Module Definition
dashboard | hierarchy | modlist | groups | tests | asserts



Module Instance : tb.dut.u_lc_ctrl_fsm

Instance :
SCORELINECONDTOGGLEFSMBRANCHASSERT
98.34 98.87 94.19 100.00 98.63 100.00


Instance's subtree :
SCORELINECONDTOGGLEFSMBRANCHASSERT
97.54 99.39 90.62 100.00 97.67 100.00


Parent :
SCORELINECONDTOGGLEFSMBRANCHASSERTNAME
94.10 100.00 83.10 99.89 100.00 87.50 dut


Subtrees :
NAMESCORELINECONDTOGGLEFSMBRANCHASSERT
gen_syncs[0].u_prim_lc_sync_flash_rma_ack 100.00 100.00 100.00 100.00
gen_syncs[1].u_prim_lc_sync_flash_rma_ack 100.00 100.00 100.00 100.00
u_cnt_regs 100.00 100.00 100.00 100.00
u_fsm_state_regs 100.00 100.00 100.00 100.00
u_lc_ctrl_fsm_cov_if 96.97 100.00 90.91 100.00
u_lc_ctrl_signal_decode 98.86 99.21 97.37 100.00
u_lc_ctrl_state_decode 98.89 100.00 100.00 96.67
u_lc_ctrl_state_transition 89.97 98.48 75.00 96.43
u_prim_lc_sender_check_byp_en 100.00 100.00 100.00
u_prim_lc_sender_clk_byp_req 100.00 100.00 100.00
u_prim_lc_sender_flash_rma_req 100.00 100.00 100.00
u_prim_lc_sync_clk_byp_ack 100.00 100.00 100.00 100.00
u_prim_lc_sync_flash_rma_ack_buf 100.00 100.00 100.00
u_prim_lc_sync_rma_token_valid 100.00 100.00 100.00
u_prim_lc_sync_test_token_valid 100.00 100.00 100.00
u_state_regs 100.00 100.00 100.00 100.00

Line Coverage for Module : lc_ctrl_fsm
Line No.TotalCoveredPercent
TOTAL17917597.77
CONT_ASSIGN12611100.00
ALWAYS14633100.00
CONT_ASSIGN17111100.00
CONT_ASSIGN17811100.00
CONT_ASSIGN17911100.00
ALWAYS20411411096.49
ALWAYS58433100.00
ALWAYS58533100.00
ALWAYS58633100.00
ALWAYS58933100.00
ALWAYS60855100.00
CONT_ASSIGN61911100.00
CONT_ASSIGN66611100.00
CONT_ASSIGN66711100.00
CONT_ASSIGN66811100.00
ALWAYS6771515100.00
ALWAYS7121414100.00
CONT_ASSIGN73211100.00
CONT_ASSIGN73611100.00
CONT_ASSIGN74011100.00
CONT_ASSIGN74211100.00
CONT_ASSIGN74911100.00
ALWAYS88233100.00

Click here to see the source line report.

Cond Coverage for Module : lc_ctrl_fsm
TotalCoveredPercent
Conditions928390.22
Logical928390.22
Non-Logical00
Event00

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT12,T53,T54
11CoveredT1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT15,T17,T18

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----
-1--2--3-StatusTests
-01CoveredT2,T4,T5
-10CoveredT1,T24,T41
-11CoveredT1,T24,T41

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT1,T24,T41

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------
-1-StatusTests
0CoveredT1,T41,T36
1CoveredT1,T24,T41

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------
-1-StatusTests
0CoveredT1,T41,T36
1CoveredT1,T24,T41

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------
-1-StatusTests
0Not Covered
1CoveredT1,T24,T41

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------
-1-StatusTests
0CoveredT24,T41,T36
1CoveredT1,T61

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------
-1-StatusTests
0CoveredT24,T41,T36
1CoveredT1,T61

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T4,T5
1CoveredT13,T16,T45

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011CoveredT13,T42,T51
101CoveredT13,T45,T52
110Not Covered
111CoveredT2,T7,T12

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0CoveredT13,T16,T42
1CoveredT2,T7,T12

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT2,T7,T12

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0Not Covered
1CoveredT2,T7,T12

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T12

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT56,T57,T58

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))
-1--2-StatusTests
00CoveredT2,T7,T12
01CoveredT46,T60,T62
10CoveredT59,T63,T64

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------
-1--2-StatusTests
01CoveredT2,T7,T14
10CoveredT2,T7,T12
11CoveredT59,T63,T64

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------
-1--2-StatusTests
00CoveredT2,T7,T12
01CoveredT59,T63,T64
10CoveredT65

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------
-1--2-StatusTests
01CoveredT2,T7,T12
10CoveredT2,T7,T14
11CoveredT46,T60,T62

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------
-1--2-StatusTests
00CoveredT2,T7,T14
01CoveredT46,T60,T62
10CoveredT66

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT4,T5,T12
10CoveredT4,T5,T12

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT20,T67,T53
11CoveredT12,T16,T20

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT20,T67,T53
10CoveredT12,T16,T20

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------
-1-StatusTests
0CoveredT4,T5,T12
1CoveredT1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT1,T24,T41
10CoveredT1,T24,T41

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT11,T8,T9
11CoveredT1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT8,T9,T10
11CoveredT1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT6,T11,T42
10CoveredT1,T13,T45

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT6,T11,T42

FSM Coverage for Module : lc_ctrl_fsm
Summary for FSM :: fsm_state_q
TotalCoveredPercent
States 15 15 100.00 (Not included in score)
Transitions 47 35 74.47
Sequences 0 0

State, Transition and Sequence Details for FSM :: fsm_state_q
statesLine No.CoveredTests
ClkMuxSt 327 Covered T2,T4,T5
CntIncrSt 385 Covered T2,T4,T5
CntProgSt 401 Covered T2,T4,T5
EscalateSt 568 Covered T4,T5,T12
FlashRmaSt 455 Covered T2,T7,T12
IdleSt 252 Covered T1,T2,T3
InvalidSt 575 Covered T12,T16,T20
PostTransSt 317 Covered T1,T2,T4
ResetSt 246 Covered T1,T2,T3
ScrapSt 285 Covered T15,T17,T18
TokenCheck0St 469 Covered T2,T7,T12
TokenCheck1St 501 Covered T2,T7,T12
TokenHashSt 434 Covered T2,T7,T12
TransCheckSt 423 Covered T2,T7,T12
TransProgSt 499 Covered T2,T7,T12


