System
CPU
Bus
Controller
HIPP
Network Security
Processor
SDRAM/
ECC
CPU
(optional)
I/O Ports
I/O Ports
32-bit/66 MHz or
64-bit/66 MHz PCI Bus
32-bit or 64-bit
PCI Bus
System
Memory
Hifn
HIPP
Security Processor
7815 / 7855
Compression
LZS
MPPC
Encryption
AES
(128, 192, & 256-bit)
DES
3DES
ARC4*
Authentication
SHA-1
MD5
Public Key
RSA, DH, DSA
True Hardware
Number Generator
Interface Bus
PCI
Streaming Interface
Tunneling Protocols
IPSec
L2TP
PPTP
The HIPP 7815 and 7855 give
designers an increase in system
performance, without digging
deep into their pocketbook
The HIPP 7815 and 7855 security processors are
highly-integrated cryptographic processors capable
of performing DES, 3DES, ARC4, AES (128, 192,
256-bit) with all modes of operation (ECB, CBC &
Counter Mode) at full-duplex T3 to full-duplex OC12
speeds.
The 7815 and 7855's on-board DPU (Dynamic
Protocol Unit) processes protocols based on the
available hardware algorithms. Today this support
includes IPSec, IPPCP and PPTP. Future support
includes SRTP and IPv6. Packets are passed to the
engine either via a 64-bit/66MHz PCI bus or an
easy-to-connect streaming data interface.
When Hifn's first HIPP processors were
announced in November 2000, the concept of full
packet processing on-chip was new to the security
processor market. Now, with so much network traf-
fic requiring some level of security these days, the
ability to support line-speed encryption and decryp-
tion has become a requirement. Hifn's HIPP lines of
security processors have become the industry
proven way to reduce system latency and guarantee
system performance.
Easy Integration
Because the HIPP 7815 and 7855 does so much of
the heavy lifting, integration with a control proces-
sor, host system, or network processor is greatly
simplified. Most operations can be treated as
API calls, allowing the rest of the system to pay
attention to other important tasks like policy
enforcement and traffic management. The simpli-
fied programming requirements also translate into
much shorter development efforts.
Easy Migration
With Hifn's common hardware and software archi-
tecture approach, manufacturers are able to update
their products to different performance levels with
a minimum of effort.
For years, Hifn's security expertise has helped
customers design their security into an array of
products; from DSL and Cable solutions to the
highly advanced multi-gigabit IP service switches.
You can depend on Hifn as you design your next
networking products.
World Class Security
Performance...for Less
Example T3/OC-3 System Block Diagram
Intelligent Packet Processing architecture results in
minimal host CPU interaction and maximum system
performance
s
On-chip header & trailer processing
s
On-chip processing for mutable fields, anti-replay,
stateful sequence number checking and header
checksum modification
s
Single pass compression, encryption and
authentication
s
(7855) 650 Mbps IPSec (AES/SHA-1)
s
(7815) 325 Mbps IPSec (AES/SHA-1)
s
(7855) 400 IKE Quick Mode connections per second
s
(7815) 200 IKE Quick Mode connections per second
s
Lower BOM Cost requires minimal peripheral
components to give you a lower system cost
s
Support for wide-key AES (128, 192, and 256-bit) and
AES counter mode
s
LZS and MPPC compression engines run at up to
875Mbps and increase the effective data rate
throughput when enabled
s
LZS Compression is ideal for wireless applications
s
Stateful packet processing and support of ARC4*
algorithm maximize PPTP performance
s
High speed 64-bit/66MHz PCI or Streaming Bus
interfaces
s
512K simultaneous sessions supported
s
HSP or SDK software shortens development cycle
s
HSP architecture enables FIPS 140-2 level 3
compliance
s
7855:
2.6W typical power consumption
7815: 1.6W typical power consumption
s
Pin compatibility of signals allows for using the
same PCB with 7851/7855 or 7814/7815
Features & Benefits
VPN Gateways
Firewall Appliances
Mid-range VPN Enabled Routers
Wireless Gateways
VoIP Gateways
SAN Gateways
Applications
Supports Layer 3
and Layer 2
protocols.
IPSec (Layer 3)
RFC 2401 IP Security
Architecture
RFC 2393 IP Payload
Compression
RFC 2406 IP Encryption
RFC 2402 IP Authentication
RFC 2395 IP
Compression/LZS
RFC 2405 DES-CBC
Cipher Algorithm
RFC 2403 HMAC-MD5
RFC 2404 HMAC-SHA-1
PPP (Layer 2)
RFC 1962 Compression
Control Protocol
RFC 1967 PPP LZS-DCP
Compression
RFC 1974 PPP LZS
Compression
RFC 2118 Microsoft
Point-to-Point
Compression (MPPC)
-PPTP
RFC3078 - MPPE
Hifn
HIPP
Security Processor
7815/7855
750 University Avenue
Los Gatos, CA 95032
408.399.3500 tel
408.399.3501 fax
info@hifn.com
www.hifn.com
*Algorithm completely compatible with RSA's RC4.TM
2002 by Hi/fn, Inc. This product must be exported from the United States in accordance with the Export Administration Regulations. Diversion contrary to U.S. law prohibited.
Hifn is a trademark of Hi/fn, Inc. Hi/fn and LZS are registered trademarks of Hi/fn, Inc. All other trademarks are the property of their respective owners.
Part Number
Speed
Package
7815PB4
66MHz
480-pin BGA
7855PB4
133MHz
480-pin BGA
Documentation:
Device Specification
Performance Application Note
DPU Programs Reference Manual
Reference Board Specification
RAM Unit Application Note
7815/7855
Ordering Information
Hifn
Products
HIPP II 8065
HIPP II 8165
Hifn Product Selection Guide
PCI
Streaming
Bus
LZS
MPPC
3-DES
AES
SHA
MD5
RSA
DSA
1k-bit
RSA SSL
signatures
per second
IKE
main-mode
connections
per second
Hardware
support
for public
keys up to
Hifn
Intelligent
Packet
Processing
Package
2000
1750
3K bits
576-pin TBGA
576-pin TBGA
4500
1750
3K bits
HIPP I 7815
HIPP I 7855
120
75
2K bits
480-pin BGA
480-pin BGA
HIPP II 8154
906
1000
3K bits
576-pin TBGA
241
150
2K bits
PDF 
ZIP