Decryption Egress Per-Port Interface Signal Descriptions - 1.0 English

Versal Adaptive SoC Integrated 400G High Speed Channelized Cryptography Engine Subsystem Product Guide (PG372)

Document ID
PG372
Release Date
2024-01-30
Version
1.0 English
Table 1. Decryption Egress Per-Port Interface Signal Descriptions
Port Name Clock Domain I/O Description
dec_egr_prtif_crypto_auth_only_p0 dec_egr_axis_clk O PortIF Egress Decryption Authenticate Only: This is the authentication-only indication signal for the non-bypass packet which starts on segment 0 or 1. When it is set to 1, it indicates that only authentication function is performed on the packet. When this signal is not set, both decryption and authentication are performed. This output is only valid during the start of packet for

non-bypass packets and its value should be ignored for bypass packets. This signal is valid for MACsec, IPsec, and BulkCrypto modes.

dec_egr_prtif_crypto_auth_only_p1 dec_egr_axis_clk O PortIF Egress Decryption Authenticate Only: This is the authentication-only indication signal for the non-bypass packet which starts on segment 2 or 3. See description for dec_egr_prtif_crypto_auth_only_p0 for more details.
dec_egr_prtif_crypto_auth_only_p2 dec_egr_axis_clk O PortIF Egress Decryption Authenticate Only: This is the authentication-only indication signal for the non-bypass packet which starts on segment 4 or 5. See description for dec_egr_prtif_crypto_auth_only_p0 for more details.
dec_egr_prtif_crypto_auth_only_p3 dec_egr_axis_clk O PortIF Egress Decryption Authenticate Only: This is the authentication-only indication signal for the non-bypass packet which starts on segment 6 or 7. See description for dec_egr_prtif_crypto_auth_only_p0 for more details.
dec_egr_prtif_crypto_byp_p0 dec_egr_axis_clk O PortIF Egress Decryption Bypass Indication: This is the bypass indication signal for the packet which starts on segment 0 or 1. When this signal is asserted, it indicates that the packet has bypassed the decryption and authentication functions and passed through the decryption core unchanged. This signal is only valid during the start of packet. This signal is valid for all crypto modes.
dec_egr_prtif_crypto_byp_p1 dec_egr_axis_clk O PortIF Egress Decryption Bypass Indication: This is the bypass indication signal for the packet which starts on segment 2 or 3. See description for dec_egr_prtif_crypto_byp_p0 for more details.
dec_egr_prtif_crypto_byp_p2 dec_egr_axis_clk O PortIF Egress Decryption Bypass Indication: This is the bypass indication signal for the packet which starts on segment 4 or 5. See description for dec_egr_prtif_crypto_byp_p0 for more details.
dec_egr_prtif_crypto_byp_p3 dec_egr_axis_clk O PortIF Egress Decryption Bypass Enable: This is the bypass indication signal for the packet which starts on segment 6 or 7. See description for dec_egr_prtif_crypto_byp_p0 for more details.
dec_egr_prtif_crypto_discard_p0 dec_egr_axis_clk O PortIF Egress Decryption Discard Packet Indication: This is the discard indication for packet which ends on segment 0 or 1.

In MACsec, this output is set high to indicate that the validation checks have marked the packet for discard which is dictated by IEEE 802.1AE.

In IPsec, this output is set high to indicate that the packet failed replay check. This output is only valid during the end of packet for MACsec and IPsec modes.

