Module Definition
dashboard | hierarchy | modlist | groups | tests | asserts



Module Instance : tb.dut.u_lc_ctrl_fsm

Instance :
SCORELINECONDTOGGLEFSMBRANCHASSERT
97.56 98.87 93.02 97.30 98.63 100.00


Instance's subtree :
SCORELINECONDTOGGLEFSMBRANCHASSERT
96.84 99.39 89.84 97.30 97.67 100.00


Parent :
SCORELINECONDTOGGLEFSMBRANCHASSERTNAME
93.47 100.00 83.10 99.89 100.00 84.38 dut


Subtrees :
NAMESCORELINECONDTOGGLEFSMBRANCHASSERT
gen_syncs[0].u_prim_lc_sync_flash_rma_ack 100.00 100.00 100.00 100.00
gen_syncs[1].u_prim_lc_sync_flash_rma_ack 100.00 100.00 100.00 100.00
u_cnt_regs 100.00 100.00 100.00 100.00
u_fsm_state_regs 100.00 100.00 100.00 100.00
u_lc_ctrl_fsm_cov_if 96.97 100.00 90.91 100.00
u_lc_ctrl_signal_decode 98.86 99.21 97.37 100.00
u_lc_ctrl_state_decode 98.89 100.00 100.00 96.67
u_lc_ctrl_state_transition 89.97 98.48 75.00 96.43
u_prim_lc_sender_check_byp_en 100.00 100.00 100.00
u_prim_lc_sender_clk_byp_req 100.00 100.00 100.00
u_prim_lc_sender_flash_rma_req 100.00 100.00 100.00
u_prim_lc_sync_clk_byp_ack 100.00 100.00 100.00 100.00
u_prim_lc_sync_flash_rma_ack_buf 100.00 100.00 100.00
u_prim_lc_sync_rma_token_valid 100.00 100.00 100.00
u_prim_lc_sync_test_token_valid 100.00 100.00 100.00
u_state_regs 100.00 100.00 100.00 100.00

Line Coverage for Module : lc_ctrl_fsm
Line No.TotalCoveredPercent
TOTAL17917597.77
CONT_ASSIGN12611100.00
ALWAYS14633100.00
CONT_ASSIGN17111100.00
CONT_ASSIGN17811100.00
CONT_ASSIGN17911100.00
ALWAYS20411411096.49
ALWAYS58433100.00
ALWAYS58533100.00
ALWAYS58633100.00
ALWAYS58933100.00
ALWAYS60855100.00
CONT_ASSIGN61911100.00
CONT_ASSIGN66611100.00
CONT_ASSIGN66711100.00
CONT_ASSIGN66811100.00
ALWAYS6771515100.00
ALWAYS7121414100.00
CONT_ASSIGN73211100.00
CONT_ASSIGN73611100.00
CONT_ASSIGN74011100.00
CONT_ASSIGN74211100.00
CONT_ASSIGN74911100.00
ALWAYS88233100.00

Click here to see the source line report.

Cond Coverage for Module : lc_ctrl_fsm
TotalCoveredPercent
Conditions928289.13
Logical928289.13
Non-Logical00
Event00

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT23,T47,T48
11CoveredT1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT5,T7,T12

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----
-1--2--3-StatusTests
-01CoveredT2,T4,T5
-10CoveredT1,T14,T8
-11CoveredT1,T14,T33

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT1,T14,T33

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT1,T14,T33

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT1,T14,T33

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------
-1-StatusTests
0Not Covered
1CoveredT1,T14,T33

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT54

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT54

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T4,T5
1CoveredT31,T37,T43

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011CoveredT17,T31,T37
101CoveredT31,T37,T46
110Not Covered
111CoveredT2,T5,T7

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0CoveredT17,T31,T37
1CoveredT2,T5,T7

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T17

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT2,T5,T7

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0Not Covered
1CoveredT2,T5,T7

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT2,T5,T7

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT42,T50,T51

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))
-1--2-StatusTests
00CoveredT2,T5,T7
01CoveredT46,T53,T55
10CoveredT52,T56,T57

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------
-1--2-StatusTests
01CoveredT5,T7,T20
10CoveredT2,T5,T7
11CoveredT52,T56,T57

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------
-1--2-StatusTests
00CoveredT2,T5,T7
01CoveredT52,T56,T57
10CoveredT58

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------
-1--2-StatusTests
01CoveredT2,T5,T7
10CoveredT5,T7,T20
11CoveredT46,T53,T55

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------
-1--2-StatusTests
00CoveredT5,T7,T20
01CoveredT46,T53,T55
10Not Covered

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT4,T16,T18
10CoveredT4,T16,T18

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT32,T59,T23
11CoveredT18,T32,T43

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT32,T59,T23
10CoveredT18,T32,T43

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------
-1-StatusTests
0CoveredT4,T16,T18
1CoveredT1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT1,T14,T33
10CoveredT1,T14,T33

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT8,T9,T10
11CoveredT1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT6,T8,T9
11CoveredT1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT8,T17,T9
10CoveredT1,T14,T31

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT8,T17,T9

FSM Coverage for Module : lc_ctrl_fsm
Summary for FSM :: fsm_state_q
TotalCoveredPercent
States 15 15 100.00 (Not included in score)
Transitions 47 35 74.47
Sequences 0 0

State, Transition and Sequence Details for FSM :: fsm_state_q
statesLine No.CoveredTests
ClkMuxSt 327 Covered T2,T4,T5
CntIncrSt 385 Covered T2,T4,T5
CntProgSt 401 Covered T2,T4,T5
EscalateSt 568 Covered T4,T16,T18
FlashRmaSt 455 Covered T2,T5,T7
IdleSt 252 Covered T1,T2,T3
InvalidSt 575 Covered T18,T32,T43
PostTransSt 317 Covered T1,T2,T4
ResetSt 246 Covered T1,T2,T3
ScrapSt 285 Covered T5,T7,T12
TokenCheck0St 469 Covered T2,T5,T7
TokenCheck1St 501 Covered T2,T5,T7
TokenHashSt 434 Covered T2,T5,T7
TransCheckSt 423 Covered T2,T5,T7
TransProgSt 499 Covered T2,T5,T7


transitionsLine No.CoveredTests
ClkMuxSt->CntIncrSt 385 Covered T2,T4,T5
ClkMuxSt->EscalateSt 568 Covered T20,T60,T34
ClkMuxSt->InvalidSt 575 Not Covered
CntIncrSt->CntProgSt 401 Covered T2,T4,T5
CntIncrSt->EscalateSt 568 Covered T20,T34,T61
CntIncrSt->InvalidSt 575 Not Covered
CntIncrSt->PostTransSt 399 Covered T31,T37,T46
CntProgSt->EscalateSt 568 Covered T20,T60,T34
CntProgSt->InvalidSt 575 Not Covered
CntProgSt->PostTransSt 412 Covered T4,T16,T11
CntProgSt->TransCheckSt 423 Covered T2,T5,T7
EscalateSt->InvalidSt 575 Not Covered
FlashRmaSt->EscalateSt 568 Covered T34,T61,T62
FlashRmaSt->InvalidSt 575 Not Covered
FlashRmaSt->TokenCheck0St 469 Covered T2,T5,T7
IdleSt->ClkMuxSt 327 Covered T2,T4,T5
IdleSt->EscalateSt 568 Covered T20,T60,T34
IdleSt->InvalidSt 575 Covered T18,T32,T43
IdleSt->PostTransSt 317 Covered T1,T14,T33
IdleSt->ScrapSt 285 Covered T5,T7,T12
InvalidSt->EscalateSt 568 Covered T18,T32,T43
PostTransSt->EscalateSt 568 Covered T4,T16,T11
PostTransSt->InvalidSt 575 Not Covered
ResetSt->EscalateSt 568 Covered T20,T60,T34
ResetSt->IdleSt 252 Covered T1,T2,T3
ResetSt->InvalidSt 575 Not Covered
ScrapSt->EscalateSt 568 Covered T60,T34,T63
ScrapSt->InvalidSt 575 Covered T64,T65,T66
TokenCheck0St->EscalateSt 568 Covered T20,T60,T34
TokenCheck0St->InvalidSt 575 Not Covered
TokenCheck0St->PostTransSt 483 Covered T17,T31,T37
TokenCheck0St->TokenCheck1St 501 Covered T2,T5,T7
TokenCheck1St->EscalateSt 568 Covered T20,T60,T61
TokenCheck1St->InvalidSt 575 Not Covered
TokenCheck1St->PostTransSt 483 Covered T17,T44,T46
TokenCheck1St->TransProgSt 499 Covered T2,T5,T7
TokenHashSt->EscalateSt 568 Covered T20,T60,T34
TokenHashSt->FlashRmaSt 455 Covered T2,T5,T7
TokenHashSt->InvalidSt 575 Not Covered
TokenHashSt->PostTransSt 457 Covered T17,T31,T37
TransCheckSt->EscalateSt 568 Covered T20,T60,T34
TransCheckSt->InvalidSt 575 Not Covered
TransCheckSt->PostTransSt 432 Covered T17,T31,T37
TransCheckSt->TokenHashSt 434 Covered T2,T5,T7
TransProgSt->EscalateSt 568 Covered T20,T60,T34
TransProgSt->InvalidSt 575 Not Covered
TransProgSt->PostTransSt 525 Covered T2,T5,T7


