Unified Coverage Report :: Module :: lc_ctrl_fsm

Module : lc_ctrl_fsm

SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT
91.95	97.77	89.13		75.51	97.33	100.00

Source File(s) :
/workspaces/repo/scratch/os_regression_2024_09_08/lc_ctrl_volatile_unlock_enabled-sim-vcs/default/sim-vcs/../src/lowrisc_ip_lc_ctrl_0.1/rtl/lc_ctrl_fsm.sv

Module self-instances :

NAME	SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT
tb.dut.u_lc_ctrl_fsm	98.10	98.87	93.02		100.00	98.63	100.00

---

Module Instance : tb.dut.u_lc_ctrl_fsm

Instance :

SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT
98.10	98.87	93.02		100.00	98.63	100.00

Instance's subtree :

SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT
97.38	99.39	89.84		100.00	97.67	100.00

Parent :

SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT	NAME
93.47	100.00	83.10	99.89		100.00	84.38	dut

Subtrees :

NAME	SCORE	LINE	COND	TOGGLE	FSM	BRANCH	ASSERT
gen_syncs[0].u_prim_lc_sync_flash_rma_ack	100.00	100.00				100.00	100.00
gen_syncs[1].u_prim_lc_sync_flash_rma_ack	100.00	100.00				100.00	100.00
u_cnt_regs	100.00	100.00				100.00	100.00
u_fsm_state_regs	100.00	100.00				100.00	100.00
u_lc_ctrl_fsm_cov_if	96.97	100.00	90.91			100.00
u_lc_ctrl_signal_decode	98.86	99.21				97.37	100.00
u_lc_ctrl_state_decode	98.89	100.00	100.00			96.67
u_lc_ctrl_state_transition	89.97	98.48	75.00			96.43
u_prim_lc_sender_check_byp_en	100.00	100.00				100.00
u_prim_lc_sender_clk_byp_req	100.00	100.00				100.00
u_prim_lc_sender_flash_rma_req	100.00	100.00				100.00
u_prim_lc_sync_clk_byp_ack	100.00	100.00				100.00	100.00
u_prim_lc_sync_flash_rma_ack_buf	100.00	100.00					100.00
u_prim_lc_sync_rma_token_valid	100.00	100.00					100.00
u_prim_lc_sync_test_token_valid	100.00	100.00					100.00
u_state_regs	100.00	100.00				100.00	100.00

Line Coverage for Module : lc_ctrl_fsm

	Line No.	Total	Covered	Percent
TOTAL		179	175	97.77
CONT_ASSIGN	126	1	1	100.00
ALWAYS	146	3	3	100.00
CONT_ASSIGN	171	1	1	100.00
CONT_ASSIGN	178	1	1	100.00
CONT_ASSIGN	179	1	1	100.00
ALWAYS	204	114	110	96.49
ALWAYS	584	3	3	100.00
ALWAYS	585	3	3	100.00
ALWAYS	586	3	3	100.00
ALWAYS	589	3	3	100.00
ALWAYS	608	5	5	100.00
CONT_ASSIGN	619	1	1	100.00
CONT_ASSIGN	666	1	1	100.00
CONT_ASSIGN	667	1	1	100.00
CONT_ASSIGN	668	1	1	100.00
ALWAYS	677	15	15	100.00
ALWAYS	712	14	14	100.00
CONT_ASSIGN	732	1	1	100.00
CONT_ASSIGN	736	1	1	100.00
CONT_ASSIGN	740	1	1	100.00
CONT_ASSIGN	742	1	1	100.00
CONT_ASSIGN	749	1	1	100.00
ALWAYS	882	3	3	100.00

Click here to see the source line report.

---

Cond Coverage for Module : lc_ctrl_fsm

	Total	Covered	Percent
Conditions	92	82	89.13
Logical	92	82	89.13
Non-Logical	0	0
Event	0	0

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T3,T44,T45
1	1	Covered	T1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----

-1-	-2-	-3-	Status	Tests
-	0	1	Covered	T1,T2,T3
-	1	0	Covered	T1,T6,T13
-	1	1	Covered	T1,T13,T34

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------

-1-	-2-	-3-	Status	Tests
0	1	1	Not Covered
1	0	1	Not Covered
1	1	0	Not Covered
1	1	1	Covered	T1,T13,T34

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------

-1-	Status	Tests
0	Covered	T34,T35,T36
1	Covered	T1,T13,T34

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------

-1-	Status	Tests
0	Covered	T34,T35,T36
1	Covered	T1,T13,T34

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------

-1-	Status	Tests
0	Not Covered
1	Covered	T1,T13,T34

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------

-1-	Status	Tests
0	Covered	T1,T13,T34
1	Covered	T54,T55

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------

-1-	Status	Tests
0	Covered	T1,T13,T34
1	Covered	T54,T55

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T15,T42,T43

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------

-1-	-2-	-3-	Status	Tests
0	1	1	Covered	T14,T15,T17
1	0	1	Covered	T15,T43,T37
1	1	0	Not Covered
1	1	1	Covered	T1,T2,T3

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------

-1-	Status	Tests
0	Covered	T14,T15,T17
1	Covered	T1,T2,T3

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------

-1-	-2-	-3-	Status	Tests
0	1	1	Not Covered
1	0	1	Not Covered
1	1	0	Not Covered
1	1	1	Covered	T1,T2,T3

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------

-1-	Status	Tests
0	Not Covered
1	Covered	T1,T2,T3

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T47,T48,T49

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T50,T51,T56
1	0	Covered	T15,T50,T57

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------

-1-	-2-	Status	Tests
0	1	Covered	T2,T7,T16
1	0	Covered	T1,T2,T3
1	1	Covered	T15,T50,T57

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T15,T50,T57
1	0	Not Covered

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T15

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T2,T7,T16
1	1	Covered	T50,T51,T56

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------

-1-	-2-	Status	Tests
0	0	Covered	T2,T7,T16
0	1	Covered	T50,T51,T56
1	0	Covered	T58

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T3,T5,T15
1	0	Covered	T3,T4,T15

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T44,T23,T59
1	1	Covered	T3,T44,T45

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T44,T60,T23
1	0	Covered	T3,T44,T45

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------

-1-	Status	Tests
0	Covered	T3,T4,T5
1	Covered	T1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T1,T13,T34
1	0	Covered	T1,T13,T34

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)

-1-	Status	Tests
0	Unreachable	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------

-1-	-2-	Status	Tests
0	1	Unreachable	T1,T2,T3
1	0	Unreachable	T6,T22,T9
1	1	Covered	T1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)

-1-	Status	Tests
0	Unreachable	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------

-1-	-2-	Status	Tests
0	1	Unreachable	T1,T2,T3
1	0	Unreachable	T22,T9,T61
1	1	Covered	T1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T6,T17,T8
1	0	Covered	T15,T43,T34

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T6,T17,T8

---

FSM Coverage for Module : lc_ctrl_fsm

Summary for FSM :: fsm_state_q

	Total	Covered	Percent
States	15	15	100.00	(Not included in score)
Transitions	47	35	74.47
Sequences	0	0

State, Transition and Sequence Details for FSM :: fsm_state_q

---

states	Line No.	Covered	Tests
ClkMuxSt	327	Covered	T1,T2,T3
CntIncrSt	385	Covered	T1,T2,T3
CntProgSt	401	Covered	T1,T2,T3
EscalateSt	568	Covered	T3,T4,T5
FlashRmaSt	455	Covered	T1,T2,T3
IdleSt	252	Covered	T1,T2,T3
InvalidSt	575	Covered	T3,T44,T45
PostTransSt	317	Covered	T1,T2,T3
ResetSt	246	Covered	T1,T2,T3
ScrapSt	285	Covered	T2,T7,T16
TokenCheck0St	469	Covered	T1,T2,T3
TokenCheck1St	501	Covered	T1,T2,T3
TokenHashSt	434	Covered	T1,T2,T3
TransCheckSt	423	Covered	T1,T2,T3
TransProgSt	499	Covered	T1,T2,T3

