ADSP-2141L (Rev. 0) - OBSOLETE
Contents
1. Figure 19 IDMA Write Short Write Cycle IDMA Mode Multiplex Bus REV 0 29 ADSP 2141L Parameter Min Max Unit IDMA Write Long Write Cycle IDMA Mode Multiplex Bus Timing Requirements tw MPLXO Low Before Start of Write 0 ns trksu BUS Data Setup Before MPLX9 Low O 5tck 10 ns trkH BUS Data Hold After MPLX9 Low 3 4 2 ns Switching Characteristics Start of Write to MPLX9 Low 1 5 ns kuw Start of Write to MPLX9 High 15 ns NOTES IStart of Write lt MPLX7 Low and MPLX6 Low 211 Write Pulse ends before MPLX9 Low use specifications typsu Write Pulse ends after MPLX9 Low use specifications This is the earliest time for MPLX9 Low from Start of Write For Write cycle relationships please refer to the ADSP 2100 Family User s Manual gt kw lt MPLX9 IACK gt MPLX7 IS X X X X MPLX6 IWR x I kn omm MPLX BUS IAD15 0 DATA T AAAA AAA Figure 20 IDMA Write Long Write Cycle IDMA Mode Multiplex Bus 30 REV 0 ADSP 2141L Parameter Min Max Unit IDMA Read Long Read Cycle IDMA Mode Multiplex Bus Timing Requirements tree MPLXO Low Before Start of Read 0 ns tmp Duration of Read 15 ns Switching Characteristics MPLX9 High After Start of Read 15 ns trkps MPLX BUS Data Setup Before MPLX9 Low 0 51 72. sor 96 1 4 5 19105 eor s6 L pe 12d sng 79 76 sor 6 ad QNO 691 26 1 4 5 16 e 12d sng 06 p Pe 1 4 5 68 91 12d sng 88 2816 01 1 viva zr 221 ezt tzt ND 641 98 Ir v1va 921 slviva 221 98 Lva ez 8 1 19d 8X1dIN 18 08 1 2 1d IN 62 1849 slviva ost rer lorlviva zer lu ES o Not to Scale PCI MODE t S n o a lt esr 82 Izilv1va ver letlviva ser 92 12 493 72 Tod 0 981 stlviva 281 gst Z dOLS 19 681 21 061 02 19d rer gtiviva 261 leriv1va rer 69 2942 Iod zX 89 1 29 rd sng 021 1 rer ser 99 96 9 GND 261 79 ser 9 29 1 d sng 19 ozIpe 1 o9 1 es 1 85
3. gt S 9422 5 2222 22 2 amp AAAA 5 i 5555 55 m Lea 0 X x Ic Ba 5 x E lt vol 20 201 LOL 001 66 86 46 96 56 76 56 26 16 06 68 88 18 98 58 78 8 28 18 08 64 84 42 94 S4 vL L 22 04 69 89 19 99 59 79 9 29 19 09 68 85 48 95 95 tS 55 slavvsna 9 slavvsna elavvsna SVLX1dW and 3015 10d aNd AQUI 19d and and Ielov sng 6 TozloN sng Lzlov sng and ezlon SN IvcloN snga 0 38 ADSP 2141L PACKAGE DESCRIPTION Package Details package shown below is a 208 lead metric quad flatpack Measurements are listed in English and metri
4. INTH x TO HOST o lt z 2 o HASH ENC HASH ENC ERROR ERROR Figure 5 Interrupt Controller Block Diagram g REV 0 ADSP 2141L PIN FUNCTIONS I O Descriptions This section describes the physical I O hardware on the ADSP 2141L PIN FUNCTION DESCRIPTIONS I O Hardware of Input Pin Name Pins Output Function External Memory Bus Address 25 0 26 Address Output Pins for Program Data Byte and I O Spaces 13 2183 13 from Overlay Register Note 0 not used for 32 bit memory Data 31 0 32 VO Data I O Pins for Program and Data Memory Spaces D31 0 are used for wide bus data memory D23 0 are used for DSP Program RAM D23 8 are used for I O Space D23 8 are used for DSP Data RAM D15 8 are used for byte memory D23 16 are also used as Byte Space Addresses Interrupts IRQ2 1 I Edge or Level Sensitive Interrupt Request IRQLO 1 I Level Sensitive Interrupt Requests IRQLI 1 1 Level Sensitive Interrupt Requests IRQE 1 I Edge Sensitive Interrupt Request Bus Signals BR 1 I Bus Request Input BG 1 Bus Grant Output BGH 1 GrantHung Output PMS 1 Program Memory Select Output DMSL 1 Data Memory Select Output Lower 16 for 32 DM DMSH 1 Upper Memory Select Output Upper 16 for 32 DM Not Used for 16 DM BMS 1 Byte Memory Select Output IOMS 1 Space Memory Select Output CMS Combin
5. Program Control Data Bits PCDBs include configuration for permitted key lengths algorithm enables Red KEK loading Most of the PCDB settings may be overridden with a digitally signed token which may be loaded into the ADSP 2141L when it boots These tokens are created by IRE and each is targeted to a specific ADSP 2141L using a hash of its unique identity Downloadable Secure Code ADSP 2141L allows additional security functions to be added to the device through a secure download feature Up to 16K words of code may be downloaded into internal memory within the DSP and this code can be given the security privileges of the kernel firmware All downloaded firmware is authenticated with a digital signature and verified with an on chip public key Additional functions could include new encryption hash or public key algorithms such as IDEA RC 4 RIPEMD elliptic curve or any other application that needs direct control over the protected cryptographic hardware Ox3FFF 8K KERNEL TOP KERNEL MODE 8K KERNEL BASE KERNEL MODE PMOVLAYL PMOVLAYH 000 8K INTERNAL PAGE PMOVLAYL PMOVLAYL 0 0 2000 000 PMOVLAYL LS NIBBLE OF PMOVLAY 8K INTERNAL PMOVLAYH MS 3 NIBBLES OF PMOVLAY SHADED KERNEL SPACE 0 0000 000 COMMON BANK ARCHITECTURE OVERVIEW This section provides an architecture level description of the unique function
6. Parameter Min Max Unit IDMA Address Latch IDMA Mode Multiplex Bus Timing Requirements tarp Duration of Address Latch 10 ns trasu MPLX_BUS Address Setup Before Address Latch End 5 ns BUS Address Hold After Address Latch End 3 ns tra MPLXO Low Before Start of Address Latch 3 0 ns trALS Start of Write or Read After Address Latch End 3 4 ns NOTES IStart of Address Latch MPLX7 Low and MPLX8 High Start of Write or Read MPLX7 Low and MPLX6 Low or MPLX5 Low 3End of Address Latch MPLX7 High or MPLX8 Low MPLX9 TACK tika MPLX8 IAL MPLX7 IS YY YY V V YY YY VY 5 MPLX5 OR MPLX6 IRD OR IWR Figure 18 IDMA Address Latch IDMA Mode Multiplex Bus 28 0 ADSP 2141L Parameter Min Max Unit Write Short Write Cycle Mode Multiplex Bus Timing Requirements tw MPLX9 Low Before Start of Write 0 ns Duration of Write 2 15 ns tipsu MPLX_BUS Data Setup Before End of Write 5 ns MPLX BUS Hold After End of Write 3 ns Switching Characteristic threw Start of Write to MPLX9 High 15 ns NOTES Start of Write MPLX7 Low MPLX6 Low End of Write MPLX7 High or MPLX6 High Write Pulse ends before MPLX9 Low use specifications tipsu tipu If Write Pulse ends after MPLX9 Low use specifications tkw 1 MPLX9 IACK gt MPLX7 IS MPLX6 IWR
7. ADSP 2141L IDMA Mode Multiplex Bus Pin Definition IDMA Port 218x Mode PIN FUNCTION DESCRIPTIONS IDMA Mode Multiplex Bus Pin Name IDMA Name Pins Description MPLX5 IRD 1 I IDMA Port Read Input MPLX6 IWR 1 I IDMA Port Write Input MPLX7 IS 1 I IDMA Port Select MPLX8 IAL 1 I IDMA Port Address Latch MPLX9 IACK 1 Port Access Ready Acknowledge MPLXIO FLO 1 Output Flags MPLXII FLI 1 Output Flags MPLXI2 FL2 1 Output Flags MPLX BUS IAD 16 IO PCI Port PIN FUNCTION DESCRIPTIONS PCI Mode Multiplex Bus Pin Name PCI Name Pins Description MPLXI Pci cbe3 1 Bus Command Byte Enable 3 MPLX2 Pci cbe2 1 10 Bus Command Byte Enable 2 MPLX3 Pci cbel 1 UO Bus Command Byte Enable 1 MPLX4 Pci_cbe0 1 Bus Command Byte Enable 0 MPLX5 Pci idsel 1 Initialization Device Select MPLX6 Pci gnt 1 I Bus Grant MPLX7 Pci frame 1 UO Cycle Frame MPLX8 Pci_devsel 1 Lo Device Select MPLX9 Pci_trdy 1 Target Ready MPLXIO Pci perr 1 1 0 Parity Error MPLXII Pci 1 System Error MPLXI2 Pci req 1 PCI Bus Request MPLX BUS Pci ad15 0 Pci ad31 16 32 LO PCI Address Data Bus PF7 INT H Pci int 1 PCI Interrupt Request SYSTEM INTERFACE specifying only the starting address of the block This increases The ADSP 2141L may be integrated into a wide variety of sys tems including those that already have a microprocessor and those that will use the
8. P tr MPLX6 IRD N J MPLX_BUSIAD15 0 DATA Figure 22 IDMA Read Short Read Cycle IDMA Mode Multiplex Bus 22 0 ADSP 2141L CAPACITIVE LOADING Figures 23 and 24 show the capacitive loading characteristics of the ADSP 2141L RISE TIME 0 4V 2 4V ns 0 50 100 150 200 250 300 C pF Figure 23 Typical Output Rise Time vs Load Capacitance C at Maximum Ambient Operating Temperature 18 16 14 12 10 8 4 2 NOMINAL 2 4 0 50 100 150 200 250 CL pF OR HOLD ns o VALID OUTPUT DELAY Figure 24 Typical Output Valid Delay or Hold vs Load Capacitance C at Maximum Ambient Operating Temperature TEST CONDITIONS Output Disable Time Output pins are considered to be disabled when they have stopped driving and started a transition from the measured output high or low voltage to a high impedance state The out put disable time tpys is the difference of tugAsungp and tpgcay as shown in the Output Enable Disable diagram The time is the interval from when a reference signal reaches a high or low voltage level to when the output voltages have changed by 0 5 V from the measured output high or low voltage The decay time tpgcAy is dependent on the capacitive load and the current load 4 on the output pin It can be approximated by the fol lowing equation C 0 5V
9. RSA 1024 Bit Sign 29 ms RSA 1024 Verify 6 ms DSA Sign 39 ms DSA Verify 66 ms KEY MANAGEMENT BLOCK Laser Programmed Unique Triple DES Cryptovariable Protects Off Chip Storage Support for Secure Storage of Both Secret Keys and Public Private Key Pairs Trust Model Rules Enforcement Only Encrypted Keys May Be Exported Off the Chip Internal Key Cache for 15 Keys Can Be Expanded to 700 Keys On Chip Keys May Also Be Securely Stored Off Chip Allowing Unlimited Storage DSP CORE 40 MIPS Sustained Performance Single Cycle Instruction Execution Single Cycle Context Switch Zero Overhead Looping Low Power Dissipation 16K Words 16K x 24 On Chip Program RAM 16K Words 16K x 16 On Chip Data RAM 64M Words Off Chip Program and Data Memory Programmable 16 Bit Interval Timer with Prescale PCI BUS CARDBUS INTERFACE 32 Bit 3 3 V Bus Interface 33 MHz or 40 MHz Bus Speed Bus Master and Target Modes Can Directly DMA Between Crypto Functions and Other PCI Bus Agents 66 MHz speed pending chip characterization GENERAL DESCRIPTION ADSP 2141L SafeNet DSP is a highly integrated embedded security processor that incorporates a sophisticated general purpose DSP along with a number of high performance Cryp tographic function blocks as well as PCI DMA and Serial EEPROM interfaces It is fabricated in 0 35 1 CMOS triple layer metal technology and uses a 3 3 V power supply It is available in a 208 lead MQ
