820x
Acceleration Processor
Data Sheet
Pre
l
Hifn Confidential
im
ina
ry
DS-0157-D, © April 1, 2010, Hi/fn
®
, Inc. All rights reserved. 04/10
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language in any form by any means without the written permission of Hi/fn, Inc. (“Hifn”)
Licensing and Government Use
Disclaimer
Patents
May include one or more of the following United States patents: 4,701,745; 5,003,307; 5,016,009;
5,126,739; 5,146,221; 5,414,425; 5,463,390; 5,506,580; and 5,5532,694. Other patents pending.
Trademarks
Hi/fn
®
, MeterFlow
®
, MeterWorks
®
, and LZS
®
, are registered trademarks of Hi/fn, Inc. Hifn
TM
,
FlowThrough
TM
, and the Hifn logo are trademarks of Hi/fn, Inc. All other trademarks and trade names are the
property of their respective holders.
IBM, IBM Logo, and IBM PowerPC are trademarks of International Business Machines Corporation in the United
States, or other countries.
Microsoft, Windows, Windows NT and the Windows logo are trademarks of Microsoft Corporation in the United
States, and/or other countries.
Exporting
This product may only be exported from the United States in accordance with applicable Export Administration
Regulations. Diversion contrary to United States laws is prohibited.
Hifn Confidential
If you have signed a Hifn Confidential Disclosure Agreement that includes this document as part of its subject
matter, please use this document in accordance with the terms of the agreement. If not, please destroy the
document.
820x – Data Sheet, DS-0157-D
Hifn Confidential
Pr
eli
m
Hifn reserves the right to make changes to its products, including the contents of this document, or to
discontinue any product or service without notice. Hifn advises its customers to obtain the latest version of
relevant information to verify, before placing orders, that information being relied upon is current. Every
effort has been made to keep the information in this document current and accurate as of the date of this
document’s publication or revision.
Hifn warrants performance of its products to the specifications applicable at the time of sale in accordance
with Hifn's standard warranty or the warranty provisions specified in any applicable license. Testing and other
quality control techniques are utilized to the extent Hifn deems necessary to support such warranty. Specific
testing of all parameters, with the exception of those mandated by government requirements, of each product
is not necessarily performed.
Certain applications using Hifn products may involve potential risks of death, personal injury, or severe
property or environmental damage (“Critical Applications”). Hifn products are not designed, intended,
authorized, or warranted to be suitable for use in life saving, or life support applications, devices or systems
or other critical applications. Inclusion of Hifn products in such critical applications is understood to be fully at
the risk of the customer. Questions concerning potential risk applications should be directed to Hifn through a
local sales office.
In order to minimize risks associated with the customer's applications, adequate design and operating
safeguards should be provided by the customer to minimize inherent or procedural hazards. “Typical”
parameters can and do vary in different applications. All operating parameters, including “Typicals,” should be
validated for each customer application by the customer’s technical experts.
Hifn does not warrant that its products are free from infringement of any patents, copyrights or other
proprietary rights of third parties. In no event shall Hifn be liable for any special, incidental or consequential
damages arising from infringement or alleged infringement of any patents, copyright, or other third party
intellectual property rights.
The use of this product in stateful compression protocols (for example, PPP or multi-history applications) with
certain configurations may require a license from Motorola. In such cases, a license agreement for the right to
use Motorola patents may be obtained through Hifn or directly from Motorola.
ina
ry
Any Hifn software (“Licensed Programs”) described in this document is furnished under a license and may be
used and copied only in accordance with the terms of such license and with the inclusion of this copyright
notice. Distribution of this document or any copies thereof and the ability to transfer title or ownership of this
document’s contents are subject to the terms of such license.
Such Licensed Programs and their documentation have been developed at private expense and no part of such
Licensed Programs is in the public domain. Use, duplication, disclosure, and acquisition by the U.S.
Government of such Licensed Programs is subject to the terms and definitions of their applicable license.
Page 2
Table of Contents
List of Figures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
List of Tables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1 Product Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.2
High Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Flexible Design for Packet Processing . . . . . . . . . . . . . . . . . . . .
Engine Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Command and Data Endian Conversion Modes . . . . . . . . . . . . . .
DMA Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Data Integrity Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Other features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ina
ry
20
20
21
21
22
22
22
22
Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Ordering Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
2 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.1
2.1.1
2.1.2
2.1.3
ECC & Parity Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CRC Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Real Time Verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
eli
m
2.1.3.1
2.1.3.2
2.1.3.3
24
27
27
27
Data Integrity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Pr
2.1.4
2.1.5
2.2
820x – Data Sheet, DS-0157-D
Hifn Confidential
Compression Engine Real Time Verification . . . . . . . . . . . . . . 28
Encryption Engine Real Time Verification . . . . . . . . . . . . . . . . 29
Hash Engine Real Time Verification . . . . . . . . . . . . . . . . . . . . 30
31
33
Data Integrity Model for Encode Operations . . . . . . . . . . . . . . . .