transitions	Line No.	Covered	Tests
ClkMuxSt->CntIncrSt	385	Covered	T1,T2,T3
ClkMuxSt->EscalateSt	568	Covered	T62,T41,T63
ClkMuxSt->InvalidSt	575	Not Covered
CntIncrSt->CntProgSt	401	Covered	T1,T2,T3
CntIncrSt->EscalateSt	568	Covered	T18,T62,T64
CntIncrSt->InvalidSt	575	Not Covered
CntIncrSt->PostTransSt	399	Covered	T15,T43,T37
CntProgSt->EscalateSt	568	Covered	T18,T62,T41
CntProgSt->InvalidSt	575	Not Covered
CntProgSt->PostTransSt	412	Covered	T4,T5,T15
CntProgSt->TransCheckSt	423	Covered	T1,T2,T3
EscalateSt->InvalidSt	575	Not Covered
FlashRmaSt->EscalateSt	568	Covered	T18,T65,T64
FlashRmaSt->InvalidSt	575	Not Covered
FlashRmaSt->TokenCheck0St	469	Covered	T1,T2,T3
IdleSt->ClkMuxSt	327	Covered	T1,T2,T3
IdleSt->EscalateSt	568	Covered	T18,T62,T41
IdleSt->InvalidSt	575	Covered	T3,T44,T45
IdleSt->PostTransSt	317	Covered	T34,T35,T36
IdleSt->ScrapSt	285	Covered	T2,T7,T16
InvalidSt->EscalateSt	568	Covered	T3,T44,T45
PostTransSt->EscalateSt	568	Covered	T4,T5,T15
PostTransSt->InvalidSt	575	Not Covered
ResetSt->EscalateSt	568	Covered	T18,T62,T41
ResetSt->IdleSt	252	Covered	T1,T2,T3
ResetSt->InvalidSt	575	Not Covered
ScrapSt->EscalateSt	568	Covered	T18,T62,T65
ScrapSt->InvalidSt	575	Covered	T66,T67,T68
TokenCheck0St->EscalateSt	568	Covered	T18,T41,T65
TokenCheck0St->InvalidSt	575	Not Covered
TokenCheck0St->PostTransSt	483	Covered	T15,T17,T42
TokenCheck0St->TokenCheck1St	501	Covered	T1,T2,T3
TokenCheck1St->EscalateSt	568	Covered	T18,T69,T70
TokenCheck1St->InvalidSt	575	Not Covered
TokenCheck1St->PostTransSt	483	Covered	T15,T17,T42
TokenCheck1St->TransProgSt	499	Covered	T1,T2,T3
TokenHashSt->EscalateSt	568	Covered	T18,T62,T41
TokenHashSt->FlashRmaSt	455	Covered	T1,T2,T3
TokenHashSt->InvalidSt	575	Not Covered
TokenHashSt->PostTransSt	457	Covered	T14,T15,T17
TransCheckSt->EscalateSt	568	Covered	T62,T41,T65
TransCheckSt->InvalidSt	575	Not Covered
TransCheckSt->PostTransSt	432	Covered	T15,T17,T43
TransCheckSt->TokenHashSt	434	Covered	T1,T2,T3
TransProgSt->EscalateSt	568	Covered	T18,T62,T41
TransProgSt->InvalidSt	575	Not Covered
TransProgSt->PostTransSt	525	Covered	T1,T2,T3

Summary for FSM :: lc_state_q

	Total	Covered	Percent
States	21	12	57.14	(Not included in score)
Transitions	1	1	100.00
Sequences	0	0

State, Transition and Sequence Details for FSM :: lc_state_q

---

states	Line No.	Covered	Tests
LcStDev	92	Not Covered
LcStProd	93	Not Covered
LcStProdEnd	94	Not Covered
LcStRaw	295	Covered	T1,T2,T12
LcStRma	333	Not Covered
LcStScrap	284	Not Covered
LcStTestLocked0	333	Covered	T2,T3,T5
LcStTestLocked1	333	Covered	T2,T14,T15
LcStTestLocked2	333	Covered	T2,T7,T14
LcStTestLocked3	333	Covered	T2,T3,T11
LcStTestLocked4	333	Covered	T3,T7,T14
LcStTestLocked5	333	Not Covered
LcStTestLocked6	333	Not Covered
LcStTestUnlocked0	301	Covered	T1,T2,T13
LcStTestUnlocked1	333	Covered	T2,T3,T14
LcStTestUnlocked2	333	Covered	T7,T14,T15
LcStTestUnlocked3	333	Covered	T2,T7,T14
LcStTestUnlocked4	333	Covered	T2,T5,T14
LcStTestUnlocked5	333	Covered	T3,T7,T14
LcStTestUnlocked6	333	Not Covered
LcStTestUnlocked7	333	Not Covered

transitions	Line No.	Covered	Tests
LcStRaw->LcStTestUnlocked0	301	Covered	T1,T13,T14

Summary for FSM :: lc_cnt_q

	Total	Covered	Percent
States	25	9	36.00	(Not included in score)
Transitions	1	1	100.00
Sequences	0	0

State, Transition and Sequence Details for FSM :: lc_cnt_q

---

states	Line No.	Covered	Tests
LcCnt0	305	Covered	T15,T37,T38
LcCnt1	305	Covered	T2,T3,T7
LcCnt10	112	Not Covered
LcCnt11	113	Not Covered
LcCnt12	114	Not Covered
LcCnt13	115	Not Covered
LcCnt14	116	Not Covered
LcCnt15	117	Not Covered
LcCnt16	118	Not Covered
LcCnt17	119	Not Covered
LcCnt18	120	Not Covered
LcCnt19	121	Not Covered
LcCnt2	104	Covered	T2,T7,T14
LcCnt20	122	Not Covered
LcCnt21	123	Not Covered
LcCnt22	124	Not Covered
LcCnt23	125	Not Covered
LcCnt24	126	Not Covered
LcCnt3	105	Covered	T14,T15,T17
LcCnt4	106	Covered	T2,T3,T4
LcCnt5	107	Covered	T3,T15,T17
LcCnt6	108	Covered	T2,T11,T14
LcCnt7	109	Covered	T3,T7,T14
LcCnt8	110	Covered	T3,T14,T15
LcCnt9	111	Not Covered

transitions	Line No.	Covered	Tests
LcCnt0->LcCnt1	305	Covered	T15,T71,T72

---

Branch Coverage for Module : lc_ctrl_fsm

	Line No.	Total	Covered	Percent
Branches		75	73	97.33
TERNARY	732	1	1	100.00
TERNARY	736	1	1	100.00
CASE	242	46	44	95.65
IF	567	3	3	100.00
IF	584	2	2	100.00
IF	585	2	2	100.00
IF	586	2	2	100.00
IF	589	2	2	100.00
IF	684	2	2	100.00
IF	687	2	2	100.00
IF	691	2	2	100.00
IF	694	2	2	100.00
IF	698	2	2	100.00
IF	701	2	2	100.00
IF	882	2	2	100.00
IF	608	2	2	100.00

732          assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates &&
                                                                          
733                               int'(trans_target_i[0]) < NumLcStates) ?
                                                                         -1-  
                                                                         ==>  
                                                                         ==> (Unreachable)  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Unreachable	T1,T2,T3

736          assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates &&
                                                                          
737                               int'(trans_target_i[1]) < NumLcStates) ?
                                                                         -1-  
                                                                         ==>  
                                                                         ==> (Unreachable)  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Unreachable	T1,T2,T3