Summary for FSM :: lc_state_q
TotalCoveredPercent
States 21 5 23.81 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_state_q
statesLine No.CoveredTests
LcStDev 92 Not Covered
LcStProd 93 Not Covered
LcStProdEnd 94 Not Covered
LcStRaw 295 Covered T1,T2,T14
LcStRma 333 Not Covered
LcStScrap 284 Not Covered
LcStTestLocked0 333 Covered T13,T5,T7
LcStTestLocked1 333 Covered T2,T4,T7
LcStTestLocked2 333 Not Covered
LcStTestLocked3 333 Not Covered
LcStTestLocked4 333 Not Covered
LcStTestLocked5 333 Not Covered
LcStTestLocked6 333 Not Covered
LcStTestUnlocked0 301 Covered T1,T4,T14
LcStTestUnlocked1 333 Covered T17,T12,T20
LcStTestUnlocked2 333 Not Covered
LcStTestUnlocked3 333 Not Covered
LcStTestUnlocked4 333 Not Covered
LcStTestUnlocked5 333 Not Covered
LcStTestUnlocked6 333 Not Covered
LcStTestUnlocked7 333 Not Covered


transitionsLine No.CoveredTests
LcStRaw->LcStTestUnlocked0 301 Covered T1,T14,T17


Summary for FSM :: lc_cnt_q
TotalCoveredPercent
States 25 1 4.00 (Not included in score)
Transitions 1 0 0.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_cnt_q
statesLine No.CoveredTests
LcCnt0 305 Covered T34,T41,T35
LcCnt1 305 Not Covered
LcCnt10 112 Not Covered
LcCnt11 113 Not Covered
LcCnt12 114 Not Covered
LcCnt13 115 Not Covered
LcCnt14 116 Not Covered
LcCnt15 117 Not Covered
LcCnt16 118 Not Covered
LcCnt17 119 Not Covered
LcCnt18 120 Not Covered
LcCnt19 121 Not Covered
LcCnt2 104 Not Covered
LcCnt20 122 Not Covered
LcCnt21 123 Not Covered
LcCnt22 124 Not Covered
LcCnt23 125 Not Covered
LcCnt24 126 Not Covered
LcCnt3 105 Not Covered
LcCnt4 106 Not Covered
LcCnt5 107 Not Covered
LcCnt6 108 Not Covered
LcCnt7 109 Not Covered
LcCnt8 110 Not Covered
LcCnt9 111 Not Covered


transitionsLine No.CoveredTests
LcCnt0->LcCnt1 305 Not Covered



Branch Coverage for Module : lc_ctrl_fsm
Line No.TotalCoveredPercent
Branches 75 73 97.33
TERNARY 732 1 1 100.00
TERNARY 736 1 1 100.00
CASE 242 46 44 95.65
IF 567 3 3 100.00
IF 584 2 2 100.00
IF 585 2 2 100.00
IF 586 2 2 100.00
IF 589 2 2 100.00
IF 684 2 2 100.00
IF 687 2 2 100.00
IF 691 2 2 100.00
IF 694 2 2 100.00
IF 698 2 2 100.00
IF 701 2 2 100.00
IF 882 2 2 100.00
IF 608 2 2 100.00


732 assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates && 733 int'(trans_target_i[0]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


736 assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates && 737 int'(trans_target_i[1]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