10. tpgcAy 1L from which IDIS MEASURED DECAY REV 0 is calculated If multiple pins such as the data bus are disabled the measurement value is that of the last pin to stop driving INPUT R 15V 15V OUTPUT Figure 25 Voltage Reference Levels for AC Measure ments Except Output Enable Disable Output Enable Time Output pins are considered to be enabled when they have made a transition from a high impedance state to when they start driving The output enable time tga is the interval from when a reference signal reaches a high or low voltage level to when the output has reached a specified high or low trip point as shown in the Output Enable Disable diagram If multiple pins such as the data bus are enabled the measurement value is that of the first pin to start driving REFERENCE SIGNAL VoH Vou MEASURED MEASURED MEASURED 0 5V 2 0V OUTPUT MEASURED 0 5V VoL MEASURED VoL MEASURED toecay OUTPUT STARTS OUTPUT STOPS DRIVING DRIVING HIGH IMPEDANCE STATE TEST CONDITIONS CAUSE THIS VOLTAGE LEVEL TO BE APPROXIMATELY 1 5V Figure 26 Output Enable Disable lot OUTPUT 1 5V 50pF loH Figure 27 Equivalent Device Loading for AC Measure ments Including All Fixtures 33 ADSP 2141L Table IV Thermal Ratings MQFP Package Rating Description Symbol Value MQFP Still Air Value MQFP
11. 178 DATA 6 11 BMODE 53 MPLX BUS 24 95 MPLX BUS 11 137 ADDR 8 179 DATA 7 12 BUS_MODE 54 MPLXI 96 MPLX_BUS 10 138 ADDR 9 180 13 BUS SEL 55 MPLX BUS 23 97 MPLX BUS 9 139 ADDR 10 181 DATA 9 14 EE SK 56 MPLX BUS 22 98 MPLX BUS S 140 182 DATA 10 15 EE CS 57 VDD 99 VDD 141 ADDR 12 183 DATA 11 16 EE_DI 58 GND 100 GND 142 ADDR I13 184 DATA 12 17 EE DO 59 MPLX_BUS 21 101 MPLX4 143 GND 185 DATA 13 18 VDD 60 MPLX BUS 20 102 MPLX BUS 7 144 ADDR 14 186 DATA 14 19 GND 61 MPLX BUS 19 103 MPLX BUS 6 145 ADDR 15 187 DATA I15 20 PF 7 INT 62 MPLX BUS 18 104 MPLX BUS 5 146 ADDR 16 188 VDD 21 PF 6 63 GND 105 MPLX BUS 4 147 ADDR 17 189 GND 22 PF 5 64 106 VDD 148 ADDR 18 190 DATA 16 23 PF 4 65 107 GND 149 ADDR 19 191 24 PF 3 66 GND 108 BUS 3 150 VDD 102 DATA 18 25 PF 2 67 MPLX BUS 17 109 MPLX BUS 2 151 ADDR 20 103 DATA 19 26 PF 1 68 MPLX BUS 16 110 MPLX_BUS 1 152 ADDR 21 194 DATA 20 27 PF 0 69 MPLX2 111 MPLX BUS 0 153 ADDR 22 195 DATA 21 28 PWD 70 PCI IRDY 12 GND 154 ADDR 23 196 VDD 29 PWDACK 71 VDD 113 CLKOUT 155 ADDR 24 197 GND 30 72 GND 114 VDD 156 ADDR 25 198 DATA 22 31 BG 73 PCI STOP 115 GND 157 DTO 199 DATA 23 32 BGH 74 MPLXIO 116 WR 158 TFSO 200 DATA 24 33 IRQE 75 MPLX11 117 RD 159 RFSO 201 DATA 25 34 IRQLO 76 PCI
12. 291 29 791 991 991 291 891 691 071 LAL 221 1743 6271 921 421 821 621 081 181 281 28 781 681 981 281 881 681 1061 161 261 261 76 961 961 261 861 661 002 Loz zoz 202 toz soz 902 702 902 0 1 2 3 4 ons IDENTIFIER t N o a lt Not to Scale 2183 MODE D DOG GLB a 5555 lt 4848 SES 5 tc cC C cc cc c gc Cc cc cc c c C CC C CC C C C c c c tc C cc c z T o 24 gt lt gt lt gt lt gt lt 88888882288882882883223838283882 28590000888 2555559552885 55 2 55056 2225082 ow lt gt lt lt lt 4 t e e eo lt 0 t e gt 2 lt 4 fo lt lt lt gt ejeje 5 2 2 2 2 sels fom o e Hex ten e feo Hrs 2 5 5 5 55 SIS 8 5 Sg S 5 2 lt gg gt
13. Deasserted pins are driven to either or GND Current reflects device operating with no output loads 0 4 V and 2 4 V For typical supply currents refer to Power Dissipation section PIpp measurement taken with 93 of instructions executing from internal memory and 7 from external memory operations are executing from internal memory concurrently with PCI transactions Initialization operations are executed from external memory 14 Applies to MQFP package type P Output pin capacitance is the capacitive load for any three stated output pin Specifications subject to change without notice REV 0 17 ADSP 2141L DC SPECIFICATIONS PCI Bus Pins K Grade Parameter Test Conditions Min Max Unit Vin Hi Level Input Voltage 0 5 Vpp Vpp 0 5 V Lo Level Input Voltage 2 0 5 0 3 Vpp V Hi Level Output Voltage 3 500 uA 0 9 V Vor Lo Level Output Voltage Tour 1500 pA 0 1 Vpp V Hi Level Input Current 0 Vm Vpp 10 Lo Level Input Current 0 lt Vin Vpp 10 Three State Leakage Current 0 lt Vpp 10 Three State Leakage Current 0 Vpp 10 Ci Input Pin Capacitance 25 C 10 pF Cork PCI CLK Pin Capacitance 25 C 5 12 pF PCIIDSEL Pin Capacitance 25 C 8 Pin Inductance 20 nH NOTES Bidirectional pins MPLX BUS 31
14. QNO 9s tod SN ss ez pe 1 d sng 75 2999 19d LX 1d s pz pe lezlviva eer ooz Iszlv1va koz 21 1 202 Lzlv1va coz Igelv1va 621 1 soz 0 1 1 1as343 soz o IDENTIFIER v v 2 2 2 NI BY SS gt 282222 4 iz iu 6 54 RR So S souguu ES eeeeeeha Bee GO RERE 085 5 5555 55 2 i illl aa m xo 5555 55 i29 Eo em me X x Xx gt lt gt lt E 37 0 ADSP 2141L PINOUT 2183 Mode 0541 0544 04125 1541 1548 1105 lolviva viva zi viva lelviva aNd slviva viva slviva lelviva zilviva pilviva stlviva silviva etlviva lozlviva aNd Iczlviva Ivziv1va Isclv1va ozlviva ezlviva lezlviva loelviva 195393 291 891 691 091 191
15. contains a DES or triple DES key initialization vector and precomputed hashes inner and outer of the authentication key for HMAC operations The contexts also contain registers to reload the byte count from a previous operation which is part of the hashing context as well as an IV also called salt for decrypting a black key if necessary Once a crypto context has been loaded and defined data is processed by writing it to a data input FIFO At the I O interface data is always written to or read from the same address Internally the hash and encryption functions have separate 512 bit FIFOs each with their own FIFO man agement pointers Incoming data 15 routed to one or both of these FIFOs depending on the operation in progress Output from the encryption block is read from the data output FIFO In encrypt hash or decrypt hash operations the data is also automatically the hashing data input FIFO Output from the hash function is always read from the digest register of the appropriate crypto context initialization vector to be used for crypto operation can be loaded as part of a crypto context When an operation is complete the same context will contain the resulting IV produced at the end which can be saved away and restored later to continue the operation with more data In certain packet based applications such as IPsec a feature is available that avoid
16. nable an ANSI X9 17 Annex C post randomizer to be applied to the output of the RNG This randomizer applies the DES ECB algorithm multiple times to further disperse and whiten the random source Although this is not necessary to ensure the quality of the random numbers it meets the criteria for a NIST approved random num ber generation algorithm Public Key Accelerator PKAC public key arithmetic coprocessor otherwise known as BigNum processor is designed to support long vector calcula tions of the kind needed to perform RSA Diffie Hellman and Elliptic Curve operations The PKAC can perform multiplication squaring addition and subtraction on arbitrary length bit vectors The CGX software is responsible for setting the address register for the operands and result as well as specifying the length and operation type Once the operation type field is written the processor polls the opera tion complete status while the calculation is carried out The PKAC utilizes the protected kernel RAM for input output and intermediate variable storage It may only be accessed from the secure kernel mode Since public key computations typically take many milliseconds to complete they may be preempted using a DSP interrupt Most application interaction with the public key accelerator will occur via the CGX software interface see the Command Inter face section Both high level public key operations such as RSA Sign or Create Diff
17. 0 MPLX1 4 MPLX7 10 MPLX12 only pins RESET MPLX5 MPLX6 PCI PCI PAR PCI IRDY PCI STOP Output only pins MPLX11 Leakage currents include High Z output leakage for bidirectional buffers with three state outputs Lower capacitance of IDSEL 5 input only pin allows for nonresistive connection to Addfess Data bus TIMING PARAMETERS PCI Clock Guaranteed Over Operating Temperature and Digital Supply Range The ADSP 2141L is targeted for use in PCI add on I O slave card designs It provides a glueless interface to the PCI bus All bus drivers are compliant with PCI interface electrical switching and drive capability specifications C BE 7 4 REQ64 ACK64 64 Parameter Min Max Unit Timing Requirements CLK Cycle Time 25 100 ns THIGH CLK High Time 11 ns trow CLK Low Time 11 ns CLK Slew Rate 1 4 V ns RST Slew Rate 50 mV ns NOTES Rise and fall times are specified in terms of the edge rate measured in V ns This slew rate must be met across the minimum peak to peak portion of the waveform as shown in Figure 8 The minimum RST slew rate applies only to the rising deassertion edge of the reset signal and ensures that system noise cannot render an otherwise monotonic signal to appear to bounce in the switching range 0 6 0 5 E 2V p p 0 4 MINIMUM 0 3Vcc 0 2Vcc Figure 8 Clock Waveform 18