transitionsLine No.CoveredTests
ClkMuxSt->CntIncrSt 385 Covered T2,T4,T5
ClkMuxSt->EscalateSt 568 Covered T15,T38,T49
ClkMuxSt->InvalidSt 575 Not Covered
CntIncrSt->CntProgSt 401 Covered T2,T4,T5
CntIncrSt->EscalateSt 568 Covered T15,T68,T38
CntIncrSt->InvalidSt 575 Not Covered
CntIncrSt->PostTransSt 399 Covered T13,T45,T52
CntProgSt->EscalateSt 568 Covered T15,T68,T38
CntProgSt->InvalidSt 575 Not Covered
CntProgSt->PostTransSt 412 Covered T4,T5,T13
CntProgSt->TransCheckSt 423 Covered T2,T7,T12
EscalateSt->InvalidSt 575 Not Covered
FlashRmaSt->EscalateSt 568 Covered T15,T68,T38
FlashRmaSt->InvalidSt 575 Not Covered
FlashRmaSt->TokenCheck0St 469 Covered T2,T7,T12
IdleSt->ClkMuxSt 327 Covered T2,T4,T5
IdleSt->EscalateSt 568 Covered T15,T68,T38
IdleSt->InvalidSt 575 Covered T12,T16,T20
IdleSt->PostTransSt 317 Covered T1,T41,T36
IdleSt->ScrapSt 285 Covered T15,T17,T18
InvalidSt->EscalateSt 568 Covered T12,T16,T20
PostTransSt->EscalateSt 568 Covered T4,T5,T13
PostTransSt->InvalidSt 575 Not Covered
ResetSt->EscalateSt 568 Covered T15,T68,T38
ResetSt->IdleSt 252 Covered T1,T2,T3
ResetSt->InvalidSt 575 Not Covered
ScrapSt->EscalateSt 568 Covered T15,T68,T49
ScrapSt->InvalidSt 575 Covered T69,T70,T71
TokenCheck0St->EscalateSt 568 Covered T68,T49,T72
TokenCheck0St->InvalidSt 575 Not Covered
TokenCheck0St->PostTransSt 483 Covered T13,T16,T42
TokenCheck0St->TokenCheck1St 501 Covered T2,T7,T12
TokenCheck1St->EscalateSt 568 Covered T68,T38,T72
TokenCheck1St->InvalidSt 575 Not Covered
TokenCheck1St->PostTransSt 483 Covered T16,T42,T45
TokenCheck1St->TransProgSt 499 Covered T2,T7,T12
TokenHashSt->EscalateSt 568 Covered T15,T68,T48
TokenHashSt->FlashRmaSt 455 Covered T2,T7,T12
TokenHashSt->InvalidSt 575 Not Covered
TokenHashSt->PostTransSt 457 Covered T13,T16,T42
TransCheckSt->EscalateSt 568 Covered T15,T38,T72
TransCheckSt->InvalidSt 575 Not Covered
TransCheckSt->PostTransSt 432 Covered T13,T42,T45
TransCheckSt->TokenHashSt 434 Covered T2,T7,T12
TransProgSt->EscalateSt 568 Covered T15,T68,T38
TransProgSt->InvalidSt 575 Not Covered
TransProgSt->PostTransSt 525 Covered T2,T7,T12


Summary for FSM :: lc_state_q
TotalCoveredPercent
States 21 6 28.57 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_state_q
statesLine No.CoveredTests
LcStDev 92 Not Covered
LcStProd 93 Not Covered
LcStProdEnd 94 Not Covered
LcStRaw 295 Covered T1,T5,T12
LcStRma 333 Not Covered
LcStScrap 284 Not Covered
LcStTestLocked0 333 Covered T7,T13,T15
LcStTestLocked1 333 Covered T7,T11,T12
LcStTestLocked2 333 Not Covered
LcStTestLocked3 333 Not Covered
LcStTestLocked4 333 Not Covered
LcStTestLocked5 333 Not Covered
LcStTestLocked6 333 Not Covered
LcStTestUnlocked0 301 Covered T1,T2,T5
LcStTestUnlocked1 333 Covered T4,T7,T12
LcStTestUnlocked2 333 Covered T5,T7,T13
LcStTestUnlocked3 333 Not Covered
LcStTestUnlocked4 333 Not Covered
LcStTestUnlocked5 333 Not Covered
LcStTestUnlocked6 333 Not Covered
LcStTestUnlocked7 333 Not Covered


transitionsLine No.CoveredTests
LcStRaw->LcStTestUnlocked0 301 Covered T1,T5,T24


Summary for FSM :: lc_cnt_q
TotalCoveredPercent
States 25 6 24.00 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_cnt_q
statesLine No.CoveredTests
LcCnt0 305 Covered T1,T42,T69
LcCnt1 305 Covered T1,T2,T5
LcCnt10 112 Not Covered
LcCnt11 113 Not Covered
LcCnt12 114 Not Covered
LcCnt13 115 Not Covered
LcCnt14 116 Not Covered
LcCnt15 117 Not Covered
LcCnt16 118 Not Covered
LcCnt17 119 Not Covered
LcCnt18 120 Not Covered
LcCnt19 121 Not Covered
LcCnt2 104 Covered T13,T15,T42
LcCnt20 122 Not Covered
LcCnt21 123 Not Covered
LcCnt22 124 Not Covered
LcCnt23 125 Not Covered
LcCnt24 126 Not Covered
LcCnt3 105 Covered T7,T12,T13
LcCnt4 106 Covered T5,T12,T13
LcCnt5 107 Covered T4,T6,T13
LcCnt6 108 Not Covered
LcCnt7 109 Not Covered
LcCnt8 110 Not Covered
LcCnt9 111 Not Covered


transitionsLine No.CoveredTests
LcCnt0->LcCnt1 305 Covered T1,T69,T43



Branch Coverage for Module : lc_ctrl_fsm
Line No.TotalCoveredPercent
Branches 75 73 97.33
TERNARY 732 1 1 100.00
TERNARY 736 1 1 100.00
CASE 242 46 44 95.65
IF 567 3 3 100.00
IF 584 2 2 100.00
IF 585 2 2 100.00
IF 586 2 2 100.00
IF 589 2 2 100.00
IF 684 2 2 100.00
IF 687 2 2 100.00
IF 691 2 2 100.00
IF 694 2 2 100.00
IF 698 2 2 100.00
IF 701 2 2 100.00
IF 882 2 2 100.00
IF 608 2 2 100.00


732 assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates && 733 int'(trans_target_i[0]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


736 assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates && 737 int'(trans_target_i[1]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


