5812-DS00-R datasheet(24/84 Pages) BOARDCOM

24 / 84 page

BCM5812

Advance Data Sheet

3/11/03

B roa dcom Co rpo rat ion

Page 16

Cryptographic Operations

Document

5812-DS01-405-R

must be zero. The full 48 bytes of PAD1 are also required, although only the first 40 are used for SHA-1. The sequence

number is input as two 32-bit integer values, the first containing the most significant 32-bits of the 64-bit value.

One or more input fragment chain entry structures are used to describe the input record application data. The only output is

the computed MAC, which is written to the address specified in the next output fragment chain entry pointer in the packet

descriptor, as shown in Figure 15.

Figure 15: SSL MAC Authentication Output

TLS HMAC

TLS, specified in RFC 2246 [18], is derived from, and in may respects very similar to, SSL. TLS updates the SSL MAC by

using the standard HMAC (RFC2104) instead, and also includes the protocol major and minor version numbers in the

authentication.

Figure 16 shows the input buffer for the TLS HMAC computation. The MAC secret is used to initialize the HMAC, and does

not appear explicitly in the buffer. The major and minor version numbers are included following the content type and before

the authenticated length.

Note

•

The MAC output buffer must be 32-bit aligned in host memory.

•

Input Fragment Buffers must be byte aligned in host memory.

•

The total length of the Input Fragments must equal the Payload Data Length.

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

PACKET LENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT FRAGMENT LENGTH

OUTPUT FRAGMENT ADDRESS

Authentication Code

(16-20 Bytes)

Output Fragments Must Be

32-bit Word Aligned

Packet Descriptor

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

PACKET LENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT FRAGMENT LENGTH

OUTPUT FRAGMENT ADDRESS

Authentication Code

(16-20 Bytes)

Output Fragments Must Be

32-bit Word Aligned

Packet Descriptor

5812-DS00-R Folha de dados(PDF) 24 Page - Broadcom Corporation.

5812-DS00-R Folha de dados(HTML) 24 Page - Broadcom Corporation.

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84

Folha de dados Download

Ligação URL