ine functionality in Chapter 11, "Storage Network Processors." Other hashing algorithms that are often needed such as MD5 or encryption algorithms such as RC4 are to be implemented in software on the microengines. However, the 2850 clearly positions Intel NPUs to handle multigigabit-per-second IPsec types of VPNs in a powerful way. Again, unfamiliar readers are referred to Chapter 17, where these concepts are discussed in more detail. The important message with this announcement is that a major NPU vendor like Intel, with a truly dominant position in market share, takes the proactive step of integrating critical security functional- ity inside some of its network processors. This movement, which is bound to be copied by some of Intel's competitors such as Broadcom, is expected to have a major impact in many designs against the perceived need for an external security coprocessor, which is attached either in band or in a look-aside configuration. It will definitely tilt the market tendencies significantly away from the previous need to incorporate an external stand-alone security coprocessor. The IXP2850 costs a couple of hundred dollars more than the 2800 and consumes about 2 watts more. Downloaded from Digital Engineering Library @ McGraw-Hill (www.digitalengineeringlibrary.com) Copyright © 2004 The McGraw-Hill Companies. All rights reserved. Any use is subject to the Terms of Use as given at the website. INTEL IXATM NETWORK PROCESSORS 92 NETWORK PROCESSORS This means that in some designs requiring a security coprocessor, the chip count of the system becomes smaller with the use of the 2850. The direct cost of purchase is also less, as a security coprocessor costs much more than the difference we just mentioned, and it probably needs extra mem- ory and interface logic. The power consumption is less than that of stand-alone coprocessors. This concept will also probably add significant market pressure against stand-alone security coprocessor vendors in the long run. Some of them may survive, but they will remain in