Data Integrity Model for Decode Operations . . . . . . . . . . . . . . . .
Clock Domains. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Page 3
2.3
Clock Gating . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
3 Data Structures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1
37
39
41
Command Pointer Ring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
3.1.2
Command Descriptor Format . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1.2.1
3.1.2.2
3.1.2.3
3.1.2.4
3.1.2.5
3.1.2.6
3.1.2.7
3.1.3
3.1.3.1
3.1.3.2
Desc_result . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Desc_cmd_base . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Desc_cmd_cmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Desc_cmd_enc . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Desc_cmd_hash . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Desc_cmd_pad . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Desc_srcX and Desc_dstX . . . . . . . . . . . . . . . . . . . . . . . . . . 64
67
Initial Hash engine Value (IHV) . . . . . . . . . . . . . . . . . . . . . . 67
MAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Command Structure Conventions . . . . . . . . . . . . . . . . . . . . . . .
3.1.4
3.2
3.3
eli
m
3.1.3.4
3.1.3.5
3.1.3.6
3.1.3.7
3.1.3.8
3.1.3.9
3.1.3.3 Initialization Vector (IV) and Additional Authenticated Data (AAD)
71
Key Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Data Stream Information Fields . . . . . . . . . . . . . . . . . . . . . . 76
Hash Buffer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
IPAD & OPAD for HMAC & SSL3.0-MAC (SHA256 | MD5) . . . . . 79
AES-GCM and GMAC Operations . . . . . . . . . . . . . . . . . . . . . . 80
MAC Operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
85
3.1.3.10 IPsec Packet Processing. . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Free Pool Ring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Result Ring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Command Operation Sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
4 Data Flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.1
4.1.1
4.1.2
4.1.3
4.1.4
Hash Engine before Compression Engine . . . . . . . . . . . . . . . . . .
Hash Engine after Compression Engine . . . . . . . . . . . . . . . . . . .
Hash Engine after Pad Engine. . . . . . . . . . . . . . . . . . . . . . . . .
Hash Engine after Encryption Engine . . . . . . . . . . . . . . . . . . . .
Pr
ina
ry
3.1.1
Command Structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
98
98
99
100
101
Encode Operations Data Flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
820x – Data Sheet, DS-0157-D
Hifn Confidential
Page 4
4.2
Decode Operations Data Flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
4.2.1
4.2.2
4.2.3
4.2.4
Hash Engine before Encryption Engine. . . . . . . . . . . . . . . . . . .
Hash Engine after Encryption Engine . . . . . . . . . . . . . . . . . . . .
Hash Engine after Pad Engine. . . . . . . . . . . . . . . . . . . . . . . . .
Hash Engine after Compression Engine . . . . . . . . . . . . . . . . . .
102
103
104
105
5 Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.2
5.3
PCIe Outbound Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PCIe Inbound Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Command Pointer Ring Prefetch . . . . . . . . . . . . . . . . . . . . . . .
Read Request Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Write Request Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Completion Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ry
107
107
107
107
108
109
109
DMA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Configuration Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Channel Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
5.3.1
5.3.2
5.3.3
5.3.4
5.3.5
eli
m
Channel Manager Inbound Data Controller . . . . . . . . . . . . . . . .
Channel Manager Source Buffer . . . . . . . . . . . . . . . . . . . . . . .
Channel Manager Outbound Data Controller. . . . . . . . . . . . . . .
Channel Manager Result Buffer. . . . . . . . . . . . . . . . . . . . . . . .
Channel Manager Data Process Controller . . . . . . . . . . . . . . . .
ina
110
111
111
112
112
5.4
PKP Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
PKP Inbound Data Controller . . . . . . . . . . . . . . . . . . . . . . . . .
PKP Source Buffer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PKP Outbound Data Controller . . . . . . . . . . . . . . . . . . . . . . . .
PKP Result Buffer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PKP Interface Controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PKP Core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
113
113
113
114
114
114
Pr
5.5
5.6
5.6.1
5.6.2
5.6.3
5.6.4
820x – Data Sheet, DS-0157-D
Hifn Confidential
RNG Engine. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Hash Engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Hash In_AFIFO & Out_AFIFO . . . . . . . . . . . . . . . . . . . . . . . . .
Hash_AFIFO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Hash Interface Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Hash Core . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
115
115
115
116
Page 5