242 unique case (fsm_state_q) -1- 243 /////////////////////////////////////////////////////////////////// 244 // Wait here until OTP has initialized and the 245 // power manager sends an initialization request. 246 ResetSt: begin 247 init_done_o = 1'b0; 248 lc_clk_byp_req = Off; 249 lc_flash_rma_req = Off; 250 lc_check_byp_en = Off; 251 if (init_req_i && lc_state_valid_q) begin -2- 252 fsm_state_d = IdleSt; ==> 253 // Fetch LC state vector from OTP. 254 lc_state_d = lc_state_i; 255 lc_cnt_d = lc_cnt_i; 256 end MISSING_ELSE ==> 257 end 258 /////////////////////////////////////////////////////////////////// 259 // Idle state where life cycle control signals are broadcast. 260 // Note that the life cycle signals are decoded and broadcast 261 // in the lc_ctrl_signal_decode submodule. 262 IdleSt: begin 263 idle_o = 1'b1; 264 265 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 266 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 267 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 268 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 269 // --------------------------------------------------------------- 270 // Note that if the volatile unlock mechanism is available, 271 // we have to stop fetching the OTP value after a volatile unlock has succeeded. 272 // Otherwise we unconditionally fetch from OTP in this state. 273 if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) || -3- 274 prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin 275 // Continuously fetch LC state vector from OTP. 276 // The state is locked in once a transition is started. 277 lc_state_d = lc_state_i; ==> 278 lc_cnt_d = lc_cnt_i; 279 end MISSING_ELSE ==> 280 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 281 282 // If the life cycle state is SCRAP, we move the FSM into a terminal 283 // SCRAP state that does not allow any transitions to be initiated anymore. 284 if (lc_state_q == LcStScrap) begin -4- 285 fsm_state_d = ScrapSt; ==> 286 287 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 288 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 289 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 290 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 291 // --------------------------------------------------------------- 292 // Only enter here if volatile RAW unlock is available and enabled. 293 end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin -5- 294 // We only allow transitions from RAW -> TEST_UNLOCKED0 295 if (lc_state_q == LcStRaw && -6- 296 trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} && 297 !trans_invalid_error_o) begin 298 // 128bit token check (without passing it through the KMAC) 299 if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin -7- 300 // We stay in Idle, but update the life cycle state register (volatile). 301 lc_state_d = LcStTestUnlocked0; 302 // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the 303 // register value is in sync with what has been programmed to OTP already (there may 304 // have been unsuccessul raw unlock attempts before that already incremented it). 305 lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q; -8- ==> ==> 306 // Re-sample the DFT straps in the pinmux. 307 // This signal will be delayed by several cycles so that the LC_CTRL signals 308 // have time to propagate. 309 set_strap_en_override = 1'b1; 310 // We have to remember that the transition was successful in order to correctly 311 // disable the continuos sampling of the life cycle state vector coming from OTP. 312 volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True; 313 // Indicate that the transition was successful. 314 trans_success_o = 1'b1; 315 end else begin 316 token_invalid_error_o = 1'b1; ==> 317 fsm_state_d = PostTransSt; 318 end 319 end else begin 320 // Transition invalid error is set by lc_ctrl_state_transition module. 321 fsm_state_d = PostTransSt; ==> 322 end 323 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 324 // Initiate a transition. This will first increment the 325 // life cycle counter before hashing and checking the token. 326 end else if (trans_cmd_i) begin -9- 327 fsm_state_d = ClkMuxSt; ==> 328 end MISSING_ELSE ==> 329 // If we are in a non-PROD life cycle state, steer the clock mux if requested. This 330 // action is available in IdleSt so that the mux can be steered without having to initiate 331 // a life cycle transition. If a transition is initiated however, the life cycle controller 332 // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding. 333 if (lc_state_q inside {LcStRaw, -10- 334 LcStTestLocked0, 335 LcStTestLocked1, 336 LcStTestLocked2, 337 LcStTestLocked3, 338 LcStTestLocked4, 339 LcStTestLocked5, 340 LcStTestLocked6, 341 LcStTestUnlocked0, 342 LcStTestUnlocked1, 343 LcStTestUnlocked2, 344 LcStTestUnlocked3, 345 LcStTestUnlocked4, 346 LcStTestUnlocked5, 347 LcStTestUnlocked6, 348 LcStTestUnlocked7, 349 LcStRma}) begin 350 if (use_ext_clock_i) begin -11- 351 lc_clk_byp_req = On; ==> 352 end MISSING_ELSE ==> 353 end MISSING_ELSE ==> 354 end 355 /////////////////////////////////////////////////////////////////// 356 // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible 357 // to switch to an external clock source. If the bypass request is 358 // asserted, we have to wait until the clock mux and clock manager 359 // have switched the mux and the clock divider. Also, we disable the 360 // life cycle partition checks at this point since we are going to 361 // alter the contents in the OTP memory array, which could lead to 362 // spurious escalations. 363 ClkMuxSt: begin 364 lc_check_byp_en = On; 365 if (lc_state_q inside {LcStRaw, -12- 366 LcStTestLocked0, 367 LcStTestLocked1, 368 LcStTestLocked2, 369 LcStTestLocked3, 370 LcStTestLocked4, 371 LcStTestLocked5, 372 LcStTestLocked6, 373 LcStTestUnlocked0, 374 LcStTestUnlocked1, 375 LcStTestUnlocked2, 376 LcStTestUnlocked3, 377 LcStTestUnlocked4, 378 LcStTestUnlocked5, 379 LcStTestUnlocked6, 380 LcStTestUnlocked7, 381 LcStRma}) begin 382 if (use_ext_clock_i) begin -13- 383 lc_clk_byp_req = On; 384 if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin -14- 385 fsm_state_d = CntIncrSt; ==> 386 end MISSING_ELSE ==> 387 end else begin 388 fsm_state_d = CntIncrSt; ==> 389 end 390 end else begin 391 fsm_state_d = CntIncrSt; ==> 392 end 393 end 394 /////////////////////////////////////////////////////////////////// 395 // This increments the life cycle counter state. 396 CntIncrSt: begin 397 // If the counter has reached the maximum, bail out. 398 if (trans_cnt_oflw_error_o) begin -15- 399 fsm_state_d = PostTransSt; ==> 400 end else begin 401 fsm_state_d = CntProgSt; ==> 402 end 403 end 404 /////////////////////////////////////////////////////////////////// 405 // This programs the life cycle counter state. 406 CntProgSt: begin 407 otp_prog_req_o = 1'b1; 408 409 // If the clock mux has been steered, double check that this is still the case. 410 // Otherwise abort the transition operation. 411 if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin -16- 412 fsm_state_d = PostTransSt; ==> 413 otp_prog_error_o = 1'b1; 414 end MISSING_ELSE ==> 415 416 // Check return value and abort if there 417 // was an error. 418 if (otp_prog_ack_i) begin -17- 419 if (otp_prog_err_i) begin -18- 420 fsm_state_d = PostTransSt; ==> 421 otp_prog_error_o = 1'b1; 422 end else begin 423 fsm_state_d = TransCheckSt; ==> 424 end 425 end MISSING_ELSE ==> 426 end 427 /////////////////////////////////////////////////////////////////// 428 // First transition valid check. This will be repeated several 429 // times below. 430 TransCheckSt: begin 431 if (trans_invalid_error_o) begin -19- 432 fsm_state_d = PostTransSt; ==> 433 end else begin 434 fsm_state_d = TokenHashSt; ==> 435 end 436 end 437 /////////////////////////////////////////////////////////////////// 438 // Hash and compare the token, no matter whether this transition 439 // is conditional or not. Unconditional transitions just use a known 440 // all-zero token value. That way, we always compare a hashed token 441 // and guarantee that no other control flow path exists that could 442 // bypass the token check. 443 // SEC_CM: TOKEN.DIGEST 444 TokenHashSt: begin 445 token_hash_req_o = 1'b1; 446 if (token_hash_ack_i) begin -20- 447 // This is the first comparison. 448 // The token is compared two more times further below. 449 // Also note that conditional transitions won't be possible if the 450 // corresponding token is not valid. This only applies to tokens stored in 451 // OTP. I.e., these tokens first have to be provisioned, before they can be used. 452 if (hashed_token_i == hashed_token_mux && -21- 453 !token_hash_err_i && 454 &hashed_token_valid_mux) begin 455 fsm_state_d = FlashRmaSt; ==> 456 end else begin 457 fsm_state_d = PostTransSt; ==> 458 token_invalid_error_o = 1'b1; 459 end 460 end MISSING_ELSE ==> 461 end 462 /////////////////////////////////////////////////////////////////// 463 // Flash RMA state. Note that we check the flash response again 464 // two times later below. 465 FlashRmaSt: begin 466 if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin -22- 467 lc_flash_rma_req = On; 468 if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin -23- 469 fsm_state_d = TokenCheck0St; ==> 470 end MISSING_ELSE ==> 471 end else begin 472 fsm_state_d = TokenCheck0St; ==> 473 end 474 end 475 /////////////////////////////////////////////////////////////////// 476 // Check again two times whether this transition and the hashed 477 // token are valid. Also check again whether the flash RMA 478 // response is valid. 479 // SEC_CM: TOKEN.DIGEST 480 TokenCheck0St, 481 TokenCheck1St: begin 482 if (trans_invalid_error_o) begin -24- 483 fsm_state_d = PostTransSt; ==> 484 end else begin 485 // If any of these RMA are conditions are true, 486 // all of them must be true at the same time. 487 if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -25- 488 lc_tx_test_false_strict(lc_flash_rma_req_o) && 489 lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) || 490 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 491 lc_tx_test_true_strict(lc_flash_rma_req_o) && 492 lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin 493 if (hashed_token_i == hashed_token_mux && -26- 494 !token_hash_err_i && 495 &hashed_token_valid_mux) begin 496 if (fsm_state_q == TokenCheck1St) begin -27- 497 // This is the only way we can get into the 498 // programming state. 499 fsm_state_d = TransProgSt; ==> 500 end else begin 501 fsm_state_d = TokenCheck1St; ==> 502 end 503 end else begin 504 fsm_state_d = PostTransSt; ==> 505 token_invalid_error_o = 1'b1; 506 end 507 // The flash RMA process failed. 508 end else begin 509 fsm_state_d = PostTransSt; ==> 510 flash_rma_error_o = 1'b1; 511 end 512 end 513 end 514 /////////////////////////////////////////////////////////////////// 515 // Initiate OTP transaction. Note that the concurrent 516 // LC state check is continuously checking whether the 517 // new LC state remains valid. Once the ack returns we are 518 // done with the transition and can go into the terminal PosTransSt. 519 TransProgSt: begin 520 otp_prog_req_o = 1'b1; 521 522 // If the clock mux has been steered, double check that this is still the case. 523 // Otherwise abort the transition operation. 524 if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin -28- 525 fsm_state_d = PostTransSt; ==> 526 otp_prog_error_o = 1'b1; 527 // Also double check that the RMA signals remain stable. 528 // Otherwise abort the transition operation. 529 end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -29- 530 (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) || 531 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 532 (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin 533 fsm_state_d = PostTransSt; ==> 534 flash_rma_error_o = 1'b1; 535 end else if (otp_prog_ack_i) begin -30- 536 fsm_state_d = PostTransSt; ==> 537 otp_prog_error_o = otp_prog_err_i; 538 trans_success_o = ~otp_prog_err_i; 539 end MISSING_ELSE ==> 540 end 541 /////////////////////////////////////////////////////////////////// 542 // Terminal states. 543 ScrapSt, 544 PostTransSt: ; ==> 545 546 547 EscalateSt: begin 548 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 549 token_hash_req_chk_o = 1'b0; ==> 550 end 551 552 InvalidSt: begin 553 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 554 token_hash_req_chk_o = 1'b0; ==> 555 state_invalid_error_o = 1'b1; 556 end 557 /////////////////////////////////////////////////////////////////// 558 // Go to terminal error state if we get here. 559 default: begin 560 fsm_state_d = InvalidSt; ==>

Branches:
-1--2--3--4--5--6--7--8--9--10--11--12--13--14--15--16--17--18--19--20--21--22--23--24--25--26--27--28--29--30-StatusTests
ResetSt 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
ResetSt 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T5,T7,T12
IdleSt - - 0 1 1 1 1 - - - - - - - - - - - - - - - - - - - - - - Covered T54
IdleSt - - 0 1 1 1 0 - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 0 1 1 0 - - - - - - - - - - - - - - - - - - - - - - - Not Covered
IdleSt - - 0 1 0 - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 0 0 - - - 1 - - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T5
IdleSt - - 0 0 - - - 0 - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 1 1 - - - - - - - - - - - - - - - - - - - Covered T2,T5,T7
IdleSt - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 0 - - - - - - - - - - - - - - - - - - - - Covered T5,T7,T8
ClkMuxSt - - - - - - - - - - 1 1 1 - - - - - - - - - - - - - - - - Covered T2,T5,T7
ClkMuxSt - - - - - - - - - - 1 1 0 - - - - - - - - - - - - - - - - Covered T67,T68,T69
ClkMuxSt - - - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - Covered T2,T4,T5
ClkMuxSt - - - - - - - - - - 0 - - - - - - - - - - - - - - - - - - Covered T5,T7,T17
CntIncrSt - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - - Covered T31,T37,T46
CntIncrSt - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - Covered T31,T37,T43
CntProgSt - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - - 1 1 - - - - - - - - - - - - Covered T4,T16,T11
CntProgSt - - - - - - - - - - - - - - - 1 0 - - - - - - - - - - - - Covered T2,T5,T7
CntProgSt - - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - Covered T2,T4,T5
TransCheckSt - - - - - - - - - - - - - - - - - 1 - - - - - - - - - - - Covered T17,T31,T37
TransCheckSt - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - - Covered T2,T5,T7
TokenHashSt - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - - - Covered T2,T5,T7
TokenHashSt - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - - - Covered T17,T31,T37
TokenHashSt - - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - Covered T2,T5,T7
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - Covered T5,T7,T17
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - Covered T5,T7,T17
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 0 - - - - - - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 1 - - - - - - Covered T17,T44,T49
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 1 - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 0 - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 0 - - - - Not Covered
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 0 - - - - - Covered T31,T37,T43
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - - Covered T42,T50,T51
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 1 - Covered T46,T52,T53
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 1 Covered T2,T5,T7
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 0 Covered T2,T5,T7
ScrapSt PostTransSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T4
EscalateSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T4,T16,T18
InvalidSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T18,T32,T43
default - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T18,T59,T23


