Secure packet processor
AssigneeIntel Corporation
InventorsFrank C. Verhoorn, III, Jonathan Lo
Life of this patent
Estimating the term…
Abstract
A secure packet processor includes a buffer, a cryptographic engine and an authentication engine. The buffer is adapted to receive a secure packet that includes encrypted data and indicates an authentication signature. The cryptographic engine is adapted to decrypt the encrypted data to produce an indication of second data. The authentication engine is adapted to use the encrypted data to validate the signature concurrently with the decryption of at least a portion of the decrypted data. The authentication engine and the cryptographic engines may also be adapted to concurrently validate and encrypt data of an unsecure packet.
Claims27
A method usable with a computer system, comprising:
- receiving a packet that includes first data;
- encrypting the first data to produce encrypted data;
- using the encrypted data to form an authentication signature concurrently with the encryption of at least a portion of the first data;
- merging the encrypted data with the signature to form another packet;
- and
- storing said another packet in a transmit output queue.
A method usable with a computer system, comprising:
- receiving a packet that includes encrypted data and indicates an authentication signature;
- decrypting the encrypted data to produce decrypted data;
- and
- using the encrypted data to validate the signature concurrently with the decryption of at least a portion of the encrypted data.
A packet processor comprising:
- an input queue adapted to receive a packet that includes first data;
- a cryptographic engine adapted to encrypt the first data to produce an indication of encrypted data;
- an authentication engine adapted to use the indication of the encrypted data to form an indication of an authentication signature concurrently with the encryption of at least a portion of the first data;
- and
- a transmit output queue coupled to the cryptographic engine and the authentication engine,
- wherein the cryptographic engine and the authentication engine are further adapted to merge the encrypted data with the signature to form another packet in the transmit output queue.
A packet processor comprising:
- an input queue adapted to receive a packet that includes encrypted data and indicates an authentication signature;
- a cryptographic engine adapted to decrypt the encrypted data to produce an indication of decrypted data;
- and
- an authentication engine adapted to use the encrypted data to generate another signature concurrently with the decryption of at least a portion of the encrypted data.
A computer system comprising:
- a system memory;
- a microprocessor adapted to store a packet in the system memory, the packet including first data;
- and
- a packet processor comprising:
- an input queue;
- an interface adapted to retrieve the packet from the system memory and store the packet in the input queue;
- a cryptographic engine adapted to encrypt the first data to produce an indication of encrypted data;
- an authentication engine adapted to use the indication of the encrypted data to form an indication of an authentication signature concurrently with the encryption of at least a portion of the first data;
- and
- a transmit output queue coupled to the cryptographic engine and the authentication engine,
- wherein the cryptographic engine and the authentication engine are further adapted to merge the encrypted data with the signature to form another packet in the transmit output queue.
A computer system comprising:
- a system memory;
- a microprocessor adapted to store a packet in the system memory, the packet including encrypted data and indicating an authentication signature;
- and
- a packet processor comprising:
- a cryptographic engine adapted to decrypt the encrypted data to produce an indication of decrypted data;
- and
- an authentication engine adapted to use the encrypted data to generate another signature concurrently with the decryption of at least a portion of the encrypted data.
Dependencies are inferred from the claim text.