Contact Embedded Security
Contact one of our Embedded Security representatives.
Send us a message»
 

QuickSec™/IPsec Server Toolkit
Carrier-grade IPsec Toolkit or Embedded Security Developers 
QuickSec Server Toolkit is a complete IPsec development toolkit that provides carrier-grade IPsec VPN solution for networking  device developers. QuickSec Server Toolkit enables robust and standards compliant authentication, confidentiality, and data integrity for security gateways, routers and network servers.

With hundreds of proven OEM implementations, QuickSec provides the advanced levels of protection, reliability, and performance mandated by OEM customers and industry standards.

True Multicore Support
QuickSec/IPsec Server offers true multicore support for maxium scalability. The QuickSec data plane supports multicore bare-metal implementations as well as various harware accelerated and software based architectures. The QuickSec Policy Manager and IKE stacks can utilize multicore environments to achieve best tunnel setup rates optionally taking advantage of hardware acceleration.

Secure Mobility with MOBIKE
Fully interoperable with QuickSec/IPsec Server and other IPsec standard-based gateways, the client toolkit includes IKEv2/v1 as well as MOBIKE for mobile VPN client support. MOBIKE is the latest mobility and multi-homing addition to the IKE key exchange protocol specified by IETF. It enables seamless roaming of IPsec VPN clients from one IP network to another without terminating and re-negotiating the secure VPN connection.

Complete Client & Server IPsec Security Toolkits
The QuickSec/IPsec Server and Client Toolkits are the first compatible client-side and server-side development tools implementing the most current IPsec security features including MOBIKE, IKEv2, stateful TCP/IP firewall, IPv6/IPv4 support, 64-bit platform support, and pre-integration with specialized mobile and network processors providing cryptographic hardware offload.

Robust Security Performance through Hardware Acceleration
To accelerate performance-critical security algorithms and protocols, QuickSec/IPsec supports many popular security processors in the market, including AuthenTec’s SafeXcel 51x0, 1141, 174x, and 184x series, and provides a well documented API for adding support to new or proprietary crypto hardware. QuickSec/IPsec can take full advantage of a very wide range of hardware accelerators, including plain crypto cores, packet engines, inline hardware accelerators, bare-metal fastpaths as well as public key accelerators.

Security SoC Platform Support
The QuickSec Toolkits are also an ideal IPSec solution for security-enabled SoCs from silicon vendors that have integrated AuthenTec’s hardware security engines into their  products to provide robust, high-speed security functions. QuickSec has been optimized to seamlessly interoperate with the AuthenTec security engines embedded in devices from vendors such as AMCC, AMD, and PMCSierra, resulting in excellent security system performance and unparalleled ease of integration.

Advanced Features
The server toolkit also includes remote access features and high availability APIs for  import and export of IPsec security associations for device redundancy and failover. The small runtime footprint with linear deterministic memory allocation ensures seamless  scalability to meet the highest performance demands.

Technical Specifications

Complete IPsec Cryptography

  • AES, DES, 3DES, RSA, SHA-1, SHA-2, MD5, Diffie-Hellman, ECC DH, ECC  DSA and Full PKI


IKE Policy Manager

  • Dual-mode IKEv2/IKEv1 policy manager with auto-negotiation and IKEv1 fallback features


Authentication

  • MOBIKE
  • Robust IKEv2/v1 authentication
  • X.509 certificates with support for LDAP, HTTP and OCSP
  • XAUTH
  • EAP
  • Pre-shared keys
  • Dead peer detection
  • Re-keying
  • Multiple authentication


Remote Access Support

  • Built-in IP address allocation
  • NAT, NAT Traversal
  • EAP authentication

    - EAP-SIM

    - EAP-AKA

    - EAP-MD5

     - EAP-TLS

  • RADIUS server authentication
  • LT2P support


Other Features

  • IPv4 and IPv6 support
  • High availability APIs import/export of IPsec SAs
  • Stateful TCP/IP fi rewall withattack prevention
  • ALG framework with example implementations for common protocols (HTTP, SIP, FTP, CIFS)
  • IPCOMP with the deflate algorithm
  • Support for OCF (Open Cryptographic Framework)
  • Support for Linux 4K kernel stacks


Platform Support

  • Linux 2.4 / 2.6
  • MontaVista Linux
  • Microsoft Windows XP, Vista and Windows 7
  • Microsoft Windows Server 2003, 2008, 2008R2
  • WindRiver VxWorks
  • Other OS's through portability layer


Hardware Acceleration

  • SafeXcel-51x0
  • AMCC 440 EPx/GRx
  • PMC-Sierra MSP 8520
  • Cavium Octeon
  • Various third party crypto processors

Features & Benefits
  • Multicore capable control and data planes
  • Secure Mobility with Support for MOBIKE
  • Proven Reliability and Interoperability
  • Seamless & Massive Scalability
  • Standards-Based VPNC Certified Compatibility
  • Broad OS and Hardware Acceleration Support
  • Deterministic Memory Allocation and Resource Utilization
  • Integrated Client and Server IPsec Toolkits
  • Reduced Development Cost and Time
  • World-wide OEM Customer Support