Abstract
Even in light-weight wireless computing applications, processing of network-protocols becomes more and more computation- and energy-hungry, with increasing data rated and the need for security operations. To cope with such requirements and as alternative to heavy-weight computation systems we propose an embedded system that is build for fast network-processing while supporting acceleration of state-of-the-art symmetric (AES) and asymmetric (ECC) cryptographic operations. We demonstrate how to build a dedicated TCP accelerating system based on a profiling analysis. We also discuss optimized implementations of the AES and ECC cryptographic protocols while considering the trade-off between software and hardware. Compared to an initial software-only implementation our final system accelerates the protocol handling by a factor of three, while the cryptographic operations are improved by two orders of magnitude. Our system which was manufactured in 0.25μm CMOS technology needs about 55 mW for a data rate of 40 MBit/sec.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Clark, D.D., Jacobson, V., Rornkey, J., Salwen, H.: An analysis of tcp processing overhead. IEEE Communications Magazine, 23–29 (1989)
Daemon, J.: AES implementation, optimized ANSI C v2.0., http://www.iaik.tugraz.at/research/krypto/AES/old/~rijmen/rijndael
Dunkels, A.: lwIP – a lightweight TCP/IP stack (October 2002), http://www.sics.se/~adam/lwip/
Dyka, Z., Langendoerfer, P.: Area efficient hardware implementation of elliptic curve cryptography by iteratively applying karatsuba’s method. In: DATE, pp. 70–75 (2005)
Foong, A.P., Huff, T.R., Hum, H.H., Patwardhan, J.R., Regnier, G.J.: Tcp performance re-visited. In: ISPASS 2003: Proceedings of the 2003 IEEE International Symposium on Performance Analysis of Systems and Software (2003)
Freimuth, D., Hu, E., LaVoie, J., Mraz, R., Nahum, E., Pradhan, P., Tracey, J.: Server network scalability and tcp offload. In: ATEC 2005: Proceedings of the USENIX Annual Technical Conference 2005 (2005)
Innovations for High Performance microelectronics. IHP microelectronics: technology (2006), http://www.ihp-ffo.de/24.0.html
ARM Limited. AMBA specification, revision 2.0 (1999), ARM website http://www.arm.com
López, J., Dahab, R.: Fast Multiplication on Elliptic Curves over GF(2m) without Precomputation. In: Koç, Ç.K., Paar, C. (eds.) CHES 1999. LNCS, vol. 1717, Springer, Heidelberg (1999)
Regnier, G., Minturn, D., McAlpine, G., Saletore, V., Foong, A.: Eta: Experience with an intel xeon processor as a packet processing engine. In: 11th Symposium on High Performance Interconnects (2003)
Riedel, I.: Security in ad-hoc networks: Protocols and elliptic curve cryptography on an embedded platform. Master’s thesis, Ruhr-Universitaet Bochum (2003)
Scott, M.: MIRACL—A Multiprecision Integer and Rational Arithmetic C/C++ Library, Version 5.0. In: Shamus Software Ltd, Dublin, Ireland (2005), http://indigo.ie/~mscott
Shalev, L., Makhervaks, V., Machulsky, Z., Biran, G., Satran, J., Ben-Yehuda, M., Shimony, I.: Loosely coupled tcp acceleration architecture. In: HOTI 2006: Proceedings of the 14th IEEE Symposium on High-Performance Interconnects (2006)
Steenkiste, P.: Design, implementation, and evaluation of a single-copy protocol stack. Software Practice and Experience 28(7), 749–772 (1998)
Synopsys Inc. PrimePower: Full-Chip Dynamic Power Analysis for Multimillion-Gate Designs (2005), http://www.synopsys.com/products/power/primepower_ds.pdf
FIPS U.S. Department of Commerce/NIST. Advanced Encryption Standard (AES), FIPS PUB 197 (2001), http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf
Vater, F., Langendörfer, P.: An area efficient realisation of aes for wireless devices. it - Information Technology 49(3), 188–193 (2007)
Wolkerstorfer, J.: An asic implementation of the aes-mixcolumn operation. In: Austrochip (2001)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2008 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Peter, S., Zessack, M., Vater, F., Panic, G., Frankenfeldt, H., Methfessel, M. (2008). An Encryption-Enabled Network Protocol Accelerator. In: Harju, J., Heijenk, G., Langendörfer, P., Siris, V.A. (eds) Wired/Wireless Internet Communications. WWIC 2008. Lecture Notes in Computer Science, vol 5031. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-68807-5_7
Download citation
DOI: https://doi.org/10.1007/978-3-540-68807-5_7
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-68805-1
Online ISBN: 978-3-540-68807-5
eBook Packages: Computer ScienceComputer Science (R0)