Skip to content

   We secure embedded systems

KiviCrypt-AES-GCM - Authenticated Encryption and Decryption

IP Core Documentation

FPGA Implementation Results

 Licensing

KiviCrypt-AES-GCM Overview

The KiviCrypt-AES-GCM IP core implements the Advanced Encryption Standard (AES) in Galois Counter Mode (GCM) as specified in the NIST SP800-38D. AES-GCM is a widely used cryptographic algorithm for Authenticated Encryption with Associated Data (AEAD) purposes, providing both data confidentiality and authenticity. The AES-GCM IP supports key sizes of 128, 192, and 256 bits, with a standard IV length of 96 bits. It can operate either with a pre-expanded key or with an internal key expansion mechanism, which is used by default. Its architecture is optimized for high-speed operation while maintaining a fully synchronous design, making it suitable for both FPGA and ASIC implementations.

Key Features

  • NIST SP 800-38D compliant
  • Key size: 128, 192, 256 bits
  • IV length: 96 bits
  • Works with pre-expanded key or internal key expansion (default)
  • Optional with DMA engine
  • Optional AMBA® AXI4-Lite
  • Fully synchronous design
  • Optional HAL and software driver (C-code, platform independent)
  • For any FPGA and ASIC

Variants Description
KiviCrypt-AES-GCM-Fast

Optimized for minimal logic and power usage, making it suitable for designs with stringent FPGA resource or energy constraints.
KiviCrypt-AES-GCM-HighSpeed

Optimized for high processing throughput, suitable for designs that require increased performance while maintaining efficient use of resources.

Applications & Use Cases

The AES-GCM IP core offers a versatile solution for authenticated encryption and decryption:
  • Secure communication: IPsec, TLS, MACsec
  • High-speed data paths: Protecting data streams between FPGA, CPU, and peripherals
  • Firmware updates: Ensuring confidentiality and integrity of update packages
  • Secure storage: Encrypting and authenticating data in flash or external memory
  • Internal bus protection: Securing data transfers within SoCs and FPGA designs

Test and Verification

  • NIST test vectors for AES-GCM block cipher mode
  • Extended verification through simulation
  • FPGA integration and implementation tests
  • Unity tests for driver and whole IP Core

Next steps

Download the product brief, request documentation, or schedule a technical discussion to review your architecture.  

Product Information

Licensing & Deliverables
Strich-2-thick
License type Purpose Scope Fee Deliverables
Product License Manufacture of products intended for commercial distribution. Valid for single-instance implementation/synthesis into one device (e.g., one type of SoC, or FPGA) for a specific project or product definition. Multiple instantiations refer to the physical realization of one IP core multiple times in one device. Product licenses for IP Cores include volume caps of 10,000 units for FPGAs. One-time fee 
  • SystemVerilog RTL source code or targeted FPGA netlist
  • Testbenches
  • Integration examples
  • Simulation and synthesis scripts
  • Optional Software HAL & driver source code
  • Optional Software example
  • Documentation
Evaluation License Usability and evaluation for upcoming design  Valid for single-instance implementation/synthesis into one device (SoC, or FPGA) for a specific upcoming design project. Free, no license fee
  • Netlist format, time-bombed
  • Testbenches
  • Integration examples
  • Optional software HAL & driver source code
  • Optional software example source code
  • Documentation
Support and Maintenance
Strich-2-thick
  • Maintenance & updates of IP cores included
  • Rapid update/bug fix cycles
  • Integration support: Comprehensive documentation and integration examples 
  • Web-based support with response times within 8 hours (Mo-Fri)

FPGA Implementation Results

 

AMD (Xilinx) Implementation Results
 Strich-2-thick 
 

KiviCrypt-AES-GCM-Fast 

KiviCrypt-AES-GCM-HighSpeed  
Device
 LUTs

max. Frequency (MHz)

 max. Throughput (Gbps) LUTs

max. Frequency (MHz)

 max. Throughput (Gbps)

Spartan 7

 11158 113.4 1.5 18598 110.7 14.2

Kintex 7

  11159  172.0 2.2 18436 176.9 22.6

Zynq US+ MPSoC

  11161 289.7 3.7 18483 256.4 32.8

Versal AI Cores Series

 9365 341.8 4.4 18427 327.7 42.0

 

 

Efinix Implementation Results
 Strich-2-thick 
 

KiviCrypt-AES-GCM-Fast 

  KiviCrypt-AES-GCM-HighSpeed 
Device
 XLR

max. Frequency (MHz)

 max. Throughput (Gbps) XLR

max. Frequency (MHz)

 max. Throughput (Gbps)

Titanium

  15196  280.3 3.58 18373 256.6 32.8

Topaz

 15196 188.6 2.40 18373 147.6 18.9

Trion

 15196 68.5 0.88 18373 60.4 7.7