Abstract: A method includes synthetizing a hardware description language (HDL) code into a netlist comprising a first a second and a third components. The method further includes allocating addresses to each component of the netlist. Each allocated address includes assigned addresses and unassigned addresses. An internal address space for a chip is formed based on the allocated addresses. The internal address space includes assigned addresses followed by unassigned addresses for the first component concatenated to the assigned addresses followed by unassigned addresses for the second component concatenated to the assigned addresses followed by unassigned addresses for the third component. An external address space for components outside of the chip is generated that includes only the assigned addresses of the first component concatenated to the assigned addresses of the second component concatenated to the assigned addresses of the third component. Internal addresses are translated to external addresses and vice versa.

Abstract: A new approach of systems and methods to support a hierarchical interrupt propagation scheme for efficient interrupt propagation and handling is proposed. The hierarchical interrupt propagation scheme organizes a plurality of slave interrupt handlers associated functional blocks in a chip in a hierarchy. When an exception or error condition occurs in a functional block, a slave interrupt handler associated with the functional block creates an interrupt packet as an interrupt notification and utilizes pre-existing input and output interfaces that have already been utilized for accessing registers of the functional block to transmit the created interrupt packet to a central interrupt handler through the hierarchy without running dedicated interconnect wires out of the functional block.

Abstract: A system and method for accounting for delay to accurately schedule a data packet for transmission between communicating devices. According to an aspect of the invention, a data packet to be scheduled is identified and the packet modified time, reflecting an estimation of the transmission time of the packet, and the scheduled transmission time, reflecting the time the packet should be scheduled to be transmitted, are calculated. A time stamp in the packet is adjusted to reflect the packet modified time and the packet is stored until either the packet modified time or the scheduled transmission time, when the packet is then transmitted.

Abstract: A transmit portion of a network device including a medium access control (MAC) module configured to receive a frame of data to be transmitted from the network device in accordance with a MAC security (MACsec) protocol. In response to the frame of data being a precise time protocol (PTP) frame, the MAC module is configured to encrypt the PTP frame in accordance with the MACsec protocol, and associate an identifier with the encrypted PTP frame. A physical layer module includes a transmit module configured to transmit the encrypted PTP frame from the network device at a particular time. A PTP module configured to, based on the identifier associated with the encrypted PTP frame, generate a time stamp indicating the particular time that the transmit module transmits the encrypted PTP frame from the network device. The time stamp is transmitted from the network device along with the encrypted PTP frame.

Abstract: A media access control (MAC) security apparatus for a local area network interface includes a parser, an encryption engine, an authentication engine, and a first buffer. The parser is configured to output packets. The encryption engine is configured to receive the packets from the parser and generate encrypted data based on the packets received from the parser and cryptographic primitives. The encryption engine includes an advanced encryption standard engine configured to form the cryptographic primitives. The authentication engine is configured to perform authentication operations of the local area network interface based on the encrypted data from the encryption engine. The first buffer is configured to interface the encryption engine to the parser. The parser and the encryption engine process data at different rates. The first buffer is configured to compensate for the different rates.

Abstract: Various embodiments provide a way to adjust transmission rates of a medium access controller (MAC) to a physical layer (PHY) to accommodate for packet expansions due to encryption that takes place in the PHY. In at least some embodiments, a communication interface between different MACs in a system is re-purposed to allow the PHY to communicate to a system MAC to notify the system MAC to pause and then resume, at an appropriate time, its packet transmissions.

Abstract: A system and method for accounting for delay to accurately schedule a data packet for transmission between communicating devices. According to an aspect of the invention, a data packet to be scheduled is identified and the packet modified time, reflecting an estimation of the transmission time of the packet, and the scheduled transmission time, reflecting the time the packet should be scheduled to be transmitted, are calculated. A time stamp in the packet is adjusted to reflect the packet modified time and the packet is stored until either the packet modified time or the scheduled transmission time, when the packet is then transmitted.

Abstract: A media access control (MAC) security apparatus for a local area network interface includes multiple independently controlled power domains, each of which enters and exits a reduced power state independent of others of the power domains. An encryption/decryption engine, located within a first of the power domains, generates encrypted data in response to received packets and cryptographic primitives. An authentication engine, located within a second of the power domains, performs authentication operations in response to the encrypted data. The encryption/decryption engine comprises an advanced encryption standard engine that forms the cryptographic primitives and is located within a third of the power domains. The third power domain enters the reduced power state for part of a period during which (i) the first power domain does not enter the reduced power state and (ii) the encryption/decryption engine is generating the encrypted data.

Abstract: A system includes a medium access control (MAC) module and a precise time protocol (PTP) module. The MAC module is configured to generate an identifier for a PTP frame, generate an encrypted PTP frame by encrypting the PTP frame, and output the identifier. The PTP module is configured to receive the identifier, identify the encrypted PTP frame based on the identifier in response to the encrypted PTP frame being output from the MAC module, and time stamp the encrypted PTP frame prior to the encrypted PTP frame being transmitted.

Abstract: Various embodiments provide a way to adjust transmission rates of a medium access controller (MAC) to a physical layer (PHY) to accommodate for packet expansions due to encryption that takes place in the PHY. In at least some embodiments, a communication interface between different MACs in a system is re-purposed to allow the PHY to communicate to a system MAC to notify the system MAC to pause and then resume, at an appropriate time, its packet transmissions.

Abstract: A media access control (MAC) security apparatus including an encryption/decryption engine and an authentication engine. The encryption/decryption engine is configured to generate encrypted data based on received packets. The authentication engine is configured to perform authentication in response to the encrypted data. The encryption/decryption engine includes an advanced encryption standard (AES) engine configured to form cryptographic primitives. The AES engine is configured to enter a reduced power consumption state for part of a period during which the encryption/decryption engine is generating encrypted data based on the received packets.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: Various embodiments provide a way to adjust transmission rates of a medium access controller (MAC) to a physical layer (PHY) to accommodate for packet expansions due to encryption that takes place in the PHY. In at least some embodiments, a communication interface between different MACs in a system is re-purposed to allow the PHY to communicate to a system MAC to notify the system MAC to pause and then resume, at an appropriate time, its packet transmissions.

Abstract: A method allowing for flexible modification of a data packet in a data network is presented. A data packet is parsed based on one or more attributes and sent to a buffer memory and a user modifiable lookup table. Using extracted packet data, information required to modify the data packet as desired is located in the lookup table and forwarded to a packet modification engine. Within the packet modification engine, a novel rewrite constructor module generates unique packet rewrite information based on the information forwarded from the lookup table and one or more additional inputs. This unique packet rewrite information is forwarded to a packet rewrite engine, wherein the packet rewrite engine modifies the data packet accordingly.

Abstract: A method and apparatus for performing MAC security (MACSec) operations. In one embodiment, the apparatus comprises a plurality of discrete elements coupled together to perform MAC security processing, the plurality of discrete elements able to operate on distinct packets related to MAC security simultaneously, and wherein each of the plurality of discrete elements is in an independently controlled power domain that enters a reduced power consumption state independently of other discrete elements in the plurality of discrete elements when not in use.

Abstract: A system includes a medium access control (MAC) module and a precise time protocol (PTP) module. The MAC module is configured to generate an identifier for a PTP frame, generate an encrypted PTP frame by encrypting the PTP frame, and output the identifier. The PTP module is configured to receive the identifier, identify the encrypted PTP frame based on the identifier in response to the encrypted PTP frame being output from the MAC module, and time stamp the encrypted PTP frame prior to the encrypted PTP frame being transmitted.