242 unique case (fsm_state_q) -1- 243 /////////////////////////////////////////////////////////////////// 244 // Wait here until OTP has initialized and the 245 // power manager sends an initialization request. 246 ResetSt: begin 247 init_done_o = 1'b0; 248 lc_clk_byp_req = Off; 249 lc_flash_rma_req = Off; 250 lc_check_byp_en = Off; 251 if (init_req_i && lc_state_valid_q) begin -2- 252 fsm_state_d = IdleSt; ==> 253 // Fetch LC state vector from OTP. 254 lc_state_d = lc_state_i; 255 lc_cnt_d = lc_cnt_i; 256 end MISSING_ELSE ==> 257 end 258 /////////////////////////////////////////////////////////////////// 259 // Idle state where life cycle control signals are broadcast. 260 // Note that the life cycle signals are decoded and broadcast 261 // in the lc_ctrl_signal_decode submodule. 262 IdleSt: begin 263 idle_o = 1'b1; 264 265 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 266 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 267 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 268 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 269 // --------------------------------------------------------------- 270 // Note that if the volatile unlock mechanism is available, 271 // we have to stop fetching the OTP value after a volatile unlock has succeeded. 272 // Otherwise we unconditionally fetch from OTP in this state. 273 if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) || -3- 274 prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin 275 // Continuously fetch LC state vector from OTP. 276 // The state is locked in once a transition is started. 277 lc_state_d = lc_state_i; ==> 278 lc_cnt_d = lc_cnt_i; 279 end MISSING_ELSE ==> 280 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 281 282 // If the life cycle state is SCRAP, we move the FSM into a terminal 283 // SCRAP state that does not allow any transitions to be initiated anymore. 284 if (lc_state_q == LcStScrap) begin -4- 285 fsm_state_d = ScrapSt; ==> 286 287 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 288 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 289 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 290 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 291 // --------------------------------------------------------------- 292 // Only enter here if volatile RAW unlock is available and enabled. 293 end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin -5- 294 // We only allow transitions from RAW -> TEST_UNLOCKED0 295 if (lc_state_q == LcStRaw && -6- 296 trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} && 297 !trans_invalid_error_o) begin 298 // 128bit token check (without passing it through the KMAC) 299 if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin -7- 300 // We stay in Idle, but update the life cycle state register (volatile). 301 lc_state_d = LcStTestUnlocked0; 302 // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the 303 // register value is in sync with what has been programmed to OTP already (there may 304 // have been unsuccessul raw unlock attempts before that already incremented it). 305 lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q; -8- ==> ==> 306 // Re-sample the DFT straps in the pinmux. 307 // This signal will be delayed by several cycles so that the LC_CTRL signals 308 // have time to propagate. 309 set_strap_en_override = 1'b1; 310 // We have to remember that the transition was successful in order to correctly 311 // disable the continuos sampling of the life cycle state vector coming from OTP. 312 volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True; 313 // Indicate that the transition was successful. 314 trans_success_o = 1'b1; 315 end else begin 316 token_invalid_error_o = 1'b1; ==> 317 fsm_state_d = PostTransSt; 318 end 319 end else begin 320 // Transition invalid error is set by lc_ctrl_state_transition module. 321 fsm_state_d = PostTransSt; ==> 322 end 323 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 324 // Initiate a transition. This will first increment the 325 // life cycle counter before hashing and checking the token. 326 end else if (trans_cmd_i) begin -9- 327 fsm_state_d = ClkMuxSt; ==> 328 end MISSING_ELSE ==> 329 // If we are in a non-PROD life cycle state, steer the clock mux if requested. This 330 // action is available in IdleSt so that the mux can be steered without having to initiate 331 // a life cycle transition. If a transition is initiated however, the life cycle controller 332 // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding. 333 if (lc_state_q inside {LcStRaw, -10- 334 LcStTestLocked0, 335 LcStTestLocked1, 336 LcStTestLocked2, 337 LcStTestLocked3, 338 LcStTestLocked4, 339 LcStTestLocked5, 340 LcStTestLocked6, 341 LcStTestUnlocked0, 342 LcStTestUnlocked1, 343 LcStTestUnlocked2, 344 LcStTestUnlocked3, 345 LcStTestUnlocked4, 346 LcStTestUnlocked5, 347 LcStTestUnlocked6, 348 LcStTestUnlocked7, 349 LcStRma}) begin 350 if (use_ext_clock_i) begin -11- 351 lc_clk_byp_req = On; ==> 352 end MISSING_ELSE ==> 353 end MISSING_ELSE ==> 354 end 355 /////////////////////////////////////////////////////////////////// 356 // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible 357 // to switch to an external clock source. If the bypass request is 358 // asserted, we have to wait until the clock mux and clock manager 359 // have switched the mux and the clock divider. Also, we disable the 360 // life cycle partition checks at this point since we are going to 361 // alter the contents in the OTP memory array, which could lead to 362 // spurious escalations. 363 ClkMuxSt: begin 364 lc_check_byp_en = On; 365 if (lc_state_q inside {LcStRaw, -12- 366 LcStTestLocked0, 367 LcStTestLocked1, 368 LcStTestLocked2, 369 LcStTestLocked3, 370 LcStTestLocked4, 371 LcStTestLocked5, 372 LcStTestLocked6, 373 LcStTestUnlocked0, 374 LcStTestUnlocked1, 375 LcStTestUnlocked2, 376 LcStTestUnlocked3, 377 LcStTestUnlocked4, 378 LcStTestUnlocked5, 379 LcStTestUnlocked6, 380 LcStTestUnlocked7, 381 LcStRma}) begin 382 if (use_ext_clock_i) begin -13- 383 lc_clk_byp_req = On; 384 if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin -14- 385 fsm_state_d = CntIncrSt; ==> 386 end MISSING_ELSE ==> 387 end else begin 388 fsm_state_d = CntIncrSt; ==> 389 end 390 end else begin 391 fsm_state_d = CntIncrSt; ==> 392 end 393 end 394 /////////////////////////////////////////////////////////////////// 395 // This increments the life cycle counter state. 396 CntIncrSt: begin 397 // If the counter has reached the maximum, bail out. 398 if (trans_cnt_oflw_error_o) begin -15- 399 fsm_state_d = PostTransSt; ==> 400 end else begin 401 fsm_state_d = CntProgSt; ==> 402 end 403 end 404 /////////////////////////////////////////////////////////////////// 405 // This programs the life cycle counter state. 406 CntProgSt: begin 407 otp_prog_req_o = 1'b1; 408 409 // If the clock mux has been steered, double check that this is still the case. 410 // Otherwise abort the transition operation. 411 if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin -16- 412 fsm_state_d = PostTransSt; ==> 413 otp_prog_error_o = 1'b1; 414 end MISSING_ELSE ==> 415 416 // Check return value and abort if there 417 // was an error. 418 if (otp_prog_ack_i) begin -17- 419 if (otp_prog_err_i) begin -18- 420 fsm_state_d = PostTransSt; ==> 421 otp_prog_error_o = 1'b1; 422 end else begin 423 fsm_state_d = TransCheckSt; ==> 424 end 425 end MISSING_ELSE ==> 426 end 427 /////////////////////////////////////////////////////////////////// 428 // First transition valid check. This will be repeated several 429 // times below. 430 TransCheckSt: begin 431 if (trans_invalid_error_o) begin -19- 432 fsm_state_d = PostTransSt; ==> 433 end else begin 434 fsm_state_d = TokenHashSt; ==> 435 end 436 end 437 /////////////////////////////////////////////////////////////////// 438 // Hash and compare the token, no matter whether this transition 439 // is conditional or not. Unconditional transitions just use a known 440 // all-zero token value. That way, we always compare a hashed token 441 // and guarantee that no other control flow path exists that could 442 // bypass the token check. 443 // SEC_CM: TOKEN.DIGEST 444 TokenHashSt: begin 445 token_hash_req_o = 1'b1; 446 if (token_hash_ack_i) begin -20- 447 // This is the first comparison. 448 // The token is compared two more times further below. 449 // Also note that conditional transitions won't be possible if the 450 // corresponding token is not valid. This only applies to tokens stored in 451 // OTP. I.e., these tokens first have to be provisioned, before they can be used. 452 if (hashed_token_i == hashed_token_mux && -21- 453 !token_hash_err_i && 454 &hashed_token_valid_mux) begin 455 fsm_state_d = FlashRmaSt; ==> 456 end else begin 457 fsm_state_d = PostTransSt; ==> 458 token_invalid_error_o = 1'b1; 459 end 460 end MISSING_ELSE ==> 461 end 462 /////////////////////////////////////////////////////////////////// 463 // Flash RMA state. Note that we check the flash response again 464 // two times later below. 465 FlashRmaSt: begin 466 if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin -22- 467 lc_flash_rma_req = On; 468 if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin -23- 469 fsm_state_d = TokenCheck0St; ==> 470 end MISSING_ELSE ==> 471 end else begin 472 fsm_state_d = TokenCheck0St; ==> 473 end 474 end 475 /////////////////////////////////////////////////////////////////// 476 // Check again two times whether this transition and the hashed 477 // token are valid. Also check again whether the flash RMA 478 // response is valid. 479 // SEC_CM: TOKEN.DIGEST 480 TokenCheck0St, 481 TokenCheck1St: begin 482 if (trans_invalid_error_o) begin -24- 483 fsm_state_d = PostTransSt; ==> 484 end else begin 485 // If any of these RMA are conditions are true, 486 // all of them must be true at the same time. 487 if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -25- 488 lc_tx_test_false_strict(lc_flash_rma_req_o) && 489 lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) || 490 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 491 lc_tx_test_true_strict(lc_flash_rma_req_o) && 492 lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin 493 if (hashed_token_i == hashed_token_mux && -26- 494 !token_hash_err_i && 495 &hashed_token_valid_mux) begin 496 if (fsm_state_q == TokenCheck1St) begin -27- 497 // This is the only way we can get into the 498 // programming state. 499 fsm_state_d = TransProgSt; ==> 500 end else begin 501 fsm_state_d = TokenCheck1St; ==> 502 end 503 end else begin 504 fsm_state_d = PostTransSt; ==> 505 token_invalid_error_o = 1'b1; 506 end 507 // The flash RMA process failed. 508 end else begin 509 fsm_state_d = PostTransSt; ==> 510 flash_rma_error_o = 1'b1; 511 end 512 end 513 end 514 /////////////////////////////////////////////////////////////////// 515 // Initiate OTP transaction. Note that the concurrent 516 // LC state check is continuously checking whether the 517 // new LC state remains valid. Once the ack returns we are 518 // done with the transition and can go into the terminal PosTransSt. 519 TransProgSt: begin 520 otp_prog_req_o = 1'b1; 521 522 // If the clock mux has been steered, double check that this is still the case. 523 // Otherwise abort the transition operation. 524 if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin -28- 525 fsm_state_d = PostTransSt; ==> 526 otp_prog_error_o = 1'b1; 527 // Also double check that the RMA signals remain stable. 528 // Otherwise abort the transition operation. 529 end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -29- 530 (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) || 531 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 532 (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin 533 fsm_state_d = PostTransSt; ==> 534 flash_rma_error_o = 1'b1; 535 end else if (otp_prog_ack_i) begin -30- 536 fsm_state_d = PostTransSt; ==> 537 otp_prog_error_o = otp_prog_err_i; 538 trans_success_o = ~otp_prog_err_i; 539 end MISSING_ELSE ==> 540 end 541 /////////////////////////////////////////////////////////////////// 542 // Terminal states. 543 ScrapSt, 544 PostTransSt: ; ==> 545 546 547 EscalateSt: begin 548 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 549 token_hash_req_chk_o = 1'b0; ==> 550 end 551 552 InvalidSt: begin 553 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 554 token_hash_req_chk_o = 1'b0; ==> 555 state_invalid_error_o = 1'b1; 556 end 557 /////////////////////////////////////////////////////////////////// 558 // Go to terminal error state if we get here. 559 default: begin 560 fsm_state_d = InvalidSt; ==>