18. ADSP 2141L ed Keys within the ADSP 2141L are marked with an attributes field that specifies key type and trust level key s type field must match the use in a requested opera tion i e cannot use a KEK to encrypt traffic Keys generated internal to the ADSP 2141L i e from RNG are marked as trusted Keys that are negotiated or imported from outside systems are marked untrusted although they may still be quite secure Separate trusted and untrusted key hierarchies may be main tained and customer applications may choose which trust level is required for a given command For most key management operations the CGX interface must be used However for certain high performance encryption hashing applications the CGX interface may be bypassed and either the DSP or a host processor may exercise direct control over the hash encrypt block REV 0 ADSP 2141L COMMAND SUMMARY Approximately 40 CGX Commands are supported in the API to the ADSP 2141L General Utilities INIT DEFAULT RANDOM GET CHIPINFO SELF TEST Symmetrical Key Management UNCOVER KEY GEN KEY GEN KEK GEN RKEK SAVE KEY LOAD KEY DERIVE KEY TRANSFORM KEY DESTROY KEY EXPORT KEY IMPORT KEY Symmetrical Encryption ENCRYPT DECRYPT LOAD KG Hash HASH INIT HASH DATA HASH ENCRYPT HASH DECRYPT PRF Functions MERGE KEY MERGE LONG KEY EXTRACT LONG KEY PRF DATA PRF KEY Asymmetrical Key Management GEN PUBKEY GEN NEWPU
19. ADSP 2141L as the main processor The device can be configured into one of two Host Bus modes IDMA or PCI IDMA Bus Mode The IDMA bus mode operates the same as in a native ADSP 218x device as described in this section port provides an efficient means of communication between a host system and the ADSP 2141L The port is used to access the on chip program memory and data memory of the DSP with only one DSP cycle per word overhead The IDMA port cannot however be used to write to the DSP s memory mapped control registers port has a 16 bit multiplexed address and data bus and supports reading or writing 16 bit data DM or 24 bit program memory PM The IDMA port is completely asyn chronous and can be written to while the ADSP 2141L is oper ating at full speed The DSP memory address is latched and then automatically incremented after each IDMA transaction An external device can therefore access a block of sequentially addressed memory by REV 0 throughput as the address does not have to be sent for each memory access The IDMA port access occurs in two phases The first is the IDMA address latch cycle When the acknowledge is asserted a 14 bit address and 1 bit destination type can be driven onto the bus by an external device The address specifies an on chip memory location the destination type specifies whether it is a DM or PM access The falling edge of the address latch signal latches
20. DSP is reading the previous hash result from the output FIFO the black key decryption can be going on in parallel Also note that the data driver firmware does NOT have to wait for the key to be decrypted before writing data to the input FIFO The hard ware automatically waits for the key to be decrypted before beginning to process data for a given packet So with efficient pipeline programming it is possible to make the impact of black key essentially zero The KEK for key decryption is loaded via the secure kernel firmware using one of the CGX key manipulation commands For more information see the Command Summary section This is typically the same for all black keys since it is usually protecting local storage only It is designated the DKEK in the CGX API One of the laser programmed configuration bits specifies whether red plaintext keys are allowed to be loaded into the ADSP 2141L from a host If the AllowRedKeyLoad laser bit is not set keys may only be loaded in their black form This is useful in systems where export restrictions limit the key length that may be used or where the external storage environment is untrusted ee REV 0 ADSP 2141L If the AllowRedKeyLoad bit is set keys may be loaded either in their black form or in the red or unencrypted form Note that the laser configuration bit may be overridden with a signed enabler token For more information see the Laser Variable Storage section Dep
21. PFx Hold After CLKOUT High 3 4 0 25tcx ns Switching Characteristics trou Flag Output Hold After CLKOUT Low 0 51 7 ns trop Flag Output Delay from CLKOUT Low O 5tck 5 ns NOTES and FI inputs meet and setup hold requirements they will be recognized during the current clock cycle otherwise the signals will be recognized on the following cycle Refer to the Interrupt Controller Operation section in the Program Control chapter of the ADSP 2100 Family User s Manual for further informa tion on interrupt servicing Edge sensitive interrupts require pulsewidths greater than 10 ns level sensitive interrupts must be held low until serviced IRQO IRQI IRQ2 IRQLO IRQLI PFO 1 PF2 PF4 PF5 6 Flag Outputs PFx FLO FL2 Flag out trop CLKOUT tron FLAG OUTPUTS F8 IRQx FI PFx F trs Figure 11 Interrupts and Flags REV 0 21 ADSP 2141L Parameter Min Max Unit Bus Request Bus Grant Timing Requirements BR Hold After CLKOUT High 0 25tcg 2 ns tps BR Setup Before CLKOUT Low 0 251 17 ns Switching Characteristics tsp CLKOUT High to xMS RD WR Disable 0 251 10 ns tspB xMS RD WR Disable to BG Low 0 ns tsp BG High to 5 RD WR Enable 0 ns xMS RD WR Enable to CLKOUT High 0 251 6 ns tsppH xMS RD WR Disa
22. REV 0 ADSP 2141L Parameter Min Max Unit PCI Bus Interface Timing Requirements tvAL CLK to Signal Valid 2 11 ns ton CLK to Low Z Delay 2 ns CLK to High Z Delay 28 ns tsu Input Setup to CLK 7 ns Input Hold After CLK 1 ns tRST OFF RST Active to Outputs High Z 40 ns BED r tya 3 3V SIGNALING OUTPUT CURRENT lt LEAKAGE CURRENT THREE STATE OUTPUT CLK INPUT Vmax Figure 9 Output Top and Input Timing Measurement Conditions REV 0 19 ADSP 2141L Parameter Min Max Unit Clock Signals and Reset Timing Requirements CLKIN Period 50 100 ns CLKIN Width Low 15 ns CLKIN Width High 15 ns Switching Characteristics CLKOUT Width Low Q 5tek 7 ns tckH CLKOUT Width High Q 5tcx 7 ns tckoH CLKIN High to CLKOUT High 0 20 ns Control Signals Timing Requirement trsp RESET Width Low 5 ns NOTE lApplies after power up sequence is complete Internal phase lock loop requires no more than 2000 CLKIN cycles assuming stable CLKIN not including crystal oscillator start up time CLKIN CLKOUT Figure 10 Clock Signals and Reset 20 0 ADSP 2141L Parameter Min Max Unit Interrupts and Flags Timing Requirements tres IRQx FI or PFx Setup Before CLKOUT Low 3 4 0 251 15 ns IRQx FI or
23. ns KDH MPLX BUS Data Hold After End of Read 0 ns KDD MPLX BUS Data Disabled After End of Read 14 ns trrpE MPLX_BUS Previous Data Enabled After Start of Read 0 ns MPLX BUS Previous Data Valid After Start of Read 15 ns MPLX BUS Previous Data Hold After Start of Read 1 2 5 ns trrpH2 MPLX BUS Previous Data Hold After Start of Read PM2 5 ns NOTES IStart of Read MPLX7 Low and MPLX5 Low End of Read MPLX7 High or MPLX5 High read or first half of PM read 4Second half of PM read MPLX9 IACK gt kun tikr 4 MPLX7 IS X X X X XN Y tire gt MPLX6 IRD x 7 gt tiroe gt tikos MPLX_BUS IAD15 0 Figure 21 Read Long Read Cycle Mode Multiplex Bus REV 0 31 ADSP 2141L Parameter Min Max Unit IDMA Read Short Read Cycle IDMA Mode Multiplex Bus Timing Requirements TKR MPLXO9 Low Before Start of Read ns Duration of Read 15 ns Switching Characteristics MPLXO9 High After Start of Read 15 ns MPLX BUS Data Hold After End of Read 0 ns MPLX BUS Data Disabled After End of Read 14 ns trRDE MPLX BUS Previous Data Enabled After Start of Read 0 ns trrpv MPLX_BUS Previous Data Valid After Start of Read 15 ns NOTES IStart of Read MPLX7 Low and MPLX5 Low End of Read MPLX7 High or MPLX5 High tikr 4 MPLX7 IS X X X X XN
24. this value to the IDMAA register Once the address is stored data can either be read from or written to the ADSP 2141L s on chip memory Asserting the select line IS and the appropriate read or write line IRD and IWR respectively signals the ADSP 2141L that a particular transaction is required In either case there is a one processor cycle delay for synchronization The memory access consumes an additional processor cycle Once an access has occurred the latched address is automati cally incremented and another access can occur Through the IDMAA register the ADSP 2141L can also specify the starting address and data format for DMA operation Figure 6 illustrates a typical system configuration for the IDMA mode 11 ADSP 2141L EXTERNAL MEMORY BUS ADSP 2141 CLKOUT 1 2X CLOCK CLKIN BYTE OR CRYSTAL XTAL MEMORY BOOT LOADER INTERRUPT 16 BIT SOURCES VO SPACE 2048 LOCATIONS 1 SCLK1 RFS1 OR IRQO PROGRAM TFS1 OR RO OVERLAY DT1 OR FO no DR1 ORFI x PM SEGMENTS SPORTO SCLKO RFSO SERIAL f TFSO DEVICE OVERLAY PES MEMORY 8192 8K x 16 SEGMENTS SYSTEM UP TO 32M x 32 gt INTERFACE OR p CONTROLLER MPLX31 16 RESET VDD PCI CLK n PCI PAR Y NG PCI ios PCI STOP VDD OR GND ADDRO FROM THE ADSP 2141 NC _ 15 CONNECT FOR 32 BIT MEMORY Figure 6 ADSP 2141L IDMA System Configuration 12 A
25. 2 Pinr internal power dissipation from Power vs Frequency graphs Figures 30 and 31 Figure 30 Power vs Frequency C x Vpp x f is calculated for each output POWER IDLE of Pins x C xVpp xf Address DMS 8 x10 pF x 3 32 V x 40 MHz Data Output WR 9 x 10 pF x 3 3 x 20 MHz RD 1 x10 pF 3 32 V x 40 MHz CLKOUT 1 x 10 pF x 3 37 x 20 MHz 34 8 mW 19 6 mW 2 2 mW 4 4 mW 61 0 mW Total power dissipation for this example is 61 mW POWER Pip g mW 32 33 34 35 36 37 38 39 40 41 42 FREQUENCY MHz Figure 31 Power vs Frequency REV 0 35 ADSP 2141L Pin Configurations For all multiplexed pins the active sense is determined by the mode selected Pin Pin Name Pin Pin Name Pin Pin Name Pin Pin Name Pin Pin Name 1 EMS 43 PCI CLK 85 VDD 127 GND 169 GND 2 EE 44 GND 86 GND 128 ADDR 0 170 0 3 GND 45 MPLX BUS 30 87 MPLX6 129 ADDR I 111 DATA I 4 ECLK 46 MPLX BUS 29 88 MPLX5 130 ADDR 2 172 DATA 2 5 ELOUT 47 MPLX BUS 28 89 MPLX BUS 15 131 ADDR 3 173 DATA 3 6 ELIN 48 MPLX BUS 27 90 MPLX BUS 14 132 VDD 174 VDD 7 EINT 49 VDD 91 MPLX BUS 13 133 ADDR 4 175 GND 8 EBR 50 GND 92 MPLX BUS 12 134 ADDR 5 176 DATA 4 9 EBG 51 MPLX BUS 26 93 VDD 135 ADDR 6 177 DATA 5 10 MMAP 52 MPLX BUS 25 94 GND 136 ADDR 7
