Makhalidwe a Zamalonda

Kugwiritsa ntchito ma FPGA ngati ma processor a traffic pachitetezo cha netiweki

Magalimoto opita ndi kuchokera ku zida zotetezera (ziwopsezo zozimitsa moto) amasungidwa pamiyezo ingapo, ndipo L2 encryption/decryption (MACSec) imakonzedwa pa ulalo wosanjikiza (L2) ma node a netiweki (masiwichi ndi ma router).Kukonza kupyola L2 (MAC wosanjikiza) nthawi zambiri kumaphatikizapo kuyika mozama, kutsekeka kwa tunnel ya L3 (IPSec), komanso kuchuluka kwa magalimoto a SSL okhala ndi TCP/UDP traffic.Kukonzekera kwa paketi kumaphatikizapo kugawa ndi kugawa mapaketi omwe akubwera ndikukonza kuchuluka kwa magalimoto (1-20M) ndi kutulutsa kwakukulu (25-400Gb / s).

Chifukwa cha kuchuluka kwa zida zamakompyuta (cores) zomwe zimafunikira, ma NPU atha kugwiritsidwa ntchito pokonza paketi yothamanga kwambiri, koma kutsika pang'ono, magwiridwe antchito apamwamba kwambiri osatheka chifukwa magalimoto amakonzedwa pogwiritsa ntchito ma MIPS/RISC cores ndikukonza ma cores oterowo. potengera kupezeka kwawo ndizovuta.Kugwiritsa ntchito zida zodzitetezera zochokera ku FPGA kumatha kuthetsa malire awa a CPU ndi zomangamanga zochokera ku NPU.

Kukonzekera kwachitetezo cha mulingo wogwiritsa ntchito mu FPGAs

Ma FPGA ndiabwino pakukonza zachitetezo chapakati paziwopsezo zam'mibadwo yotsatira chifukwa amakwaniritsa bwino kufunikira kwa magwiridwe antchito apamwamba, kusinthasintha, komanso magwiridwe antchito otsika.Kuphatikiza apo, ma FPGA amathanso kukhazikitsa ntchito zachitetezo pamlingo wogwiritsa ntchito, zomwe zitha kupulumutsanso zida zamakompyuta ndikuwongolera magwiridwe antchito.

Zitsanzo zodziwika bwino zamagwiritsidwe ntchito kachitetezo mu FPGAs zikuphatikiza

- Injini yotsitsa ya TTCP

- Kufananiza kwanthawi zonse

- Asymmetric encryption (PKI) processing

- Kusintha kwa TLS

Tekinoloje zachitetezo cham'badwo wotsatira pogwiritsa ntchito ma FPGA

Ma asymmetric algorithms ambiri omwe alipo ali pachiwopsezo chosokonekera ndi makompyuta a quantum.Ma asymmetric security algorithms monga RSA-2K, RSA-4K, ECC-256, DH, ndi ECCDH ndi omwe amakhudzidwa kwambiri ndi quantum computing techniques.Kukhazikitsa kwatsopano kwa ma asymmetric algorithms ndi kukhazikika kwa NIST akuwunikidwa.

Malingaliro aposachedwa a post-quantum encryption akuphatikiza njira ya Ring-on-Error Learning (R- LWE) ya.

- Public Key Cryptography (PKC)

- Ma signature a digito

- Kupanga kofunikira

Kukhazikitsidwa kwa makiyi achinsinsi a anthu kumaphatikizapo masamu ena odziwika bwino (TRNG, Gaussian noise sampler, polynomial addition, binary polynomial quantifier division, kuchulukitsa, etc.).FPGA IP ya ma aligorivimu ambiriwa ikupezeka kapena itha kukhazikitsidwa bwino pogwiritsa ntchito midadada ya FPGA, monga ma injini a DSP ndi AI (AIE) pazida za Xilinx zomwe zilipo komanso za m'badwo wotsatira.

Pepala loyera ili likufotokoza kukhazikitsidwa kwa chitetezo cha L2-L7 pogwiritsa ntchito zomangamanga zomwe zitha kutumizidwa kuti zipititse patsogolo chitetezo m'mphepete / ma netiweki ndi ma firewall am'badwo wotsatira (NGFW) m'mabizinesi.