Branches:
-1--2--3--4--5--6--7--8--9--10--11--12--13--14--15--16--17--18--19--20--21--22--23--24--25--26--27--28--29--30-StatusTests
ResetSt 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
ResetSt 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T24,T41
IdleSt - - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T15,T17,T18
IdleSt - - 0 1 1 1 1 - - - - - - - - - - - - - - - - - - - - - - Covered T1,T61
IdleSt - - 0 1 1 1 0 - - - - - - - - - - - - - - - - - - - - - - Covered T24,T41,T36
IdleSt - - 0 1 1 0 - - - - - - - - - - - - - - - - - - - - - - - Not Covered
IdleSt - - 0 1 0 - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T41,T36
IdleSt - - 0 0 - - - 1 - - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T5
IdleSt - - 0 0 - - - 0 - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 1 1 - - - - - - - - - - - - - - - - - - - Covered T7,T11,T14
IdleSt - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 0 - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T7
ClkMuxSt - - - - - - - - - - 1 1 1 - - - - - - - - - - - - - - - - Covered T7,T14,T17
ClkMuxSt - - - - - - - - - - 1 1 0 - - - - - - - - - - - - - - - - Covered T17,T73,T74
ClkMuxSt - - - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - Covered T2,T4,T5
ClkMuxSt - - - - - - - - - - 0 - - - - - - - - - - - - - - - - - - Covered T2,T4,T7
CntIncrSt - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - - Covered T13,T45,T52
CntIncrSt - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - Covered T13,T16,T45
CntProgSt - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - - 1 1 - - - - - - - - - - - - Covered T4,T5,T55
CntProgSt - - - - - - - - - - - - - - - 1 0 - - - - - - - - - - - - Covered T2,T7,T12
CntProgSt - - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - Covered T2,T4,T5
TransCheckSt - - - - - - - - - - - - - - - - - 1 - - - - - - - - - - - Covered T13,T42,T45
TransCheckSt - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - - Covered T2,T7,T12
TokenHashSt - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - - - Covered T2,T7,T12
TokenHashSt - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - - - Covered T13,T16,T42
TokenHashSt - - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - Covered T2,T7,T12
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - Covered T2,T7,T14
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - Covered T2,T7,T14
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 0 - - - - - - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 1 - - - - - - Covered T42,T47,T43
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 1 - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 0 - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 0 - - - - Not Covered
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 0 - - - - - Covered T13,T16,T45
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - - Covered T56,T57,T58
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 1 - Covered T46,T59,T60
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 1 Covered T2,T7,T12
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 0 Covered T2,T7,T12
ScrapSt PostTransSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T4
EscalateSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T4,T5,T12
InvalidSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T12,T16,T20
default - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T12,T53,T21


567 if (esc_scrap_state0_i || esc_scrap_state1_i) begin -1- 568 fsm_state_d = EscalateSt; ==> 569 // SEC_CM: MAIN.FSM.LOCAL_ESC 570 // If at any time the life cycle state encoding or any other FSM state within this module 571 // is not valid, we jump into the terminal error state right away. 572 // Note that state_invalid_error is a multibit error signal 573 // with different error sources - need to reduce this to one bit here. 574 end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin -2- 575 fsm_state_d = InvalidSt; ==> 576 state_invalid_error_o = 1'b1; 577 end MISSING_ELSE ==>

Branches:
-1--2-StatusTests
1 - Covered T4,T5,T12
0 1 Covered T12,T16,T20
0 0 Covered T1,T2,T3


584 `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


585 `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


586 `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


589 if (!rst_ni) begin -1- 590 lc_state_valid_q <= 1'b0; ==> 591 end else begin 592 lc_state_valid_q <= lc_state_valid_d; ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


684 if (lc_tx_test_true_strict(test_tokens_valid[0])) begin -1- 685 hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower; ==> 686 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


687 if (lc_tx_test_true_strict(test_tokens_valid[1])) begin -1- 688 hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper; ==> 689 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


691 if (lc_tx_test_true_strict(test_tokens_valid[2])) begin -1- 692 hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower; ==> 693 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


694 if (lc_tx_test_true_strict(test_tokens_valid[3])) begin -1- 695 hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper; ==> 696 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


698 if (lc_tx_test_true_strict(rma_token_valid[0])) begin -1- 699 hashed_tokens_lower[RmaTokenIdx] = rma_token_lower; ==> 700 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


701 if (lc_tx_test_true_strict(rma_token_valid[1])) begin -1- 702 hashed_tokens_upper[RmaTokenIdx] = rma_token_upper; ==> 703 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


882 `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


608 if(!rst_ni) begin -1- 609 strap_en_override_q <= '0; ==> 610 volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False; 611 end else begin 612 strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0], ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


Assert Coverage for Module : lc_ctrl_fsm
TotalAttemptedPercentSucceeded/MatchedPercent
Assertions 15 15 100.00 15 100.00
Cover properties 0 0 0
Cover sequences 0 0 0
Total 15 15 100.00 15 100.00