dec_egr_prtif_crypto_discard_p1 dec_egr_axis_clk O PortIF Egress Decryption Discard Packet Indication: This is the discard indication for packet which ends on segment 2 or 3. See description for dec_egr_prtif_crypto_discard_p0 for more details.
dec_egr_prtif_crypto_discard_p2 dec_egr_axis_clk O PortIF Egress Decryption Discard Packet Indication: This is the discard indication for packet which ends on segment 4 or 5. See description for dec_egr_prtif_crypto_discard_p0 for more details.
dec_egr_prtif_crypto_discard_p3 dec_egr_axis_clk O PortIF Egress Decryption Discard Packet Indication: This is the discard indication for packet which ends on segment 6 or 7. See description for dec_egr_prtif_crypto_discard_p0 for more details.
dec_egr_prtif_crypto_icv_chk_fail_p0 dec_egr_axis_clk O PortIF Egress Decryption ICV Check Failure Indication: This is the ICV check failure indication for packet which ends on segment 0 or 1. This output is set high to indicate that the ICV check failed for the packet ending on segment 0 or 1. This output is only valid during the end of packet in MACsec, IPsec and BulkCrypto modes for decrypted/validated packets.
dec_egr_prtif_crypto_icv_chk_fail_p1 dec_egr_axis_clk O PortIF Egress Decryption ICV Check Failure Indication: This is the ICV check failure indication for packet which ends on segment 2 or 3. See description for ec_egr_prtif_crypto_icv_chk_fail_p0 for more details.
dec_egr_prtif_crypto_icv_chk_fail_p2 dec_egr_axis_clk O PortIF Egress Decryption ICV Check Failure Indication: This is the ICV check failure indication for packet which ends on segment 4 or 5. See description for ec_egr_prtif_crypto_icv_chk_fail_p0 for more details.
dec_egr_prtif_crypto_icv_chk_fail_p3 dec_egr_axis_clk O PortIF Egress Decryption ICV Check Failure Indication: This is the ICV check failure indication for packet which ends on segment 6 or 7. See description for ec_egr_prtif_crypto_icv_chk_fail_p0 for more details.
dec_egr_prtif_crypto_pkt_num_p0[63:0] dec_egr_axis_clk O PortIF Egress Decryption Crypto Packet Number: This signal represents the recovered packet (sequence) number for the MACsec (IPsec) packet which starts on segment 0 or 1. For bypass packets, only bits [63:32] are valid and are equal to the upper 32 bits of the packet (sequence) number provided by the user (through the ingress ICV port) at the ingress. This output is only valid during the start of packet. This signal should be ignored in BulkCrypto or BulkECB modes.
dec_egr_prtif_crypto_pkt_num_p1[63:0] dec_egr_axis_clk O PortIF Egress Decryption Crypto Packet Number: This signal represents the recovered packet (sequence) number for the MACsec (IPsec) packet which starts on segment 2 or 3. See description for dec_egr_prtif_crypto_okt_num_p0 for more details.
dec_egr_prtif_crypto_pkt_num_p2[63:0] dec_egr_axis_clk O PortIF Egress Decryption Crypto Packet Number: This signal represents the recovered packet (sequence) number for the MACsec (IPsec) packet which starts on segment 4 or 5. See description for dec_egr_prtif_crypto_okt_num_p0 for more details.
dec_egr_prtif_crypto_pkt_num_p3[63:0] dec_egr_axis_clk O PortIF Egress Decryption Crypto Packet Number: This signal represents the recovered packet (sequence) number for the MACsec (IPsec) packet which starts on segment 6 or 7. See description for dec_egr_prtif_crypto_okt_num_p0 for more details.
dec_egr_prtif_crypto_replay_chk_fail_p0 dec_egr_axis_clk O PortIF Egress Decryption Replay Check Failure Indication: This is the replay check failure indication signal for packet which ends on segment 0 or 1. If it is set high, it indicates that the replay check failed for the packet. This output is only valid during the end of packet. This signal is only valid in MACsec or IPsec modes for decrypted/validated packets.
dec_egr_prtif_crypto_replay_chk_fail_p1 dec_egr_axis_clk O PortIF Egress Decryption Replay Check Failure Indication: This is the replay check failure indication signal for packet which ends on segment 2 or 3. See description for dec_egr_prtif_crypto_replay_chk_fail_p0 for more details.
dec_egr_prtif_crypto_replay_chk_fail_p2 dec_egr_axis_clk O PortIF Egress Decryption Replay Check Failure Indication: This is the replay check failure indication signal for packet which ends on segment 4 or 5. See description for dec_egr_prtif_crypto_replay_chk_fail_p0 for more details.
dec_egr_prtif_crypto_replay_chk_fail_p3 dec_egr_axis_clk O PortIF Egress Decryption Replay Check Failure Indication: This is the replay check failure indication signal for packet which ends on segment 6 or 7. See description for dec_egr_prtif_crypto_replay_chk_fail_p0 for more details.
dec_egr_prtif_crypto_sa_index_p0[19:0] dec_egr_axis_clk O PortIF Egress Decryption SA index:

This signal represents the Security Association Index for the packet starting on segment 0 or 1. This output is valid during the start of the packet. This signal is valid for all crypto modes.

dec_egr_prtif_crypto_sa_index_p1[19:0] dec_egr_axis_clk O PortIF Egress Decryption SA index:

This signal represents the Security Association Index for the packet starting on segment 2 or 3. This output is valid during the start of the packet. This signal is valid for all crypto modes.

dec_egr_prtif_crypto_sa_index_p2[19:0] dec_egr_axis_clk O PortIF Egress Decryption SA index:

This signal represents the Security Association Index for the packet starting on segment 4 or 5. This output is valid during the start of the packet. This signal is valid for all crypto modes.

dec_egr_prtif_crypto_sa_index_p3[19:0] dec_egr_axis_clk O PortIF Egress Decryption SA index:

This signal represents the Security Association Index for the packet starting on segment 6 or 7. This output is valid during the start of the packet. This signal is valid for all crypto modes.

