Module Name
Inline Crypto Engine (ICE)
Caveat
No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
- Software/Firmware security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Description
The Inline Crypto Engine (ICE) module is comprised of a sub-chip cryptographic subsystem in the Google IN763 SoC. The module provides a cryptographic engine supporting cryptographic offload for IPsec and PSP protocols. The ICE module processes network infrastructure packets in both the Ingress and Egress directions. In addition to providing the cryptographic primitives for the security protocols it also provides packet integrity authentication and anti-replay protection.