R
a
DSP
ADSP-2141L
APPLICATIONS
SECURE KERNEL CONTROL
Security Coprocessor for High Speed Networking Prod-
ucts (Routers, Switches, Hubs)
Cryptographic Core for Firewalls, Hardware Encryptors,
and More
Tamper-Resistant Isolation of Cryptographic Functions
Enforces Security Perimeter Around Crypto Functions
and Crypto Storage Locations
Anticloning Protection
Crypto Peripheral for Implementing Secure NIC Adapt-
ers (10/100 Ethernet, Token Ring, ISDN)
Secure Modem-on-a-Chip (V.34, ADSL)
Secure Algorithm Download
SafeNet CGX LIBRARY
On-Chip SafeNet CGX Crypto Library with Flexible CGX
API
FEATURES
DES CRYPTO BLOCK
Includes Chained and Parallel Execution Commands
Such as Hash-and-Encrypt
Embodied as 32K Words (32K ؋
24) Kernel Program
Mask-Programmed into On-Chip ROM
On-Chip Protected 4K ؋
16 Security Scratchpad RAM
640 Mbps Sustained Performance—Single DES
214 Mbps Sustained Performance—Triple DES
Supports All Modes: ECB; CBC; 64-Bit OFB; and 1-, 8-,
64-Bit CFB. Includes Automatic Padding
Implements IPsec ESP Transforms Autonomously at
OC-3 (155 Mbps) Rates (3-DES, SHA-1)
RANDOM NUMBER GENERATOR
Hardware-Based Nondeterministic Random Number
Generator
HASH BLOCK
Hardware-Based SHA-1 and MD-5 Hashing
253 Mbps Sustained Performance—SHA-1
315 Mbps Sustained Performance—MD-5
Implements IPsec AH and HMAC Transforms
Generates Internal Session Keys That Are Never
Exposed Outside of the SafeNet DSP
Redundant Fail-Safe Design
Up to 1.3 Mbits of Random Data Available per Second
FUNCTIONAL BLOCK DIAGRAM
KERNEL
MODE
CONTROL
BUS_MODE
IDMA MODE
PCI MODE
16
32
16
32
16-
OR
32-BIT
BUS
IDMA
IDMA
BUS
INTERFACE
INTERRUPTS
FLAGS
ADSP-218x
DSP CORE
DMA-32
CONTROLLER
PCI OR
CARDBUS
INTERFACE
KERNEL ROM
PROTECTED
SPORT 0
HASH
ENCRYPT
BLOCK
(DES, 3-DES)
KERNEL
RAM
PUBLIC KEY
ACCELERATOR
RNG
BLOCK
BLOCK
(MD-5, SHA-1)
SERIAL
PORTS
PROG ROM
BUS_MODE
BUS_SEL
EMI BUS
SPORT 1
DATA ROM
EXTERNAL
MEMORY
INTERFACE
LASER
VARIABLE
STORE
SERIAL
EEPROM
INTERFACE
INTERRUPT
CONTROLLER
APPLICATION
REGISTERS
TIMER
26-BITS
ADDR
32-BITS
DATA
PF7/INT_H
RAM/ROM
SafeNet is a registered trademark of Information Resource Engineering (IRE).
REV. 0
Information furnished by Analog Devices is believed to be accurate and
reliable. However, no responsibility is assumed by Analog Devices for its
use, nor for any infringements of patents or other rights of third parties
which may result from its use. No license is granted by implication or
otherwise under any patent or patent rights of Analog Devices.
One Technology Way, P.O. Box 9106, Norwood, MA 02062-9106, U.S.A.
Tel: 781/329-4700
Fax: 781/326-8703
World Wide Web Site: http://www.analog.com
© Analog Devices, Inc., 2000