Patent ID: 7814310

Claim:
An apparatus comprising: a first execution unit to process a first IPsec packet of a single IPsec stream including decryption, sequence number generation, and integrity check value verification, wherein the first IPsec packet is associated with a security association, and wherein the sequence number generation includes a generation of a first sequence number for the first IPsec packet through use of a window base number provided from the security association; a second execution unit to perform the following: process a second IPsec packet of the single IPsec stream including decryption, sequence number generation, and integrity check value verification in parallel with the processing of the first IPsec packet of the first execution unit, wherein the second IPsec packet is associated with the security association, wherein the sequence number generation includes a generation of a second sequence number for the second IPsec packet through use of the window base number provided from the security association, and serially modify security association read-write data including a return of the second sequence number to the security association to be used as a potential new window base number for the single IPsec stream; and a process order unit coupled with the first and second execution units to serialize writes to the security association read-write data for the first and second IPsec packets according to IPsec packet arrival order of the first and second IPsec packets.