KiviCrypt-AES-GCM
Authenticated Encryption and Decryption IP Core
Cost-efficient licensing model
Low license fees based on one-time fee and free evaluation licenses make IP cores accessible even for projects with limited budgets.
Fast availability and direct support
Evaluation packages and documentation are available via download, with rapid responsive web support to keep your project moving.
Easy integration
AXI4-Lite interface, platform-agnostic C source code HAL, API and software driver and clear documentation enable fast integration into hardware–software co-design flows.
European technology
Developed in Germany, with predictable availability giving design teams transparency, control, and long-term planning security.
Experienced IP core providers
KiviCore’s employees bring more than 20 years of experience in IP core design and licensing of IP cores.
KiviCrypt-AES-GCM Overview
The KiviCrypt-AES-GCM IP core implements the Advanced Encryption Standard (AES) in Galois Counter Mode (GCM) as specified in the NIST SP800-38D. AES-GCM is a widely used cryptographic algorithm for Authenticated Encryption with Associated Data (AEAD) purposes, providing both data confidentiality and authenticity. The AES-GCM IP supports key sizes of 128, 192, and 256 bits, with a standard IV length of 96 bits. It can operate either with a pre-expanded key or with an internal key expansion mechanism, which is used by default. Its architecture is optimized for high-speed operation while maintaining a fully synchronous design, making it suitable for both FPGA and ASIC implementations.
Key Features
- NIST SP 800-38D compliant
- Key size: 128, 192, 256 bits
- IV length: 96 bits
- Works with pre-expanded key or internal key expansion (default)
- AMBA® AXI4-Lite Interface
- Optional with DMA engine
- Fully synchronous design
- For any FPGA and ASIC
| Variants | Description |
| KiviCrypt-AES-GCM-Fast |
Optimized for minimal logic and power usage, making it suitable for designs with stringent FPGA resource or energy constraints. |
| KiviCrypt-AES-GCM-HighSpeed |
Optimized for high processing throughput, suitable for designs that require increased performance while maintaining efficient use of resources. |
Applications & Use Cases
The AES-GCM IP core offers a versatile solution for authenticated encryption and decryption:
- Secure communication: IPsec, TLS, MACsec
- High-speed data paths: Protecting data streams between FPGA, CPU, and peripherals
- Firmware updates: Ensuring confidentiality and integrity of update packages
- Secure storage: Encrypting and authenticating data in flash or external memory
- Internal bus protection: Securing data transfers within SoCs and FPGA designs
Test and Verification
- NIST test vectors for AES-GCM block cipher mode
- Extended verification through simulation
- FPGA integration and implementation tests
- Unity tests for driver and whole IP Core
Easy Integration
- AMBA® AXI4 lite Interface
- Platform agnostic C source code HAL, API and software driver
- Software examples and software user guide included
- Integration examples included
- Comprehensive technical documentation
Technical documentation & evaluation package
Register for the Evaluation Portal to access evaluation packages, technical documentation and integration resources.
Licensing
Licensing & Deliverables
| License type | Purpose | Scope | Fee | Deliverables |
| Product License | Manufacture of products intended for commercial distribution. | Valid for single-instance implementation/synthesis into one device (e.g., one type of SoC, or FPGA) for a specific project or product definition. Multiple instantiations refer to the physical realization of one IP core multiple times in one device. | One-time fee |
|
| Evaluation License | Usability and evaluation for upcoming design | Valid for single-instance implementation/synthesis into one device (SoC, or FPGA) for a specific upcoming design project. | Free, no license fee |
|
Support and Maintenance
-
Maintenance and updates of IP core included
- Rapid bug fix cycles
- Documentation and integration examples included
- Web based support with response times of 8 hours (Mo to Fri)
FPGA Implementation Results
AMD (Xilinx) Implementation Results
|
KiviCrypt-AES-GCM-Fast |
KiviCrypt-AES-GCM-HighSpeed |
|||||
|
Device
|
LUTs |
max. Frequency (MHz) |
max. Throughput (Gbps) | LUTs |
max. Frequency (MHz) |
max. Throughput (Gbps) |
|
Spartan 7 |
11158 | 113.4 | 1.5 | 18598 | 110.7 | 14.2 |
|
Kintex 7 |
11159 | 172.0 | 2.2 | 18436 | 176.9 | 22.6 |
|
Zynq US+ MPSoC |
11161 | 289.7 | 3.7 | 18483 | 256.4 | 32.8 |
|
Versal AI Cores Series |
9365 | 341.8 | 4.4 | 18427 | 327.7 | 42.0 |
Efinix Implementation Results
|
|
KiviCrypt-AES-GCM-Fast |
KiviCrypt-AES-GCM-HighSpeed | ||||
|
Device
|
XLR |
max. Frequency (MHz) |
max. Throughput (Gbps) | XLR |
max. Frequency (MHz) |
max. Throughput (Gbps) |
|
Titanium |
15196 | 280.3 | 3.58 | 18373 | 256.6 | 32.8 |
|
Topaz |
15196 | 188.6 | 2.40 | 18373 | 147.6 | 18.9 |
|
Trion |
15196 | 68.5 | 0.88 | 18373 | 60.4 | 7.7 |