Iimpawu zeMveliso

Ukusebenzisa iiFPGAs njengeprosesa zetrafikhi kukhuseleko lwenethiwekhi

I-Traffic ukuya kunye nezixhobo zokhuseleko (i-firewalls) zifihliwe kumanqanaba amaninzi, kunye ne-L2 encryption / decryption (MACSec) icutshungulwa kwi-link layer (L2) i-network nodes (i-switch and routers).Ukucutshungulwa ngaphaya kwe-L2 (i-MAC layer) ngokuqhelekileyo ibandakanya ukucazulula okunzulu, i-L3 tunnel decryption (IPSec), kunye ne-encrypted SSL traffic kunye ne-TCP/UDP traffic.Ukulungiswa kwepakethi kubandakanya ukuhlalutya kunye nokuhlelwa kweepakethi ezingenayo kunye nokucutshungulwa kwemithamo emikhulu ye-traffic (1-20M) kunye ne-throughput ephezulu (25-400Gb / s).

Ngenxa yenani elikhulu lezixhobo ze-computing (ii-cores) ezifunekayo, ii-NPUs zingasetyenziselwa ukusetyenzwa kwepakethi yesantya esiphezulu, kodwa i-latency ephantsi, i-high-performance scalable processing processing ayinakwenzeka ngenxa yokuba i-traffic icutshungulwa kusetyenziswa i-MIPS / RISC cores kunye nokucwangcisa i-cores enjalo. ngokusekelwe kubukho babo kunzima.Ukusetyenziswa kwezixhobo zokhuseleko ezisekelwe kwi-FPGA kunokuphelisa ngempumelelo le mida ye-CPU kunye ne-NPU-based architectures.

Inkqubo yokhuseleko lwenqanaba lesicelo kwiiFPGAs

Ii-FPGA zilungele ukusetyenzwa kwe-inline yokhuseleko kwisizukulwana esilandelayo somlilo kuba zihlangabezana ngempumelelo nemfuno yokusebenza okuphezulu, ukuguquguquka, kunye nokusebenza okuphantsi kwe-latency.Ukongeza, ii-FPGAs zinokuphinda ziphumeze imisebenzi yokhuseleko yenqanaba lesicelo, enokugcina ngakumbi izixhobo zekhompyuter kunye nokuphucula ukusebenza.

Imizekelo eqhelekileyo yokucwangciswa kokhuseleko lwesicelo kwi-FPGAs ibandakanya

-Injini yokukhuphela ye-TTCP

- Ukuhambelana kwentetho rhoqo

-Uguqulelo lwe-asymmetric encryption (PKI).

- Ukuqhubekeka kwe-TLS

Itekhnoloji yokhuseleko yesizukulwana esilandelayo isebenzisa iiFPGAs

Uninzi lwe-asymmetric algorithms ezikhoyo zisesichengeni sokuthotywa ziikhompyuter zequantum.Ii-algorithms zokhuseleko ze-asymmetric ezifana ne-RSA-2K, i-RSA-4K, i-ECC-256, i-DH, kunye ne-ECDH zezona zichaphazelekayo ngobuchule be-computing ye-quantum.Ukuphunyezwa okutsha kwe-asymmetric algorithms kunye nomgangatho we-NIST uyaphononongwa.

Izindululo zangoku ze-post-quantum encryption ziquka i-Ring-on-Error Learning (R-LWE) indlela

-Isitshixo sikawonke-wonke seCryptography (PKC)

- Iisignitsha zedijithali

- Indalo engundoqo

Ukuphunyezwa okucetywayo kwe-cryptography yesitshixo sikawonke-wonke kubandakanya imisebenzi ethile eyaziwayo yezibalo (i-TRNG, isampuli yengxolo ye-Gaussian, ukudibanisa i-polynomial, i-binary polynomial quantifier division, ukuphindaphinda, njl.).I-FPGA IP yobuninzi bezi algorithms iyafumaneka okanye inokuphunyezwa ngokufanelekileyo ngokusebenzisa iibhloko zokwakha zeFPGA, ezifana ne-DSP kunye neenjini ze-AI (AIE) kwizixhobo ezikhoyo kunye nezizukulwana ze-Xilinx.

Eli phepha elimhlophe lichaza ukuphunyezwa kwe-L2-L7 yokhuseleko usebenzisa i-architecture ecwangcisiweyo enokuthi isetyenziswe ukukhawulezisa ukhuseleko kwi-edge / access networks kunye nesizukulwana esilandelayo somlilo (NGFW) kuthungelwano lwamashishini.