26. 9500 fpm Thermal Resistance Case to Ambient Oca 30 7 C W 16 7 C W Thermal Resistance Junction to Ambient Oya 35 C W 21 C W Thermal Resistance Junction to Case 4 3 C W 4 3 C W ENVIRONMENTAL CONDITIONS POWER DISSIPATION The following figures assume a four layer JEDEC printed circuit board PD x Tcasg Case Temperature in OUTPUT DRIVE CURRENTS Figures 28 and 29 show typical I V characteristics for the output drivers of the ADSP 2141L The curves represent the current drive capability of the output drivers as a function of output voltage 100 80 Vpp 3 3V 25 C 60 Vpp 3 6V 0 C 40 20 Vpp 3 0V 70 C 0 3 0V 70 C 740 3 3V 25 C SOURCE CURRENT mA Vpp 3 6V 0 C 0 5 1 0 1 5 2 0 2 5 3 0 3 5 4 0 SOURCE VOLTAGE V Figure 28 Typical Drive Currents PCI Pins 80 Vpn 3 3V 425 C 60 Vou Vpp 3 6V 0 C 40 DD 20 3 0V 70 C 3 0V 70 C Vpp 3 3V 25 C SOURCE CURRENT mA VoL 3 6V 0 0 0 5 1 0 1 5 2 0 2 5 3 0 3 5 4 0 SOURCE VOLTAGE V Figure 29 Typical Drive Currents Addr Dbus rd wr Pins 34 Total power dissipation has two components one due to inter nal circuitry and one due to the switching of external output drivers Internal power dissipation depen
27. ANALOG DEVICES Mey DSP ADSP 2141L APPLICATIONS Security Coprocessor for High Speed Networking Prod ucts Routers Switches Hubs Cryptographic Core for Firewalls Hardware Encryptors and More Crypto Peripheral for Implementing Secure NIC Adapt ers 10 100 Ethernet Token Ring ISDN Secure Modem on a Chip V 34 ADSL FEATURES DES CRYPTO BLOCK 640 Mbps Sustained Performance Single DES 214 Mbps Sustained Performance Triple DES Supports Modes ECB CBC 64 Bit OFB and 1 8 64 Bit CFB Includes Automatic Padding Implements IPsec ESP Transforms Autonomously at OC 3 155 Mbps Rates 3 DES SHA 1 HASH BLOCK Hardware Based SHA 1 and MD 5 Hashing 253 Mbps Sustained Performance SHA 1 315 Mbps Sustained Performance MD 5 Implements IPsec AH and HMAC Transforms SECURE KERNEL CONTROL Tamper Resistant Isolation of Cryptographic Functions Enforces Security Perimeter Around Crypto Functions and Crypto Storage Locations Anticloning Protection Secure Algorithm Download SafeNet CGX LIBRARY On Chip SafeNet CGX Crypto Library with Flexible CGX API Includes Chained and Parallel Execution Commands Such as Hash and Encrypt Embodied as 32K Words 32K 24 Kernel Program Mask Programmed into On Chip ROM On Chip Protected 4K 16 Security Scratchpad RAM RANDOM NUMBER GENERATOR Hardware Based Nondeterministic Random Number Generator Generates Internal Session Keys That Are Never Exposed Outs
28. BKEY GEN NEGKEY EXPORT PUBKEY IMPORT PUBKEY Asymmetrical Encryption PUBKEY ENCRYPT PUBKEY DECRYPT Digital Signatures SIGN VERIFY Math Utilities ADD VECTOR SUB VECTOR MULT VECTOR EXP VECTOR SHIFT VECTOR Extended Mode LOAD EXTENDED EXECUTE EXTENDED REV 0 Initializes Secure Kernel and Allow Reconfiguration of the ADSP 2141L Restores Factory Default Settings Generates Random Numbers between 1K and 64K bytes Returns ADSP 2141L System Information Runs a suite of self tests on the hardware and CGX Loads and Decrypts a Secret Key Generates a Secret Key Generates an Internal Key Encryption Key Generates a Key Recovery Key Encryption Key Saves a key protected by the Recovery Key Imports a Red plaintext User Secret Key Derives a Secret Key from a Pass Phrase Transforms a Secret Key using IPsec Removes Secret Key from the KCR Exports an IRE format Secret Key Imports an IRE format Secret Key Encrypts Data Decrypts Data Loads Secret Key into HW SW Key Generator Initializes the Hash Operator Hash Customer Data Hash and Encrypt Customer Data Hash and Decrypt Customer Data Combines two secret keys into one key Combines two secret keys into a data string long key Creates key from a data string long key Hash multiple data items using HMAC Completes the above HMAC and create secret key Generates a Public Keyset Public and Private Parts Generates a part of a Public Keyset Ge
29. DO 1 T Serial EEPROM Data EE CS 1 Serial EEPROM Chip Select EE SK 1 Serial EEPROM Clock Bus Select BUS MODE 1 I Processor Bus Select BUS SEL 1 if Bus Select PCI Bus Dedicated Pins PCI CLK 1 1 PCI Clock PCI PAR 1 IO PCI Parity Bit PCI IRDY 1 LO PCI Initiator Ready PCI STOP 1 UO PCI Abort Transfer When DMS is enabled for generation of CMS the CMS is activated for DSP access to external memory only NOT for DMA controller accesses Bus Mode Descriptions The Pin Function Descriptions Bus Mode table shows the multiplexed pins in 2183 and PCI mode For more information on the PCI pins MPLX1 MPLX12 see the Pin Functions Description PCI Mode Multiplex Bus table on the following page PIN FUNCTION DESCRIPTIONS Bus Mode of Input 2183 Mode PCI Mode Bus Mode Pins Output bus mode 0 bus sel lt 0 bus mode 1 bus sel 0 MPLX RESET 1 1 RESET 1 Pci rst MPLXI I Pci cbe3 MPLX2 1 I O Pci cbe2 MPLX3 1 Pci cbel MPLX4 1 Pci cbeO MPLX5 I I IRD Pci idsel MPLX6 1 I IWR Pci_gnt MPLX7 1 Uo IS Pci frame MPLXS 1 IO IAL Pci devsel MPLX9 1 IO IACK Pci trdy MPLXIO 1 FLO Pci perr MPLXII 1 Pci serr MPLX12 1 FL2 Pci req MPLX BUS 31 0 32 IO IAD15 0 Pci_ad15 0 N C 31 16 Pci_ad31 16 Power GND 24 Ground Pins VDD 22 Power Supply Pins 3 3 V Total 208 Includes the pins from this table and the I O Hardware Pin Function Description table 10 REV 0
30. DSP 2141 ADDR1 IS WIRED TO RAM AQ REV 0 ADSP 2141L PCI Bus Mode Figure 7 illustrates a typical system configuration for the PCI mode EXTERNAL MEMORY BUS ADSP 2141 CLKOUT 1 2X CLOCK CLKIN BYTE OR CRYSTAL XTAL Ort pros LOADER IRQ2 INTERRUPT IRQE 16 BIT SOURCES SPACE 2048 LOCATIONS SPORT1 SCLK1 RFS1 OR IRQO ADDR D ORE DATA MEMORY 8192 8K 24 PM SEGMENTS SERIAL DEVICE SPORTO SCLKO RFSO TFSO OVERLAY DRO MEMORY 8192 PCI PORT 8K x 16 PCI CBE3 0 SEGMENTS PCI IDSEL PCI REQ PCI GNT PCI FRAME PCI DEVSEL PCI TRDY PCI PERR PCI SERR AD31 0 PCI RST LI ADDRO FROM THE ADSP 2141 IS NO CONNECT FOR 32 MEMORY PCI PAR V ADSP 2141 ADDR1 IS WIRED TO RAM AQ PCI IRDY PCI STOP VDD OR GND INTA PF7 INTZH SERIAL DEVICE PCI BUS Figure 7 ADSP 2141L PCI System Configuration REV 0 13 ADSP 2141L DEVICE OPERATION OPERATIONAL MODES Security Modes The ADSP 2141L operates in one of two security modes kernel mode or user mode The mode switching is performed on the fly as program execution proceeds Kernel mode is entered via a jump or call to address 0x2000 with PMOVLAY set to 0x000F Kernel mode will exit on its own once it has completed a requested operation or terminates due to an error Special interrupt handling is performed if the DSP is executing in kernel mode W
31. FP package with a commercial 0 C 70 C temperature range DSP Core The DSP is a standard Analog Devices ADSP 218x core with full ADSP 2100 family ADSP 218x Core combines the base DSP components from the ADSP 2100 family with the addition of two serial ports a 16 bit internal DMA port a byte DMA port a programmable timer Flag I O extensive interrupt capabilities and on chip program and data memory The external memory interface of the 218x core has been extended to support up to 64M words addressing for both program and data memory Some core enhancements have been added in the ADSP 2141L including on chip security ROM and interrupt functions Refer to the Analog Devices ADSP 2183 data sheet for further information SafeNet CGX Library Secure Kernel SafeNet CGX Library is crypto library embodied as firm ware a secure kernel that is mask programmed into ROM within the DSP This solution protects the library from tampering The Library provides the Application Programming Interface to applications that require security services from the ADSP 2141L Those applications may be software executing in user mode on the DSP or they may be external host software accessing the ADSP 2141L via a PCI bus Approximately 40 Crypto commands called CGX CryptoGraphic eXtensions are provided at the API and a simple control block structure is used to pass arguments into the secure kernel a
32. PAR 118 DMSH 160 DRO 202 DATA 26 35 IRQLI 77 VDD 119 DMSL 161 SCLKO 203 DATA 27 36 IRQ2 78 GND 120 PMS 162 DTI 204 DATA 28 37 VDD 79 MPLX3 121 5 163 TFSI 205 DATA 29 38 GND 80 MPLX7 122 CMS 164 RFSI 206 30 39 MPLX RESET 81 MPLX9 123 10 5 164 DRI 207 40 MPLX12 82 MPLX8 124 VDD 166 SCLK1 208 41 MPLX BUS 1 83 GND 125 167 GND 42 VDD 84 VDD 126 XTAL 168 VDD 36 REV 0 ADSP 2141L PINOUT PCI Mode 0 1 2 3 4 109 MPLX_BUS Pci_ad 110 MPLX_BUS Pci_ad 108 MPLX_BUS Pci_ad 111 MPLX BUS Pci 105 BUS Pci ad 156 ADDR 25 155 ADDR 24 154 ADDR 23 153 ADDR 22 152 ADDR 21 151 ADDR 20 150 VDD 149 ADDR 19 148 ADDR 18 147 ADDR 17 146 ADDR 16 145 ADDR 15 144 ADDR 14 143 GND 142 ADDR 13 141 ADDR 12 140 ADDR 11 139 ADDR 10 138 ADDR 9 137 ADDR 8 136 ADDR 7 135 ADDR 6 134 ADDR 5 133 ADDR 4 132 VDD 131 ADDR 3 130 ADDR 2 129 ADDR 1 128 ADDR 0 127 GND 126 XTAL 125 CLKIN 114 VDD 113 CLKOUT 112 GND 107 GND 106 VDD vot s pe i2d sn8 25 0541 891 9 1 0548 651 1 oor 0949 0798 191 001 GND zor 66 1S3 cot 86 id sng por Z6 6 1
33. aded from one of three sources byte wide memory host processor bus or external program memory The selection of mode is made with two hardware control inputs BMODE and MMAP When the host processor boot mode is selected any one of the two bus modes may be used 14 Table Boot Mode Selection Boot Mode Pins BMODE MMAP Byte Wide BDMA Boot Mode 0 0 Host Bus IDMA Boot Mode 1 0 External Program Boot Mode 0 1 hardware pin states are not relevant after the ADSP 2141L comes out of power up reset Refer to the ADSP 2141L User s Manual available from IRE for information on BDMA IDMA and external program boot modes COMMAND INTERFACE This section provides a general overview of the software com mand interface to the crypto functions in the ADSP 2141L Refer to the ADSP 2141 CGX Interface Programmer s Guide available from http www ire ma com proddoc htm for more details Overview The ADSP 2144L provides an embedded crypto library that provides a command interface API Application Programming Interface to outside applications These commands are referred to as CGX CryptoGraphic eXtensions The CGX API simultaneously enforces certain security policies within the ADSP 2141L and insulates applications from the details of many complex cryptographic operations The security policy built into the ADSP 2141L has some of the following rules Unencrypted red keys may never be retrieved from the