Assertion Details

NameAttemptsReal SuccessesFailuresIncomplete
ClkBypStaysOnOnceAsserted_A 61004413 3472077 0 66
EscStaysOnOnceAsserted_A 61004413 11088580 0 9
FlashRmaStaysOnOnceAsserted_A 61004413 405693 0 9
FsmStateKnown_A 61004413 57841848 0 0
LcCntKnown_A 61004413 57841848 0 0
LcStateKnown_A 61004413 57841848 0 0
NoClkBypInProdStates_A 61004413 8488343 0 0
SecCmCFILinear_A 61004413 252983 0 2079
SecCmCFITerminal0_A 61004413 8867421 0 0
SecCmCFITerminal1_A 61004413 80879 0 0
SecCmCFITerminal2_A 61004413 4433491 0 0
SecCmCFITerminal3_A 61004413 6587084 0 0
u_cnt_regs_A 56257205 53399572 0 0
u_fsm_state_regs_A 59562327 56511982 0 0
u_state_regs_A 57520453 54662687 0 0


ClkBypStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 3472077 0 66
T7 50526 5654 0 0
T8 0 101881 0 1
T9 0 0 0 1
T11 18445 15354 0 1
T12 13618 0 0 0
T13 36722 0 0 0
T14 26054 3270 0 0
T15 39675 0 0 0
T16 32655 0 0 0
T17 4051 136 0 0
T18 0 13097 0 0
T19 0 3223 0 1
T22 0 26295 0 1
T24 1806 0 0 0
T25 3460 0 0 0
T39 0 0 0 1
T50 0 18880 0 0
T75 0 186 0 0
T76 0 0 0 1
T77 0 0 0 1
T78 0 0 0 1
T79 0 0 0 1

EscStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 11088580 0 9
T4 3067 362 0 0
T5 17537 2458 0 0
T6 7233 0 0 0
T7 50526 0 0 0
T11 18445 0 0 0
T12 13618 1014 0 0
T13 36722 1261 0 0
T14 26054 0 0 0
T15 0 19589 0 0
T16 0 6685 0 0
T17 0 11 0 0
T18 0 3436 0 0
T20 0 16457 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T34 0 0 0 1
T55 0 1711 0 0
T80 0 0 0 1
T81 0 0 0 1
T82 0 0 0 1
T83 0 0 0 1
T84 0 0 0 1
T85 0 0 0 1
T86 0 0 0 1
T87 0 0 0 1

FlashRmaStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 405693 0 9
T2 1896 18 0 0
T3 939 0 0 0
T4 3067 0 0 0
T5 17537 0 0 0
T6 7233 0 0 0
T7 50526 367 0 0
T11 18445 0 0 0
T12 13618 0 0 0
T13 36722 0 0 0
T14 26054 87 0 0
T15 0 661 0 0
T16 0 1027 0 0
T17 0 61 0 0
T19 0 116 0 0
T21 0 4307 0 0
T24 0 1409 0 1
T42 0 676 0 0
T88 0 0 0 1
T89 0 0 0 1
T90 0 0 0 1
T91 0 0 0 1
T92 0 0 0 1
T93 0 0 0 1
T94 0 0 0 1
T95 0 0 0 1

FsmStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

LcCntKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

LcStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

NoClkBypInProdStates_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 8488343 0 0
T2 1896 173 0 0
T3 939 0 0 0
T4 3067 1097 0 0
T5 17537 0 0 0
T6 7233 0 0 0
T7 50526 2384 0 0
T11 18445 0 0 0
T12 13618 0 0 0
T13 36722 2344 0 0
T14 26054 0 0 0
T15 0 3947 0 0
T16 0 3941 0 0
T17 0 80 0 0
T25 0 3360 0 0
T42 0 7122 0 0
T51 0 4089 0 0

SecCmCFILinear_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 252983 0 2079
T2 1896 22 0 11
T3 939 0 0 1
T4 3067 18 0 1
T5 17537 24 0 1
T6 7233 0 0 1
T7 50526 143 0 11
T11 18445 0 0 1
T12 13618 112 0 1
T13 36722 587 0 1
T14 26054 66 0 11
T15 0 676 0 0
T16 0 541 0 0
T17 0 178 0 0

SecCmCFITerminal0_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 8867421 0 0
T1 821 519 0 0
T2 1896 1054 0 0
T3 939 0 0 0
T4 3067 210 0 0
T5 17537 3200 0 0
T6 7233 0 0 0
T7 50526 5515 0 0
T11 18445 0 0 0
T12 13618 1646 0 0
T13 36722 14431 0 0
T14 0 626 0 0
T15 0 11 0 0
T24 0 1196 0 0

SecCmCFITerminal1_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 80879 0 0
T15 39675 4 0 0
T16 32655 0 0 0
T17 4051 11 0 0
T18 108434 3436 0 0
T19 17308 0 0 0
T34 0 1562 0 0
T42 49486 0 0 0
T51 24486 0 0 0
T52 0 5 0 0
T55 5834 0 0 0
T68 0 4 0 0
T69 0 147 0 0
T70 0 122 0 0
T75 0 9 0 0
T96 0 3224 0 0
T97 1774 0 0 0
T98 654 0 0 0

SecCmCFITerminal2_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 4433491 0 0
T4 3067 365 0 0
T5 17537 2462 0 0
T6 7233 0 0 0
T7 50526 0 0 0
T11 18445 0 0 0
T12 13618 744 0 0
T13 36722 1270 0 0
T14 26054 0 0 0
T15 0 19677 0 0
T16 0 4315 0 0
T20 0 8835 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T53 0 9066 0 0
T55 0 1724 0 0
T67 0 735 0 0

SecCmCFITerminal3_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 6587084 0 0
T12 13618 271 0 0
T13 36722 0 0 0
T14 26054 0 0 0
T15 39675 0 0 0
T16 32655 2401 0 0
T17 4051 0 0 0
T20 0 7627 0 0
T21 0 7360 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T42 49486 0 0 0
T46 0 1859 0 0
T53 0 5402 0 0
T54 0 3882 0 0
T67 0 274 0 0
T69 0 5420 0 0
T97 1774 0 0 0
T99 0 707 0 0

u_cnt_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56257205 53399572 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13253 12146 0 0
T13 36722 30121 0 0

u_fsm_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 59562327 56511982 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13258 12156 0 0
T13 36722 30121 0 0

u_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 57520453 54662687 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 12899 11879 0 0
T13 36722 30121 0 0

Line Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Line No.TotalCoveredPercent
TOTAL17717598.87
CONT_ASSIGN12611100.00
ALWAYS14633100.00
CONT_ASSIGN17111100.00
CONT_ASSIGN17811100.00
CONT_ASSIGN17911100.00
ALWAYS20411211098.21
ALWAYS58433100.00
ALWAYS58533100.00
ALWAYS58633100.00
ALWAYS58933100.00
ALWAYS60855100.00
CONT_ASSIGN61911100.00
CONT_ASSIGN66611100.00
CONT_ASSIGN66711100.00
CONT_ASSIGN66811100.00
ALWAYS6771515100.00
ALWAYS7121414100.00
CONT_ASSIGN73211100.00
CONT_ASSIGN73611100.00
CONT_ASSIGN74011100.00
CONT_ASSIGN74211100.00
CONT_ASSIGN74911100.00
ALWAYS88233100.00

Click here to see the source line report.

