VPN Security IPSec Co-Processor

The Marvell Virtual Private Network (VPN) IP Security (IPSec) co-processor technology accelerates cryptographic operations related to IPSec functions, providing a very high level of system performance and throughput.  The software solution includes a well-defined API for initialization and configuration of the co-processor, and drivers and middleware functions for accessing the co-processor from the host CPU and applications.

Key Features

The IPSec co-processor accelerates the following functions:

• Encryption and decryption of data using DES/3DES in CBC or ECB mode
• Authentication of data using HMAC-SHA1/HMAC-MD-5
• Hashing of data using SHA1/MD-5
• 128-bit, 192-bit and 256-bit AES based on cryptographic operations (using the Rijndael algorithm)
• Encryption APIs for encryption and decryption and authentication using algorithms such as 3DES, DES, SHA-1, MD-5, etc.
• Works in conjunction with VPN Public Key Generation (PKG) co-processor for complete VPN acceleration
• No restriction on number of VPN tunnels. Depends on available flash and memory on system.

Complete VPN Solution

To accelerate time-to-market, Marvell offers a complete VPN and firewall reference solution with Intoto Inc.’s iGateway™ Firewall and VPN Software. Intoto’s VPN software offloads CPU-intensive encryption and decryption functions to the Marvell IPSec co-processor for higher system performance and VPN throughput. The combined solution addresses the security challenges of the small and medium enterprise market and provide significant value and time-to-market advantage to OEM vendors who wish to embed this solution into their equipment.