34. ate clock interval 2 w DMA wait states X 2518 REF 40MHz DSP CLOCK OUT EXT ADDR A25 0 EXT WR EXT DATA 031 0 Figure 13 External Memory Write ADSP 2141L Initiated REV 0 23 ADSP 2141L Parameter Min Max Unit External Memory Read ADSP 2141L DMA Initiated Timing Requirements Read Low to Data Valid O 5tck 8 w ns tAA Address DMSx Valid to Data Valid O 5tck 3 w ns tsUR Data Valid Before Read Deasserted 4 ns Data Hold After Read Deasserted 1 ns Switching Characteristics ta Clock to Address and DMSx Active 5 9 ns TASR Address DMSx Setup Before Read Low 2 ns Address DMSx Hold After Clock 2 ns TRDA Address DMSx Hold After Read High 0 5tcx 7 05 Clock High to RD Low 8 12 ns tgp Read Pulsewidth 0 5 1 5 ns trwR RD High to Read or Write Low 0 51 3 ns 1 If wait state s added then referenced to last wait state clock interval 2 w DMA wait states X I 25ns REF 40MHz DSP CLOCK A OUT EXT ADDR A25 0 EXT DMSH EXT DMSL EXT RD EXT DATA 031 0 Figure 14 External Memory Read ADSP 2141L Initiated gt REV 0 ADSP 2141L Parameter Min Max Unit External Memory Write ADSP 2141L DSP Initiated Switching Characteristics Clock to Address xMS 1 6 ns tpw Data Setup Before Wri
35. ble to BGH Low 0 ns BGH High to xMS RD WR Enable 0 ns NOTES xMS PMS DMSL DMSH CMS IOMS BMS is an asynchronous signal If BR meets the setup hold requirements it will be recognized during the current clock cycle otherwise the signal will be recognized on the following cycle Refer to the ADSP 2100 Family User s Manual for BR BG cycle relationships is asserted when the bus is granted and the processor requires control of the bus to continue teH CLKOUT _ tas CLKOUT R PMS BMS RD WR tsp lt gt BG tspe tse LC tsps tsen Figure 12 Bus Request Bus Grant JJ REV 0 ADSP 2141L Parameter Min Max Unit External Memory Write ADSP 2141L DMA Initiated Switching Characteristics ta Clock to Address and DMSx 5 9 ns tpw Data Setup Before Write Deasserted 0 51 2 w ns tpu Data Hold After Write Deasserted 0 51 8 ns twp Write Pulsewidth 0 5tcx 5 w ns twpE Write Low to Data Enabled 5 ns tasw Address DMSx Setup Before Write Low 1 ns tppR Data Disable Before Write Read Low 0 ns Clock High to Write Low 6 12 ns taw Address DMSx Setup Before Write High 0 51 2 w ns Address and DMSx Hold After Clock 2 ns Address 8 Hold After Write High 0 5tek 7 ns Write High to Read Write Low 0 51 3 ns 1 If wait state s added then referenced to last wait st
36. blocks within the ADSP 2141L Memory Map ADSP 2141L memory map is very similar to that of the ADSP 2183 except that it includes significantly more off chip memory addressing and has additional crypto registers which are accessible to the user DSP Core The DSP core is architecturally identical to the ADSP 218x with a few exceptions The memory map includes additional external memory addressing through the PMOVLAY and DMOVLAY mecha nisms For more information see the Memory Map section Additional memory mapped crypto registers are available in the kernel data space The PF7 INT H flag may be reassigned to be the host interrupt output 8K EXTERNAL 0 PMOVLAYL 1 000 8K EXTERNAL PAGE 1 PMOVLAYL 2 PMOVLAYH 000 8K KERNEL PAGE 8191 PMOVLAYL 2 PMOVLAYH FFF UP TO 64 MEGAWORDS EXTERNAL PROGRAM MEMORY PMOVLAYL ALTERNATES 2 1 2 1 Figure 1 Program Memory MMAP 0 Ox3FFF 8K KERNEL TOP 8K KERNEL KERNEL MODE PMOVLAYL D KERNEL MODE PMOVLAYL C PMOVLAYL LS NIBBLE OF PMOVLAY PMOVLAYH MS 3 NIBBLES OF PMOVLAY SHADED KERNEL SPACE 8K KERNEL KERNEL MODE PMOVLAYL E 0 2000 PMOVLAYH 000 PMOVLAYH 000 000 8K KERNEL KERNEL MODE PMOVLAYL F 000 8K INTERNAL PMOVLAYL 0 PMOVLAYH 000 Ox1FFF 8K EXTERNAL 0 0000 Figure 2 Prog
37. c Because this package is designed as a metric package Analog Devices recommends that you use these measurements for any PCB layout OUTLINE DIMENSIONS Dimensions shown in inches and mm 208 Lead Metric Plastic Quad Flatpack MQFP Nonhermetic 0 164 4 10 1 256 31 40 MAX 1 248 31 20 SQ 0 041 1 03 1 240 31 00 0 035 0 88 0 031 0 78 y SEATING o PLANE 1 124 28 10 TOP VIEW 1 120 28 00 50 PINS DONI 1 116 27 90 0 003 0 08 MAX LEAD 52 105 Y COPLANARITY a 104 0 020 0 50 T 0 010 0 25 0 020 0 50 0 011 0 27 0 144 3 59 BSC 0 009 0 22 0 136 3 39 LEAD PITCH 0 007 0 17 LEAD WIDTH NOTE THE ACTUAL POSITION OF EACH LEAD IS WITHIN 0 003 0 08 FROM ITS IDEAL POSITION WHEN MEASURED IN THE LATERAL DIRECTION CENTER FIGURES TYPICAL UNLESS OTHERWISE NOTED THE 208 LEAD MQFP IS A METRIC PACKAGE ENGLISH DIMENSIONS PROVIDED ARE APPROXIMATE AND MUST NOT BE USED FOR BOARD DESIGN PURPOSES ORDERING GUIDE Part Number Ambient Temperature Range Instruction Rate Package Description Package Option ADSP 2141LKS NI 0 C to 70 C 40 MHz 208 Lead MQFP S 208 ADSP 2141LKS E1 0 C to 70 C 40 MHz 208 Lead MQFP S 208 C3654 5 1 00 rev 0 NOTES ADSP 2141LKS NI is an electrically equivalent full function production non x grade version of the product described in this data sheet Full function Triple DES enabled ful
38. ctional Block Diagram REV 0 5 ADSP 2141L Context switching is optimized to minimize the overhead of changing cryptographic keys to near zero software interface to the module consists of a set of memory mapped registers all of which are visible to the DSP and most of which can be enabled for host access via the PCI bus A set of five 16 bit registers define the operation to be performed the length of the data buffer to be processed in bytes the offset between the start of hashing and encryption or vice versa and the padding operation If the data length is unknown at the time the encrypt decrypt operation is started the data length register may be set to zero which specifies special handling In this case data may be passed to the hash encrypt block indefinitely until the end of data is encountered At that time the operation is terminated by writing a new control word to the hash encrypt control register either to process the next packet or to invoke the idle state if there is no further work to do This will close out the processing for the packet including the addition of the selected crypto padding set of seven status registers provides information on when a new operation can be started when there is space available to accept new data when there is data available to be read out and the results from the padding operation Crypto Contexts are two sets of crypto context registers Each context
39. ds on the sequence in which instructions execute and data operands involved See Ippm calculation in Electrical Characteristics section Internal power dissipation is calculated this way IppiN X Vpp external component of total power dissipation is caused by the switching of output pins Its magnitude depends on the number of output pins that switch during each cycle O the maximum frequency at which the pins can switch f the load capacitance of the pins C the voltage swing of pins Vpp The external component is calculated using Ox Cx Voo x f The load capacitance should include the processor s package capacitance The frequency f includes driving the load high and then back low REV 0 ADSP 2141L Example POWER INTERNAL 940 In an application where external data memory is used and no other outputs are active power dissipation is calculated as follows 840 Assumptions 740 External data memory is accessed every cycle with 50 of the address pins switching 640 External data memory writes occur every other cycle with 50 of the data pins switching POWER mW 540 Each address and data pin has a 10 pF total load at the pin 440 The application operates at Vpp 3 3 V and 25 ns Total Power Dissipation x Vpp x f T 32 33 34 35 36 37 38 39 40 41 4
40. e OFFSET register which allows specifying the number of 32 bit dwords of offset between the hash and encrypt decrypt operations Black Key Loads The cryptographic keys loaded as part of a crypto context can be stored off chip in a black or encrypted form If the appropri ate control bit is set HECNTL Bit 15 the DES or 3 DES key will be decrypted immediately after it is written into the context register The hardware handles this decryption automatically The Key Encryption Key KEK that covers the black keys is loaded in a dedicated write only KEK register within the ADSP 2141L The IV for decrypting the black secret key is called salt and must be stored along with the black key as part of the context Note that 3 DES CBC mode is used for pro tecting 3 DES black keys and single DES CBC is used for single DES black keys When black keys are used the key decrypt operation adds a 6 cycle overhead 0 15 us 40 MHz for DES keys or 36 cycle overhead 0 9 us 40 MHz for triple DES keys each time a new crypto context is loaded Note that if the same context is used for more than one packet operation the key decryption does not need to be performed again Depending on the sequencing of operations this key decryption may in fact be hidden from a performance impact perspective if other operations are underway This is because the black key decryption process only requires that the DES hardware be available For example if the
