Skip to content
Contact

KiviCrypt-AES-GCM

Authenticated Encryption and Decryption IP Core

KiviCrypt-AES-GCM Overview

The KiviCrypt-AES-GCM IP core implements the Advanced Encryption Standard (AES) in Galois Counter Mode (GCM) as specified in the NIST SP800-38D. AES-GCM is a widely used cryptographic algorithm for Authenticated Encryption with Associated Data (AEAD) purposes, providing both data confidentiality and authenticity. The AES-GCM IP supports key sizes of 128, 192, and 256 bits, with a standard IV length of 96 bits. It can operate either with a pre-expanded key or with an internal key expansion mechanism, which is used by default. Its architecture is optimized for high-speed operation while maintaining a fully synchronous design, making it suitable for both FPGA and ASIC implementations.

Key Features

  • NIST SP 800-38D compliant
  • Key size: 128, 192, 256 bits
  • IV length: 96 bits
  • Works with pre-expanded key or internal key expansion (default)
  • Optional with DMA engine
  • Fully synchronous design
  • For any FPGA and ASIC
Variants Description
KiviCrypt-AES-GCM-Fast

Optimized for minimal logic and power usage, making it suitable for designs with stringent FPGA resource or energy constraints.
KiviCrypt-AES-GCM-HighSpeed

Optimized for high processing throughput, suitable for designs that require increased performance while maintaining efficient use of resources.

Applications & Use Cases

The AES-GCM IP core offers a versatile solution for authenticated encryption and decryption:

  • Secure communication: IPsec, TLS, MACsec
  • High-speed data paths: Protecting data streams between FPGA, CPU, and peripherals
  • Firmware updates: Ensuring confidentiality and integrity of update packages
  • Secure storage: Encrypting and authenticating data in flash or external memory
  • Internal bus protection: Securing data transfers within SoCs and FPGA designs

Test and Verification

  • NIST test vectors for AES-GCM block cipher mode
  • Extended verification through simulation
  • FPGA integration and implementation tests
  • Unity tests for driver and whole IP Core

 Easy Integration

  • AMBA® AXI4 lite Interface
  • Platform agnostic C source code HAL, API and software driver
  • Software examples and software user guide included
  • Integration examples included
  • Comprehensive technical documentation
Download product brief

Technical documentation & evaluation package

Register for the Evaluation Portal to access evaluation packages, technical documentation and integration resources.

 Register for the KiviCore Evaluation Portal to access the evaluation package, technical documentation and integration resources. 
Get access

Licensing

Licensing & Deliverables

License type Purpose Scope Fee Deliverables
Product License Manufacture of products intended for commercial distribution. Valid for single-instance implementation/synthesis into one device (e.g., one type of SoC, or FPGA) for a specific project or product definition. Multiple instantiations refer to the physical realization of one IP core multiple times in one device. One-time fee 
  • System Verilog RTL Source Code or Netlist format
  • Testbenches
  • Integration examples
  • Simulation and synthesis scripts
  • Software HAL & driver source code
  • Software example source code
  • Documentation
Evaluation License Usability and evaluation for upcoming design  Valid for single-instance implementation/synthesis into one device (SoC, or FPGA) for a specific upcoming design project. Free, no license fee
  • Netlist format, time-bombed
  • Testbenches
  • Integration examples
  • Software HAL & driver source code
  • Software example source code
  • Documentation
Support and Maintenance

  • Maintenance and updates of IP core included

  • Rapid bug fix cycles
  • Documentation and integration examples included
  • Web based support with response times of 8 hours (Mo to Fri)

 

FPGA Implementation Results

AMD (Xilinx) Implementation Results

 

 

KiviCrypt-AES-GCM-Fast 

KiviCrypt-AES-GCM-HighSpeed  
Device
 LUTs

max. Frequency (MHz)

 max. Throughput (Gbps) LUTs

max. Frequency (MHz)

 max. Throughput (Gbps)

Spartan 7

 11158 113.4 1.5 18598 110.7 14.2

Kintex 7

  11159  172.0 2.2 18436 176.9 22.6

Zynq US+ MPSoC

  11161 289.7 3.7 18483 256.4 32.8

Versal AI Cores Series

 9365 341.8 4.4 18427 327.7 42.0

 

 

Efinix Implementation Results

 

 

KiviCrypt-AES-GCM-Fast 

  KiviCrypt-AES-GCM-HighSpeed 
Device
 XLR

max. Frequency (MHz)

 max. Throughput (Gbps) XLR

max. Frequency (MHz)

 max. Throughput (Gbps)

Titanium

  15196  280.3 3.58 18373 256.6 32.8

Topaz

 15196 188.6 2.40 18373 147.6 18.9

Trion

 15196 68.5 0.88 18373 60.4 7.7