Security & Encryption IP cores by intoPIX
Benefiting from more than 10 years of research and expertise development in cryptographic hardware and watermarking, intoPIX provides a broad range of silicon-proven security IP-Cores dedicated to broadcast, AV/IP, archiving, and digital cinema applications. Thanks to its strong expertise, intoPIX is the key partner to correctly and successfully implement the required algorithms and protocols.
intoPIX's hardware accelerated security solutions - with their high performance, low power consumption in FPGA and ASIC, and being 100% CPU free - perfectly answer the fast and constantly growing amount of data that needs to be managed and protected.
Discover our Security / Crypto IP cores
IPX-AES: AES Encryption/Decryption Symmetric Security Range
The family of IPX-AES IP-Cores provides an efficient FPGA implementation of the Advanced Encryption Standard (AES). Its flexibility allows the combination of several functions and operating modes for a very small FPGA footprint.
The family of IPX-AES IP-Cores is an encryptor / decryptor core range that efficiently implements the Advanced Encryption Standard (AES) as specified in the Federal Information Processing publication FIPS-197 of the National Institute of Standards and Technology in FPGAs.
The IPX-AES module can be customized to ensure its optimization for a wide range of specific application fields with a design architecture that can be adapted to support low up to very high bit-rates. On top of its Multi-Gigabit capability, its flexibility allows combining several functions and operating modes on very small footprints.
With addressing keys of 128 (or 256), the IPX-AES cores execute decryption or encryption.
The IPX-AES cores can handle the data and secret keys in two different ways. The single stream option consists of a core capable of managing data with a single key, before a new update of this key. The multiple stream option is a feature capable of managing multiple ciphering processes together, each based on a different secret key.
The inter-data-block chaining supports all existing modes that can be used separately or combined into a single design: ECB (Electronic Code-Book), CBC (Cipher Block Chaining), CTR (Counter). Other modes could be supported.
The incoming, outgoing and key data are handled on either common or separate buses. Data bus width is 128 bits.
The processes use a single clock and can be reset asynchronously.
Multi Assets Decryptor
Link Encryption - Medium Bandwidth
Link Encryption - High Bandwidth
|Throughput bit rate
|1 to 16 streams
|AES Data and Key Bus width
| 128 bits
| 128 bits
* or higher
IP-cores resources available on request
IPX-RSA: RSA Public Key cryptography accelerator
The modular exponentiation accelerator IPX-RSA is an efficient arithmetic coprocessor for the RSA public-key cryptosystem. It performs the Ae mod M calculation and therefore offloads the most computer-intensive operation of RSA from the main processor. The RSA cryptosystem can be used for public key encryption, decryption and signature/authentication. It is currently the most deployed public key scheme and is used in well-known standards such as SSL/TLS secure internet access, IPSec Virtual Private Networks and S/MIME secure email.
The key advantage of the IPX-RSA IP-Core is its low footprint, thanks to an efficient balance between logic fabric and embedded RAMs and Multipliers.
Taking advantage of its high operating frequency, it is capable of achieving a high throughput of modular exponentiations. As a result, this IP-Core provides a good compromise between processing time and resources compared to general purpose processors.
Other features of the IPX-RSA core are self-support and ease of use. The IP-Core needs no interaction with the main processor during computation and requires no pre/post computation of the base and exponent (A and e). It is also accessed through a simple 32-bit processor bus.
IP-cores resources are available on request
IPX-HMAC-SHA1: Authentication & Hashing function
IPX-HMAC-SHA-1 IP-Core is the hashing function required for the content integrity check and content identification as specified in DCI document v1.2. It is designed for Xilinx and Intel FPGA devices.
IPX-HMAC-SHA-1 is an implementation of the Key Hashed Message Authentication Code standard, which describes a mechanism for message authentication using cryptographic hash functions. It enables computation of the keyed hash message authentication code (HMAC) for audio and video assets.
This HMAC module uses the SHA1 core in combination with a secret key and the text message provided by the user in order to generate a fixed length MAC value.
The key advantages of the IPX-HMAC-SHA-1 IP-Core are its high throughput and low latency. Its interface can handle a frequency of at least 125 MHz, which is highly suitable for applications like Gigabit Ethernet.
IP-cores resources are available on request
IPX-WM - J2K Decoder Watermarking Bridge
Specialized in cryptography and forensic marking, intoPIX JPEG 2000 Cinema Decoder IP-cores have been designed with a dedicated interface for Forensic Marking.
The interface facilitates the integration of watermarking functions within the decoding process.
Security is a growing need
- Video Transmission, AV over Ethernet/IP
- Point-to-Point, Multi-point
- HDCP protection over RTP
- High bitrates (1Gbps / 3Gbps / 10Gbps /25Gbps / 40Gbps/ 100Gbps)
- Digital Cinema
- Integrated Media Block (IMB)
- DCP Encryption, Enable KDM exchange, Cinelink II Encryption, Secure verification
- Co-integration of J2K Decoder and Nexguard Watermarking (IPX-WB)
- IMF distribution
- Encryption (AES) & Access control, Digital Right Management (DRM), Secured data integrity (HMAC-SHA1)