BCM5805 ? security processor virtual private network appliance system diagram ? high-performance single-chip security processor integrating full ipsec acceleration supports des, 3des, hmac- sha-1, and hmac-md5 200-mbps ipsec (3des, sha-1) ?in-system? performance, with new security association (sa) per packet unlimited sa support via system memory extensive hardware acceleration support for ike/ssl/tls key setup public-key acceleration unit supports over 180 diffie-hellman key exchanges/second compatible with industry-standard ssh ipsec and ike software true hardware random number generator supports multi-packet processing and prefetch of packet data and context multi-threaded dma allows multi-packet processing with single pci writes accommodates most pci latency problems without performance degradation pci 2.2 interface, 32-bit, 33/66 mhz low-power 3.3v design 144-pin dqfp package highly integrated security processor single-chip ipsec, ike, ssl/tls accelerator multi-threaded dma engine true hardware random number generator on-chip context buffer memory lowest system cost sustainable performance in real-world conditions dma supports multi-packet processing prefetch of new context and packet flexible, easy-to-use pci 2.2 interface no external components required ideal for low-cost add-in card applications compatible with all existing pc systems whole product solution minimizes time-to-market software reference library (srl) includes a hardware abstraction software layer compatible with industry-standard ssh ipsec and ike software compatible with openssl flexible vpn solution for all data security applications vpn appliances soho routers and appliances access concentrators ipsec acceleration features summary of benefits pci bus lan interface bridge and dram controller cpu dram bridge and dram controller cpu wan interface dram BCM5805 security processor
overview ? phone: 949-450-8700 fax: 949-450-8710 e-mail: info@broadcom.com web: www.broadcom.com broadcom corporation 16215 alton parkway, p.o. box 57013 irvine, california 92619-7013 ? 2004 by broadcom corporation. all rights reserved. 5805-pb05-r 02/13/04 broadcom ? , the pulse logo, and connecting everything ? are trademarks of broadcom corporation and/ or its subsidiaries in the united states and certain other countries. all other trademarks mentioned are the property of their respective owners. the BCM5805 security processor integrates a high-performance ipsec engine (des, 3des, hmac-sha-1, hmac-md5), public-key processor, true random number generator, pci interface, and context buffer memory onto a single chip . the highly integrated BCM5805 security processor is an ideal solution for vpn-enabled networking products such as soho routers and gateways, vpn appliances, access concentrators, and network interface cards. accelerating bulk cryptographic functions (des, 3des, sha-1, and md5) and public-key operations, the BCM5805 is a streamlined design ideally suited for all cost-sensitive applications. extensive hardware support for processing intensive public-key operations minimizes the user software required for ike and ssl/tls key negotiations. the BCM5805 offers 200 mbps of ipsec processing (3des, hmac- sha-1) performance and 180 diffie-hellman key exchanges per second (1024-bit public key, 180-bit private key). ipsec performance is measured ?in-system? on outbound packets, with new security associations per packet. a true hardware random number generator on the BCM5805 is well suited for iv seeding and secret key generation. the BCM5805 device?s pci interface makes it a perfect solution for all cost-sensitive security applications. requiring no external components, the BCM5805 is ideal for add-in card applications requiring ipsec acceleration. unlimited security association (sa) support via system memory and a multi-threaded dma engine utilizes system memory to maximize throughput in real-world applications. the ability to prefetch packet contexts minimizes the performance degradation when processing small packets. application program interface (api) support through broadcom?s software reference library (srl) for ipsec and ssl application software offers BCM5805 users a complete system solution. compatibility with openssl and industry-standard ipsec software from ssh communications eases integration and reduces time-to-market. clock master controller (dma, sequencing) pci bus pci bus interface 3des/des encryption true random number generator public key acceleration sha-1/md5 authenication current context prefetch context buffer
|
