offers flexibility on integration with IEEE 1588 PTP Timestamping Unit (TSU). It additionally includes a software tool for MACsec Key Agreement Protocol IEEE 802.1X integration.

Learn more by reading our MACsec blog post, MACsec for Deterministic Ethernet whitepaper, O-RAN Fronthaul Security using MACsec whitepaper or watching our webinar on the MACsec IP.

Block Diagram

Comcores MACsec diagram

Key Features

Delivers Performance

  • Compliance with IEEE Std 802.1AE-2018
  • IEEE 802.1X MACsec Key Agreement
  • Line-rate traffic encryption and decryption

Highly Configurable

  • Supports 10G/25G data rates
  • Multiple Connectivity Associations (SecYs) with Traffic Mapping Rules
  • Multiple number of peers with 4 Security Associations (SA) per Transmit and Receive Secure Channels (SC)

Feature Rich

  • AES-GCM-128 and AES-GCM-256 Cipher Suites
  • VLAN-in-Clear
  • Confidentiality Offset
  • SW tool for MACsec Key Agreement Protocol IEEE 802.1X integration
  • Controlled/Uncontrolled Port

Silicon Agnostic

  • Designed in SystemVerilog and targeting both ASICs and FPGAs

Deliverables

The IP Core can be delivered in Source code or Encrypted format. The following deliverables will be provided with the IP Core license:

  • Solid documentation, including User Manual and Release Note.
  • Simulation Environment, including Simple Testbed, Test case and Test Script.
  • Programming Register Specification.
  • Timing Constraints in Synopsys SDC format.
  • SW integration tool for IEEE 802.1X MACsec Key Agreement Protocol.
  • Access to support system and direct support from Comcores Engineers.
  • Synopsys SGDC Files (optional).
  • Synopsys Lint, CDC and Waivers (optional).

MACsec Content

Related Products

What Comcores IP will do for you

Proven Quality

Solid process and predictability

Strong verification

Faster Time-to-Market

First in bringing out new solutions

Tremendous investments in research

Know-How

Long-term experience in communication protocols

Expert in executing digital design projects

CEO Interview

Daniel Nenni of SemiWiki interviewed John Mortensen, the CEO of Comcores. Feb 18, 2022. Bio of John Mortensen: John is the CEO & CCO of Comcores. He has been with Comcores since 2019, and has been leading the commercial function since 2020 and was appointed CEO in early 2021. John is focused on creating the best possible customer experience when you do business with Comcores. An experience where you, as a customer, sense how we constantly strive to develop cutting-edge IP’s, how we make an...

read more

PTP profiles for 5G networks

Niklas Meyer Mortensen - Jan 04, 2022. The IEEE 1588 PTP standards provide a wealth of options and the basis for highly reliable and accurate time synchronization solutions. However, the time synchronization needs of specific applications in different industries can vary quite significantly. These specific needs are defined in separate PTP profile standards, often in collaboration with other industry standards organizations. For 5G, both IEEE and ITU-T provide relevant profiles that can be...

read more

100G MAC and 100G PCS IP Cores are now available

Press Release Copenhagen, Denmark, September 6, 2021 - Comcores ApS, a fast-growing specialized supplier of Intellectual Property (IP) Cores, today announced the availability of a 100G Ethernet MAC IP including the Reconciliation Sublayer (RS), as well as a 100G PCS IP that includes RS-FEC and Base-R (SC)- FEC sublayers. Comcores Ethernet MAC 100G provides a complete IEEE 802.3 Ethernet Layer 2 solution. The MAC IP core performs the Link function of the 100G Ethernet Standard and is a low...

read more