Cond Coverage for Instance : tb.dut.u_lc_ctrl_fsm
TotalCoveredPercent
Conditions868194.19
Logical868194.19
Non-Logical00
Event00

 LINE       251
 EXPRESSION (init_req_i && lc_state_valid_q)
             -----1----    --------2-------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT12,T53,T54
11CoveredT1,T2,T3

 LINE       284
 EXPRESSION (lc_state_q == LcStScrap)
            ------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT15,T17,T18

 LINE       293
 EXPRESSION (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i)
             -----------1----------    ----------2----------    -----3-----
-1--2--3-StatusTests
-01CoveredT2,T4,T5
-10CoveredT1,T24,T41
-11CoveredT1,T24,T41

 LINE       295
 EXPRESSION ((lc_state_q == LcStRaw) && (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}}) && ((!trans_invalid_error_o)))
             -----------1-----------    ----------------------------------------2---------------------------------------    -------------3------------
-1--2--3-StatusTestsExclude Annotation
011Excluded VC_COV_UNR
101Excluded VC_COV_UNR
110Excluded VC_COV_UNR
111CoveredT1,T24,T41

 LINE       295
 SUB-EXPRESSION (lc_state_q == LcStRaw)
                -----------1-----------
-1-StatusTests
0CoveredT1,T41,T36
1CoveredT1,T24,T41

 LINE       295
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStTestUnlocked0}})
                ----------------------------------------1---------------------------------------
-1-StatusTests
0CoveredT1,T41,T36
1CoveredT1,T24,T41

 LINE       299
 EXPRESSION (unhashed_token_i == lc_ctrl_state_pkg::RndCnstRawUnlockTokenHashed)
            ----------------------------------1---------------------------------
-1-StatusTestsExclude Annotation
0Excluded VC_COV_UNR
1CoveredT1,T24,T41

 LINE       305
 EXPRESSION ((lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q)
             ----------1---------
-1-StatusTestsExclude Annotation
0CoveredT24,T41,T36
1ExcludedT1,T61 VC_COV_UNR

 LINE       305
 SUB-EXPRESSION (lc_cnt_q == LcCnt0)
                ----------1---------
-1-StatusTestsExclude Annotation
0CoveredT24,T41,T36
1ExcludedT1,T61 VC_COV_UNR

 LINE       411
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[1])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T4,T5
1CoveredT13,T16,T45

 LINE       452
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011CoveredT13,T42,T51
101CoveredT13,T45,T52
110Not Covered
111CoveredT2,T7,T12

 LINE       452
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0CoveredT13,T16,T42
1CoveredT2,T7,T12

 LINE       466
 EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
            -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       493
 EXPRESSION ((hashed_token_i == hashed_token_mux) && ((!token_hash_err_i)) && ((&hashed_token_valid_mux)))
             ------------------1-----------------    ----------2----------    -------------3-------------
-1--2--3-StatusTests
011Not Covered
101Not Covered
110Not Covered
111CoveredT2,T7,T12

 LINE       493
 SUB-EXPRESSION (hashed_token_i == hashed_token_mux)
                ------------------1-----------------
-1-StatusTests
0Not Covered
1CoveredT2,T7,T12

 LINE       496
 EXPRESSION (fsm_state_q == TokenCheck1St)
            ---------------1--------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T12

 LINE       524
 EXPRESSION (lc_clk_byp_req_o != lc_clk_byp_ack[2])
            -------------------1-------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT56,T57,T58

 LINE       529
 EXPRESSION 
 Number  Term
      1  ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))) || 
      2  ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))))
-1--2-StatusTests
00CoveredT2,T7,T12
01CoveredT46,T60,T62
10CoveredT59,T63,T64

 LINE       529
 SUB-EXPRESSION ((trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off)))
                 -----------------------------------1----------------------------------    --------------------------------2--------------------------------
-1--2-StatusTests
01CoveredT2,T7,T14
10CoveredT2,T7,T12
11CoveredT59,T63,T64

 LINE       529
 SUB-EXPRESSION (trans_target_i != {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != Off) || (lc_flash_rma_ack_buf[2] != Off))
                 -------------1-------------    ----------------2---------------
-1--2-StatusTests
00CoveredT2,T7,T12
01CoveredT59,T63,T64
10CoveredT65

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != Off)
                -------------1-------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != Off)
                ----------------1---------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION ((trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}}) && ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On)))
                 -----------------------------------1----------------------------------    -------------------------------2-------------------------------
-1--2-StatusTests
01CoveredT2,T7,T12
10CoveredT2,T7,T14
11CoveredT46,T60,T62

 LINE       529
 SUB-EXPRESSION (trans_target_i == {lc_ctrl_state_pkg::DecLcStateNumRep {DecLcStRma}})
                -----------------------------------1----------------------------------
-1-StatusTests
0CoveredT2,T7,T12
1CoveredT2,T7,T14

 LINE       529
 SUB-EXPRESSION ((lc_flash_rma_req_o != On) || (lc_flash_rma_ack_buf[2] != On))
                 -------------1------------    ---------------2---------------
-1--2-StatusTests
00CoveredT2,T7,T14
01CoveredT46,T60,T62
10CoveredT66

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_req_o != On)
                -------------1------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       529
 SUB-EXPRESSION (lc_flash_rma_ack_buf[2] != On)
                ---------------1---------------
-1-StatusTests
0CoveredT2,T7,T14
1CoveredT2,T7,T12

 LINE       567
 EXPRESSION (esc_scrap_state0_i || esc_scrap_state1_i)
             ---------1--------    ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT4,T5,T12
10CoveredT4,T5,T12

 LINE       574
 EXPRESSION ((((|state_invalid_error)) | token_if_fsm_err_i) && (fsm_state_q != EscalateSt))
             -----------------------1-----------------------    -------------2-------------
-1--2-StatusTests
01CoveredT1,T2,T3
10CoveredT20,T67,T53
11CoveredT12,T16,T20

 LINE       574
 SUB-EXPRESSION (((|state_invalid_error)) | token_if_fsm_err_i)
                 ------------1-----------   ---------2--------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT20,T67,T53
10CoveredT12,T16,T20

 LINE       574
 SUB-EXPRESSION (fsm_state_q != EscalateSt)
                -------------1-------------
-1-StatusTests
0CoveredT4,T5,T12
1CoveredT1,T2,T3

 LINE       612
 SUB-EXPRESSION (set_strap_en_override || gen_strap_delay_regs.strap_en_override_q[0])
                 ----------1----------    ---------------------2---------------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT1,T24,T41
10CoveredT1,T24,T41

 LINE       732
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[0]][trans_target_i[0]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       732
 SUB-EXPRESSION ((int'(dec_lc_state_o[0]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[0]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT11,T8,T9
11CoveredT1,T2,T3

 LINE       736
 EXPRESSION 
 Number  Term
      1  ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates)) ? lc_ctrl_pkg::TransTokenIdxMatrix[dec_lc_state_o[1]][trans_target_i[1]] : InvalidTokenIdx)
-1-StatusTests
0UnreachableT1,T2,T3
1CoveredT1,T2,T3

 LINE       736
 SUB-EXPRESSION ((int'(dec_lc_state_o[1]) < lc_ctrl_state_pkg::NumLcStates) && (int'(trans_target_i[1]) < lc_ctrl_state_pkg::NumLcStates))
                 -----------------------------1----------------------------    -----------------------------2----------------------------
-1--2-StatusTests
01UnreachableT1,T2,T3
10UnreachableT8,T9,T10
11CoveredT1,T2,T3

 LINE       749
 EXPRESSION (trans_invalid_error || (token_idx0 != token_idx1))
             ---------1---------    -------------2------------
-1--2-StatusTests
00CoveredT1,T2,T3
01CoveredT6,T11,T42
10CoveredT1,T13,T45

 LINE       749
 SUB-EXPRESSION (token_idx0 != token_idx1)
                -------------1------------
-1-StatusTests
0CoveredT1,T2,T3
1CoveredT6,T11,T42

