IPsec Verification IP
IP security packet processing: ESP and AH, tunnel and transport modes, security associations and anti-replay.
IPsec verification IP
IPsec protects IP traffic with ESP and AH, used in VPN gateways, base stations and network security processors.
Lumina VIP for IPsec covers ESP · AH · tunnel and transport, as published by IETF. It comes as verification IP, built for Lumina, so the same components run in simulation and report their results in one place.
What the IPsec VIP covers.
Security
- ESP and AH in transport and tunnel modes
- AES-GCM, AES-CBC and HMAC algorithms
- Security associations, sequence numbers and anti-replay windows
Checks and error injection
- Extended sequence numbers
- IPv4 and IPv6 outer headers, padding and next-header fields
- Tampered, replayed and out-of-window packets injected
What it checks
- Frame and packet formats, CRC and FCS
- PCS coding, lane alignment and FEC
- Flow control, priorities and timing
- Error injection: corrupted, short and long frames
Verification IP capabilities
- Active and passive agents for every protocol role, set per instance
- Bus widths, timing and optional features set by parameters, and changeable while a test runs
- A sequence library from basic directed traffic to constrained-random stress
- Error injection, static or on the fly, with checks that the expected error was seen
- Protocol checks that run in real time, each tied to a rule of the specification
- Scoreboards that check data end to end
- Throughput, latency and utilisation statistics for each interface
- Callbacks at each stage for your own checks and stimulus
- UVM register model adapters for protocols that carry register access
- Transaction logs and messages linked to the waveform for debug
Why Lumina VIP.
- Fast IPsec testbench bring-up: connect the agents, pick a test and run
- Every failure names the rule it broke and the transaction that broke it
- Protocol coverage merges with your design coverage in one database
- Readable SystemVerilog and UVM source your team can extend
- Runs natively in Lumina Sim, with no wrappers and no separate compile
- Results structured for engineers and AI agents alike
Verification components.
Each component works on its own or together with the others in one environment, in active or passive mode.
- 01Traffic generator and receiver
- 02Reference model and scoreboard
IPsec products.
IPsec verification IP
UVM agents that drive and check a protocol in simulation, in every role the protocol defines.
Includes
- Active and passive UVM agents for each protocol role
- Configurable sequences, from directed to constrained-random
- Protocol checks that flag violations with a spec reference
- Functional coverage of the protocol's features
- Scoreboards and transaction logs readable by people and AI agents
Test suite and coverage.
- Directed tests for each feature of the specification
- Constrained-random tests across configurations and traffic mixes
- Error-injection tests that check how the design recovers
- A functional coverage model mapped to the specification
- Regression lists ready to run in Lumina
Test focus for this protocol family
- Line-rate traffic with mixed frame sizes
- Link bring-up, alignment and FEC
- Flow control and congestion
- Frame, coding and alignment errors
What you receive.
- Readable source of every component
- The test suite and its coverage model
- An example environment connected to a sample design
- User guide, integration guide and release notes
- Scripts to run the examples in Lumina
Where it is used.
- Switches, routers and NICs
- 5G base stations and fronthaul
- AI clusters and industrial networks
Frequently asked questions.
What is Lumina VIP for IPsec?
Lumina VIP for IPsec is a set of verification products for designs that use IPsec: verification IP. IP security packet processing: ESP and AH, tunnel and transport modes, security associations and anti-replay.
Which IPsec versions does it support?
ESP · AH · tunnel and transport, as published by IETF. If you need another version or option, tell us which one.
Which verification components are included?
Traffic generator and receiver and Reference model and scoreboard. Each one can be used on its own or together with the others in one environment.
What language and methodology does it use?
The verification IP and models are written in SystemVerilog with UVM, as readable source your team can extend.
How does it work with Lumina?
It runs in Lumina Sim beside your RTL. Protocol coverage merges into the same database as your own coverage, and every violation names the rule it broke and the transaction that broke it.
Which tests come with it?
Directed tests for each feature of the specification. Constrained-random tests across configurations and traffic mixes. Error-injection tests that check how the design recovers. A functional coverage model mapped to the specification. Regression lists ready to run in Lumina. For this protocol family the tests focus on: line-rate traffic with mixed frame sizes, link bring-up, alignment and FEC, flow control and congestion and frame, coding and alignment errors.
What is delivered?
Readable source of every component. The test suite and its coverage model. An example environment connected to a sample design. User guide, integration guide and release notes. Scripts to run the examples in Lumina.
How can I get Lumina VIP for IPsec?
Lumina VIP for IPsec is in preview. Email hello@lumeeslab.com with the versions and product types you need.
Need VIP for a protocol?
Tell us which protocols and versions you need. We also add protocols on request.
Lumina VIP
hello@lumeeslab.comHelpful to include
- The protocols and versions
- Product types: VIP, assertion IP, memory model, transactor
- Your schedule