MACSec implementation

A media access control (MAC) security apparatus for a local area network interface, the MAC security apparatus comprising:

• a plurality of independently controlled power domains, wherein each of the plurality of independently controlled power domains is configured to enter and exit a reduced power consumption state independent of others of the plurality of independently controlled power domains;
• an encryption/decryption engine configured to receive packets and generate encrypted data in response to the received packets and cryptographic primitives, wherein the encryption/decryption engine is located within a first power domain of the plurality of independently controlled power domains;
• and
• an authentication engine configured to perform authentication operations of the local area network interface in response to the encrypted data, wherein
• the authentication engine is located within a second power domain of the plurality of independently controlled power domains,
• the encryption/decryption engine comprises an advanced encryption standard (AES) engine configured to form the cryptographic primitives,
• the AES engine is located within a third power domain of the plurality of independently controlled power domains, and
• the third power domain is configured to enter the reduced power consumption state for part of a period during which (i) the first power domain does not enter the reduced power consumption state and (ii) the encryption/decryption engine is generating the encrypted data.