242            unique case (fsm_state_q)
                      -1-  
243              ///////////////////////////////////////////////////////////////////
244              // Wait here until OTP has initialized and the
245              // power manager sends an initialization request.
246              ResetSt: begin
247                init_done_o = 1'b0;
248                lc_clk_byp_req   = Off;
249                lc_flash_rma_req = Off;
250                lc_check_byp_en  = Off;
251                if (init_req_i && lc_state_valid_q) begin
                   -2-  
252                  fsm_state_d = IdleSt;
                     ==>
253                  // Fetch LC state vector from OTP.
254                  lc_state_d  = lc_state_i;
255                  lc_cnt_d    = lc_cnt_i;
256                end
                   MISSING_ELSE
                   ==>
257              end
258              ///////////////////////////////////////////////////////////////////
259              // Idle state where life cycle control signals are broadcast.
260              // Note that the life cycle signals are decoded and broadcast
261              // in the lc_ctrl_signal_decode submodule.
262              IdleSt: begin
263                idle_o = 1'b1;
264        
265                // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ----------
266                // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE
267                // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA
268                // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES.
269                // ---------------------------------------------------------------
270                // Note that if the volatile unlock mechanism is available,
271                // we have to stop fetching the OTP value after a volatile unlock has succeeded.
272                // Otherwise we unconditionally fetch from OTP in this state.
273                if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) ||
                   -3-  
274                    prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin
275                  // Continuously fetch LC state vector from OTP.
276                  // The state is locked in once a transition is started.
277                  lc_state_d    = lc_state_i;
                     ==>
278                  lc_cnt_d      = lc_cnt_i;
279                end
                   MISSING_ELSE
                   ==>
280                // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END -----------
281        
282                // If the life cycle state is SCRAP, we move the FSM into a terminal
283                // SCRAP state that does not allow any transitions to be initiated anymore.
284                if (lc_state_q == LcStScrap) begin
                   -4-  
285                  fsm_state_d = ScrapSt;
                     ==>
286        
287                // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ----------
288                // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE
289                // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA
290                // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES.
291                // ---------------------------------------------------------------
292                // Only enter here if volatile RAW unlock is available and enabled.
293                end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin
                            -5-  
294                  // We only allow transitions from RAW -> TEST_UNLOCKED0
295                  if (lc_state_q == LcStRaw &&
                     -6-  
296                      trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} &&
297                      !trans_invalid_error_o) begin
298                    // 128bit token check (without passing it through the KMAC)
299                    if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin
                       -7-  
300                      // We stay in Idle, but update the life cycle state register (volatile).
301                      lc_state_d = LcStTestUnlocked0;
302                      // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the
303                      // register value is in sync with what has been programmed to OTP already (there may
304                      // have been unsuccessul raw unlock attempts before that already incremented it).
305                      lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q;
                                                         -8-  
                                                         ==>  
                                                         ==>  
306                      // Re-sample the DFT straps in the pinmux.
307                      // This signal will be delayed by several cycles so that the LC_CTRL signals
308                      // have time to propagate.
309                      set_strap_en_override = 1'b1;
310                      // We have to remember that the transition was successful in order to correctly
311                      // disable the continuos sampling of the life cycle state vector coming from OTP.
312                      volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True;
313                      // Indicate that the transition was successful.
314                      trans_success_o = 1'b1;
315                    end else begin
316                      token_invalid_error_o = 1'b1;
                         ==>
317                      fsm_state_d = PostTransSt;
318                    end
319                  end else begin
320                    // Transition invalid error is set by lc_ctrl_state_transition module.
321                    fsm_state_d = PostTransSt;
                       ==>
322                  end
323                // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END -----------
324                // Initiate a transition. This will first increment the
325                // life cycle counter before hashing and checking the token.
326                end else if (trans_cmd_i) begin
                            -9-  
327                  fsm_state_d = ClkMuxSt;
                     ==>
328                end
                   MISSING_ELSE
                   ==>
329                // If we are in a non-PROD life cycle state, steer the clock mux if requested. This
330                // action is available in IdleSt so that the mux can be steered without having to initiate
331                // a life cycle transition. If a transition is initiated however, the life cycle controller
332                // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding.
333                if (lc_state_q inside {LcStRaw,
                   -10-  
334                                       LcStTestLocked0,
335                                       LcStTestLocked1,
336                                       LcStTestLocked2,
337                                       LcStTestLocked3,
338                                       LcStTestLocked4,
339                                       LcStTestLocked5,
340                                       LcStTestLocked6,
341                                       LcStTestUnlocked0,
342                                       LcStTestUnlocked1,
343                                       LcStTestUnlocked2,
344                                       LcStTestUnlocked3,
345                                       LcStTestUnlocked4,
346                                       LcStTestUnlocked5,
347                                       LcStTestUnlocked6,
348                                       LcStTestUnlocked7,
349                                       LcStRma}) begin
350                  if (use_ext_clock_i) begin
                     -11-  
351                    lc_clk_byp_req = On;
                       ==>
352                  end
                     MISSING_ELSE
                     ==>
353                end
                   MISSING_ELSE
                   ==>
354              end
355              ///////////////////////////////////////////////////////////////////
356              // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible
357              // to switch to an external clock source. If the bypass request is
358              // asserted, we have to wait until the clock mux and clock manager
359              // have switched the mux and the clock divider. Also, we disable the
360              // life cycle partition checks at this point since we are going to
361              // alter the contents in the OTP memory array, which could lead to
362              // spurious escalations.
363              ClkMuxSt: begin
364                lc_check_byp_en = On;
365                if (lc_state_q inside {LcStRaw,
                   -12-  
366                                       LcStTestLocked0,
367                                       LcStTestLocked1,
368                                       LcStTestLocked2,
369                                       LcStTestLocked3,
370                                       LcStTestLocked4,
371                                       LcStTestLocked5,
372                                       LcStTestLocked6,
373                                       LcStTestUnlocked0,
374                                       LcStTestUnlocked1,
375                                       LcStTestUnlocked2,
376                                       LcStTestUnlocked3,
377                                       LcStTestUnlocked4,
378                                       LcStTestUnlocked5,
379                                       LcStTestUnlocked6,
380                                       LcStTestUnlocked7,
381                                       LcStRma}) begin
382                  if (use_ext_clock_i) begin
                     -13-  
383                    lc_clk_byp_req = On;
384                    if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin
                       -14-  
385                      fsm_state_d = CntIncrSt;
                         ==>
386                    end
                       MISSING_ELSE
                       ==>
387                  end else begin
388                    fsm_state_d = CntIncrSt;
                       ==>
389                  end
390                end else begin
391                  fsm_state_d = CntIncrSt;
                     ==>
392                end
393              end
394              ///////////////////////////////////////////////////////////////////
395              // This increments the life cycle counter state.
396              CntIncrSt: begin
397                // If the counter has reached the maximum, bail out.
398                if (trans_cnt_oflw_error_o) begin
                   -15-  
399                  fsm_state_d = PostTransSt;
                     ==>
400                end else begin
401                  fsm_state_d = CntProgSt;
                     ==>
402                end
403              end
404              ///////////////////////////////////////////////////////////////////
405              // This programs the life cycle counter state.
406              CntProgSt: begin
407                otp_prog_req_o = 1'b1;
408        
409                // If the clock mux has been steered, double check that this is still the case.
410                // Otherwise abort the transition operation.
411                if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin
                   -16-  
412                    fsm_state_d = PostTransSt;
                       ==>
413                    otp_prog_error_o = 1'b1;
414                end
                   MISSING_ELSE
                   ==>
415        
416                // Check return value and abort if there
417                // was an error.
418                if (otp_prog_ack_i) begin
                   -17-  
419                  if (otp_prog_err_i) begin
                     -18-  
420                    fsm_state_d = PostTransSt;
                       ==>
421                    otp_prog_error_o = 1'b1;
422                  end else begin
423                    fsm_state_d = TransCheckSt;
                       ==>
424                  end
425                end
                   MISSING_ELSE
                   ==>
426              end
427              ///////////////////////////////////////////////////////////////////
428              // First transition valid check. This will be repeated several
429              // times below.
430              TransCheckSt: begin
431                if (trans_invalid_error_o) begin
                   -19-  
432                  fsm_state_d = PostTransSt;
                     ==>
433                end else begin
434                  fsm_state_d = TokenHashSt;
                     ==>
435                end
436              end
437              ///////////////////////////////////////////////////////////////////
438              // Hash and compare the token, no matter whether this transition
439              // is conditional or not. Unconditional transitions just use a known
440              // all-zero token value. That way, we always compare a hashed token
441              // and guarantee that no other control flow path exists that could
442              // bypass the token check.
443              // SEC_CM: TOKEN.DIGEST
444              TokenHashSt: begin
445                token_hash_req_o = 1'b1;
446                if (token_hash_ack_i) begin
                   -20-  
447                  // This is the first comparison.
448                  // The token is compared two more times further below.
449                  // Also note that conditional transitions won't be possible if the
450                  // corresponding token is not valid. This only applies to tokens stored in
451                  // OTP. I.e., these tokens first have to be provisioned, before they can be used.
452                  if (hashed_token_i == hashed_token_mux &&
                     -21-  
453                      !token_hash_err_i &&
454                      &hashed_token_valid_mux) begin
455                    fsm_state_d = FlashRmaSt;
                       ==>
456                  end else begin
457                    fsm_state_d = PostTransSt;
                       ==>
458                    token_invalid_error_o = 1'b1;
459                  end
460                end
                   MISSING_ELSE
                   ==>
461              end
462              ///////////////////////////////////////////////////////////////////
463              // Flash RMA state. Note that we check the flash response again
464              // two times later below.
465              FlashRmaSt: begin
466                if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin
                   -22-  
467                  lc_flash_rma_req = On;
468                  if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin
                     -23-  
469                    fsm_state_d = TokenCheck0St;
                       ==>
470                  end
                     MISSING_ELSE
                     ==>
471                end else begin
472                  fsm_state_d = TokenCheck0St;
                     ==>
473                end
474              end
475              ///////////////////////////////////////////////////////////////////
476              // Check again two times whether this transition and the hashed
477              // token are valid. Also check again whether the flash RMA
478              // response is valid.
479              // SEC_CM: TOKEN.DIGEST
480              TokenCheck0St,
481              TokenCheck1St: begin
482                if (trans_invalid_error_o) begin
                   -24-  
483                  fsm_state_d = PostTransSt;
                     ==>
484                end else begin
485                  // If any of these RMA are conditions are true,
486                  // all of them must be true at the same time.
487                  if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} &&
                     -25-  
488                       lc_tx_test_false_strict(lc_flash_rma_req_o) &&
489                       lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) ||
490                      (trans_target_i == {DecLcStateNumRep{DecLcStRma}} &&
491                       lc_tx_test_true_strict(lc_flash_rma_req_o) &&
492                       lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin
493                    if (hashed_token_i == hashed_token_mux &&
                       -26-  
494                        !token_hash_err_i &&
495                        &hashed_token_valid_mux) begin
496                      if (fsm_state_q == TokenCheck1St) begin
                         -27-  
497                        // This is the only way we can get into the
498                        // programming state.
499                        fsm_state_d = TransProgSt;
                           ==>
500                      end else begin
501                        fsm_state_d = TokenCheck1St;
                           ==>
502                      end
503                    end else begin
504                      fsm_state_d = PostTransSt;
                         ==>
505                      token_invalid_error_o = 1'b1;
506                    end
507                  // The flash RMA process failed.
508                  end else begin
509                      fsm_state_d = PostTransSt;
                         ==>
510                      flash_rma_error_o = 1'b1;
511                  end
512                end
513              end
514              ///////////////////////////////////////////////////////////////////
515              // Initiate OTP transaction. Note that the concurrent
516              // LC state check is continuously checking whether the
517              // new LC state remains valid. Once the ack returns we are
518              // done with the transition and can go into the terminal PosTransSt.
519              TransProgSt: begin
520                otp_prog_req_o = 1'b1;
521        
522                // If the clock mux has been steered, double check that this is still the case.
523                // Otherwise abort the transition operation.
524                if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin
                   -28-  
525                  fsm_state_d = PostTransSt;
                     ==>
526                  otp_prog_error_o = 1'b1;
527                // Also double check that the RMA signals remain stable.
528                // Otherwise abort the transition operation.
529                end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} &&
                            -29-  
530                              (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) ||
531                             (trans_target_i == {DecLcStateNumRep{DecLcStRma}} &&
532                              (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin
533                  fsm_state_d = PostTransSt;
                     ==>
534                  flash_rma_error_o = 1'b1;
535                end else if (otp_prog_ack_i) begin
                            -30-  
536                  fsm_state_d = PostTransSt;
                     ==>
537                  otp_prog_error_o = otp_prog_err_i;
538                  trans_success_o  = ~otp_prog_err_i;
539                end
                   MISSING_ELSE
                   ==>
540              end
541              ///////////////////////////////////////////////////////////////////
542              // Terminal states.
543              ScrapSt,
544              PostTransSt: ;
                 ==>
545        
546        
547              EscalateSt: begin
548                // During an escalation it is okay to de-assert token_hash_req without receivng ACK.
549                token_hash_req_chk_o = 1'b0;
                   ==>
550              end
551        
552              InvalidSt: begin
553                // During an escalation it is okay to de-assert token_hash_req without receivng ACK.
554                token_hash_req_chk_o = 1'b0;
                   ==>
555                state_invalid_error_o = 1'b1;
556              end
557              ///////////////////////////////////////////////////////////////////
558              // Go to terminal error state if we get here.
559              default: begin
560                fsm_state_d = InvalidSt;
                   ==>

