Reconfigurable switch forwarding engine analyzer capable of destroying hardware Trojan

Abstract

The invention relates to a reconfigurable switch forwarding engine analyzer capable of destroying hardware Trojan. The analyzer comprises a data preprocessing unit, a plurality of cascaded basic processing units and an extraction unit; a key path of the basic processing unit of the first stage is used for extracting and shifting key bit keywords of a key, and sending a result to a data path of thecurrent stage and a key path of the next stage; the data path of the basic processing unit is used for extracting and shifting key fields of data frames, generating extracted field offsets of the basic processing unit of the next stage and field offsets of the current stage, and sending the field offsets, field identifiers and the shifted data frames to the basic processing unit of the next stageor the current stage; the basic processing units of other stages carry out key word extraction and shifting on key frames and the data frames in sequence; and the extraction unit carries out key frame and data frame extraction from the basic processing unit of the last stage and forwards the extracted key and data frames to a subsequent packet processing part. The analyzer can be widely applied to the design of the switch forwarding engine analyzer.

Description

technical field [0001] The invention belongs to the technical field of network switch chip design, in particular to a reconfigurable switch forwarding engine resolver capable of destroying hardware Trojan horses. Background technique [0002] The switch forwarding engine is the core component of the switch chip. Its task is to analyze and process the received layer 2 packets (also called frames), form a lookup request for the routing table and send it to the search engine, and according to the query returned by the search engine The table result performs forwarding processing on the packet, including modification (replacement, addition, deletion, etc.) of the packet header, and finally forwards or discards the encapsulated new packet. What determines the packet processing operation is the key field of the packet header and the forwarding and classification rules set by the switch, so the packet header needs to be parsed and extracted. The parser (parser) of the switch forwa...

AI Technical Summary

Problems solved by technology

[0006] However, in the data flow of the switch forwarding engine parser, because the parser needs to identify and analyze the fields in the received packet, it must be based on the original value of the data, so simply transcoding at the data entry and decoding at the exit will makes the package unparseable

However, if the data is restored during the keyword query, the original input data will appear in the protected range, increasing the risk of attack command penetration.

Images