Hifn
HIPP
Security Processor
7814 /7854
Compression
LZS
MPPC
Encryption
AES
DES
3DES
ARC4*
Authentication
SHA-1
MD5
Public Key
RSA, DH
Hardware
random number
generator
Full-duplex T3 to full-duplex
OC-12, Integrated public key,
3DES and AES, compression
these latest chips from
Hifn
TM
have it all in a single
high-performance package
If you're in the business of making high
performance routers and network access
concentrators, HIPP was created for you. Imagine
security chips that process each packet without
relying on the CPU to intervene at every stage of
compression, encryption and authentication. Now
add an integral public key processor and true
random number generator, and say good-bye to
endless protocol software development with HIPP
it's done on-chip in microcode. As you glance over
at your available options consider this: HIPP is the
recognized way to go to reduce system latency and
guarantee system performance with full packet
processing, not just algorithm acceleration, and
Hifn's common architecture is the shortest path to
future performance enhancements.
Common processor
architecture, plus Hifn's
unmatched design
experience, means
faster time to market
and higher reliability
Adopt the Hifn architecture and
you'll be able to concentrate your
design efforts on creating the best
possible network access products,
because the security part of your
design is extensible and scalable,
with a rock-solid software wrap.
It includes a HIPP Software
Development Kit (SDK) or Hifn's Security Platform,
HSP, which also clears the way towards FIPS 140-1
level 3 compliance. You can take your pick of
solutions from IPSec T3 to multi-gigabit or SSL
e-commerce security processors. Either way, you
can choose a starting point with the knowledge that
the next Hifn chip will fit in your design with a
minimum of effort. Hifn engineers have helped
design security into the world's most highly
regarded routing and networking equipment, made
by companies such as Cisco, Nortel, Lucent, and
many others. You can depend on Hifn as you design
your best networking products ever.
OC-3 to OC-12 in a
single easy step
Scaling performance to OC-12 is achieved by
connecting four HIPPs model 7854 on the streaming
bus interface yielding full-duplex OC-12 data rates
even on small packets. As for Security Associations
(SAs), the Hifn processor takes you well beyond the
standard few thousands offered by most vendors by
delivering a staggering 512,000 SAs.
Hifn Intelligent Packet
ProcessingHIPP
Guarantees System
Performance
SDRAM/
ECC
SWITCHING F
ABRIC
SDRAM/
ECC
SDRAM/
SDRAM/
HIPP 7854
HIPP 7854
Streaming Bus
Example OC-12 System Block Diagram
(Four 7854s used together for up to 2.0 Gbps performance)
Customer
Designed
FPGA
HIPP
7854
Network Security
Processor
HIPP
7854
Network Security
Processor
Intelligent Packet Processing architecture results in
minimal host CPU interaction and maximum system
performance
s
Single pass header & trailer processing,
compression, encryption and authentication
s
On-chip processing for mutable fields, anti-replay,
stateful sequence number checking and header
checksum modification
(7854) 500 Mbps IPSec (3DES/SHA-1 or AES/SHA-1)
(7814) 200 Mbps IPSec (3DES/SHA-1 or AES/SHA-1)
(7854) 300 IKE Quick Mode connections per second
(7814) 120 IKE Quick Mode connections per second
Support for up to 2K-bit public keys natively
LZS and MPPC compression engines run at up to
700Mbps and increase the effective data rate
throughput of the 7854 when enabled
Compression feature is ideal for wireless applications
Stateful packet processing and support of ARC4*
algorithm maximize PPTP performance
High speed 32 or 64-bit/66MHz PCI or
Streaming Bus interface
HSP Architecture enables FIPS 140-1
level 3 compliance
512K simultaneous sessions supported
HSP or SDK software shortens development cycle
480 BGA package
1.5W typical power consumption (7814)
Features & Benefits
Supports Layer 3
and Layer 2
protocols.
IPSec (Layer 3)
RFC 2401 IP Security
Architecture
RFC 2393 IP Payload
Compression
RFC 2406 IP Encryption
RFC 2402 IP Authentication
RFC 2395 IP
Compression/LZS
RFC 2405 DES-CBC
Cipher Algorithm
RFC 2403 HMAC-MD5
RFC 2404 HMAC-SHA-1
PPP (Layer 2)
RFC 1962 Compression
Control Protocol
RFC 1967 PPP LZS-DCP
Compression
RFC 1974 PPP LZS
Compression
RFC 2118 Microsoft
Point-to-Point
Compression (MPPC)
Hifn
HIPP
Security Processor
7814 /7854
Part Number
Package
7814-PB4
480-pin BGA
7854-PB4
480-pin BGA
Documentation:
Datasheet
Device Specification
Programmer's Reference Guide
DPU Programs Reference Manual
Performance Application Note
RAM Unit Application Note
Verilog Model Application Note
Reference Hardware Document
Power Consumption Apps Note
HIPP Ordering
Information
750 University Avenue
Los Gatos, CA 95032
408.399.3500 tel
408.399.3501 fax
info@hifn.com
www.hifn.com
*Algorithm completely compatible with RSA's RC4.TM
2001 by Hi/fn, Inc. This product must be exported from the United States in accordance with the Export Administration Regulations. Diversion contrary to U.S. law prohibited.
Hifn is a trademark of Hi/fn, Inc. Hi/fn and LZS are registered trademarks of Hi/fn, Inc. All other trademarks are the property of their respective owners.
Delivered
Mode
Hifn
Products
Silicon
Silicon
Silicon
Silicon
Silicon
Silicon
Software
Software
6500
7851
HIPP
7901
7902
7951
LZS-221
MPPC
Hifn Product Selection Guide
System
CPU
Bus
Controller
System
Memory
HIPP
Network Security
Processor
SDRAM/
ECC
CPU
(optional)
I/O Ports
I/O Ports
Example OC-3/T3 System Block Diagram
32-bit/66 MHz or
64-bit/66 MHz PCI Bus
32-bit or 64-bit
PCI Bus
DES
3-DES
SHA
RSA
PCI
LZS
MPPC
ARC4
*
MD5
DSA
AES
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
n
PDF 
ZIP