567 if (esc_scrap_state0_i || esc_scrap_state1_i) begin -1- 568 fsm_state_d = EscalateSt; ==> 569 // SEC_CM: MAIN.FSM.LOCAL_ESC 570 // If at any time the life cycle state encoding or any other FSM state within this module 571 // is not valid, we jump into the terminal error state right away. 572 // Note that state_invalid_error is a multibit error signal 573 // with different error sources - need to reduce this to one bit here. 574 end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin -2- 575 fsm_state_d = InvalidSt; ==> 576 state_invalid_error_o = 1'b1; 577 end MISSING_ELSE ==>

Branches:
-1--2-StatusTests
1 - Covered T4,T16,T18
0 1 Covered T18,T32,T43
0 0 Covered T1,T2,T3


584 `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


585 `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


586 `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


589 if (!rst_ni) begin -1- 590 lc_state_valid_q <= 1'b0; ==> 591 end else begin 592 lc_state_valid_q <= lc_state_valid_d; ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


684 if (lc_tx_test_true_strict(test_tokens_valid[0])) begin -1- 685 hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower; ==> 686 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


687 if (lc_tx_test_true_strict(test_tokens_valid[1])) begin -1- 688 hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper; ==> 689 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


691 if (lc_tx_test_true_strict(test_tokens_valid[2])) begin -1- 692 hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower; ==> 693 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


694 if (lc_tx_test_true_strict(test_tokens_valid[3])) begin -1- 695 hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper; ==> 696 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


698 if (lc_tx_test_true_strict(rma_token_valid[0])) begin -1- 699 hashed_tokens_lower[RmaTokenIdx] = rma_token_lower; ==> 700 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


701 if (lc_tx_test_true_strict(rma_token_valid[1])) begin -1- 702 hashed_tokens_upper[RmaTokenIdx] = rma_token_upper; ==> 703 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


882 `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


608 if(!rst_ni) begin -1- 609 strap_en_override_q <= '0; ==> 610 volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False; 611 end else begin 612 strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0], ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


Assert Coverage for Module : lc_ctrl_fsm
TotalAttemptedPercentSucceeded/MatchedPercent
Assertions 15 15 100.00 15 100.00
Cover properties 0 0 0
Cover sequences 0 0 0
Total 15 15 100.00 15 100.00




Assertion Details

NameAttemptsReal SuccessesFailuresIncomplete
ClkBypStaysOnOnceAsserted_A 56170707 2934241 0 78
EscStaysOnOnceAsserted_A 56170707 11634718 0 9
FlashRmaStaysOnOnceAsserted_A 56170707 386650 0 6
FsmStateKnown_A 56170707 52972742 0 0
LcCntKnown_A 56170707 52972742 0 0
LcStateKnown_A 56170707 52972742 0 0
NoClkBypInProdStates_A 56170707 7533505 0 0
SecCmCFILinear_A 56170707 253017 0 2058
SecCmCFITerminal0_A 56170707 8365339 0 0
SecCmCFITerminal1_A 56170707 43451 0 0
SecCmCFITerminal2_A 56170707 4620346 0 0
SecCmCFITerminal3_A 56170707 6984159 0 0
u_cnt_regs_A 51083150 48201328 0 0
u_fsm_state_regs_A 54617690 51536178 0 0
u_state_regs_A 52557329 49677892 0 0


ClkBypStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 2934241 0 78
T2 2747 255 0 0
T3 929 0 0 0
T4 5329 0 0 0
T5 3525 138 0 0
T6 14684 0 0 0
T7 32034 4791 0 0
T9 0 10223 0 1
T10 0 17234 0 1
T12 0 1996 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T22 0 25443 0 1
T24 0 0 0 1
T25 0 0 0 1
T45 0 8104 0 1
T68 0 0 0 1
T69 0 0 0 1
T70 0 3163 0 0
T71 0 1517 0 0
T72 0 0 0 1
T73 0 0 0 1

EscStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 11634718 0 9
T4 5329 1599 0 0
T5 3525 23 0 0
T6 14684 0 0 0
T7 32034 1050 0 0
T8 27855 0 0 0
T11 0 2583 0 0
T12 0 375 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 1711 0 0
T17 18596 0 0 0
T18 0 2124 0 0
T20 0 17268 0 0
T31 0 950 0 0
T32 0 1374 0 0
T74 0 0 0 1
T75 0 0 0 1
T76 0 0 0 1
T77 0 0 0 1
T78 0 0 0 1
T79 0 0 0 1
T80 0 0 0 1
T81 0 0 0 1
T82 0 0 0 1

FlashRmaStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 386650 0 6
T5 3525 112 0 0
T7 32034 433 0 0
T8 27855 0 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 157 0 0
T18 7436 0 0 0
T19 18233 0 0 0
T20 0 596 0 0
T37 0 184 0 0
T43 0 738 0 0
T44 0 566 0 0
T60 0 352 0 0
T83 0 1227 0 1
T84 0 63 0 0
T85 0 0 0 1
T86 0 0 0 1
T87 0 0 0 1
T88 0 0 0 1
T89 0 0 0 1

FsmStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

LcCntKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

LcStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

NoClkBypInProdStates_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 7533505 0 0
T5 3525 1292 0 0
T7 32034 2948 0 0
T8 27855 27742 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 0 1299 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 1595 0 0
T18 7436 407 0 0
T19 18233 0 0 0
T20 0 2479 0 0
T31 0 3628 0 0
T32 0 497 0 0
T90 0 878 0 0

SecCmCFILinear_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 253017 0 2058
T2 2747 44 0 11
T3 929 0 0 1
T4 5329 78 0 1
T5 3525 101 0 11
T6 14684 0 0 1
T7 32034 103 0 11
T11 0 24 0 0
T12 0 112 0 0
T13 2136 0 0 1
T14 992 0 0 2
T15 1401 0 0 1
T16 6181 78 0 1
T17 0 400 0 0
T18 0 73 0 0
T20 0 602 0 0

SecCmCFITerminal0_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 8365339 0 0
T1 1326 1076 0 0
T2 2747 1302 0 0
T3 929 0 0 0
T4 5329 802 0 0
T5 3525 675 0 0
T6 14684 0 0 0
T7 32034 3764 0 0
T11 0 3503 0 0
T13 2136 0 0 0
T14 992 721 0 0
T15 1401 0 0 0
T16 0 1033 0 0
T17 0 8469 0 0
T18 0 1373 0 0

SecCmCFITerminal1_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 43451 0 0
T5 3525 23 0 0
T7 32034 1050 0 0
T8 27855 0 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 0 375 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 0 0 0
T18 7436 0 0 0
T19 18233 0 0 0
T34 0 8 0 0
T60 0 4 0 0
T64 0 432 0 0
T65 0 6 0 0
T66 0 6 0 0
T70 0 354 0 0
T74 0 806 0 0

SecCmCFITerminal2_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 4620346 0 0
T4 5329 1612 0 0
T5 3525 0 0 0
T6 14684 0 0 0
T7 32034 0 0 0
T8 27855 0 0 0
T11 0 2587 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 1724 0 0
T17 18596 0 0 0
T18 0 1342 0 0
T20 0 17355 0 0
T21 0 4235 0 0
T31 0 957 0 0
T32 0 830 0 0
T37 0 1477 0 0
T43 0 4865 0 0

