1. George Mason University Timing Analysis ECE 545 Lecture 10a

2. 2 Datapath vs. Control Unit Datapath Control Unit Data Inputs Data Outputs Control Inputs Control Outputs Control Signals Status Signals Determines Area Clock Frequency Determines Number of clock cycles

3. 3 Confirming the number of clock cycles Datapath Data Inputs Data Outputs Control Outputs Control Signals Status Signals Verification of Functionality Number of clock cycles Testbench

4. 4 GCM-AE(IV, P, A) = (C, T)

5. 5 GHASH H (X 1 || X 2 || … || X m-1 || X m ) = Y m = T

6. 6 GHASH H Pseudocode

7. 7 GCTR K (ICB, X 1 || X 2 || … || X n-1, X n *) = (Y 1 || Y 2 || … || Y n-1 || Y n *)

8. 8 GCTR K Pseudocode

9. 9 Simplified Block Diagram of AES-GCM

10. 10 Assumptions AES Enc takes 10 clock cycles GCM MULT takes 8 clock cycles

11. 11 GCM-AD K (IV, C, A, T) = P, T’

12. 12 GCM-AE(IV, P, A) = (C, T)

13. 13 GCM-AD K (IV, C, A, T) = P, T’