41. e limitations on which CGX commands may preempt another For information see the ADSP 2141L CGX Interface Programmer s Guide http www ire ma com proddoc htm Only one level of kernel mode nesting is permitted An interrupt to a user mode vector location while in nested kernel mode will also trigger the violation reset logic Once the interrupt service routine is finished the return from interrupt must return control back to the kernel at the address overlay that was originally interrupted otherwise the protection logic will issues chip reset Hash and Encrypt Block Overview The encrypt block is tightly coupled to the hash block in the ADSP 2141L and therefore the two are discussed together Refer to Figure 4 Hash Encrypt Functional Block Diagram for the following description The algorithms implemented in the combined hash and tion block are DES Triple DES MD 5 and SHA 1 Data can be transferred to and from the module once to perform both hashing and encryption on the same data stream The DES encrypt decrypt operations are highly paralleled and pipelined and execute full 16 round DES in only four clock cycles The internal data flow and buffering allows parallel execution of hashing and encryption where possible and allows processing of data concurrently with I O of previous and subsequent blocks PAD CONSUME AND VERIFY READ CONTEXT 16 32 BIT OUTPUT BUS Figure 4 Hash Encrypt Fun
42. ed Memory Select Output PMS DMS IOMS BMS RD 1 Memory Read Enable Output WR 1 O Memory Write Enable Output Miscellaneous MMAP 1 1 Memory Select Input 1 lt Overlay External at 0x0000 BMODE I I Boot Option Control Input 0 BDMA 1 IDMA CLKIN XTAL 2 I Clock or Quartz Crystal Input 1 2 of the ADSP 2141 Clock CLKOUT 1 Processor Clock Output Serial Ports SPORTO SCLKO 1 IO Serial Port 0 Clock DRO 1 1 Serial Port 0 Receive Data Input RFSO 1 IO Serial Port 0 Receive Frame Sync DTO 1 Serial Port 0 Transmit Data Output TFSO 1 IO Serial Port 0 Transmit Frame Sync SPORTI Port Configuration System Control Reg gt 1 Serial Port 0 Other SCLK1 1 IO Serial Port 1 Clock DRI 1 1 Serial Port 1 Receive Data Input Flag In RFS1 1 IO Serial Port 1 Receive Frame Sync IRQO DTI 1 Serial Port 1 Transmit Data Output Flag Out TFSI 1 IO Serial Port 1 Transmit Frame Sync IRQ1 Power Down PWD 1 I Power Down Initiate Control PWDACK 1 Power Down Acknowledge REV 0 9 ADSP 2141L of Input Pin Name Pins Output Function Flags PF6 0 7 IO Programmable I O Pins PF7 INT_H 1 IO Programmable I O Pin or Interrupt Output Host Mode Emulator EE 1 Emulator Only EBR 1 Emulator Only EBG 1 Emulator Only ERESET 1 Emulator Only EMS Emulator Only EINT 1 Emulator Only ECLK 1 Emulator Only ELIN 1 Emulator Only ELOUT Emulator Only Serial EEPROM Interface EE DI 1 Serial EEPROM In EE
43. el mode Provide a means to properly exit the kernel mode Prevent user mode access to protected memory and register locations Manage interrupts during kernel mode executions Manage the reset function to ensure that sensitive variables in DSP registers are erased Most of the kernel mode control functions are implemented in the hardware of the ADSP 2141L and are not directly visible to nonkernel applications user mode Any attempt by a user mode application program running on the DSP to access a kernel space addresses PRAM 0x2001 0x3FFF PMOVLAY 000C 000F or DRAM 0x0000 0x17FF DMOVLAY 000F results in an immediate chip reset and all sensitive registers and memory locations are erased Kernel mod may only be entered via a call jump or increment to address 0x2000 with PMOVLAY REGISTER 7 ADDRESS 7 S EY 16 32 BIT INPUT BUS MUTABLE PROCESSING ENCRYPT THEN HASH DECRYPT THEN HASH PAD INSERTION set to 0 000 Once in kernel mode any branch to nonkernel space program memory causes the DSP to return to user mode Note For security reasons when in kernel mode the DSP does not respond to Emulator bus requests kernel mode can be interrupted during execution however during certain periods where sensitive data is being moved all interrupts are disabled Within the interrupt service routine another call to the kernel CGX call may be made if desired although there ar
44. ending on the definition of the security module boundary in a given application FIPS 140 1 may require the use of black keys to protect key material In other words if the security boundary does not enclose the database where keys are stored those keys must be protected from compromise Black key is a satisfactory way to meet this FIPS requirement Random Number Generator RNG Block random number generator is designed to provide highly random nondeterministic binary numbers at a high delivery rate with little software intervention The random numbers are acces sible to the kernel firmware in a 16 bit register that may be read by the DSP in kernel mode Once the register is read the RNG immediately generates a new 16 bit value that is available within 12 microseconds application level access to random numbers should occur through the Kernels RANDOM command see the Command Summary section The random number generator is designed using a shot noise true entropy source which is sampled by the master 40 MHz clock of the ADSP 2141L entropy source then feeds complex nonlinear combinatorial circuit that produces the final RNG output based on the interaction of the entropy source and the 40 MHz system clock Over 200 stages of Linear Feedback Shift Register LFSR are incorporated into the RNG design In order to facilitate FIPS 140 1 compliance an option may be selected during CGX kernel initialization to
45. hile executing a CGX command in kernel mode it is possible to interrupt to a nonprotected vector loca tion and then invoke the kernel again during the interrupt han dler The IF CONDITION RTI instruction must be used to return to the kernel from the interrupt handler The return address and PMOVLAY page must match the interrupted ad dress and PMOVLAY page If not the violation reset logic will be triggered Only one level of kernel mode nesting is permitted An interrupt to a nonprotected vector location while in nested kernel mode will also trigger the violation reset logic While in kernel mode it is possible to interrupt to a protected vector location In this case the processor remains in kernel mode The CONDITION RTI instruction must be used to return the processor from the interrupt handler There is no imposed limit on the number of nested interrupts to a protected vector location Bus Modes The ADSP 2141L Host Bus may be configured for one of two personalities IDMA Mode or PCI Bus Mode The selection of mode is made with two hardware control inputs BUS MODE and BUS SEL at boot time Table II Bus Mode Selection Bus Mode Pins BUS MODE BUS SEL IDMA Mode 0 0 PCI Bus Mode 1 0 This selection may not be changed after the ADSP 2141L comes out of power up reset It is typically expected that the bus mode signals are tied to ground or VDD on the PC Board Boot Modes ADSP 2141L may be bootstrap lo
46. ide of the SafeNet DSP Redundant Fail Safe Design Up to 1 3 Mbits of Random Data Available per Second FUNCTIONAL BLOCK DIAGRAM KERNEL MODE CONTROL BUS_MODE MODE INTERRUPTS S ADSP 218x DSP CORE tu KERNEL ROM PROTECTED SPORT 0 lt 32K x 24 KERNEL SERIAL Ret PROG ROM io 16 PORTS 16K x 24 SPORT 1 ire DATA ROMI INTERRUPT 16K x19 CONTROLLER 26 BITS ADDR PF7 INT_H SafeNet is a registered trademark of Information Resource Engineering IRE REV 0 Information furnished by Analog Devices is believed to be accurate and reliable However no responsibility is assumed by Analog Devices for its EXTERNAL MEMORY INTERFACE 16 IDMA 16 INTERFACE OR 32 BIT BUS PCI OR CARDBUS INTERFACE BUS_MODE EMI BUS SERIAL EEPROM INTERFACE LASER BUS_SEL VARIABLE STORE RAM ROM use nor for any infringements of patents or other rights of third parties One Technology Way P O Box 9106 Norwood MA 02062 9106 U S A which may result from its use No license is granted by implication or Tel 781 329 4700 World Wide Web Site http www analog com otherwise under any patent or patent rights of Analog Devices Fax 781 326 8703 Analog Devices Inc 2000 ADSP 2141L PUBLIC KEY ACCELERATOR Accelerator for Math Intensive Public Key Operations Diffie Hellman Negotiate 29 ms 1024 Bit Modulus 180 Bit Exponent
47. ie Hellman Key as well as primitive operations such as Multiply Vector Add Long Vector etc are presented via the CGX interface PCI Cardbus Interface ADSP 2141L appears as a target on the PCI Bus as a single contiguous memory space of 128k bytes In this memory space the host can access the following The unprotected internal crypto registers of the ADSP 2141L accesssto the DSP s internal program memory and data memory DM Paged access to external memory connected to the ADSP 2141L The Kernel RAM KRAM if it has been unprotected by an extended mode program As a PCI Master the ADSP 2141L can transfer data between unprotected internal crypto registers and FIFOs of the ADSP 2141L and PCI Host memory External memory and PCI Host memory A 32 bit DMA engine within the ADSP 2141L facilitates these transfers and permits full PCI bandwidth use Serial EEPROM Interface The serial EEPROM interface allows the ADSP 2141L to auto matically read the PCI configuration parameters at chip power up IRE can provide the data content for the EEPROM to properly set the chip device vendor ID type and properties for full com pliance with the PCI Plug and Play standards In addition to being used for storage of host bus parameters any extra space the EEPROM may be accessed by the DSP either in user mode or kernel mode Support for this function is not included in the standard CGX com