SecCmCFITerminal3_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 6984159 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 22343 0 0 0
T18 7436 785 0 0
T19 18233 0 0 0
T20 34947 0 0 0
T23 0 13204 0 0
T31 17235 0 0 0
T32 6429 546 0 0
T39 0 2363 0 0
T41 0 1148 0 0
T43 0 2162 0 0
T45 23410 0 0 0
T47 0 3709 0 0
T59 0 267 0 0
T90 955 0 0 0
T91 0 16118 0 0
T92 0 12990 0 0

u_cnt_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 51083150 48201328 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

u_fsm_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 54617690 51536178 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

u_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 52557329 49677892 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

Line Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Line No.TotalCoveredPercent
TOTAL17717598.87
CONT_ASSIGN12611100.00
ALWAYS14633100.00
CONT_ASSIGN17111100.00
CONT_ASSIGN17811100.00
CONT_ASSIGN17911100.00
ALWAYS20411211098.21
ALWAYS58433100.00
ALWAYS58533100.00
ALWAYS58633100.00
ALWAYS58933100.00
ALWAYS60855100.00
CONT_ASSIGN61911100.00
CONT_ASSIGN66611100.00
CONT_ASSIGN66711100.00
CONT_ASSIGN66811100.00
ALWAYS6771515100.00
ALWAYS7121414100.00
CONT_ASSIGN73211100.00
CONT_ASSIGN73611100.00
CONT_ASSIGN74011100.00
CONT_ASSIGN74211100.00
CONT_ASSIGN74911100.00
ALWAYS88233100.00

Click here to see the source line report.

Cond Coverage for Instance : tb.dut.u_lc_ctrl_fsm
TotalCoveredPercent
Conditions868093.02
Logical868093.02
Non-Logical00
Event00

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT23,T47,T48
11CoveredT1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT5,T7,T12

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----
-1--2--3-StatusTests
-01CoveredT2,T4,T5
-10CoveredT1,T14,T8
-11CoveredT1,T14,T33

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------
-1--2--3-StatusTestsExclude Annotation
011Excluded VC_COV_UNR
101Excluded VC_COV_UNR
110Excluded VC_COV_UNR
111CoveredT1,T14,T33

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT1,T14,T33

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------
-1-StatusTests
0CoveredT1,T14,T33
1CoveredT1,T14,T33

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------
-1-StatusTestsExclude Annotation
0Excluded VC_COV_UNR
1CoveredT1,T14,T33

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------
-1-StatusTestsExclude Annotation
0CoveredT1,T14,T33
1ExcludedT54 VC_COV_UNR

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------
-1-StatusTestsExclude Annotation
0CoveredT1,T14,T33
1ExcludedT54 VC_COV_UNR

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T4,T5
1CoveredT31,T37,T43

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011CoveredT17,T31,T37
101CoveredT31,T37,T46
110Not Covered
111CoveredT2,T5,T7

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0CoveredT17,T31,T37
1CoveredT2,T5,T7

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T17

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT2,T5,T7

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0Not Covered
1CoveredT2,T5,T7

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT2,T5,T7

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT42,T50,T51

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))
-1--2-StatusTests
00CoveredT2,T5,T7
01CoveredT46,T53,T55
10CoveredT52,T56,T57

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------
-1--2-StatusTests
01CoveredT5,T7,T20
10CoveredT2,T5,T7
11CoveredT52,T56,T57

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------
-1--2-StatusTests
00CoveredT2,T5,T7
01CoveredT52,T56,T57
10CoveredT58

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------
-1--2-StatusTests
01CoveredT2,T5,T7
10CoveredT5,T7,T20
11CoveredT46,T53,T55

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T5,T7
1CoveredT5,T7,T20

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------
-1--2-StatusTests
00CoveredT5,T7,T20
01CoveredT46,T53,T55
10Not Covered

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------
-1-StatusTests
0CoveredT5,T7,T20
1CoveredT2,T5,T7

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT4,T16,T18
10CoveredT4,T16,T18

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT32,T59,T23
11CoveredT18,T32,T43

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT32,T59,T23
10CoveredT18,T32,T43

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------
-1-StatusTests
0CoveredT4,T16,T18
1CoveredT1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT1,T14,T33
10CoveredT1,T14,T33

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT8,T9,T10
11CoveredT1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT6,T8,T9
11CoveredT1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT8,T17,T9
10CoveredT1,T14,T31

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT8,T17,T9

FSM Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Summary for FSM :: fsm_state_q
TotalCoveredPercent
States 15 15 100.00 (Not included in score)
Transitions 35 35 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: fsm_state_q
statesLine No.CoveredTests
ClkMuxSt 327 Covered T2,T4,T5
CntIncrSt 385 Covered T2,T4,T5
CntProgSt 401 Covered T2,T4,T5
EscalateSt 568 Covered T4,T16,T18
FlashRmaSt 455 Covered T2,T5,T7
IdleSt 252 Covered T1,T2,T3
InvalidSt 575 Covered T18,T32,T43
PostTransSt 317 Covered T1,T2,T4
ResetSt 246 Covered T1,T2,T3
ScrapSt 285 Covered T5,T7,T12
TokenCheck0St 469 Covered T2,T5,T7
TokenCheck1St 501 Covered T2,T5,T7
TokenHashSt 434 Covered T2,T5,T7
TransCheckSt 423 Covered T2,T5,T7
TransProgSt 499 Covered T2,T5,T7


transitionsLine No.CoveredTestsExclude Annotation
ClkMuxSt->CntIncrSt 385 Covered T2,T4,T5
ClkMuxSt->EscalateSt 568 Covered T20,T60,T34
ClkMuxSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->CntProgSt 401 Covered T2,T4,T5
CntIncrSt->EscalateSt 568 Covered T20,T34,T61
CntIncrSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->PostTransSt 399 Covered T31,T37,T46
CntProgSt->EscalateSt 568 Covered T20,T60,T34
CntProgSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntProgSt->PostTransSt 412 Covered T4,T16,T11
CntProgSt->TransCheckSt 423 Covered T2,T5,T7
EscalateSt->InvalidSt 575 Excluded VC_COV_UNR
FlashRmaSt->EscalateSt 568 Covered T34,T61,T62
FlashRmaSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
FlashRmaSt->TokenCheck0St 469 Covered T2,T5,T7
IdleSt->ClkMuxSt 327 Covered T2,T4,T5
IdleSt->EscalateSt 568 Covered T20,T60,T34
IdleSt->InvalidSt 575 Covered T18,T32,T43
IdleSt->PostTransSt 317 Covered T1,T14,T33
IdleSt->ScrapSt 285 Covered T5,T7,T12
InvalidSt->EscalateSt 568 Covered T18,T32,T43
PostTransSt->EscalateSt 568 Covered T4,T16,T11
PostTransSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ResetSt->EscalateSt 568 Covered T20,T60,T34
ResetSt->IdleSt 252 Covered T1,T2,T3
ResetSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ScrapSt->EscalateSt 568 Covered T60,T34,T63
ScrapSt->InvalidSt 575 Covered T64,T65,T66
TokenCheck0St->EscalateSt 568 Covered T20,T60,T34
TokenCheck0St->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck0St->PostTransSt 483 Covered T17,T31,T37
TokenCheck0St->TokenCheck1St 501 Covered T2,T5,T7
TokenCheck1St->EscalateSt 568 Covered T20,T60,T61
TokenCheck1St->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck1St->PostTransSt 483 Covered T17,T44,T46
TokenCheck1St->TransProgSt 499 Covered T2,T5,T7
TokenHashSt->EscalateSt 568 Covered T20,T60,T34
TokenHashSt->FlashRmaSt 455 Covered T2,T5,T7
TokenHashSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenHashSt->PostTransSt 457 Covered T17,T31,T37
TransCheckSt->EscalateSt 568 Covered T20,T60,T34
TransCheckSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransCheckSt->PostTransSt 432 Covered T17,T31,T37
TransCheckSt->TokenHashSt 434 Covered T2,T5,T7
TransProgSt->EscalateSt 568 Covered T20,T60,T34
TransProgSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransProgSt->PostTransSt 525 Covered T2,T5,T7


Summary for FSM :: lc_state_q
TotalCoveredPercent
States 21 5 23.81 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_state_q
statesLine No.CoveredTests
LcStDev 92 Not Covered
LcStProd 93 Not Covered
LcStProdEnd 94 Not Covered
LcStRaw 295 Covered T1,T2,T14
LcStRma 333 Not Covered
LcStScrap 284 Not Covered
LcStTestLocked0 333 Covered T13,T5,T7
LcStTestLocked1 333 Covered T2,T4,T7
LcStTestLocked2 333 Not Covered
LcStTestLocked3 333 Not Covered
LcStTestLocked4 333 Not Covered
LcStTestLocked5 333 Not Covered
LcStTestLocked6 333 Not Covered
LcStTestUnlocked0 301 Covered T1,T4,T14
LcStTestUnlocked1 333 Covered T17,T12,T20
LcStTestUnlocked2 333 Not Covered
LcStTestUnlocked3 333 Not Covered
LcStTestUnlocked4 333 Not Covered
LcStTestUnlocked5 333 Not Covered
LcStTestUnlocked6 333 Not Covered
LcStTestUnlocked7 333 Not Covered


transitionsLine No.CoveredTests
LcStRaw->LcStTestUnlocked0 301 Covered T1,T14,T17