FSM Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Summary for FSM :: fsm_state_q
TotalCoveredPercent
States 15 15 100.00 (Not included in score)
Transitions 35 35 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: fsm_state_q
statesLine No.CoveredTests
ClkMuxSt 327 Covered T2,T4,T5
CntIncrSt 385 Covered T2,T4,T5
CntProgSt 401 Covered T2,T4,T5
EscalateSt 568 Covered T4,T5,T12
FlashRmaSt 455 Covered T2,T7,T12
IdleSt 252 Covered T1,T2,T3
InvalidSt 575 Covered T12,T16,T20
PostTransSt 317 Covered T1,T2,T4
ResetSt 246 Covered T1,T2,T3
ScrapSt 285 Covered T15,T17,T18
TokenCheck0St 469 Covered T2,T7,T12
TokenCheck1St 501 Covered T2,T7,T12
TokenHashSt 434 Covered T2,T7,T12
TransCheckSt 423 Covered T2,T7,T12
TransProgSt 499 Covered T2,T7,T12


transitionsLine No.CoveredTestsExclude Annotation
ClkMuxSt->CntIncrSt 385 Covered T2,T4,T5
ClkMuxSt->EscalateSt 568 Covered T15,T38,T49
ClkMuxSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->CntProgSt 401 Covered T2,T4,T5
CntIncrSt->EscalateSt 568 Covered T15,T68,T38
CntIncrSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntIncrSt->PostTransSt 399 Covered T13,T45,T52
CntProgSt->EscalateSt 568 Covered T15,T68,T38
CntProgSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
CntProgSt->PostTransSt 412 Covered T4,T5,T13
CntProgSt->TransCheckSt 423 Covered T2,T7,T12
EscalateSt->InvalidSt 575 Excluded VC_COV_UNR
FlashRmaSt->EscalateSt 568 Covered T15,T68,T38
FlashRmaSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
FlashRmaSt->TokenCheck0St 469 Covered T2,T7,T12
IdleSt->ClkMuxSt 327 Covered T2,T4,T5
IdleSt->EscalateSt 568 Covered T15,T68,T38
IdleSt->InvalidSt 575 Covered T12,T16,T20
IdleSt->PostTransSt 317 Covered T1,T41,T36
IdleSt->ScrapSt 285 Covered T15,T17,T18
InvalidSt->EscalateSt 568 Covered T12,T16,T20
PostTransSt->EscalateSt 568 Covered T4,T5,T13
PostTransSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ResetSt->EscalateSt 568 Covered T15,T68,T38
ResetSt->IdleSt 252 Covered T1,T2,T3
ResetSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
ScrapSt->EscalateSt 568 Covered T15,T68,T49
ScrapSt->InvalidSt 575 Covered T69,T70,T71
TokenCheck0St->EscalateSt 568 Covered T68,T49,T72
TokenCheck0St->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck0St->PostTransSt 483 Covered T13,T16,T42
TokenCheck0St->TokenCheck1St 501 Covered T2,T7,T12
TokenCheck1St->EscalateSt 568 Covered T68,T38,T72
TokenCheck1St->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenCheck1St->PostTransSt 483 Covered T16,T42,T45
TokenCheck1St->TransProgSt 499 Covered T2,T7,T12
TokenHashSt->EscalateSt 568 Covered T15,T68,T48
TokenHashSt->FlashRmaSt 455 Covered T2,T7,T12
TokenHashSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TokenHashSt->PostTransSt 457 Covered T13,T16,T42
TransCheckSt->EscalateSt 568 Covered T15,T38,T72
TransCheckSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransCheckSt->PostTransSt 432 Covered T13,T42,T45
TransCheckSt->TokenHashSt 434 Covered T2,T7,T12
TransProgSt->EscalateSt 568 Covered T15,T68,T38
TransProgSt->InvalidSt 575 Excluded [LOW_RISK] The transition from any state to error_terminal state is fully verified in FPV.
TransProgSt->PostTransSt 525 Covered T2,T7,T12


Summary for FSM :: lc_state_q
TotalCoveredPercent
States 21 6 28.57 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_state_q
statesLine No.CoveredTests
LcStDev 92 Not Covered
LcStProd 93 Not Covered
LcStProdEnd 94 Not Covered
LcStRaw 295 Covered T1,T5,T12
LcStRma 333 Not Covered
LcStScrap 284 Not Covered
LcStTestLocked0 333 Covered T7,T13,T15
LcStTestLocked1 333 Covered T7,T11,T12
LcStTestLocked2 333 Not Covered
LcStTestLocked3 333 Not Covered
LcStTestLocked4 333 Not Covered
LcStTestLocked5 333 Not Covered
LcStTestLocked6 333 Not Covered
LcStTestUnlocked0 301 Covered T1,T2,T5
LcStTestUnlocked1 333 Covered T4,T7,T12
LcStTestUnlocked2 333 Covered T5,T7,T13
LcStTestUnlocked3 333 Not Covered
LcStTestUnlocked4 333 Not Covered
LcStTestUnlocked5 333 Not Covered
LcStTestUnlocked6 333 Not Covered
LcStTestUnlocked7 333 Not Covered


transitionsLine No.CoveredTests
LcStRaw->LcStTestUnlocked0 301 Covered T1,T5,T24


Summary for FSM :: lc_cnt_q
TotalCoveredPercent
States 25 6 24.00 (Not included in score)
Transitions 1 1 100.00
Sequences 0 0

State, Transition and Sequence Details for FSM :: lc_cnt_q
statesLine No.CoveredTests
LcCnt0 305 Covered T1,T42,T69
LcCnt1 305 Covered T1,T2,T5
LcCnt10 112 Not Covered
LcCnt11 113 Not Covered
LcCnt12 114 Not Covered
LcCnt13 115 Not Covered
LcCnt14 116 Not Covered
LcCnt15 117 Not Covered
LcCnt16 118 Not Covered
LcCnt17 119 Not Covered
LcCnt18 120 Not Covered
LcCnt19 121 Not Covered
LcCnt2 104 Covered T13,T15,T42
LcCnt20 122 Not Covered
LcCnt21 123 Not Covered
LcCnt22 124 Not Covered
LcCnt23 125 Not Covered
LcCnt24 126 Not Covered
LcCnt3 105 Covered T7,T12,T13
LcCnt4 106 Covered T5,T12,T13
LcCnt5 107 Covered T4,T6,T13
LcCnt6 108 Not Covered
LcCnt7 109 Not Covered
LcCnt8 110 Not Covered
LcCnt9 111 Not Covered


transitionsLine No.CoveredTests
LcCnt0->LcCnt1 305 Covered T1,T69,T43



Branch Coverage for Instance : tb.dut.u_lc_ctrl_fsm
Line No.TotalCoveredPercent
Branches 73 72 98.63
TERNARY 732 1 1 100.00
TERNARY 736 1 1 100.00
CASE 242 44 43 97.73
IF 567 3 3 100.00
IF 584 2 2 100.00
IF 585 2 2 100.00
IF 586 2 2 100.00
IF 589 2 2 100.00
IF 684 2 2 100.00
IF 687 2 2 100.00
IF 691 2 2 100.00
IF 694 2 2 100.00
IF 698 2 2 100.00
IF 701 2 2 100.00
IF 882 2 2 100.00
IF 608 2 2 100.00


732 assign token_idx0 = (int'(dec_lc_state_o[0]) < NumLcStates && 733 int'(trans_target_i[0]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


736 assign token_idx1 = (int'(dec_lc_state_o[1]) < NumLcStates && 737 int'(trans_target_i[1]) < NumLcStates) ? -1- ==> ==> (Unreachable)