Branches:

-1-	-2-	-3-	-4-	-5-	-6-	-7-	-8-	-9-	-10-	-11-	-12-	-13-	-14-	-15-	-16-	-17-	-18-	-19-	-20-	-21-	-22-	-23-	-24-	-25-	-26-	-27-	-28-	-29-	-30-	Status	Tests
ResetSt	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
ResetSt	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T13,T34
IdleSt	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T7,T16
IdleSt	-	-	0	1	1	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T54,T55
IdleSt	-	-	0	1	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T13,T34
IdleSt	-	-	0	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Not Covered
IdleSt	-	-	0	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T34,T35,T36
IdleSt	-	-	0	0	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	0	0	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T6
IdleSt	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T3,T4
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T13
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T16,T50,T73
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T3,T5
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T4,T14
CntIncrSt	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T43,T37
CntIncrSt	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T42,T43
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T4,T5,T33
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TransCheckSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T17,T43
TransCheckSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	Covered	T14,T15,T17
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	Covered	T2,T7,T16
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	Covered	T2,T7,T16
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	Covered	T17,T40,T46
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	1	1	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	1	0	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	0	-	-	-	-	Not Covered
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	-	-	-	-	-	Covered	T15,T42,T43
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	Covered	T47,T48,T49
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	-	Covered	T15,T50,T51
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	1	Covered	T1,T2,T3
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	0	Covered	T1,T2,T3
ScrapSt PostTransSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
EscalateSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T4,T5
InvalidSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T44,T45
default	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T44,T60

567            if (esc_scrap_state0_i || esc_scrap_state1_i) begin
               -1-  
568              fsm_state_d = EscalateSt;
                 ==>
569            // SEC_CM: MAIN.FSM.LOCAL_ESC
570            // If at any time the life cycle state encoding or any other FSM state within this module
571            // is not valid, we jump into the terminal error state right away.
572            // Note that state_invalid_error is a multibit error signal
573            // with different error sources - need to reduce this to one bit here.
574            end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin
                        -2-                                  
575              fsm_state_d = InvalidSt;
                 ==>
576              state_invalid_error_o = 1'b1;
577            end
               MISSING_ELSE
               ==>

Branches:

-1-	-2-	Status	Tests
1	-	Covered	T3,T4,T5
0	1	Covered	T3,T44,T45
0	0	Covered	T1,T2,T3

584          `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt)
             -1-                                                                                       
             ==>                                                                                       
             ==>                                                                                       

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

585          `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap)
             -1-                                                                                  
             ==>                                                                                  
             ==>                                                                                  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

586          `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24)
             -1-                                                                        
             ==>                                                                        
             ==>                                                                        

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

589            if (!rst_ni) begin
               -1-  
590              lc_state_valid_q <= 1'b0;
                 ==>
591            end else begin
592              lc_state_valid_q <= lc_state_valid_d;
                 ==>

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

684            if (lc_tx_test_true_strict(test_tokens_valid[0])) begin
               -1-  
685              hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower;
                 ==>
686            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

687            if (lc_tx_test_true_strict(test_tokens_valid[1])) begin
               -1-  
688              hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper;
                 ==>
689            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

691            if (lc_tx_test_true_strict(test_tokens_valid[2])) begin
               -1-  
692              hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower;
                 ==>
693            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

694            if (lc_tx_test_true_strict(test_tokens_valid[3])) begin
               -1-  
695              hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper;
                 ==>
696            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

698            if (lc_tx_test_true_strict(rma_token_valid[0])) begin
               -1-  
699              hashed_tokens_lower[RmaTokenIdx] = rma_token_lower;
                 ==>
700            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

701            if (lc_tx_test_true_strict(rma_token_valid[1])) begin
               -1-  
702              hashed_tokens_upper[RmaTokenIdx] = rma_token_upper;
                 ==>
703            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

882          `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e)
             -1-                                                                  
             ==>                                                                  
             ==>                                                                  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

608              if(!rst_ni) begin
                 -1-  
609                strap_en_override_q <= '0;
                   ==>
610                volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False;
611              end else begin
612                strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0],
                   ==>

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

---

Assert Coverage for Module : lc_ctrl_fsm

	Total	Attempted	Percent	Succeeded/Matched	Percent
Assertions	15	15	100.00	15	100.00
Cover properties	0	0		0
Cover sequences	0	0		0
Total	15	15	100.00	15	100.00

---

Assertion Details

Name	Attempts	Real Successes	Failures	Incomplete
ClkBypStaysOnOnceAsserted_A	61303763	3226346	0	80
EscStaysOnOnceAsserted_A	61303763	11530559	0	7
FlashRmaStaysOnOnceAsserted_A	61303763	482893	0	15
FsmStateKnown_A	61303763	58057221	0	0
LcCntKnown_A	61303763	58057221	0	0
LcStateKnown_A	61303763	58057221	0	0
NoClkBypInProdStates_A	61303763	7631273	0	0
SecCmCFILinear_A	61303763	258692	0	2093
SecCmCFITerminal0_A	61303763	9860089	0	0
SecCmCFITerminal1_A	61303763	55717	0	0
SecCmCFITerminal2_A	61303763	4515929	0	0
SecCmCFITerminal3_A	61303763	6971851	0	0
u_cnt_regs_A	56346061	53413852	0	0
u_fsm_state_regs_A	59768920	56639106	0	0
u_state_regs_A	57701570	54769420	0	0

ClkBypStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	3226346	0	80
T1	1103	850	0	1
T2	7663	783	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	12258	0	1
T7	26437	4986	0	1
T8	0	2221	0	1
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	1347	0	1
T16	0	1490	0	0
T22	0	10314	0	1
T32	0	11961	0	1
T74	0	10648	0	0
T75	0	0	0	1
T76	0	0	0	1
T77	0	0	0	1

EscStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	11530559	0	7
T2	7663	40	0	0
T3	13655	1017	0	0
T4	1433	139	0	0
T5	6685	531	0	0
T6	14558	0	0	0
T7	26437	376	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	0	965	0	0
T16	0	14	0	0
T18	0	17960	0	0
T33	0	2217	0	0
T74	0	0	0	1
T78	0	894	0	1
T79	0	0	0	1
T80	0	0	0	1
T81	0	0	0	1
T82	0	0	0	1
T83	0	0	0	1

FlashRmaStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	482893	0	15
T2	7663	55	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	175	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T16	0	992	0	0
T17	0	206	0	0
T18	0	1519	0	0
T19	0	664	0	0
T24	0	0	0	1
T32	0	850	0	1
T42	0	1511	0	0
T43	0	461	0	0
T45	0	620	0	0
T84	0	0	0	1
T85	0	0	0	1
T86	0	0	0	1
T87	0	0	0	1
T88	0	0	0	1
T89	0	0	0	1
T90	0	0	0	1
T91	0	0	0	1

FsmStateKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

LcCntKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

LcStateKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

NoClkBypInProdStates_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	7631273	0	0
T2	7663	857	0	0
T3	13655	0	0	0
T4	1433	477	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	3025	0	0
T15	0	2047	0	0
T16	0	1020	0	0
T17	0	1787	0	0
T18	0	5289	0	0
T32	0	3557	0	0
T33	0	1426	0	0
T44	0	1228	0	0

SecCmCFILinear_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	258692	0	2093
T2	7663	189	0	11
T3	13655	109	0	1
T4	1433	6	0	1
T5	6685	6	0	1
T6	14558	0	0	1
T7	26437	156	0	11
T11	971	0	0	1
T12	1322	0	0	1
T13	1549	0	0	11
T14	32104	392	0	1
T15	0	561	0	0
T16	0	123	0	0
T17	0	476	0	0
T18	0	606	0	0

SecCmCFITerminal0_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	9860089	0	0
T1	1103	735	0	0
T2	7663	968	0	0
T3	13655	2218	0	0
T4	1433	59	0	0
T5	6685	568	0	0
T6	14558	0	0	0
T7	26437	2874	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	1125	0	0
T14	0	9625	0	0
T15	0	13453	0	0
T16	0	1151	0	0

SecCmCFITerminal1_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	55717	0	0
T2	7663	40	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	376	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T16	0	14	0	0
T18	0	4	0	0
T60	0	215	0	0
T62	0	12	0	0
T74	0	1245	0	0
T78	0	894	0	0
T92	0	60	0	0
T93	0	898	0	0

SecCmCFITerminal2_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	4515929	0	0
T3	13655	630	0	0
T4	1433	140	0	0
T5	6685	532	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	34202	972	0	0
T18	0	18041	0	0
T33	0	2233	0	0
T42	0	4513	0	0
T43	0	1399	0	0
T44	0	5218	0	0
T45	0	376	0	0

SecCmCFITerminal3_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	6971851	0	0
T3	13655	388	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	34202	0	0	0
T21	0	12698	0	0
T23	0	9730	0	0
T42	0	2627	0	0
T44	0	3133	0	0
T45	0	144	0	0
T52	0	3595	0	0
T59	0	5696	0	0
T60	0	2977	0	0
T94	0	323	0	0

u_cnt_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	56346061	53413852	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13207	12268	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

u_fsm_state_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	59768920	56639106	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13214	12287	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

u_state_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	57701570	54769420	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13227	12317	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

