Change search
ReferencesLink to record
Permanent link

Direct link
IPSec in Hardware
2002 (English)Independent thesis Advanced level (professional degree), 20 credits / 30 HE creditsStudent thesis
Abstract [en]

This thesis discusses how the protocol suite IPSec could be implemented efficiently in a network switch, to make it act as a security gateway. Much focus is on the performance of the algorithms Rijndael and MD5, as the encryption and authentication algorithms tend to be the bottlenecks within a hardware IPSec implementation. I present my implementations of these algorithms, along with a discussion of their performance in terms of speed and physical area. My results shows that authentication with MD5 is about four times as slow as encrypting with Rijndael. In addition, the Rijndael algorithm is possible to pipeline which would make it almost ten times as fast. However, MD5 is not possible to optimize, and will be the bottleneck of the processing. I also present some suggestions on how the different components of the IPSec implementation could be placed within a switch architecture, together with area estimations of these components.

Place, publisher, year, edition, pages
Keyword [en]
Technology, IPSec
Keyword [sv]
URN: urn:nbn:se:ltu:diva-45059ISRN: LTU-EX--02/200--SELocal ID: 2cc202d0-b721-4858-8857-7952c40813b6OAI: diva2:1018339
Subject / course
Student thesis, at least 30 credits
Educational program
Computer Science and Engineering, master's level
Validerat; 20101217 (root)Available from: 2016-10-04 Created: 2016-10-04Bibliographically approved

Open Access in DiVA

fulltext(1305 kB)0 downloads
File information
File name FULLTEXT01.pdfFile size 1305 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Search outside of DiVA

GoogleGoogle Scholar
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 1 hits
ReferencesLink to record
Permanent link

Direct link