bcm5840 Broadcom Corp., bcm5840 Datasheet - Page 2

• Manufacturer Part Number: bcm5840
• Description: Bcm5840 Gigabit Security Processor
• Manufacturer: Broadcom Corp.

The BCM5840, the world’s first single-chip Gigabit security processor,
removes barriers to providing efficient, wire-speed security across an
entire LAN or WAN network infrastructure at multi-Gigabit data rates.
Broadcom’s latest security processor sustains throughputs of 2.4 Gbps
for wirespeed IPsec encryption and authentication, regardless of packet
size. The BCM5840 provides breakthrough performance, until now,
unavailable in commercial products, thereby enabling ubiquitous
wirespeed security in routers, firewalls, switches and accesses servers at
data rates up to full-duplex OC-48 (4.8 Gbps) using a BCM5840 in each
direction.
The innovative BCM5840 sustains multi-Gigabit performance for
3DES-CBC and HMAC-SHA-1 or HMAC-MD5 IPsec processing. The
unprecedented performance levels of the BCM5840 are quickening the
pace at which the Internet, in the form of virtual private networks (VPN),
is replacing expensive, dedicated networks for remote access to
corporate Intranets and business-to-business transactions.
Flexible enough to work in most applications, the BCM5840 utilizes a
POS-PHY level 3 interface in its flow-through architecture. Multiple
keying mechanisms are supported, allowing keys to be sent directly in-
band with the packet or stored in the on-chip security association (SA)
cache.
Broadcom
or its subsidiaries in the United States and certain other countries. All other trademarks mentioned are the
property of their respective owners.
BROADCOM CORPORATION
16215 Alton Parkway, P.O. Box 57013
Irvine, California 92619-7013
© 2004 by BROADCOM CORPORATION. All rights reserved.
5480-PB03-R
9,000
8,000
7,000
6,000
5,000
4,000
3,000
2,000
1,000
®
, the pulse logo, and Connecting everything
04/08/04
0
®
500
®
are trademarks of Broadcom Corporation and/
P acket S ize ( bytes )
1,000
O V E R V I E W
1,500
The BCM5840 device’s on-chip SA storage utilizes a CAM accelerated
lookup and supports as many as 2,048 SAs on-chip.
Packet header processing in the BCM5840 includes the IPv4 header
checksum and the handling of mutable fields associated with the
checksum calculation.
The BCM5840 is optimized to function as an IPsec co-processor that off-
loads computationally demanding cryptographic operations for a host
protocol processor. A typical application might utilize a custom ASIC or
network processor unit (NPU) to receive outbound cleartext packets,
perform Security Policy Database (SPD) lookup, insert security headers,
access keys from a security association database (SAD), send
encapsulated packets along with keys to the BCM5840 for encryption,
receive encrypted packets from the BCM5840 and update the SAD as
needed.
For inbound packets, the ASIC or NPU would lookup the security
association and associated key vectors, send the packet and keys to the
BCM5840 for decryption, receive decrypted packets back, perform
decapsulation on the cleartext packets, update the SAD, verify that
processing was consistent with the SPD, and return successfully
processed packets to the system.
2,000
2,500
Phone: [phone]
Fax: [phone]
E-mail: [e-mail]
Web: www.broadcom.com
ESP 3DES+SHA-1
ESP 3DES+MD5
SHA-1
MD5