Line Coverage for Instance : tb.dut.u_lc_ctrl_fsm

	Line No.	Total	Covered	Percent
TOTAL		177	175	98.87
CONT_ASSIGN	126	1	1	100.00
ALWAYS	146	3	3	100.00
CONT_ASSIGN	171	1	1	100.00
CONT_ASSIGN	178	1	1	100.00
CONT_ASSIGN	179	1	1	100.00
ALWAYS	204	112	110	98.21
ALWAYS	584	3	3	100.00
ALWAYS	585	3	3	100.00
ALWAYS	586	3	3	100.00
ALWAYS	589	3	3	100.00
ALWAYS	608	5	5	100.00
CONT_ASSIGN	619	1	1	100.00
CONT_ASSIGN	666	1	1	100.00
CONT_ASSIGN	667	1	1	100.00
CONT_ASSIGN	668	1	1	100.00
ALWAYS	677	15	15	100.00
ALWAYS	712	14	14	100.00
CONT_ASSIGN	732	1	1	100.00
CONT_ASSIGN	736	1	1	100.00
CONT_ASSIGN	740	1	1	100.00
CONT_ASSIGN	742	1	1	100.00
CONT_ASSIGN	749	1	1	100.00
ALWAYS	882	3	3	100.00

Click here to see the source line report.

---

Cond Coverage for Instance : tb.dut.u_lc_ctrl_fsm

	Total	Covered	Percent
Conditions	86	80	93.02
Logical	86	80	93.02
Non-Logical	0	0
Event	0	0

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T3,T44,T45
1	1	Covered	T1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----

-1-	-2-	-3-	Status	Tests
-	0	1	Covered	T1,T2,T3
-	1	0	Covered	T1,T6,T13
-	1	1	Covered	T1,T13,T34

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------

-1-	-2-	-3-	Status	Tests	Exclude Annotation
0	1	1	Excluded		VC_COV_UNR
1	0	1	Excluded		VC_COV_UNR
1	1	0	Excluded		VC_COV_UNR
1	1	1	Covered	T1,T13,T34

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------

-1-	Status	Tests
0	Covered	T34,T35,T36
1	Covered	T1,T13,T34

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------

-1-	Status	Tests
0	Covered	T34,T35,T36
1	Covered	T1,T13,T34

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------

-1-	Status	Tests	Exclude Annotation
0	Excluded		VC_COV_UNR
1	Covered	T1,T13,T34

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------

-1-	Status	Tests	Exclude Annotation
0	Covered	T1,T13,T34
1	Excluded	T54,T55	VC_COV_UNR

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------

-1-	Status	Tests	Exclude Annotation
0	Covered	T1,T13,T34
1	Excluded	T54,T55	VC_COV_UNR

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T15,T42,T43

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------

-1-	-2-	-3-	Status	Tests
0	1	1	Covered	T14,T15,T17
1	0	1	Covered	T15,T43,T37
1	1	0	Not Covered
1	1	1	Covered	T1,T2,T3

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------

-1-	Status	Tests
0	Covered	T14,T15,T17
1	Covered	T1,T2,T3

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------

-1-	-2-	-3-	Status	Tests
0	1	1	Not Covered
1	0	1	Not Covered
1	1	0	Not Covered
1	1	1	Covered	T1,T2,T3

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------

-1-	Status	Tests
0	Not Covered
1	Covered	T1,T2,T3

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T47,T48,T49

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T50,T51,T56
1	0	Covered	T15,T50,T57

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------

-1-	-2-	Status	Tests
0	1	Covered	T2,T7,T16
1	0	Covered	T1,T2,T3
1	1	Covered	T15,T50,T57

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T15,T50,T57
1	0	Not Covered

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T15

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T2,T7,T16
1	1	Covered	T50,T51,T56

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T2,T7,T16

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------

-1-	-2-	Status	Tests
0	0	Covered	T2,T7,T16
0	1	Covered	T50,T51,T56
1	0	Covered	T58

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------

-1-	Status	Tests
0	Covered	T2,T7,T16
1	Covered	T1,T2,T3

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T3,T5,T15
1	0	Covered	T3,T4,T15

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------

-1-	-2-	Status	Tests
0	1	Covered	T1,T2,T3
1	0	Covered	T44,T23,T59
1	1	Covered	T3,T44,T45

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T44,T60,T23
1	0	Covered	T3,T44,T45

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------

-1-	Status	Tests
0	Covered	T3,T4,T5
1	Covered	T1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T1,T13,T34
1	0	Covered	T1,T13,T34

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)

-1-	Status	Tests
0	Unreachable	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------

-1-	-2-	Status	Tests
0	1	Unreachable	T1,T2,T3
1	0	Unreachable	T6,T22,T9
1	1	Covered	T1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)

-1-	Status	Tests
0	Unreachable	T1,T2,T3
1	Covered	T1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------

-1-	-2-	Status	Tests
0	1	Unreachable	T1,T2,T3
1	0	Unreachable	T22,T9,T61
1	1	Covered	T1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------

-1-	-2-	Status	Tests
0	0	Covered	T1,T2,T3
0	1	Covered	T6,T17,T8
1	0	Covered	T15,T43,T34

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------

-1-	Status	Tests
0	Covered	T1,T2,T3
1	Covered	T6,T17,T8

---

FSM Coverage for Instance : tb.dut.u_lc_ctrl_fsm

Summary for FSM :: fsm_state_q

	Total	Covered	Percent
States	15	15	100.00	(Not included in score)
Transitions	35	35	100.00
Sequences	0	0

State, Transition and Sequence Details for FSM :: fsm_state_q

---

states	Line No.	Covered	Tests
ClkMuxSt	327	Covered	T1,T2,T3
CntIncrSt	385	Covered	T1,T2,T3
CntProgSt	401	Covered	T1,T2,T3
EscalateSt	568	Covered	T3,T4,T5
FlashRmaSt	455	Covered	T1,T2,T3
IdleSt	252	Covered	T1,T2,T3
InvalidSt	575	Covered	T3,T44,T45
PostTransSt	317	Covered	T1,T2,T3
ResetSt	246	Covered	T1,T2,T3
ScrapSt	285	Covered	T2,T7,T16
TokenCheck0St	469	Covered	T1,T2,T3
TokenCheck1St	501	Covered	T1,T2,T3
TokenHashSt	434	Covered	T1,T2,T3
TransCheckSt	423	Covered	T1,T2,T3
TransProgSt	499	Covered	T1,T2,T3

transitions	Line No.	Covered	Tests	Exclude Annotation
ClkMuxSt->CntIncrSt	385	Covered	T1,T2,T3
ClkMuxSt->EscalateSt	568	Covered	T62,T41,T63
ClkMuxSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->CntProgSt	401	Covered	T1,T2,T3
CntIncrSt->EscalateSt	568	Covered	T18,T62,T64
CntIncrSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->PostTransSt	399	Covered	T15,T43,T37
CntProgSt->EscalateSt	568	Covered	T18,T62,T41
CntProgSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntProgSt->PostTransSt	412	Covered	T4,T5,T15
CntProgSt->TransCheckSt	423	Covered	T1,T2,T3
EscalateSt->InvalidSt	575	Excluded		VC_COV_UNR
FlashRmaSt->EscalateSt	568	Covered	T18,T65,T64
FlashRmaSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
FlashRmaSt->TokenCheck0St	469	Covered	T1,T2,T3
IdleSt->ClkMuxSt	327	Covered	T1,T2,T3
IdleSt->EscalateSt	568	Covered	T18,T62,T41
IdleSt->InvalidSt	575	Covered	T3,T44,T45
IdleSt->PostTransSt	317	Covered	T34,T35,T36
IdleSt->ScrapSt	285	Covered	T2,T7,T16
InvalidSt->EscalateSt	568	Covered	T3,T44,T45
PostTransSt->EscalateSt	568	Covered	T4,T5,T15
PostTransSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ResetSt->EscalateSt	568	Covered	T18,T62,T41
ResetSt->IdleSt	252	Covered	T1,T2,T3
ResetSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ScrapSt->EscalateSt	568	Covered	T18,T62,T65
ScrapSt->InvalidSt	575	Covered	T66,T67,T68
TokenCheck0St->EscalateSt	568	Covered	T18,T41,T65
TokenCheck0St->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck0St->PostTransSt	483	Covered	T15,T17,T42
TokenCheck0St->TokenCheck1St	501	Covered	T1,T2,T3
TokenCheck1St->EscalateSt	568	Covered	T18,T69,T70
TokenCheck1St->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck1St->PostTransSt	483	Covered	T15,T17,T42
TokenCheck1St->TransProgSt	499	Covered	T1,T2,T3
TokenHashSt->EscalateSt	568	Covered	T18,T62,T41
TokenHashSt->FlashRmaSt	455	Covered	T1,T2,T3
TokenHashSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenHashSt->PostTransSt	457	Covered	T14,T15,T17
TransCheckSt->EscalateSt	568	Covered	T62,T41,T65
TransCheckSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransCheckSt->PostTransSt	432	Covered	T15,T17,T43
TransCheckSt->TokenHashSt	434	Covered	T1,T2,T3
TransProgSt->EscalateSt	568	Covered	T18,T62,T41
TransProgSt->InvalidSt	575	Excluded		[LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransProgSt->PostTransSt	525	Covered	T1,T2,T3

