5812-DS00-R datasheet(42/84 Pages) BOARDCOM

42 / 84 page

BCM5812

Advance Data Sheet

3/11/03

B roa dcom Co rpo rat ion

Page 34

Cryptographic Operations

Document

5812-DS01-405-R

Figure 30: DSA Verify

RANDOM NUMBER GENERATION

The BCM5812 provides true random number generation using thermal noise to generate a random stream of bits that is

collected as 32-bit words in a FIFO. The FIFO feeds into a SHA-1 engine, which hashes 512 bits at a time into a new set of

32-bit numbers which are placed in a second FIFO. Direct RNG output passes the FIPS-140-1 and FIPS-140-2 requirements

for self testing. This shows a sufficient randomness, a uniform distribution of results across the number line, and negligible

bias. SHA-1 output adds greater assurance that the data is uniformly distributed. The SHA-1 RNG output is used as the

internal random source for Diffie-Hellman and DSA functions. The raw RNG data source or the SHA-1 RNG data source can

be accessed directly using the random number opcodes.

The direct opcode, 0x40 using MCR2@, provides the raw output from the random number generator. This is usually used

for test or certification purposes, where the raw output needs to be examined. The SHA-1 opcode, 0x41 using MCR2@,

provides the SHA-1 output.

The number of bits is controlled by the Dlength parameter in the packet descriptor, and must be specified as an integral

number of 32-bit words. The output buffer fragment length must be equal to the value of Dlength. Output is to a single,

contiguous buffer indicated by the output fragment address in the packet descriptor. output fragmentation is not performed.

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

DLENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT BUFFER LENGTH

OUTPUT FRAGMENT ADDRESS

Input Message

Or Hash Value

Output V Value

(20 Bytes)

LENGTH

Command Context

OPCODE

RESERVED

MODULUS Q

20 Bytes

HASH GENERATED

MODULUS P

32-128

Bytes

BASE G

32-128

Bytes

MODULUS P LENGTH

RESERVED

PRIVATE KEY X

20 Bytes

NEXT INTPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INTPUT FRAGMENT ADDRESS

Intput S Value

(20 Bytes)

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

Input R Value

(20 Bytes)

Packet Descriptor

COMMAND CONTEXT ADDRESS

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

INPUT FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

DLENGTH

RESERVED

NEXT OUTPUT FRAGMENT CHAIN ENTRY

RESERVED

OUTPUT BUFFER LENGTH

OUTPUT FRAGMENT ADDRESS

Input Message

Or Hash Value

Output V Value

(20 Bytes)

LENGTH

Command Context

OPCODE

RESERVED

MODULUS Q

20 Bytes

MODULUS Q

20 Bytes

HASH GENERATED

MODULUS P

32-128

Bytes

MODULUS P

32-128

Bytes

BASE G

32-128

Bytes

BASE G

32-128

Bytes

MODULUS P LENGTH

RESERVED

PRIVATE KEY X

20 Bytes

PRIVATE KEY X

20 Bytes

NEXT INTPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INTPUT FRAGMENT ADDRESS

NEXT INTPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INTPUT FRAGMENT ADDRESS

Intput S Value

(20 Bytes)

NEXT INPUT FRAGMENT CHAIN ENTRY

RESERVED

FRAGMENT LENGTH

INPUT FRAGMENT ADDRESS

Input R Value

(20 Bytes)

Packet Descriptor

5812-DS00-R Datenblatt(PDF) 42 Page - Broadcom Corporation.

5812-DS00-R Datenblatt(HTML) 42 Page - Broadcom Corporation.

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84

Datenblatt Download

Link URL