FLEXIBLE CRYPTOGRAPHIC ARCHITECTURE IN A NETWORK DEVICE
卷宗概要
发明人
Yuval Shicht; Miriam Menes; Ariel Shahar; Uria Basher; Boris Pismenny
IPC 分类
CPC 分类
A network device includes a hardware pipeline to process a network packet to be encrypted for transmission, the hardware pipeline includes a steering engine to retrieve, from the network packet, information including a packet header, a parsed header structure, or steering metadata associated with processing the network packet. The steering engine generates, based on the information, steering action(s) to be taken using a match-action pipeline of the hardware pipeline. The steering engine generates command(s) based on the steering action(s). A set of hardware engines, of the hardware pipeline, are to be triggered, by the one the command(s), to parse and execute the command(s) to determine a set of inputs and facilitate performance of a cryptographic operation on a payload data of the network packet based on the set of inputs.
原文(中文)
A network device includes a hardware pipeline to process a network packet to be encrypted for transmission, the hardware pipeline includes a steering engine to retrieve, from the network packet, information including a packet header, a parsed header structure, or steering metadata associated with processing the network packet. The steering engine generates, based on the information, steering action(s) to be taken using a match-action pipeline of the hardware pipeline. The steering engine generates command(s) based on the steering action(s). A set of hardware engines, of the hardware pipeline, are to be triggered, by the one the command(s), to parse and execute the command(s) to determine a set of inputs and facilitate performance of a cryptographic operation on a payload data of the network packet based on the set of inputs.