Summary for FSM :: lc_state_q

	Total	Covered	Percent
States	21	12	57.14	(Not included in score)
Transitions	1	1	100.00
Sequences	0	0

State, Transition and Sequence Details for FSM :: lc_state_q

---

states	Line No.	Covered	Tests
LcStDev	92	Not Covered
LcStProd	93	Not Covered
LcStProdEnd	94	Not Covered
LcStRaw	295	Covered	T1,T2,T12
LcStRma	333	Not Covered
LcStScrap	284	Not Covered
LcStTestLocked0	333	Covered	T2,T3,T5
LcStTestLocked1	333	Covered	T2,T14,T15
LcStTestLocked2	333	Covered	T2,T7,T14
LcStTestLocked3	333	Covered	T2,T3,T11
LcStTestLocked4	333	Covered	T3,T7,T14
LcStTestLocked5	333	Not Covered
LcStTestLocked6	333	Not Covered
LcStTestUnlocked0	301	Covered	T1,T2,T13
LcStTestUnlocked1	333	Covered	T2,T3,T14
LcStTestUnlocked2	333	Covered	T7,T14,T15
LcStTestUnlocked3	333	Covered	T2,T7,T14
LcStTestUnlocked4	333	Covered	T2,T5,T14
LcStTestUnlocked5	333	Covered	T3,T7,T14
LcStTestUnlocked6	333	Not Covered
LcStTestUnlocked7	333	Not Covered

transitions	Line No.	Covered	Tests
LcStRaw->LcStTestUnlocked0	301	Covered	T1,T13,T14

Summary for FSM :: lc_cnt_q

	Total	Covered	Percent
States	25	9	36.00	(Not included in score)
Transitions	1	1	100.00
Sequences	0	0

State, Transition and Sequence Details for FSM :: lc_cnt_q

---

states	Line No.	Covered	Tests
LcCnt0	305	Covered	T15,T37,T38
LcCnt1	305	Covered	T2,T3,T7
LcCnt10	112	Not Covered
LcCnt11	113	Not Covered
LcCnt12	114	Not Covered
LcCnt13	115	Not Covered
LcCnt14	116	Not Covered
LcCnt15	117	Not Covered
LcCnt16	118	Not Covered
LcCnt17	119	Not Covered
LcCnt18	120	Not Covered
LcCnt19	121	Not Covered
LcCnt2	104	Covered	T2,T7,T14
LcCnt20	122	Not Covered
LcCnt21	123	Not Covered
LcCnt22	124	Not Covered
LcCnt23	125	Not Covered
LcCnt24	126	Not Covered
LcCnt3	105	Covered	T14,T15,T17
LcCnt4	106	Covered	T2,T3,T4
LcCnt5	107	Covered	T3,T15,T17
LcCnt6	108	Covered	T2,T11,T14
LcCnt7	109	Covered	T3,T7,T14
LcCnt8	110	Covered	T3,T14,T15
LcCnt9	111	Not Covered

transitions	Line No.	Covered	Tests
LcCnt0->LcCnt1	305	Covered	T15,T71,T72

---

Branch Coverage for Instance : tb.dut.u_lc_ctrl_fsm

	Line No.	Total	Covered	Percent
Branches		73	72	98.63
TERNARY	732	1	1	100.00
TERNARY	736	1	1	100.00
CASE	242	44	43	97.73
IF	567	3	3	100.00
IF	584	2	2	100.00
IF	585	2	2	100.00
IF	586	2	2	100.00
IF	589	2	2	100.00
IF	684	2	2	100.00
IF	687	2	2	100.00
IF	691	2	2	100.00
IF	694	2	2	100.00
IF	698	2	2	100.00
IF	701	2	2	100.00
IF	882	2	2	100.00
IF	608	2	2	100.00

732          assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates &&
                                                                          
733                               int'(trans_target_i[0]) < NumLcStates) ?
                                                                         -1-  
                                                                         ==>  
                                                                         ==> (Unreachable)  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Unreachable	T1,T2,T3

736          assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates &&
                                                                          
737                               int'(trans_target_i[1]) < NumLcStates) ?
                                                                         -1-  
                                                                         ==>  
                                                                         ==> (Unreachable)  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Unreachable	T1,T2,T3

