Intel IXP400 manual Reference AH Dataflow, ESP Data Flow

Intel® IXP400 Software

Access-Layer Components: Security (IxCryptoAcc) API

Figure 34. ESP Data Flow

Application		Plain text
IPSec Client	ESP	Plain Text	ESP	ESP	Cipher Text	ESP	ESP
	Header		Trailer	Header		Trailer	Auth
	Encrypt & Authenticate
	Req (SA_ID, ...)
Access Component /	ESP	Plain Text	ESP	ESP	Cipher Text	ESP	ESP
	Header		Trailer	Header		Trailer	Auth
Intel XScale® Core
	Encrypt & Authenticate
	Req (SA_ID, ...)
NPE
	ESP	Cipher Text	ESP	ESP	Cipher Text	ESP	ESP
	Header		Trailer	Header		Trailer	Auth
Processed by		Encyption Operation			Forward authentication Operation
IPSec client
Processed by
NPE
From Application
							B2333-02

7.4.2.2Reference AH Dataflow

Figure 35 shows the example data flow for IP Security environment. Transport mode AH is used in this example. IPSec client handles IP header mutable fields.

April 2005	IXP400 Software Version 2.0	Programmer’s Guide
100	Document Number: 252539, Revision: 007