Embeddable 802.1AE and 802.1X-2010 implementations for any environment

Driven by building solutions to solve compliance requirements, the QuickSec/MACsec Toolkit enables developers to embed MACsec capabilities in to new and existing products.  QuickSec/MACsec is suitable for Ethernet bridges, routers, and hosts. QuickSec/MACsec is the first security toolkit in the market to support this new Ethernet security standard.  This toolkit is highly portable, well documented and commented ANSI C source code suitable for a wide range of platforms.

Complete MAC Security Solution

MACsec specifies how all or part of a LAN network can be transparently secured. MAC Security provides connectionless user data confidentiality, frame data integrity, and data origin authenticity. The MACsec security architecture composes two main components, an authenticated key agreement protocol defined in 802.1X-2010, and a data plane protocol which protects frames transmitted on the LAN know as MACsec. 

Fully compliant with the latest IEEE standards, QuickSec/MACsec provides a source code toolkit that implements the security functionality defined in IEEE standards 802.1X, 802.1AE and 802.1X-2010. 

The enduring AuthenTec commitment to the data security market and its standardization efforts assure that the QuickSec/MACsec implementation will stay current with these complex and evolving standards that are the foundation for building Layer 2 security solutions.

AuthenTec’s extensive experience and participation in the field of security protocol standardization (in the IETF, IEEE and other organizations) guarantees that our customers always have a head-start in the new developments of security standards.

The QuickSec/MACsec toolkit includes an optimized software implementation of AES-GCM and 802.1AE transforms.  The toolkit provides a well defined API for interfacing between the hardware and software components, allowing for simple integration with third party hardware. QuickSec/MACsec is pre-integrated with AuthenTec’s SafeXcel IP cores including the EIP-38 AES-GCM IP core, the EIP-60 look-aside MACsec packet engine and the EIP160 in-line MACsec packet engine.  The solution supports speeds scaling beyond 40Gbps.

As the AuthenTec MACsec solution offers an entire and functional software implementation of the protocol core and key management functionality our customers are able to test, simulate, and prototype their solutions early (even before the actual hardware is taped off) and reach their markets quickly, with less development cost, while significantly reducing risk.

QuickSec/MACsec is part of the industry leading QuickSec family of products.  QuickSec/IPsec is the world’s foremost IPsec toolkit.  Combining the MACSec and IPsec toolkits in a single product provides total wired security at layer 2 and 3, and provides the possibility of leveraging the common XML policy management interface, as well as the EAP, TLS, and cryptographic libraries of the QuickSec product family.

• 802.1X-2010 – The implementation follows the approved and final version of the 802.1X-2010 standard (as well as any updates)
• 802.1AE with AES-GCM cipher
• Pre-shared keys or EAP for key management
• EAP-TLS, other methods available on request
• API’s for interfacing to hardware 802.1AE implementations
• API’s for policy configuration and management
• XML based policy configuration
• RADIUS
• AES-GCM

• IEEE 802.1AE
• IEEE 802.1X-2010
• IETF RFC 3748 - EAP
• IETF RFC 2716 - EAP-TLS
• IETF RFC 2865 - RADIUS
• IETF RFC 2459 - X.509
• IETF RFC 3280 - CRL Profile
• IETF RFC 4346 - TLS 1.1

• EIP-38 - AES-GCM
• EIP-60 - Look-aside PacketEngine
• EIP-160 - In-Line Packet Engine

• Complete MACsec, Authentication, and Key Management Implementations
• Build a wide range of products
   - Bridges
   - Routers
   - Hosts

• Scalability, Reliability and Interoperability
• IEEE Standards Based Solution
• Hardware IP and Toolkit Available from a Single Vendor
• Small Footprint and Deterministic Memory Allocation
• Future proof - The MACsec/QuickSec Toolkit keeps up with evolving standards
• Reduced Development Cost & Shortened Time to Market
• World-wide OEM Customer Support
• Rely on AuthenTec’s 25+ Years of Security Expertise