MACsec Intel® FPGA IP User Guide

ID 736108
Date 3/31/2024
Public
Document Table of Contents

5.8.4. System-Level Errors

Table 55.  System-Level Errors
Scenario Mitigation
Ethernet Rx received packets reported errors (Errors signal in EOP, FCS/length/Undersize/Oversize & etc)

Errors propagated together with Packet using TUSER metadata from Ethernet > Multi Interface Buffering Mux > MACsec IP > Multi Interface Buffering Demux. Packet drop in Multi Interface Buffering Demux after reassembly the full packet.

Error packets (forwarded error or ICV error) always asserts tuser.tlast_uerr_fatal at the end of packet when leaving MACSEC IP. User can decode the error signal to drop the packet in case Multi Interface Buffering Demux is not used.

Multi Interface Buffering Mux FIFO full and packet truncated Multi Interface Buffering Mux appends TLAST to the truncated packet and error inserted to the packet metadata. Packet drop at Multi Interface Buffering Demux following the above data flow.
Invalid L2 packet fields due to adversary attacks Crypto QHIP shall detect ICV comparison mismatch and MACSEC IP drops the packet.
MACsec Packets size > MAX_TX_PCKT_BYTES setting on Tx transmit lane Overload the Error Ethernet signal (tuser_client.oversize) and error propagated together with Packet to Multi Interface Buffering Demux. Packet drop in Multi Interface Buffering Demux after reassembly the full packet.