242            unique case (fsm_state_q)
                      -1-  
243              ///////////////////////////////////////////////////////////////////
244              // Wait here until OTP has initialized and the
245              // power manager sends an initialization request.
246              ResetSt: begin
247                init_done_o = 1'b0;
248                lc_clk_byp_req   = Off;
249                lc_flash_rma_req = Off;
250                lc_check_byp_en  = Off;
251                if (init_req_i && lc_state_valid_q) begin
                   -2-  
252                  fsm_state_d = IdleSt;
                     ==>
253                  // Fetch LC state vector from OTP.
254                  lc_state_d  = lc_state_i;
255                  lc_cnt_d    = lc_cnt_i;
256                end
                   MISSING_ELSE
                   ==>
257              end
258              ///////////////////////////////////////////////////////////////////
259              // Idle state where life cycle control signals are broadcast.
260              // Note that the life cycle signals are decoded and broadcast
261              // in the lc_ctrl_signal_decode submodule.
262              IdleSt: begin
263                idle_o = 1'b1;
264        
265                // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ----------
266                // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE
267                // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA
268                // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES.
269                // ---------------------------------------------------------------
270                // Note that if the volatile unlock mechanism is available,
271                // we have to stop fetching the OTP value after a volatile unlock has succeeded.
272                // Otherwise we unconditionally fetch from OTP in this state.
273                if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) ||
                   -3-  
274                    prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin
275                  // Continuously fetch LC state vector from OTP.
276                  // The state is locked in once a transition is started.
277                  lc_state_d    = lc_state_i;
                     ==>
278                  lc_cnt_d      = lc_cnt_i;
279                end
                   MISSING_ELSE
                   ==>
280                // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END -----------
281        
282                // If the life cycle state is SCRAP, we move the FSM into a terminal
283                // SCRAP state that does not allow any transitions to be initiated anymore.
284                if (lc_state_q == LcStScrap) begin
                   -4-  
285                  fsm_state_d = ScrapSt;
                     ==>
286        
287                // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ----------
288                // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE
289                // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA
290                // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES.
291                // ---------------------------------------------------------------
292                // Only enter here if volatile RAW unlock is available and enabled.
293                end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin
                            -5-  
294                  // We only allow transitions from RAW -> TEST_UNLOCKED0
295                  if (lc_state_q == LcStRaw &&
                     -6-  
296                      trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} &&
297                      !trans_invalid_error_o) begin
298                    // 128bit token check (without passing it through the KMAC)
299                    if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin
                       -7-  
300                      // We stay in Idle, but update the life cycle state register (volatile).
301                      lc_state_d = LcStTestUnlocked0;
302                      // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the
303                      // register value is in sync with what has been programmed to OTP already (there may
304                      // have been unsuccessul raw unlock attempts before that already incremented it).
305                      lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q;
                                                         -8-  
                                                         ==> (Excluded)  
                                                         ==>  
306                      // Re-sample the DFT straps in the pinmux.
307                      // This signal will be delayed by several cycles so that the LC_CTRL signals
308                      // have time to propagate.
309                      set_strap_en_override = 1'b1;
310                      // We have to remember that the transition was successful in order to correctly
311                      // disable the continuos sampling of the life cycle state vector coming from OTP.
312                      volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True;
313                      // Indicate that the transition was successful.
314                      trans_success_o = 1'b1;
315                    end else begin
316                      token_invalid_error_o = 1'b1;
                         ==> (Excluded)
Exclude Annotation: VC_COV_UNR
317                      fsm_state_d = PostTransSt;
318                    end
319                  end else begin
320                    // Transition invalid error is set by lc_ctrl_state_transition module.
321                    fsm_state_d = PostTransSt;
                       ==>
322                  end
323                // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END -----------
324                // Initiate a transition. This will first increment the
325                // life cycle counter before hashing and checking the token.
326                end else if (trans_cmd_i) begin
                            -9-  
327                  fsm_state_d = ClkMuxSt;
                     ==>
328                end
                   MISSING_ELSE
                   ==>
329                // If we are in a non-PROD life cycle state, steer the clock mux if requested. This
330                // action is available in IdleSt so that the mux can be steered without having to initiate
331                // a life cycle transition. If a transition is initiated however, the life cycle controller
332                // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding.
333                if (lc_state_q inside {LcStRaw,
                   -10-  
334                                       LcStTestLocked0,
335                                       LcStTestLocked1,
336                                       LcStTestLocked2,
337                                       LcStTestLocked3,
338                                       LcStTestLocked4,
339                                       LcStTestLocked5,
340                                       LcStTestLocked6,
341                                       LcStTestUnlocked0,
342                                       LcStTestUnlocked1,
343                                       LcStTestUnlocked2,
344                                       LcStTestUnlocked3,
345                                       LcStTestUnlocked4,
346                                       LcStTestUnlocked5,
347                                       LcStTestUnlocked6,
348                                       LcStTestUnlocked7,
349                                       LcStRma}) begin
350                  if (use_ext_clock_i) begin
                     -11-  
351                    lc_clk_byp_req = On;
                       ==>
352                  end
                     MISSING_ELSE
                     ==>
353                end
                   MISSING_ELSE
                   ==>
354              end
355              ///////////////////////////////////////////////////////////////////
356              // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible
357              // to switch to an external clock source. If the bypass request is
358              // asserted, we have to wait until the clock mux and clock manager
359              // have switched the mux and the clock divider. Also, we disable the
360              // life cycle partition checks at this point since we are going to
361              // alter the contents in the OTP memory array, which could lead to
362              // spurious escalations.
363              ClkMuxSt: begin
364                lc_check_byp_en = On;
365                if (lc_state_q inside {LcStRaw,
                   -12-  
366                                       LcStTestLocked0,
367                                       LcStTestLocked1,
368                                       LcStTestLocked2,
369                                       LcStTestLocked3,
370                                       LcStTestLocked4,
371                                       LcStTestLocked5,
372                                       LcStTestLocked6,
373                                       LcStTestUnlocked0,
374                                       LcStTestUnlocked1,
375                                       LcStTestUnlocked2,
376                                       LcStTestUnlocked3,
377                                       LcStTestUnlocked4,
378                                       LcStTestUnlocked5,
379                                       LcStTestUnlocked6,
380                                       LcStTestUnlocked7,
381                                       LcStRma}) begin
382                  if (use_ext_clock_i) begin
                     -13-  
383                    lc_clk_byp_req = On;
384                    if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin
                       -14-  
385                      fsm_state_d = CntIncrSt;
                         ==>
386                    end
                       MISSING_ELSE
                       ==>
387                  end else begin
388                    fsm_state_d = CntIncrSt;
                       ==>
389                  end
390                end else begin
391                  fsm_state_d = CntIncrSt;
                     ==>
392                end
393              end
394              ///////////////////////////////////////////////////////////////////
395              // This increments the life cycle counter state.
396              CntIncrSt: begin
397                // If the counter has reached the maximum, bail out.
398                if (trans_cnt_oflw_error_o) begin
                   -15-  
399                  fsm_state_d = PostTransSt;
                     ==>
400                end else begin
401                  fsm_state_d = CntProgSt;
                     ==>
402                end
403              end
404              ///////////////////////////////////////////////////////////////////
405              // This programs the life cycle counter state.
406              CntProgSt: begin
407                otp_prog_req_o = 1'b1;
408        
409                // If the clock mux has been steered, double check that this is still the case.
410                // Otherwise abort the transition operation.
411                if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin
                   -16-  
412                    fsm_state_d = PostTransSt;
                       ==>
413                    otp_prog_error_o = 1'b1;
414                end
                   MISSING_ELSE
                   ==>
415        
416                // Check return value and abort if there
417                // was an error.
418                if (otp_prog_ack_i) begin
                   -17-  
419                  if (otp_prog_err_i) begin
                     -18-  
420                    fsm_state_d = PostTransSt;
                       ==>
421                    otp_prog_error_o = 1'b1;
422                  end else begin
423                    fsm_state_d = TransCheckSt;
                       ==>
424                  end
425                end
                   MISSING_ELSE
                   ==>
426              end
427              ///////////////////////////////////////////////////////////////////
428              // First transition valid check. This will be repeated several
429              // times below.
430              TransCheckSt: begin
431                if (trans_invalid_error_o) begin
                   -19-  
432                  fsm_state_d = PostTransSt;
                     ==>
433                end else begin
434                  fsm_state_d = TokenHashSt;
                     ==>
435                end
436              end
437              ///////////////////////////////////////////////////////////////////
438              // Hash and compare the token, no matter whether this transition
439              // is conditional or not. Unconditional transitions just use a known
440              // all-zero token value. That way, we always compare a hashed token
441              // and guarantee that no other control flow path exists that could
442              // bypass the token check.
443              // SEC_CM: TOKEN.DIGEST
444              TokenHashSt: begin
445                token_hash_req_o = 1'b1;
446                if (token_hash_ack_i) begin
                   -20-  
447                  // This is the first comparison.
448                  // The token is compared two more times further below.
449                  // Also note that conditional transitions won't be possible if the
450                  // corresponding token is not valid. This only applies to tokens stored in
451                  // OTP. I.e., these tokens first have to be provisioned, before they can be used.
452                  if (hashed_token_i == hashed_token_mux &&
                     -21-  
453                      !token_hash_err_i &&
454                      &hashed_token_valid_mux) begin
455                    fsm_state_d = FlashRmaSt;
                       ==>
456                  end else begin
457                    fsm_state_d = PostTransSt;
                       ==>
458                    token_invalid_error_o = 1'b1;
459                  end
460                end
                   MISSING_ELSE
                   ==>
461              end
462              ///////////////////////////////////////////////////////////////////
463              // Flash RMA state. Note that we check the flash response again
464              // two times later below.
465              FlashRmaSt: begin
466                if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin
                   -22-  
467                  lc_flash_rma_req = On;
468                  if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin
                     -23-  
469                    fsm_state_d = TokenCheck0St;
                       ==>
470                  end
                     MISSING_ELSE
                     ==>
471                end else begin
472                  fsm_state_d = TokenCheck0St;
                     ==>
473                end
474              end
475              ///////////////////////////////////////////////////////////////////
476              // Check again two times whether this transition and the hashed
477              // token are valid. Also check again whether the flash RMA
478              // response is valid.
479              // SEC_CM: TOKEN.DIGEST
480              TokenCheck0St,
481              TokenCheck1St: begin
482                if (trans_invalid_error_o) begin
                   -24-  
483                  fsm_state_d = PostTransSt;
                     ==>
484                end else begin
485                  // If any of these RMA are conditions are true,
486                  // all of them must be true at the same time.
487                  if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} &&
                     -25-  
488                       lc_tx_test_false_strict(lc_flash_rma_req_o) &&
489                       lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) ||
490                      (trans_target_i == {DecLcStateNumRep{DecLcStRma}} &&
491                       lc_tx_test_true_strict(lc_flash_rma_req_o) &&
492                       lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin
493                    if (hashed_token_i == hashed_token_mux &&
                       -26-  
494                        !token_hash_err_i &&
495                        &hashed_token_valid_mux) begin
496                      if (fsm_state_q == TokenCheck1St) begin
                         -27-  
497                        // This is the only way we can get into the
498                        // programming state.
499                        fsm_state_d = TransProgSt;
                           ==>
500                      end else begin
501                        fsm_state_d = TokenCheck1St;
                           ==>
502                      end
503                    end else begin
504                      fsm_state_d = PostTransSt;
                         ==>
505                      token_invalid_error_o = 1'b1;
506                    end
507                  // The flash RMA process failed.
508                  end else begin
509                      fsm_state_d = PostTransSt;
                         ==>
510                      flash_rma_error_o = 1'b1;
511                  end
512                end
513              end
514              ///////////////////////////////////////////////////////////////////
515              // Initiate OTP transaction. Note that the concurrent
516              // LC state check is continuously checking whether the
517              // new LC state remains valid. Once the ack returns we are
518              // done with the transition and can go into the terminal PosTransSt.
519              TransProgSt: begin
520                otp_prog_req_o = 1'b1;
521        
522                // If the clock mux has been steered, double check that this is still the case.
523                // Otherwise abort the transition operation.
524                if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin
                   -28-  
525                  fsm_state_d = PostTransSt;
                     ==>
526                  otp_prog_error_o = 1'b1;
527                // Also double check that the RMA signals remain stable.
528                // Otherwise abort the transition operation.
529                end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} &&
                            -29-  
530                              (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) ||
531                             (trans_target_i == {DecLcStateNumRep{DecLcStRma}} &&
532                              (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin
533                  fsm_state_d = PostTransSt;
                     ==>
534                  flash_rma_error_o = 1'b1;
535                end else if (otp_prog_ack_i) begin
                            -30-  
536                  fsm_state_d = PostTransSt;
                     ==>
537                  otp_prog_error_o = otp_prog_err_i;
538                  trans_success_o  = ~otp_prog_err_i;
539                end
                   MISSING_ELSE
                   ==>
540              end
541              ///////////////////////////////////////////////////////////////////
542              // Terminal states.
543              ScrapSt,
544              PostTransSt: ;
                 ==>
545        
546        
547              EscalateSt: begin
548                // During an escalation it is okay to de-assert token_hash_req without receivng ACK.
549                token_hash_req_chk_o = 1'b0;
                   ==>
550              end
551        
552              InvalidSt: begin
553                // During an escalation it is okay to de-assert token_hash_req without receivng ACK.
554                token_hash_req_chk_o = 1'b0;
                   ==>
555                state_invalid_error_o = 1'b1;
556              end
557              ///////////////////////////////////////////////////////////////////
558              // Go to terminal error state if we get here.
559              default: begin
560                fsm_state_d = InvalidSt;
                   ==>

Branches:

-1-	-2-	-3-	-4-	-5-	-6-	-7-	-8-	-9-	-10-	-11-	-12-	-13-	-14-	-15-	-16-	-17-	-18-	-19-	-20-	-21-	-22-	-23-	-24-	-25-	-26-	-27-	-28-	-29-	-30-	Status	Tests	Exclude Annotation
ResetSt	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
ResetSt	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T13,T34
IdleSt	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T7,T16
IdleSt	-	-	0	1	1	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Excluded	T54,T55	VC_COV_UNR
IdleSt	-	-	0	1	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T13,T34
IdleSt	-	-	0	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Excluded		VC_COV_UNR
IdleSt	-	-	0	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T34,T35,T36
IdleSt	-	-	0	0	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	0	0	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T6
IdleSt	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
IdleSt	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T3,T4
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	1	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T13
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T16,T50,T73
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T3,T5
ClkMuxSt	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T2,T4,T14
CntIncrSt	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T43,T37
CntIncrSt	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T42,T43
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T4,T5,T33
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
CntProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TransCheckSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	-	-	-	-	-	Covered	T15,T17,T43
TransCheckSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	-	-	Covered	T14,T15,T17
TokenHashSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	1	-	-	-	-	-	-	-	Covered	T2,T7,T16
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	0	-	-	-	-	-	-	-	Covered	T2,T7,T16
FlashRmaSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	-	-	-	-	Covered	T17,T40,T46
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	1	1	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	1	0	-	-	-	Covered	T1,T2,T3
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	0	-	-	-	-	Not Covered
TokenCheck0St TokenCheck1St	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	-	-	-	-	-	Covered	T15,T42,T43
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	1	-	-	Covered	T47,T48,T49
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	1	-	Covered	T15,T50,T51
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	1	Covered	T1,T2,T3
TransProgSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	0	0	0	Covered	T1,T2,T3
ScrapSt PostTransSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T1,T2,T3
EscalateSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T4,T5
InvalidSt	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T44,T45
default	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	-	Covered	T3,T44,T60