Summary for FSM :: lc_cnt_q
TotalCoveredPercent
States 25 1 4.00 (Not included in score)
Transitions 1 0 0.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_cnt_q
statesLine No.CoveredTests
LcCnt0 305 Covered T34,T41,T35
LcCnt1 305 Not Covered
LcCnt10 112 Not Covered
LcCnt11 113 Not Covered
LcCnt12 114 Not Covered
LcCnt13 115 Not Covered
LcCnt14 116 Not Covered
LcCnt15 117 Not Covered
LcCnt16 118 Not Covered
LcCnt17 119 Not Covered
LcCnt18 120 Not Covered
LcCnt19 121 Not Covered
LcCnt2 104 Not Covered
LcCnt20 122 Not Covered
LcCnt21 123 Not Covered
LcCnt22 124 Not Covered
LcCnt23 125 Not Covered
LcCnt24 126 Not Covered
LcCnt3 105 Not Covered
LcCnt4 106 Not Covered
LcCnt5 107 Not Covered
LcCnt6 108 Not Covered
LcCnt7 109 Not Covered
LcCnt8 110 Not Covered
LcCnt9 111 Not Covered


transitionsLine No.CoveredTests
LcCnt0->LcCnt1 305 Not Covered



Branch Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Line No.TotalCoveredPercent
Branches 73 72 98.63
TERNARY 732 1 1 100.00
TERNARY 736 1 1 100.00
CASE 242 44 43 97.73
IF 567 3 3 100.00
IF 584 2 2 100.00
IF 585 2 2 100.00
IF 586 2 2 100.00
IF 589 2 2 100.00
IF 684 2 2 100.00
IF 687 2 2 100.00
IF 691 2 2 100.00
IF 694 2 2 100.00
IF 698 2 2 100.00
IF 701 2 2 100.00
IF 882 2 2 100.00
IF 608 2 2 100.00


732 assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates && 733 int'(trans_target_i[0]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


736 assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates && 737 int'(trans_target_i[1]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


242 unique case (fsm_state_q) -1- 243 /////////////////////////////////////////////////////////////////// 244 // Wait here until OTP has initialized and the 245 // power manager sends an initialization request. 246 ResetSt: begin 247 init_done_o = 1'b0; 248 lc_clk_byp_req = Off; 249 lc_flash_rma_req = Off; 250 lc_check_byp_en = Off; 251 if (init_req_i && lc_state_valid_q) begin -2- 252 fsm_state_d = IdleSt; ==> 253 // Fetch LC state vector from OTP. 254 lc_state_d = lc_state_i; 255 lc_cnt_d = lc_cnt_i; 256 end MISSING_ELSE ==> 257 end 258 /////////////////////////////////////////////////////////////////// 259 // Idle state where life cycle control signals are broadcast. 260 // Note that the life cycle signals are decoded and broadcast 261 // in the lc_ctrl_signal_decode submodule. 262 IdleSt: begin 263 idle_o = 1'b1; 264 265 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 266 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 267 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 268 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 269 // --------------------------------------------------------------- 270 // Note that if the volatile unlock mechanism is available, 271 // we have to stop fetching the OTP value after a volatile unlock has succeeded. 272 // Otherwise we unconditionally fetch from OTP in this state. 273 if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) || -3- 274 prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin 275 // Continuously fetch LC state vector from OTP. 276 // The state is locked in once a transition is started. 277 lc_state_d = lc_state_i; ==> 278 lc_cnt_d = lc_cnt_i; 279 end MISSING_ELSE ==> 280 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 281 282 // If the life cycle state is SCRAP, we move the FSM into a terminal 283 // SCRAP state that does not allow any transitions to be initiated anymore. 284 if (lc_state_q == LcStScrap) begin -4- 285 fsm_state_d = ScrapSt; ==> 286 287 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 288 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 289 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 290 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 291 // --------------------------------------------------------------- 292 // Only enter here if volatile RAW unlock is available and enabled. 293 end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin -5- 294 // We only allow transitions from RAW -> TEST_UNLOCKED0 295 if (lc_state_q == LcStRaw && -6- 296 trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} && 297 !trans_invalid_error_o) begin 298 // 128bit token check (without passing it through the KMAC) 299 if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin -7- 300 // We stay in Idle, but update the life cycle state register (volatile). 301 lc_state_d = LcStTestUnlocked0; 302 // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the 303 // register value is in sync with what has been programmed to OTP already (there may 304 // have been unsuccessul raw unlock attempts before that already incremented it). 305 lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q; -8- ==> (Excluded) ==> 306 // Re-sample the DFT straps in the pinmux. 307 // This signal will be delayed by several cycles so that the LC_CTRL signals 308 // have time to propagate. 309 set_strap_en_override = 1'b1; 310 // We have to remember that the transition was successful in order to correctly 311 // disable the continuos sampling of the life cycle state vector coming from OTP. 312 volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True; 313 // Indicate that the transition was successful. 314 trans_success_o = 1'b1; 315 end else begin 316 token_invalid_error_o = 1'b1; ==> (Excluded) Exclude Annotation: VC_COV_UNR 317 fsm_state_d = PostTransSt; 318 end 319 end else begin 320 // Transition invalid error is set by lc_ctrl_state_transition module. 321 fsm_state_d = PostTransSt; ==> 322 end 323 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 324 // Initiate a transition. This will first increment the 325 // life cycle counter before hashing and checking the token. 326 end else if (trans_cmd_i) begin -9- 327 fsm_state_d = ClkMuxSt; ==> 328 end MISSING_ELSE ==> 329 // If we are in a non-PROD life cycle state, steer the clock mux if requested. This 330 // action is available in IdleSt so that the mux can be steered without having to initiate 331 // a life cycle transition. If a transition is initiated however, the life cycle controller 332 // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding. 333 if (lc_state_q inside {LcStRaw, -10- 334 LcStTestLocked0, 335 LcStTestLocked1, 336 LcStTestLocked2, 337 LcStTestLocked3, 338 LcStTestLocked4, 339 LcStTestLocked5, 340 LcStTestLocked6, 341 LcStTestUnlocked0, 342 LcStTestUnlocked1, 343 LcStTestUnlocked2, 344 LcStTestUnlocked3, 345 LcStTestUnlocked4, 346 LcStTestUnlocked5, 347 LcStTestUnlocked6, 348 LcStTestUnlocked7, 349 LcStRma}) begin 350 if (use_ext_clock_i) begin -11- 351 lc_clk_byp_req = On; ==> 352 end MISSING_ELSE ==> 353 end MISSING_ELSE ==> 354 end 355 /////////////////////////////////////////////////////////////////// 356 // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible 357 // to switch to an external clock source. If the bypass request is 358 // asserted, we have to wait until the clock mux and clock manager 359 // have switched the mux and the clock divider. Also, we disable the 360 // life cycle partition checks at this point since we are going to 361 // alter the contents in the OTP memory array, which could lead to 362 // spurious escalations. 363 ClkMuxSt: begin 364 lc_check_byp_en = On; 365 if (lc_state_q inside {LcStRaw, -12- 366 LcStTestLocked0, 367 LcStTestLocked1, 368 LcStTestLocked2, 369 LcStTestLocked3, 370 LcStTestLocked4, 371 LcStTestLocked5, 372 LcStTestLocked6, 373 LcStTestUnlocked0, 374 LcStTestUnlocked1, 375 LcStTestUnlocked2, 376 LcStTestUnlocked3, 377 LcStTestUnlocked4, 378 LcStTestUnlocked5, 379 LcStTestUnlocked6, 380 LcStTestUnlocked7, 381 LcStRma}) begin 382 if (use_ext_clock_i) begin -13- 383 lc_clk_byp_req = On; 384 if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin -14- 385 fsm_state_d = CntIncrSt; ==> 386 end MISSING_ELSE ==> 387 end else begin 388 fsm_state_d = CntIncrSt; ==> 389 end 390 end else begin 391 fsm_state_d = CntIncrSt; ==> 392 end 393 end 394 /////////////////////////////////////////////////////////////////// 395 // This increments the life cycle counter state. 396 CntIncrSt: begin 397 // If the counter has reached the maximum, bail out. 398 if (trans_cnt_oflw_error_o) begin -15- 399 fsm_state_d = PostTransSt; ==> 400 end else begin 401 fsm_state_d = CntProgSt; ==> 402 end 403 end 404 /////////////////////////////////////////////////////////////////// 405 // This programs the life cycle counter state. 406 CntProgSt: begin 407 otp_prog_req_o = 1'b1; 408 409 // If the clock mux has been steered, double check that this is still the case. 410 // Otherwise abort the transition operation. 411 if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin -16- 412 fsm_state_d = PostTransSt; ==> 413 otp_prog_error_o = 1'b1; 414 end MISSING_ELSE ==> 415 416 // Check return value and abort if there 417 // was an error. 418 if (otp_prog_ack_i) begin -17- 419 if (otp_prog_err_i) begin -18- 420 fsm_state_d = PostTransSt; ==> 421 otp_prog_error_o = 1'b1; 422 end else begin 423 fsm_state_d = TransCheckSt; ==> 424 end 425 end MISSING_ELSE ==> 426 end 427 /////////////////////////////////////////////////////////////////// 428 // First transition valid check. This will be repeated several 429 // times below. 430 TransCheckSt: begin 431 if (trans_invalid_error_o) begin -19- 432 fsm_state_d = PostTransSt; ==> 433 end else begin 434 fsm_state_d = TokenHashSt; ==> 435 end 436 end 437 /////////////////////////////////////////////////////////////////// 438 // Hash and compare the token, no matter whether this transition 439 // is conditional or not. Unconditional transitions just use a known 440 // all-zero token value. That way, we always compare a hashed token 441 // and guarantee that no other control flow path exists that could 442 // bypass the token check. 443 // SEC_CM: TOKEN.DIGEST 444 TokenHashSt: begin 445 token_hash_req_o = 1'b1; 446 if (token_hash_ack_i) begin -20- 447 // This is the first comparison. 448 // The token is compared two more times further below. 449 // Also note that conditional transitions won't be possible if the 450 // corresponding token is not valid. This only applies to tokens stored in 451 // OTP. I.e., these tokens first have to be provisioned, before they can be used. 452 if (hashed_token_i == hashed_token_mux && -21- 453 !token_hash_err_i && 454 &hashed_token_valid_mux) begin 455 fsm_state_d = FlashRmaSt; ==> 456 end else begin 457 fsm_state_d = PostTransSt; ==> 458 token_invalid_error_o = 1'b1; 459 end 460 end MISSING_ELSE ==> 461 end 462 /////////////////////////////////////////////////////////////////// 463 // Flash RMA state. Note that we check the flash response again 464 // two times later below. 465 FlashRmaSt: begin 466 if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin -22- 467 lc_flash_rma_req = On; 468 if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin -23- 469 fsm_state_d = TokenCheck0St; ==> 470 end MISSING_ELSE ==> 471 end else begin 472 fsm_state_d = TokenCheck0St; ==> 473 end 474 end 475 /////////////////////////////////////////////////////////////////// 476 // Check again two times whether this transition and the hashed 477 // token are valid. Also check again whether the flash RMA 478 // response is valid. 479 // SEC_CM: TOKEN.DIGEST 480 TokenCheck0St, 481 TokenCheck1St: begin 482 if (trans_invalid_error_o) begin -24- 483 fsm_state_d = PostTransSt; ==> 484 end else begin 485 // If any of these RMA are conditions are true, 486 // all of them must be true at the same time. 487 if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -25- 488 lc_tx_test_false_strict(lc_flash_rma_req_o) && 489 lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) || 490 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 491 lc_tx_test_true_strict(lc_flash_rma_req_o) && 492 lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin 493 if (hashed_token_i == hashed_token_mux && -26- 494 !token_hash_err_i && 495 &hashed_token_valid_mux) begin 496 if (fsm_state_q == TokenCheck1St) begin -27- 497 // This is the only way we can get into the 498 // programming state. 499 fsm_state_d = TransProgSt; ==> 500 end else begin 501 fsm_state_d = TokenCheck1St; ==> 502 end 503 end else begin 504 fsm_state_d = PostTransSt; ==> 505 token_invalid_error_o = 1'b1; 506 end 507 // The flash RMA process failed. 508 end else begin 509 fsm_state_d = PostTransSt; ==> 510 flash_rma_error_o = 1'b1; 511 end 512 end 513 end 514 /////////////////////////////////////////////////////////////////// 515 // Initiate OTP transaction. Note that the concurrent 516 // LC state check is continuously checking whether the 517 // new LC state remains valid. Once the ack returns we are 518 // done with the transition and can go into the terminal PosTransSt. 519 TransProgSt: begin 520 otp_prog_req_o = 1'b1; 521 522 // If the clock mux has been steered, double check that this is still the case. 523 // Otherwise abort the transition operation. 524 if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin -28- 525 fsm_state_d = PostTransSt; ==> 526 otp_prog_error_o = 1'b1; 527 // Also double check that the RMA signals remain stable. 528 // Otherwise abort the transition operation. 529 end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -29- 530 (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) || 531 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 532 (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin 533 fsm_state_d = PostTransSt; ==> 534 flash_rma_error_o = 1'b1; 535 end else if (otp_prog_ack_i) begin -30- 536 fsm_state_d = PostTransSt; ==> 537 otp_prog_error_o = otp_prog_err_i; 538 trans_success_o = ~otp_prog_err_i; 539 end MISSING_ELSE ==> 540 end 541 /////////////////////////////////////////////////////////////////// 542 // Terminal states. 543 ScrapSt, 544 PostTransSt: ; ==> 545 546 547 EscalateSt: begin 548 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 549 token_hash_req_chk_o = 1'b0; ==> 550 end 551 552 InvalidSt: begin 553 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 554 token_hash_req_chk_o = 1'b0; ==> 555 state_invalid_error_o = 1'b1; 556 end 557 /////////////////////////////////////////////////////////////////// 558 // Go to terminal error state if we get here. 559 default: begin 560 fsm_state_d = InvalidSt; ==>

