Hifn Introduces Highest Performance E-Commerce Security ProcessorHifn's Unique Packet Processor Eliminates System Bottlenecks in SSL Aggregation Equipment
PR NEWSWIRE - September 19, 2001 08:00
LOS GATOS, Calif., Sep 19, 2001 /PRNewswire via COMTEX/ -- Market leading provider of network security processors and flow classification products Hifn(TM) (Nasdaq: HIFN) today introduced a security processor that delivers unprecedented e-commerce performance, capable of 4,500 SSL (Secure Socket Layer) or TLS (Transport Layer Security) complete handshakes per second, by employing Hifn's unique packet processing technology.
(Photo: newscom.com )
The new Hifn 8165 enables a new class of performance for high-end SSL/TLS network infrastructure equipment, such as load balancers and concentrators that serve large numbers of e-commerce web servers. The new processor is the only complete e-commerce solution on a single chip that performs all the SSL handshakes and PK (Public Key) algorithm processing associated with secure web transactions.
"Until now, algorithm accelerators represented the state of the art for silicon based e-commerce security. Although they accelerate PK algorithms, once traffic goes above 2,000 transactions per second the host CPU becomes burdened to intolerable levels processing the SSL handshakes," says Danny Chi, Hifn product marketing manager. "Using HIPP (Hifn Intelligent Packet Processing), the 8165 performs the PK algorithm processing and the entire SSL handshake. Such unprecedented performance beyond the 2,000 transactions per second is essential to the smooth operation of commercial web sites employing high-performance SSL/TLS network aggregation equipment."
The 8165 is part of the HIPP II family of products, featuring multi-protocol capabilities that make it suitable for both secure e-commerce and VPN applications. The product is based upon Hifn's proven network security processor architecture, which has been adopted by the majority of network equipment manufacturers. Intelligent packet processing is a breakthrough technology that combines algorithm acceleration and header/trailer processing to guarantee high system throughput.
"It's anticipated that more than 100 million people will be making on-line purchases by the year 2004," says Russell Dietz, Hifn vice president and chief technology officer. "That level of activity calls for a sturdy infrastructure with strong security. The competition to meet demand by networking equipment manufacturers depends on ready-made solutions, such as the new Hifn processors, that can be deployed and updated quickly. Hifn's performance road map is based on a common architecture designed to simplify that process." The 8165 can set up 4,500 SSL handshakes per second using 1,024-bit RSA(R) keys; hardware support is provided for keys up to 3,072-bits in length. Like all HIPP II products, the 8165 is scalable; adding processors linearly multiplies performance.
The new processor supports millions of simultaneous sessions, and an optional SDRAM interface connects up to eight 512 MB memory modules via a 32 or 64-bit bus.
The HIPP II system interface is extremely flexible. It includes a 33-66MHz, 32/64-bit PCI bus and a 66MHz, 32-bit POS-PHY(TM) Level 3 compatible streaming interface. Hifn's HIPP chips perform the stateful processing required for functions such as sequence number checking, anti-replay, mutable fields and header checksum modification. Supported algorithms include 3DES, DES, AES and ARC4 encryption, SHA-1 and MD5 authentication, LZS(R) and MPPC compression. Protocols supported include SSL, TLS, IPSec, PPP and PPTP. A hardware true random number generator is incorporated in the processors.
SSL/TLS bulk encryption is performed at 600 megabit-per-second (Mbps), or at 800 Mbps when the compression engine is enabled. Full-duplex OC-12 symmetric key performance can be achieved by coupling the 8165 with Hifn's gigabit bulk encryption processor, the 8154. A choice of software options and reference designs are available to help network equipment manufacturers incorporate the new product into their designs in the shortest possible time, and to enable FIPS 140-1 level 3 compliance.
"Hifn's common architecture gives design engineers an unequaled level of flexibility," adds Dietz. "When using our HIPP processors the design work for e-commerce or VPN applications is virtually the same, and the performance migration path requires a minimum of effort. No other supplier of security processors offers a roadmap that not only parallels customers' development plans for routers and concentrators, but also allows smooth migration to next generation security processors." The new HIPP II family is supported by a comprehensive set of software tools, including a Software Development Kit (SDK) and Hifn's Security Platform (HSP), a collection of hardware and software that provide a full security reference solution for manufacturers of IPSec and SSL networking products.
HIPP II security processors are packaged in a 576-pin TBGA, utilizing 0.18 micron CMOS technology. Core voltage is 1.5V, and 3.3V at the I/O. Power consumption is 7 watts. The 8165 is priced at $686, in sample quantities. Early samples will be available next quarter, with volume shipments slated for early next year. |
