What is MACsec (Media Access Control Security)?
MACsec is a security protocol defined in IEEE802.1AE that aims to protect Layer 2 (MAC: Media/Medium Access Control).
It is characterized by encrypting user data in FRAMES at the MAC layer.
Unlike Layer 3 IPSEC, which targets security between endpoints, MACsec limits security to the MAC Layer, so the encrypted area is communications between specific nodes, such as between a terminal and SWITCHES (see diagram below).
Combining it with IPSEC is expected to improve security.
MACsec FRAMES structure
The FRAMES structure used for MACsec is as follows:
MACsec parameters (orange) are added to normal Ethernet packets.
MACsec FRAMES configuration parameters
The parameters used in MACsec are outlined below.
| Parameter | Content |
|---|---|
| MACsec Ether Type | Set Ether Type for MACsec The setting value is "0x88E5" and by setting Indicates that the following FRAMES is a MACsec FRAMES |
| TCI/AN | Tag Control Information ⁄ Association Number Information such as encrypted payload and version number is placed in each bit.
|
| SL | Short Length Indicates the encrypted data length |
| PN | Packet Number A PN is assigned when a MACsec packet is sent, and the PN is incremented by 1 for each packet sent. This prevents FRAMES attacks (replay attacks) from the outside. |
| SCI | Secure Channel Identifier An 8-byte Secure Channel Identifier can be used to identify which Security Association the traffic belongs to
|
| ICV | Integrity check value Check Sum for MACsec |
MACsec Encryption Overview
MACsec encryption uses encryption keys, and the necessary encryption keys are provided and managed by a protocol included in IEEE802.1X called MKA (MACsec Key Agreement protocol).
The security tag in FRAMES identifies the protocol and key used to validate the received FRAMES.
Secure data refers to encrypted user data.
Inquiry
Link to Related Technical Columns
Related Product Information
CodeMeter: Encrypt and obfuscate Python code and monetize your licensing business
Wibu-Systems' AxProtector Python provides strong encryption for your Python code and enables monetization through a variety of licensing models.
- WIBU-SYSTEMS AG
- ICT and Industrial
- Smart Factories and Robotics
- Software
Software Protection, Encryption and Licensing Solutions
Wibu-Systems' CodeMeter is a powerful solution for software anti-piracy, intellectual property protection, and monetization.
- WIBU-SYSTEMS AG
- ICT and Industrial
- Smart Factories and Robotics
- Software
Protecting and Licensing MATLAB Compiler Standalone Applications with CodeMeter
Leverage MATLAB Compiler to protect your standalone application intellectual property, prevent unauthorized use, and increase monetization through license sales.
- WIBU-SYSTEMS AG
- ICT and Industrial
- Smart Factories and Robotics
- Software
Key points of GMSL2 design
This article explains the features and design key points of Analog Devices' next-generation GMSL, GMSL2.
- Analog Devices, Inc.
- NEXT Mobility
The features and product lineup of the GMSL2 high-speed transmission technology for automotive applications
This article explains the features of Analog Devices' next-generation GMSL, GMSL2, which can handle video data from cameras with higher pixel counts.
- Analog Devices, Inc.
- NEXT Mobility
- ICT and Industrial
Qualcomm IoT Application Processors for the Connected Intelligent Edge
Qualcomm's IoT Application Processors leverage AI and 5G to deliver a variety of IoT solutions, including robotics and smart cameras.
- Qualcomm Technologies, Inc.
- NEXT Mobility
- ICT and Industrial
- Smart Factories and Robotics