Branches:
-1--2--3--4--5--6--7--8--9--10--11--12--13--14--15--16--17--18--19--20--21--22--23--24--25--26--27--28--29--30-StatusTestsExclude Annotation
ResetSt 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
ResetSt 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T5,T7,T12
IdleSt - - 0 1 1 1 1 - - - - - - - - - - - - - - - - - - - - - - Excluded T54 VC_COV_UNR
IdleSt - - 0 1 1 1 0 - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 0 1 1 0 - - - - - - - - - - - - - - - - - - - - - - - Excluded VC_COV_UNR
IdleSt - - 0 1 0 - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T14,T33
IdleSt - - 0 0 - - - 1 - - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T5
IdleSt - - 0 0 - - - 0 - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 1 1 - - - - - - - - - - - - - - - - - - - Covered T2,T5,T7
IdleSt - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 0 - - - - - - - - - - - - - - - - - - - - Covered T5,T7,T8
ClkMuxSt - - - - - - - - - - 1 1 1 - - - - - - - - - - - - - - - - Covered T2,T5,T7
ClkMuxSt - - - - - - - - - - 1 1 0 - - - - - - - - - - - - - - - - Covered T67,T68,T69
ClkMuxSt - - - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - Covered T2,T4,T5
ClkMuxSt - - - - - - - - - - 0 - - - - - - - - - - - - - - - - - - Covered T5,T7,T17
CntIncrSt - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - - Covered T31,T37,T46
CntIncrSt - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - Covered T31,T37,T43
CntProgSt - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - - 1 1 - - - - - - - - - - - - Covered T4,T16,T11
CntProgSt - - - - - - - - - - - - - - - 1 0 - - - - - - - - - - - - Covered T2,T5,T7
CntProgSt - - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - Covered T2,T4,T5
TransCheckSt - - - - - - - - - - - - - - - - - 1 - - - - - - - - - - - Covered T17,T31,T37
TransCheckSt - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - - Covered T2,T5,T7
TokenHashSt - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - - - Covered T2,T5,T7
TokenHashSt - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - - - Covered T17,T31,T37
TokenHashSt - - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - Covered T2,T5,T7
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - Covered T5,T7,T17
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - Covered T5,T7,T17
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 0 - - - - - - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 1 - - - - - - Covered T17,T44,T49
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 1 - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 0 - - - Covered T2,T5,T7
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 0 - - - - Not Covered
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 0 - - - - - Covered T31,T37,T43
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - - Covered T42,T50,T51
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 1 - Covered T46,T52,T53
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 1 Covered T2,T5,T7
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 0 Covered T2,T5,T7
ScrapSt PostTransSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T4
EscalateSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T4,T16,T18
InvalidSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T18,T32,T43
default - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T18,T59,T23


