AES-256-GCM | Dyber IP Cores

Overview

Authenticated encryption with associated data using AES-256 in Galois/Counter Mode. The core implements 96-bit IV, GCTR encryption with serial GF(2^128) GHASH authentication. Tag computation uses AES(J0) XOR S. A byte-stream variant is available with AXI-Stream-lite interface and runtime lengths.

Key Features

SP 800-38D GCM mode with 96-bit IV
GCTR encryption + serial GF(2^128) GHASH
Byte-stream variant (aes_gcm_stream) with AXI-Stream-lite, runtime lengths, back-pressure

Benefits

Industry-standard AEAD for network and storage encryption
Streaming variant for high-throughput applications

Standards and Verification

Standards Compliance: NIST SP 800-38D

Verification: Verified vs the McGrew test vector.

Note: "Verified" means RTL byte-exact against official test vectors. It does not imply FIPS 140-3 certification or foundry sign-off.

Availability and Deliverables

Available Verified soft IP.

Standard deliverables:

Synthesizable SystemVerilog RTL
Self-checking testbench(es)
Python golden reference model
cocotb regression
Synthesis scripts
Integration/user guide

Firm/hard IP (hardened netlist for a target node) available on foundry enablement.

AES-256-GCM.