567            if (esc_scrap_state0_i || esc_scrap_state1_i) begin
               -1-  
568              fsm_state_d = EscalateSt;
                 ==>
569            // SEC_CM: MAIN.FSM.LOCAL_ESC
570            // If at any time the life cycle state encoding or any other FSM state within this module
571            // is not valid, we jump into the terminal error state right away.
572            // Note that state_invalid_error is a multibit error signal
573            // with different error sources - need to reduce this to one bit here.
574            end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin
                        -2-                                  
575              fsm_state_d = InvalidSt;
                 ==>
576              state_invalid_error_o = 1'b1;
577            end
               MISSING_ELSE
               ==>

Branches:

-1-	-2-	Status	Tests
1	-	Covered	T3,T4,T5
0	1	Covered	T3,T44,T45
0	0	Covered	T1,T2,T3

584          `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt)
             -1-                                                                                       
             ==>                                                                                       
             ==>                                                                                       

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

585          `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap)
             -1-                                                                                  
             ==>                                                                                  
             ==>                                                                                  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

586          `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24)
             -1-                                                                        
             ==>                                                                        
             ==>                                                                        

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

589            if (!rst_ni) begin
               -1-  
590              lc_state_valid_q <= 1'b0;
                 ==>
591            end else begin
592              lc_state_valid_q <= lc_state_valid_d;
                 ==>

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

684            if (lc_tx_test_true_strict(test_tokens_valid[0])) begin
               -1-  
685              hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower;
                 ==>
686            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

687            if (lc_tx_test_true_strict(test_tokens_valid[1])) begin
               -1-  
688              hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper;
                 ==>
689            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

691            if (lc_tx_test_true_strict(test_tokens_valid[2])) begin
               -1-  
692              hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower;
                 ==>
693            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

694            if (lc_tx_test_true_strict(test_tokens_valid[3])) begin
               -1-  
695              hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper;
                 ==>
696            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

698            if (lc_tx_test_true_strict(rma_token_valid[0])) begin
               -1-  
699              hashed_tokens_lower[RmaTokenIdx] = rma_token_lower;
                 ==>
700            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

701            if (lc_tx_test_true_strict(rma_token_valid[1])) begin
               -1-  
702              hashed_tokens_upper[RmaTokenIdx] = rma_token_upper;
                 ==>
703            end
               MISSING_ELSE
               ==>

Branches:

-1-	Status	Tests
1	Covered	T2,T3,T4
0	Covered	T42,T52,T53

882          `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e)
             -1-                                                                  
             ==>                                                                  
             ==>                                                                  

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

608              if(!rst_ni) begin
                 -1-  
609                strap_en_override_q <= '0;
                   ==>
610                volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False;
611              end else begin
612                strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0],
                   ==>

Branches:

-1-	Status	Tests
1	Covered	T1,T2,T3
0	Covered	T1,T2,T3

---

Assert Coverage for Instance : tb.dut.u_lc_ctrl_fsm

	Total	Attempted	Percent	Succeeded/Matched	Percent
Assertions	15	15	100.00	15	100.00
Cover properties	0	0		0
Cover sequences	0	0		0
Total	15	15	100.00	15	100.00

---

Assertion Details

Name	Attempts	Real Successes	Failures	Incomplete
ClkBypStaysOnOnceAsserted_A	61303763	3226346	0	80
EscStaysOnOnceAsserted_A	61303763	11530559	0	7
FlashRmaStaysOnOnceAsserted_A	61303763	482893	0	15
FsmStateKnown_A	61303763	58057221	0	0
LcCntKnown_A	61303763	58057221	0	0
LcStateKnown_A	61303763	58057221	0	0
NoClkBypInProdStates_A	61303763	7631273	0	0
SecCmCFILinear_A	61303763	258692	0	2093
SecCmCFITerminal0_A	61303763	9860089	0	0
SecCmCFITerminal1_A	61303763	55717	0	0
SecCmCFITerminal2_A	61303763	4515929	0	0
SecCmCFITerminal3_A	61303763	6971851	0	0
u_cnt_regs_A	56346061	53413852	0	0
u_fsm_state_regs_A	59768920	56639106	0	0
u_state_regs_A	57701570	54769420	0	0

ClkBypStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	3226346	0	80
T1	1103	850	0	1
T2	7663	783	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	12258	0	1
T7	26437	4986	0	1
T8	0	2221	0	1
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	1347	0	1
T16	0	1490	0	0
T22	0	10314	0	1
T32	0	11961	0	1
T74	0	10648	0	0
T75	0	0	0	1
T76	0	0	0	1
T77	0	0	0	1

EscStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	11530559	0	7
T2	7663	40	0	0
T3	13655	1017	0	0
T4	1433	139	0	0
T5	6685	531	0	0
T6	14558	0	0	0
T7	26437	376	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	0	965	0	0
T16	0	14	0	0
T18	0	17960	0	0
T33	0	2217	0	0
T74	0	0	0	1
T78	0	894	0	1
T79	0	0	0	1
T80	0	0	0	1
T81	0	0	0	1
T82	0	0	0	1
T83	0	0	0	1

FlashRmaStaysOnOnceAsserted_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	482893	0	15
T2	7663	55	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	175	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T16	0	992	0	0
T17	0	206	0	0
T18	0	1519	0	0
T19	0	664	0	0
T24	0	0	0	1
T32	0	850	0	1
T42	0	1511	0	0
T43	0	461	0	0
T45	0	620	0	0
T84	0	0	0	1
T85	0	0	0	1
T86	0	0	0	1
T87	0	0	0	1
T88	0	0	0	1
T89	0	0	0	1
T90	0	0	0	1
T91	0	0	0	1

FsmStateKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

LcCntKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

LcStateKnown_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	58057221	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13655	12655	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

NoClkBypInProdStates_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	7631273	0	0
T2	7663	857	0	0
T3	13655	0	0	0
T4	1433	477	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	3025	0	0
T15	0	2047	0	0
T16	0	1020	0	0
T17	0	1787	0	0
T18	0	5289	0	0
T32	0	3557	0	0
T33	0	1426	0	0
T44	0	1228	0	0

SecCmCFILinear_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	258692	0	2093
T2	7663	189	0	11
T3	13655	109	0	1
T4	1433	6	0	1
T5	6685	6	0	1
T6	14558	0	0	1
T7	26437	156	0	11
T11	971	0	0	1
T12	1322	0	0	1
T13	1549	0	0	11
T14	32104	392	0	1
T15	0	561	0	0
T16	0	123	0	0
T17	0	476	0	0
T18	0	606	0	0

SecCmCFITerminal0_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	9860089	0	0
T1	1103	735	0	0
T2	7663	968	0	0
T3	13655	2218	0	0
T4	1433	59	0	0
T5	6685	568	0	0
T6	14558	0	0	0
T7	26437	2874	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	1125	0	0
T14	0	9625	0	0
T15	0	13453	0	0
T16	0	1151	0	0

SecCmCFITerminal1_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	55717	0	0
T2	7663	40	0	0
T3	13655	0	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	376	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T16	0	14	0	0
T18	0	4	0	0
T60	0	215	0	0
T62	0	12	0	0
T74	0	1245	0	0
T78	0	894	0	0
T92	0	60	0	0
T93	0	898	0	0

SecCmCFITerminal2_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	4515929	0	0
T3	13655	630	0	0
T4	1433	140	0	0
T5	6685	532	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	34202	972	0	0
T18	0	18041	0	0
T33	0	2233	0	0
T42	0	4513	0	0
T43	0	1399	0	0
T44	0	5218	0	0
T45	0	376	0	0

SecCmCFITerminal3_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	61303763	6971851	0	0
T3	13655	388	0	0
T4	1433	0	0	0
T5	6685	0	0	0
T6	14558	0	0	0
T7	26437	0	0	0
T11	971	0	0	0
T12	1322	0	0	0
T13	1549	0	0	0
T14	32104	0	0	0
T15	34202	0	0	0
T21	0	12698	0	0
T23	0	9730	0	0
T42	0	2627	0	0
T44	0	3133	0	0
T45	0	144	0	0
T52	0	3595	0	0
T59	0	5696	0	0
T60	0	2977	0	0
T94	0	323	0	0

u_cnt_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	56346061	53413852	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13207	12268	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

u_fsm_state_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	59768920	56639106	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13214	12287	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0

u_state_regs_A

Name	Attempts	Real Successes	Failures	Incomplete
Total	57701570	54769420	0	0
T1	1103	1018	0	0
T2	7663	6222	0	0
T3	13227	12317	0	0
T4	1433	1301	0	0
T5	6685	6517	0	0
T6	14558	14484	0	0
T7	26437	25084	0	0
T11	971	912	0	0
T12	1322	1248	0	0
T13	1549	1495	0	0