48. iguration information Plug and Play as well as general purpose nonvolatile storage For example encrypted black keys could be stored into EEPROM for fast recovery after a power outage Interrupt Controller DSP core provides support for 14 interrupt sources includ ing six external and eight internal All interrupts are prioritized into 12 levels and interrupt nesting may be enabled or disabled under software control The security block interrupt controller provides enhancements to the DSP interrupt functions Primarily the interrupt controller provides a new interrupt generation capability to the DSP or to an external host processor Under programmable configuration control a crypto interrupt may be generated due to completion of certain operations such as encrypt complete hash complete The interrupt may either be directed at the DSP core on IRQ2 or provided on an out put line PF7 INT to a host subsystem Laser Variable Storage The laser variable storage consists of 256 bits of tamper proof factory programmed data that is only accessible to the internal function blocks and the security kernel Included in these laser variable bits are Local Storage Variable master key encryption key Randomizer Seed to supplement the true entropy fed into the RNG Program Control Data enables disables various features and configures the ADSP 2141L CRC of the Laser Data to verify laser data integrity ADSP 2141L
49. keys need to be saved and restored after a power outage Each ADSP 2141L produced is programmed with a unique randomly generated local storage variable The internal seed variable is used to randomly initialize the RNG circuits before the entropy is mixed in Each ADSP 2141L produced is programmed with a unique randomly generated internal seed variable which isdoaded into the RNG at chip boot time and cannot ever be read by software The 48 Program Control Data Bits PCDBs include configura tion for permitted key lengths algorithm enables red KEK loading internal IC pulse timing characteristics The PCDBs provide configuration data that falls into three categories Internal IC pulse timing characteristics ADSP 2141L hardware version number field ADSP 2141L feature enables first two categories consist of data that cannot be altered once the ADSP 2141L has been fabricated The feature enables can be overridden using a factory token enabler which may be passed to the CGX kernel as part of the CGX INIT command This token is digitally signed with an IRE private key and verified internal to the ADSP 2141L with its public key The CGX INIT command is documented in the ADSP 2141 CGX Interface Programmers Guide available from http www ire ma com proddoc htm EXT MEM CONFLICT 05 DSP INTERRUPT INTERRUPT CONTEXT1 DONE 5 DONE DONE 2 HOST WROTE
50. l 168 bit key length full 2048 bit public key lengths red keys allowed The ADSP 2141LKS E1 is an electrically equivalent full function production non x grade version of the product described in this data sheet except for the following Encryption DES only with maximum 56 bit key length Triple DES is disabled Public Key Algorithms Public Key Algorithms limited to 1024 bit max modulus Red keys not allowed in hardware crypto context REV 0 39 PRINTED IN U S A
51. mand set Refer to the ADSP 2141 User s Manual for the information on the data contents of the EEPROM Refer to http www analog com industry dsp ire html Table I Interrupt Sources Internal Interrupt Sources External Interrupt Sources Interrupt Notes Interrupt Notes Reset or Power Up PUCR 1 IRQ2 Edge or Level Sensitive Power Down IRQLI Level Sensitive SPORTO Transmit IRQLO Level Sensitive SPORTO Receive IRQE Edge Sensitive BDMA Interrupt IRQI Edge or Level Sensitive 5 Transmit Mixed with IRQ1 IRQO Edge or Level Sensitive SPORTI Receive Mixed with IRQO Timer REV 0 ADSP 2141L Interrupt Controller DSP core of the ADSP 2141L provides a powerful set of interrupt sources total of 14 interrupt sources are available although two pairs are multiplexed yielding 12 simultaneous sources Refer to Table I ADSP 2141L enhances the existing interrupt controller within the ADSP 218x DSP Core with some additional func tions related to the crypto functional blocks and the external host bus interfaces Two additional interrupt controller sub systems have been added to the basic interrupt controller as shown in Figure 5 The DSP interrupt controller allows programming between one and nine sources for the IRQ2 interrupt to the DSP The DIMASK register provides the mask to select which interrupt source is enabled A pair of status registers DUMSTAT and DMSTAT allow the DSP firm
52. nd return status The CGX library includes integrated drivers for the various hardware crypto blocks on the chip This allows the program mer to ignore those details and concentrate on other product design issues The CGX library firmware runs under a protected mode state of the DSP as described in the Kernel Mode Control section following This guarantees the security integrity of the system during the execution of CGX processes and for example prevents disclosure of cryptographic key data or tampering with a security operation Kernel Mode Control The Kernel Mode Control subsystem is responsible for enforcing the security perimeter around the cryptographic functions of the ADSP 2141L The device may operate in either user mode kernel space is not accessible or kernel mode kernel space is accessible at a given time When in kernel mode the kernel RAM and certain protected crypto registers and functions kernel space are accessible only to the CGX library firmware The Library executes host requested macro level functions and then returns control to the calling application The kernel mode control subsystem resets the DSP should any security violation occur such as attempting to access a protected memory location while in user mode EN REV 0 ADSP 2141L Protected Kernel RAM x 16 kernel RAM provides a secure storage area on the ADSP 2141L for sensitive data such as keys or intermediate calculations during
53. nerates a Diffie Hellman Derived Secret Key Exports an IRE format Public Key Imports an IRE format Public Key Encrypts Data using RSA Public Key Decrypts Data using RSA Public Key Digitally Signs a Message Verifies a Digital Signature Performs a Vector Add Operation Performs a Vector Subtract Operation Performs a Vector Multiply Operation Performs a Vector Exponentiate Operation Performs a Vector Right or Left Shift Operation Loads Enables Extended Downloaded Algorithm Block Executes Extended Downloaded Algorithm Block 15 ADSP 2141L ABSOLUTE MAXIMUM RATINGS Supply Voltage eee 0 3 V to 4 6 V Input Voltage 0 5 V to Vpp 0 5 V Output Voltage Swing 0 5 V to 0 5 V Operating Temperature Range Ambient 0 C to 70 C Storage Temperature Range 65 C to 150 C Lead Temperature 5 sec MQFP 280 C CAUTION Frequency Dependency For Timing Specifications tcx is defined as 0 5tcxy The ADSP 2141L uses input clock with a frequency equal to half the instruction rate a 20 0 MHz input clock which is equivalent to 50 ns yields a 25 ns processor cycle equivalent to 40 MHz tcx values within the range of 0 5tcxy period should be substituted for all relevant timing parameters to obtain the specification value Example togy 0 51 7 ns 0 5 25 ns 7 ns 8 ns ESD electrostatic discharge sensitive device Elect
54. ow 0 25tcK 2 0 25tek 7 ns tgp Read Pulsewidth 0 51 5 Ww ns trwR RD High to RD or WR Low 0 5 5 ns 1 If wait state s added then referenced to last wait state clock interval 2 w DSP wait state X 25ns REF 40MHz DSP CLOCK OUT EXT DATA D23 0 Figure 16 External Memory Read ADSP 2141L DSP Initiated 26 REV 0 ADSP 2141L Parameter Min Max Unit Serial Ports Timing Requirements tsck SCLK Period 50 ns tscs DR TFS RFS Setup Before SCLK Low 4 ns tscH DR TFS RFS Hold After SCLK Low 7 ns tscp 5 Width 15 ns Switching Characteristics tcc CLKOUT High to SCLKOUT 0 25tcK 0 251 10 ns tscpE SCLK High to DT Enable 0 ns tscpv SCLK High to DT Valid 15 ns tRH TFS RFSour Hold After SCLK High 0 ns tgp TFS RFSour Delay from SCLK High 15 ns tscpH DT Hold After SCLK High 0 ns TFS Alt to DT Enable 0 ns trpy TES Alt to DT Valid 14 ns tscpp SCLK High to DT Disable 15 ns trpv RFS Multichannel Frame Delay Zero DT Valid 15 ns CLKOUT SCLK DR TFSi RFSin TFSout TFSout ALTERNATE FRAME MODE gt RFSout MULTICHANNEL MODE FRAME DELAY 0 MFD 0 TDE ttov gt TFSin ALTERNATE FRAME MODE trov gt RFSin MULTICHANNEL MODE FRAME DELAY 0 MFD 0 Figure 17 Serial Ports REV 0 227 ADSP 2141L
55. public key operations The Kernel Mode Control subsystem above enforces the protection by allowing only internal secure kernel mode access to this RAM A public keyset and a cache of up to 15 secret keys may be stored in kernel RAM Secure key storage may be expanded to 700 secret keys by assigning segments of the DSP s internal data RAM to be protected Furthermore a virtually unlimited number of data encryption keys may be stored in an encrypted form in off chip memory Encrypt Block encrypt block performs high speed DES and Triple DES encrypt decrypt operations All four standard modes of DES are supported Electronic Code Book ECB Cipher Block Chaining 64 bit Output Feedback OFB and 1 bit 8 bit and 64 bit Cipher Feedback CFB The DES encrypt decrypt operations are highly pipelined and execute full 16 round DES in only four clock cycles Hardware support for padding insertion verification and removal further accelerates the encryption operation Con text switching is provided to minimize the overhead of changing crypto keys and Initialization Vectors IVs to nearly zero Hash Block secure hash block is tightly coupled with the encrypt block and provides hardware accelerated one way hash functions Both the MD 5 and SHA 1 algorithms are supported Combined operations that chain both hashing and encrypt decrypt functions are provided in order to significantly reduce the proc ssing time for data that need
