MACsec Verification IP
Link-layer security: secure channels and associations, GCM-AES encryption and integrity, replay protection and extended packet numbering.
MACsec verification IP
MACsec encrypts and authenticates Ethernet frames hop by hop with AES-GCM, protecting links in data centres, carrier and automotive networks.
Lumina VIP for MACsec covers 802.1AE · GCM-AES-128/256 · XPN, as published by IEEE 802.1AE. It comes as verification IP, built for Lumina, so the same components run in simulation and report their results in one place.
What the MACsec VIP covers.
Security
- SecTAG insertion and parsing, ICV generation and checking
- GCM-AES-128 and 256, with extended packet numbering
- Secure channels and associations, key rollover and replay protection
- Corrupted, replayed and unprotected frames injected
Scenarios and options
- Confidentiality offsets and integrity-only mode
- Traffic with mixed protected and unprotected frames
What it checks
- Frame and packet formats, CRC and FCS
- PCS coding, lane alignment and FEC
- Flow control, priorities and timing
- Error injection: corrupted, short and long frames
Verification IP capabilities
- Active and passive agents for every protocol role, set per instance
- Bus widths, timing and optional features set by parameters, and changeable while a test runs
- A sequence library from basic directed traffic to constrained-random stress
- Error injection, static or on the fly, with checks that the expected error was seen
- Protocol checks that run in real time, each tied to a rule of the specification
- Scoreboards that check data end to end
- Throughput, latency and utilisation statistics for each interface
- Callbacks at each stage for your own checks and stimulus
- UVM register model adapters for protocols that carry register access
- Transaction logs and messages linked to the waveform for debug
Why Lumina VIP.
- Fast MACsec testbench bring-up: connect the agents, pick a test and run
- Every failure names the rule it broke and the transaction that broke it
- Protocol coverage merges with your design coverage in one database
- Readable SystemVerilog and UVM source your team can extend
- Runs natively in Lumina Sim, with no wrappers and no separate compile
- Results structured for engineers and AI agents alike
Verification components.
Each component works on its own or together with the others in one environment, in active or passive mode.
- 01MAC-side agent
- 02PHY-side agent
- 03Passive monitor and scoreboard
MACsec products.
MACsec verification IP
UVM agents that drive and check a protocol in simulation, in every role the protocol defines.
Includes
- Active and passive UVM agents for each protocol role
- Configurable sequences, from directed to constrained-random
- Protocol checks that flag violations with a spec reference
- Functional coverage of the protocol's features
- Scoreboards and transaction logs readable by people and AI agents
Test suite and coverage.
- Directed tests for each feature of the specification
- Constrained-random tests across configurations and traffic mixes
- Error-injection tests that check how the design recovers
- A functional coverage model mapped to the specification
- Regression lists ready to run in Lumina
Test focus for this protocol family
- Line-rate traffic with mixed frame sizes
- Link bring-up, alignment and FEC
- Flow control and congestion
- Frame, coding and alignment errors
What you receive.
- Readable source of every component
- The test suite and its coverage model
- An example environment connected to a sample design
- User guide, integration guide and release notes
- Scripts to run the examples in Lumina
Where it is used.
- Switches, routers and NICs
- 5G base stations and fronthaul
- AI clusters and industrial networks
Frequently asked questions.
What is Lumina VIP for MACsec?
Lumina VIP for MACsec is a set of verification products for designs that use MACsec: verification IP. Link-layer security: secure channels and associations, GCM-AES encryption and integrity, replay protection and extended packet numbering.
Which MACsec versions does it support?
802.1AE · GCM-AES-128/256 · XPN, as published by IEEE 802.1AE. If you need another version or option, tell us which one.
Which verification components are included?
MAC-side agent, PHY-side agent and Passive monitor and scoreboard. Each one can be used on its own or together with the others in one environment.
What language and methodology does it use?
The verification IP and models are written in SystemVerilog with UVM, as readable source your team can extend.
How does it work with Lumina?
It runs in Lumina Sim beside your RTL. Protocol coverage merges into the same database as your own coverage, and every violation names the rule it broke and the transaction that broke it.
Which tests come with it?
Directed tests for each feature of the specification. Constrained-random tests across configurations and traffic mixes. Error-injection tests that check how the design recovers. A functional coverage model mapped to the specification. Regression lists ready to run in Lumina. For this protocol family the tests focus on: line-rate traffic with mixed frame sizes, link bring-up, alignment and FEC, flow control and congestion and frame, coding and alignment errors.
What is delivered?
Readable source of every component. The test suite and its coverage model. An example environment connected to a sample design. User guide, integration guide and release notes. Scripts to run the examples in Lumina.
How can I get Lumina VIP for MACsec?
Lumina VIP for MACsec is in preview. Email hello@lumeeslab.com with the versions and product types you need.
Need VIP for a protocol?
Tell us which protocols and versions you need. We also add protocols on request.
Lumina VIP
hello@lumeeslab.comHelpful to include
- The protocols and versions
- Product types: VIP, assertion IP, memory model, transactor
- Your schedule