Security processing engines, circuits and systems and adaptive processes and other processes

Abstract

An electronic circuit ( 200 ) includes one or more programmable control-plane engines ( 410, 460 ) operable to process packet header information and form at least one command, one or more programmable data-plane engines ( 310, 320, 370 ) selectively operable for at least one of a plurality of cryptographic processes selectable in response to the at least one command, and a programmable host processor ( 100 ) coupled to such a data-plane engine ( 310 ) and such a control-plane engine ( 410 ). Other processors, circuits, devices and systems and processes for their operation and manufacture are disclosed.

What is claimed is: 
     
         1 . A packet-processing electronic subsystem comprising:
 (a) a first data interface having an input for accepting first streaming data, an encryption input, and a first streaming output;   (b) a second data interface having an input for accepting second streaming data and having an output;   (c) a third data interface having an output for egress of third streaming data and having an input:   (d) a fourth data interface having an output for egress of fourth streaming data and having an input, the first, second, third, and fourth data interfaces being separate from one another;   (e) scheduler circuitry having a first streaming input, a second streaming input coupled to the output of the second interface, having outputs coupled to the inputs of the third, and fourth data interfaces, and including a packet memory, the scheduler circuitry having a security context cache interface, and an encryption input;   (f) a security context cache coupled to the security context cache interface of the scheduler circuitry and including a cache controller and cache storage for a security context, the security context cache on a demand basis fetching and later evicting a control data structure for the security context;   (g) an encryption module coupled to the encryption interface of the scheduler circuitry, the encryption module including control circuitry and encryption accelerators responding to the security context in the cache storage, and having an encryption output;   (h) first buffer circuitry having an input coupled to the first streaming output and an output coupled to the first streaming input; and   (i) second buffer circuitry having an input coupled to the encryption output and an output coupled to the encryption input.   
     
     
         2 . The subsystem of  claim 1  in which the first interface is a packet accelerator ingress Communication Processor Peripheral Interface (CPPI) streaming interface. 
     
     
         3 . The subsystem of  claim 1  in which the second interface is a code division multiple access (CDMA) ingress Communication Processor Peripheral Interface (CPPI) streaming interface. 
     
     
         4 . The subsystem of  claim 1  in which the third interface is a packet accelerator egress Communication Processor Peripheral Interface (CPPI) streaming interface. 
     
     
         5 . The subsystem of  claim 1  in which the fourth interface is a code division multiple access (CDMA) egress Communication Processor Peripheral Interface (CPPI) streaming interface.