56. ram Memory 1 Ox3FFF 32 MEMORY MAPPED REGISTERS 8160 WORDS INTERNAL Ox3FDF 0x2000 Ox1FFF MEMORY MAPPED 0x1800 REGISTERS 8K EXTERNAL Ox17FF PROTECTED 8K INTERNAL PAGE 0 DMOVLAYL 0 DMOVLAYH 000 0 1000 OxOFFF 4K KERNEL RAM DMOVLAY 000F 0 0000 KERNEL MODE SHADED KERNEL SPACE DMOVLAYL 1 DMOVLAYH 000 UP TO 64 MEGAWORDS EXTERNAL DATA MEMORY DMOVLAYL ALTERNATES 2 1 2 1 8K EXTERNAL PAGE 1 DMOVLAYL 2 DMOVLAYH 000 8K KERNEL PAGE 8191 DMOVLAYL 2 DMOVLAYH FFF Figure 3 Data Memory REV 0 ADSP 2141L IRQ2 now can include interrupt sources from the crypto subsystem depending on interrupt mask registers new read register has been added to indicate the state of interrupt enable and interrupt masks The kernel mode control subsystem has been added to super vise the protected mode of operation of the DSP core Internal RAM protection logic has been added to allow the kernel to seize increments of word of internal PRAM and DRAM Bus mode configuration 218x vs PCI pins have been added 32K words of kernel program ROM have been added to the DSP memory space See the Memory Map section Kernel Mode Control kernel mode control subsystem provides the following functions which serve to enforce the security integrity of the ADSP 2141L Provide a means to securely enter the kern
57. rostatic charges as high as 4000 V readily accumulate on the human body and test equipment and can discharge without detection Although the ADSP 2141L features proprietary ESD protection circuitry permanent damage may occur on devices subjected to high energy electrostatic discharges Therefore proper ESD precautions are recommended to avoid performance degradation or loss of functionality WARNING ESD SENSITIVE DEVICE 16 0 SPECIFICATIONS ADSP 2141L RECOMMENDED OPERATING CONDITIONS K Grade Parameter Min Max Unit Vpp Supply Voltage 3 0 3 6 V Ambient Operating Temperature 0 70 C ELECTRICAL CHARACTERISTICS DC SPECIFICATIONS K Grade Parameter Test Conditions Min Typ Max Unit Vin Hi Level Input Voltage max 2 0 V Vin Hi Level CLKIN Reset Voltage lt max 2 4 V Lo Level Input Voltage 3 lt min 0 4 V Hi Level Output Voltage min 0 5 mA 2 4 V Vpp min 100 uA 0 3 V VoL Lo Level Output Voltage min 2mA 0 4 V In Hi Level Input Current max Vin 10 Input Current 3 Vpp Vin 0 V 10 Three State Leakage Current 4 Vpp max Vin Vpp max 10 Three State Leakage Current max Vin 0 Ve 8 Supply Curren
58. s both operations applied For hash then encrypt and hash then decrypt operations the ADSP 2141L can perform parallel execution of both functions from the same source and destination buffers For encrypt then hash and decrypt then hash operations the processing must be sequential but minimum latency is still provided through the pipeline chaining design An offset may be specified between the start of hashing and the start of encryption to support certain protocols such as IPsec A mutable bit handler is also provided on the hash engine to facilitate IPsec AH processing Random Number Generator RNG Block The hardware random number generator provides a true non deterministic noise source for the purpose of generating keys Initialization Vectors IVs and other random number require ments Random numbers are provided as 16 bit words to the kernel The CGX kernel requests random numbers as needed to perform requested CGX commands such as CGX Gen Key and can also directly supply from 1 to 65 535 random bytes to a host application via the Random command Public Key Accelerator public key accelerator module works in concert with the kernel firmware to provide full public key services to the host application The kernel provides macro level functions to perform Diffie Hellman key agreement RSA encrypt or decrypt DSA compute and verify digital signatures The hardware accel erator block speeds computation inten
59. s the need for the control software to generate and load random IVs for outgoing encrypted packets Effec tively the IV register can be configured to be automatically updated with new random numbers for each encrypted packet with almost no software intervention Padding When the input data is not a multiple of eight bytes a 64 bit DES block the encrypt module can be configured to automati cally append pad bytes There are several options for how the padding is constructed which are specified using the pad control word of the operation description Options include zero padding pad length character padding PKCS 7 incrementing count with trailing pad length and next header byte for IPsec or fixed character padding Note that for the IPsec and 5 7 pad protocols there are cases where the padding not only fills out the last 8 byte block but also causes an additional 8 byte block of padding to be added For the hash operations padding is automatically added as specified in the MD 5 and SHA 1 standards When the hash final command is issued indicating the last of the input data the algorithm specified padding and data count bits are added to the end of the hash input buffer prior to computing the hash Data Offsets Certain security protocols including IPsec require portions of a data packet to be hashed while the remainder of the data is both hashed and encrypted The ADSP 2141L supports this require ment through th
60. sive operations such as large vector multiply add subtract square REV 0 PCI Cardbus Interface A full 40 MHz 33 MHz PCI bus interface has been added to the core DSP functions The 32 bit PCI interface supports both bus master and target modes The ADSP 2141L is capable of using DMA to directly access data on other PCI entities and pass that data through its encryption hash engines 32 Bit DMA Controller ADSP 2141L incorporates a high performance 32 bit controller which can be set up to move data efficiently between Host PCI memory the hash encrypt blocks and or external memory The DMA controller can be used with the PCI bus in master mode thus autonomously moving 32 bit data with mini mal DSP intervention Up to 255 long words 1020 bytes can be moved in a burst at up to 160 Mbytes per second Application Registers The application registers are a set of memory mapped registers that facilitate communications between the ADSP 2141L and a host the PCI bus One of the registers is a mailbox that is 44 bytes long and set to hold the CGX command structure passed between the host and DSP processors The application registers also provide the mechanism that allows the DSP and the external host to negotiate ownership of the hash encrypt block Serial EEPROM Interface serial EEPROM interface allows an external nonvolatile memory tobe connected to the ADSP 2141L for storing PCI conf
61. t 14 44 3 3 25 25 ns 16 mA tex 30 ns 15 mA Ipp Supply Current Dynamic 23 Vpp 3 3 25 G tcx 25 ns 195 mA tex 30 ns 165 mA Input Pin Capacitance 914 Vi 2 5 V fin 1 0 MHz Tamp 25 C 8 pF Co Output Pin Capacitance 1 15 Vix 2 5 V fin 1 0 MHz T AMB 25 C 8 pF NOTES Bidirectional pins 20 031 RFS0 RFS1 SCLK0 SCLK1 TFS0 TFS1 IAD0 15 0 Input only pins IRQ2 BR MMAP BMODE BUS MODE BUS SEL DRO PWD IRQLO IRQLI IS IRD IWR IAL Input only pins CLKIN RESET IRQ2 BR BMODE BUS MODE BUS SEL DRO DR1 PWD IRQLO IRQLI IS IRD IWR IAL Output pins BG PMS DMSL DMSH BMS IOMS CMS WR PWDACK 0 25 DT1 CLKOUT FL2 0 gt Although specified for TTL outputs all ADSP 2141L outputs are CMOS compatible and will drive to and GND assuming no loads 6 Guaranteed but not tested 7 Output pins BG PMS BMS IOMS DMSH CMS RD WR IACK PWDACK A0 A25 DT 1 CLKOUT 2 0 EE_DI EE CS EE SK 80 V on BR CLKIN active to force three state condition 9 Three statable pins A0 A25 D0 D31 PMS DMSL DMSH BMS IOMS CMS RD WR DT1 SCKLO SCLK1 50 TFS1 RFSO RFS1 IADO 14115 10Tdle refers to ADSP 2141L state of operation during execution of IDLE Instruction
62. te Deasserted 0 5tcx 7 w ns tpu Data Hold After Write Deasserted 0 251 3 5 ns twp Write Pulsewidth 0 5tcx 5 w ns Write Low to Data Enabled 0 ns tasw Address xMS Setup Before Write Low 0 251 4 ns tppR Data Disable Before Write Read Low 0 251 4 ns tcwr Clock High to Write Low 0 25tcK 0 5 9 ns taw Address xMS Setup Before Write High 0 751 64 w ns tay Address xMS Hold After Clock 1 ns twRA Address xMS Hold After Write High 0 251 4 ns Write High to Read Write Low Q 5tck 5 ns 1 If wait state s added then referenced to last wait state clock interval 2 w DSP wait states X 25ns REF 40MHz DSP CLOCK OUT EXT ADDR A13 0 EXT WR EXT DATA D23 0 Figure 15 External Memory Write ADSP 2141L DSP Initiated REV 0 25 ADSP 2141L Parameter Min Max Unit External Memory Read ADSP 2141L DSP Initiated Timing Requirements trpp Read Low to Data Valid 5 10 ns taa Address xMS Valid to Data Valid 0 75tck 11 5 ns tsuR Data Valid Before Read Deasserted 9 ns Data Hold After Read Deasserted 0 ns Switching Characteristics ta Clock to Address xMS Active 1 6 ns TASR Address xMS Setup Before Read Low 0 25tcK 4 ns tay Address xMS Hold After Clock 1 ns Address xMS Hold After Read High 0 25tcK 3 ns Clock High to RD L
63. ware to read the status of any interrupt source either before or after the mask is applied host interrupt controller allows programming between one and five sources for the PF7 INT H interrupt output signal which may be connected to the interrupt input of the host system The HMASK register provides the mask to select which interrupt source is enabled A pair of status registers HUMSTAT and HMSTAT allow the host firmware to read the status of any interrupt source either before or after the mask is applied Laser Variable Storage laser variables are configured through 256 Fuses in the ADSP 2141L which are programmed during IC manufacture Each ADSP 2141L produced is programmed with a unique set of Laser Variables Local Storage Variable LSV the Master Key Encryption Key Internal Seed Variable INTERNAL ADSP 2183 INTERRUPTS INTERRUPT RESET CONTROLLER POWER DOWN SPORTO Tx SPORTO Rx BDMA INT TIMER INT SPORT1 Tx SPORT1 Rx EXTERNAL INTERRUPTS IRQE CRYPTO INTERRUPT SUBSYSTEM BOUNDRY e 48 Bit Program Control Data enables disables various fea tures and configures the ADSP 2141L CRC of the Laser Data to verify integrity of the laser bits The LSV is a unique triple DES master key encrypting key that allows the ADSP 2141L to securely store data primarily other keys off chip for later reloading This is necessary if more storage space is needed than is available with on chip RAM or if
Download Pdf Manuals
Related Search