dec_egr_prtif_crypto_spare_out_p0[31:0] dec_egr_axis_clk O PortIF Egress Decryption Spare Outputs: These outputs reflect sideband signals carried through the decryption pipeline for the packet that starts on segment 0 or 1. The sideband signals are provided through spare_in input ports and sampled during start of packet at the ingress. These outputs are valid only during the start pf packet. This signal is valid for all crypto modes.
dec_egr_prtif_crypto_spare_out_p1[31:0] dec_egr_axis_clk O PortIF Egress Decryption Spare Outputs: These outputs reflect sideband signals carried through the decryption pipeline for the packet that starts on segment 2 or 3. See description for dec_egr_prtif_crypto_spare_out_p0 for more details.
dec_egr_prtif_crypto_spare_out_p2[31:0] dec_egr_axis_clk O PortIF Egress Decryption Spare Outputs: These outputs reflect sideband signals carried through the decryption pipeline for the packet that starts on segment 4 or 5. See description for dec_egr_prtif_crypto_spare_out_p0 for more details.
dec_egr_prtif_crypto_spare_out_p3[31:0] dec_egr_axis_clk O PortIF Egress Decryption Spare Outputs: These outputs reflect sideband signals carried through the decryption pipeline for the packet that starts on segment 6 or 7. See description for dec_egr_prtif_crypto_spare_out_p0 for more details.
dec_egr_prtif_crypto_zlen_p0 dec_egr_axis_clk O PortIF Egress Decryption Zero-length Payload Indicator: This signal is the zero-length payload indicator for the one-segment packet that starts and ends on segment 0 or 1. When asserted, this signal indicates that the current packet is in fact a bogus packet to represent an ESP packet with zero payload. This signal is only valid in IPsec mode for decrypted/validated packets.
dec_egr_prtif_crypto_zlen_p1 dec_egr_axis_clk O PortIF Egress Decryption Zero-length Payload Indicator: This signal is the zero-length payload indicator for the one-segment packet that starts and ends on segment 2 or 3. See dec_egr_prtif_crypto_zlen_p0 for more details.
dec_egr_prtif_crypto_zlen_p2 dec_egr_axis_clk O PortIF Egress Decryption Zero-length Payload Indicator: This signal is the zero-length payload indicator for the one-segment packet that starts and ends on segment 4 or 5. See dec_egr_prtif_crypto_zlen_p0 for more details.
dec_egr_prtif_crypto_zlen_p3 dec_egr_axis_clk O PortIF Egress Decryption Zero-length Payload Indicator: This signal is the zero-length payload indicator for the one-segment packet that starts and ends on segment 6 or 7. See dec_egr_prtif_crypto_zlen_p0 for more details.
dec_egr_prtif_ipsec_next_header_p0[7:0] dec_egr_axis_clk O IPsec Next Header:

This signal represents the value of the Next Header field in the ESP trailer associated with the packet that ends on segment 0 or 1. This output is only valid in IPsec mode for decrypted/validated packets.

dec_egr_prtif_ipsec_next_header_p1[7:0] dec_egr_axis_clk O IPsec Next Header:

This signal represents the value of the Next Header field in the ESP trailer associated with the packet that ends on segment 2 or 3. This output is only valid in IPsec mode for decrypted/validated packets.

dec_egr_prtif_ipsec_next_header_p2[7:0] dec_egr_axis_clk O IPsec Next Header:

This signal represents the value of the Next Header field in the ESP trailer associated with the packet that ends on segment 4 or 5. This output is only valid in IPsec mode for decrypted/validated packets.

dec_egr_prtif_ipsec_next_header_p3[7:0] dec_egr_axis_clk O IPsec Next Header:

This signal represents the value of the Next Header field in the ESP trailer associated with the packet that ends on segment 6 or 7. This output is only valid in IPsec mode for decrypted/validated packets.

dec_egr_prtif_macsec_sectag_an_p0[1:0] dec_egr_axis_clk O MACsec SecTAG Association Number:

This output indicates the association number extracted from the SecTAG field of the MACsec frame which starts on segment 0 or 1. This signal is only valid during the start of packet in MACsec mode for decrypted/validated packets.

dec_egr_prtif_macsec_sectag_an_p1[1:0] dec_egr_axis_clk O MACsec SecTAG Association Number:

This output indicates the association number extracted from the SecTAG field of the MACsec frame which starts on segment 2 or 3. This signal is only valid during the start of packet in MACsec mode for decrypted/validated packets.

dec_egr_prtif_macsec_sectag_an_p2[1:0] dec_egr_axis_clk O MACsec SecTAG Association Number:

This output indicates the association number extracted from the SecTAG field of the MACsec frame which starts on segment 4 or 5. This signal is only valid during the start of packet in MACsec mode for decrypted/validated packets.

dec_egr_prtif_macsec_sectag_an_p3[1:0] dec_egr_axis_clk O MACsec SecTAG Association Number:

This output indicates the association number extracted from the SecTAG field of the MACsec frame which starts on segment 6 or 7. This signal is only valid during the start of packet in MACsec mode for decrypted/validated packets.

  1. <N> is the port number 0 to 3 and <M> is the segment number 0 to 7.