567 if (esc_scrap_state0_i || esc_scrap_state1_i) begin -1- 568 fsm_state_d = EscalateSt; ==> 569 // SEC_CM: MAIN.FSM.LOCAL_ESC 570 // If at any time the life cycle state encoding or any other FSM state within this module 571 // is not valid, we jump into the terminal error state right away. 572 // Note that state_invalid_error is a multibit error signal 573 // with different error sources - need to reduce this to one bit here. 574 end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin -2- 575 fsm_state_d = InvalidSt; ==> 576 state_invalid_error_o = 1'b1; 577 end MISSING_ELSE ==>

Branches:
-1--2-StatusTests
1 - Covered T4,T16,T18
0 1 Covered T18,T32,T43
0 0 Covered T1,T2,T3


584 `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


585 `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


586 `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


589 if (!rst_ni) begin -1- 590 lc_state_valid_q <= 1'b0; ==> 591 end else begin 592 lc_state_valid_q <= lc_state_valid_d; ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


684 if (lc_tx_test_true_strict(test_tokens_valid[0])) begin -1- 685 hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower; ==> 686 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


687 if (lc_tx_test_true_strict(test_tokens_valid[1])) begin -1- 688 hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper; ==> 689 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


691 if (lc_tx_test_true_strict(test_tokens_valid[2])) begin -1- 692 hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower; ==> 693 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


694 if (lc_tx_test_true_strict(test_tokens_valid[3])) begin -1- 695 hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper; ==> 696 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


698 if (lc_tx_test_true_strict(rma_token_valid[0])) begin -1- 699 hashed_tokens_lower[RmaTokenIdx] = rma_token_lower; ==> 700 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


701 if (lc_tx_test_true_strict(rma_token_valid[1])) begin -1- 702 hashed_tokens_upper[RmaTokenIdx] = rma_token_upper; ==> 703 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T43,T39,T41


882 `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


608 if(!rst_ni) begin -1- 609 strap_en_override_q <= '0; ==> 610 volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False; 611 end else begin 612 strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0], ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


Assert Coverage for Instance : tb.dut.u_lc_ctrl_fsm
TotalAttemptedPercentSucceeded/MatchedPercent
Assertions 15 15 100.00 15 100.00
Cover properties 0 0 0
Cover sequences 0 0 0
Total 15 15 100.00 15 100.00




Assertion Details

NameAttemptsReal SuccessesFailuresIncomplete
ClkBypStaysOnOnceAsserted_A 56170707 2934241 0 78
EscStaysOnOnceAsserted_A 56170707 11634718 0 9
FlashRmaStaysOnOnceAsserted_A 56170707 386650 0 6
FsmStateKnown_A 56170707 52972742 0 0
LcCntKnown_A 56170707 52972742 0 0
LcStateKnown_A 56170707 52972742 0 0
NoClkBypInProdStates_A 56170707 7533505 0 0
SecCmCFILinear_A 56170707 253017 0 2058
SecCmCFITerminal0_A 56170707 8365339 0 0
SecCmCFITerminal1_A 56170707 43451 0 0
SecCmCFITerminal2_A 56170707 4620346 0 0
SecCmCFITerminal3_A 56170707 6984159 0 0
u_cnt_regs_A 51083150 48201328 0 0
u_fsm_state_regs_A 54617690 51536178 0 0
u_state_regs_A 52557329 49677892 0 0


ClkBypStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 2934241 0 78
T2 2747 255 0 0
T3 929 0 0 0
T4 5329 0 0 0
T5 3525 138 0 0
T6 14684 0 0 0
T7 32034 4791 0 0
T9 0 10223 0 1
T10 0 17234 0 1
T12 0 1996 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T22 0 25443 0 1
T24 0 0 0 1
T25 0 0 0 1
T45 0 8104 0 1
T68 0 0 0 1
T69 0 0 0 1
T70 0 3163 0 0
T71 0 1517 0 0
T72 0 0 0 1
T73 0 0 0 1

EscStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 11634718 0 9
T4 5329 1599 0 0
T5 3525 23 0 0
T6 14684 0 0 0
T7 32034 1050 0 0
T8 27855 0 0 0
T11 0 2583 0 0
T12 0 375 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 1711 0 0
T17 18596 0 0 0
T18 0 2124 0 0
T20 0 17268 0 0
T31 0 950 0 0
T32 0 1374 0 0
T74 0 0 0 1
T75 0 0 0 1
T76 0 0 0 1
T77 0 0 0 1
T78 0 0 0 1
T79 0 0 0 1
T80 0 0 0 1
T81 0 0 0 1
T82 0 0 0 1

FlashRmaStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 386650 0 6
T5 3525 112 0 0
T7 32034 433 0 0
T8 27855 0 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 157 0 0
T18 7436 0 0 0
T19 18233 0 0 0
T20 0 596 0 0
T37 0 184 0 0
T43 0 738 0 0
T44 0 566 0 0
T60 0 352 0 0
T83 0 1227 0 1
T84 0 63 0 0
T85 0 0 0 1
T86 0 0 0 1
T87 0 0 0 1
T88 0 0 0 1
T89 0 0 0 1

FsmStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

LcCntKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

LcStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 52972742 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

NoClkBypInProdStates_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 7533505 0 0
T5 3525 1292 0 0
T7 32034 2948 0 0
T8 27855 27742 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 0 1299 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 1595 0 0
T18 7436 407 0 0
T19 18233 0 0 0
T20 0 2479 0 0
T31 0 3628 0 0
T32 0 497 0 0
T90 0 878 0 0

SecCmCFILinear_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 253017 0 2058
T2 2747 44 0 11
T3 929 0 0 1
T4 5329 78 0 1
T5 3525 101 0 11
T6 14684 0 0 1
T7 32034 103 0 11
T11 0 24 0 0
T12 0 112 0 0
T13 2136 0 0 1
T14 992 0 0 2
T15 1401 0 0 1
T16 6181 78 0 1
T17 0 400 0 0
T18 0 73 0 0
T20 0 602 0 0

SecCmCFITerminal0_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 8365339 0 0
T1 1326 1076 0 0
T2 2747 1302 0 0
T3 929 0 0 0
T4 5329 802 0 0
T5 3525 675 0 0
T6 14684 0 0 0
T7 32034 3764 0 0
T11 0 3503 0 0
T13 2136 0 0 0
T14 992 721 0 0
T15 1401 0 0 0
T16 0 1033 0 0
T17 0 8469 0 0
T18 0 1373 0 0

SecCmCFITerminal1_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 43451 0 0
T5 3525 23 0 0
T7 32034 1050 0 0
T8 27855 0 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 0 375 0 0
T15 1401 0 0 0
T16 6181 0 0 0
T17 18596 0 0 0
T18 7436 0 0 0
T19 18233 0 0 0
T34 0 8 0 0
T60 0 4 0 0
T64 0 432 0 0
T65 0 6 0 0
T66 0 6 0 0
T70 0 354 0 0
T74 0 806 0 0

SecCmCFITerminal2_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 4620346 0 0
T4 5329 1612 0 0
T5 3525 0 0 0
T6 14684 0 0 0
T7 32034 0 0 0
T8 27855 0 0 0
T11 0 2587 0 0
T13 2136 0 0 0
T14 992 0 0 0
T15 1401 0 0 0
T16 6181 1724 0 0
T17 18596 0 0 0
T18 0 1342 0 0
T20 0 17355 0 0
T21 0 4235 0 0
T31 0 957 0 0
T32 0 830 0 0
T37 0 1477 0 0
T43 0 4865 0 0

SecCmCFITerminal3_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56170707 6984159 0 0
T9 16281 0 0 0
T11 17994 0 0 0
T12 22343 0 0 0
T18 7436 785 0 0
T19 18233 0 0 0
T20 34947 0 0 0
T23 0 13204 0 0
T31 17235 0 0 0
T32 6429 546 0 0
T39 0 2363 0 0
T41 0 1148 0 0
T43 0 2162 0 0
T45 23410 0 0 0
T47 0 3709 0 0
T59 0 267 0 0
T90 955 0 0 0
T91 0 16118 0 0
T92 0 12990 0 0

u_cnt_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 51083150 48201328 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

u_fsm_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 54617690 51536178 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

u_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 52557329 49677892 0 0
T1 1326 1255 0 0
T2 2747 2346 0 0
T3 929 832 0 0
T4 5329 4264 0 0
T5 3525 2790 0 0
T6 14684 14606 0 0
T7 32034 31083 0 0
T13 2136 2085 0 0
T14 992 920 0 0
T15 1401 1302 0 0

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%