The 7811 may be configured with other Hi/fn hardware and software products to provide the fastest hardware acceleration for compression, encryption and authentication - plus both bulk encryption and public key processing that can be independently scaled. The 7811 performance advantage derives from both raw engine speed and the ability to efficiently move a large number of packets in and out of the subsystem. The 7811 processor encrypts IP packets with triple DES (Data Encryption Standard) algorithms at 252 megabits per second, it supports 32K simultaneous IPSec sessions (IPSec is the protocol used in VPNs), and has an unlimited capacity for direct memory access (DMA) entries. Hi/fn is the only vendor able to provide hardware compression and encryption on the same processor, thus reducing bandwidth-stealing packet fragmentation. The 7811 processor has built-in capabilities to perform LZS® and MPPC compression, DES, triple DES and RC4 encryption, SHA-1 and MD5 authentication. The sub-system configuration is extremely efficient in dealing with the most widely used key exchange and digital signature algorithms, such as RSA, Diffie-Hellman and DSA (Digital Signature Algorithm). These algorithms permeate the standard Internet security protocols for VPNs and electronic commerce, including IP Security, Secure Electronic Transaction (SET), Secure Socket Layer/Transport Layer Security (SSL/TLS), and Public Key Infrastructure (PKIX).

1. Pipelined security engine performs encryption, compression, authentication
2. Supports major security protocols
3. Built-in DMA engine
4. Supports 32K simultaneous IPSec sessions
5. Glueless CPU interface connects to 32-bit MIPS processor
6. Local CPU + 7811 boosts performance and offloads host CPU
7. SDRAM interface supports up to 64 MB to increase performance, reduce PCI bus activity
8. Bus-mastering 32-bit, 33 MHz PCI interface
9. On-chip true random number generator for public-key cryptography
10. Supports FIPS 140-1, Level 3-compliant security subsystems