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Unreachable T1,T2,T3


242 unique case (fsm_state_q) -1- 243 /////////////////////////////////////////////////////////////////// 244 // Wait here until OTP has initialized and the 245 // power manager sends an initialization request. 246 ResetSt: begin 247 init_done_o = 1'b0; 248 lc_clk_byp_req = Off; 249 lc_flash_rma_req = Off; 250 lc_check_byp_en = Off; 251 if (init_req_i && lc_state_valid_q) begin -2- 252 fsm_state_d = IdleSt; ==> 253 // Fetch LC state vector from OTP. 254 lc_state_d = lc_state_i; 255 lc_cnt_d = lc_cnt_i; 256 end MISSING_ELSE ==> 257 end 258 /////////////////////////////////////////////////////////////////// 259 // Idle state where life cycle control signals are broadcast. 260 // Note that the life cycle signals are decoded and broadcast 261 // in the lc_ctrl_signal_decode submodule. 262 IdleSt: begin 263 idle_o = 1'b1; 264 265 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 266 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 267 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 268 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 269 // --------------------------------------------------------------- 270 // Note that if the volatile unlock mechanism is available, 271 // we have to stop fetching the OTP value after a volatile unlock has succeeded. 272 // Otherwise we unconditionally fetch from OTP in this state. 273 if (!(SecVolatileRawUnlockEn && lc_state_q == LcStTestUnlocked0 && lc_cnt_q != LcCnt0) || -3- 274 prim_mubi_pkg::mubi8_test_false_loose(volatile_raw_unlock_success_q)) begin 275 // Continuously fetch LC state vector from OTP. 276 // The state is locked in once a transition is started. 277 lc_state_d = lc_state_i; ==> 278 lc_cnt_d = lc_cnt_i; 279 end MISSING_ELSE ==> 280 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 281 282 // If the life cycle state is SCRAP, we move the FSM into a terminal 283 // SCRAP state that does not allow any transitions to be initiated anymore. 284 if (lc_state_q == LcStScrap) begin -4- 285 fsm_state_d = ScrapSt; ==> 286 287 // ---------- VOLATILE_TEST_UNLOCKED CODE SECTION START ---------- 288 // NOTE THAT THIS IS A FEATURE FOR TEST CHIPS ONLY TO MITIGATE 289 // THE RISK OF A BROKEN OTP MACRO. THIS WILL BE DISABLED VIA 290 // SecVolatileRawUnlockEn AT COMPILETIME FOR PRODUCTION DEVICES. 291 // --------------------------------------------------------------- 292 // Only enter here if volatile RAW unlock is available and enabled. 293 end else if (SecVolatileRawUnlockEn && volatile_raw_unlock_i && trans_cmd_i) begin -5- 294 // We only allow transitions from RAW -> TEST_UNLOCKED0 295 if (lc_state_q == LcStRaw && -6- 296 trans_target_i == {DecLcStateNumRep{DecLcStTestUnlocked0}} && 297 !trans_invalid_error_o) begin 298 // 128bit token check (without passing it through the KMAC) 299 if (unhashed_token_i == RndCnstRawUnlockTokenHashed) begin -7- 300 // We stay in Idle, but update the life cycle state register (volatile). 301 lc_state_d = LcStTestUnlocked0; 302 // If the count is 0, we set it to 1 - otherwise we just leave it as is so that the 303 // register value is in sync with what has been programmed to OTP already (there may 304 // have been unsuccessul raw unlock attempts before that already incremented it). 305 lc_cnt_d = (lc_cnt_q == LcCnt0) ? LcCnt1 : lc_cnt_q; -8- ==> (Excluded) ==> 306 // Re-sample the DFT straps in the pinmux. 307 // This signal will be delayed by several cycles so that the LC_CTRL signals 308 // have time to propagate. 309 set_strap_en_override = 1'b1; 310 // We have to remember that the transition was successful in order to correctly 311 // disable the continuos sampling of the life cycle state vector coming from OTP. 312 volatile_raw_unlock_success_d = prim_mubi_pkg::MuBi8True; 313 // Indicate that the transition was successful. 314 trans_success_o = 1'b1; 315 end else begin 316 token_invalid_error_o = 1'b1; ==> (Excluded) Exclude Annotation: VC_COV_UNR 317 fsm_state_d = PostTransSt; 318 end 319 end else begin 320 // Transition invalid error is set by lc_ctrl_state_transition module. 321 fsm_state_d = PostTransSt; ==> 322 end 323 // ----------- VOLATILE_TEST_UNLOCKED CODE SECTION END ----------- 324 // Initiate a transition. This will first increment the 325 // life cycle counter before hashing and checking the token. 326 end else if (trans_cmd_i) begin -9- 327 fsm_state_d = ClkMuxSt; ==> 328 end MISSING_ELSE ==> 329 // If we are in a non-PROD life cycle state, steer the clock mux if requested. This 330 // action is available in IdleSt so that the mux can be steered without having to initiate 331 // a life cycle transition. If a transition is initiated however, the life cycle controller 332 // will wait for the clock mux acknowledgement in the ClkMuxSt state before proceeding. 333 if (lc_state_q inside {LcStRaw, -10- 334 LcStTestLocked0, 335 LcStTestLocked1, 336 LcStTestLocked2, 337 LcStTestLocked3, 338 LcStTestLocked4, 339 LcStTestLocked5, 340 LcStTestLocked6, 341 LcStTestUnlocked0, 342 LcStTestUnlocked1, 343 LcStTestUnlocked2, 344 LcStTestUnlocked3, 345 LcStTestUnlocked4, 346 LcStTestUnlocked5, 347 LcStTestUnlocked6, 348 LcStTestUnlocked7, 349 LcStRma}) begin 350 if (use_ext_clock_i) begin -11- 351 lc_clk_byp_req = On; ==> 352 end MISSING_ELSE ==> 353 end MISSING_ELSE ==> 354 end 355 /////////////////////////////////////////////////////////////////// 356 // Clock mux state. If we are in RAW, TEST* or RMA, it is permissible 357 // to switch to an external clock source. If the bypass request is 358 // asserted, we have to wait until the clock mux and clock manager 359 // have switched the mux and the clock divider. Also, we disable the 360 // life cycle partition checks at this point since we are going to 361 // alter the contents in the OTP memory array, which could lead to 362 // spurious escalations. 363 ClkMuxSt: begin 364 lc_check_byp_en = On; 365 if (lc_state_q inside {LcStRaw, -12- 366 LcStTestLocked0, 367 LcStTestLocked1, 368 LcStTestLocked2, 369 LcStTestLocked3, 370 LcStTestLocked4, 371 LcStTestLocked5, 372 LcStTestLocked6, 373 LcStTestUnlocked0, 374 LcStTestUnlocked1, 375 LcStTestUnlocked2, 376 LcStTestUnlocked3, 377 LcStTestUnlocked4, 378 LcStTestUnlocked5, 379 LcStTestUnlocked6, 380 LcStTestUnlocked7, 381 LcStRma}) begin 382 if (use_ext_clock_i) begin -13- 383 lc_clk_byp_req = On; 384 if (lc_tx_test_true_strict(lc_clk_byp_ack[0])) begin -14- 385 fsm_state_d = CntIncrSt; ==> 386 end MISSING_ELSE ==> 387 end else begin 388 fsm_state_d = CntIncrSt; ==> 389 end 390 end else begin 391 fsm_state_d = CntIncrSt; ==> 392 end 393 end 394 /////////////////////////////////////////////////////////////////// 395 // This increments the life cycle counter state. 396 CntIncrSt: begin 397 // If the counter has reached the maximum, bail out. 398 if (trans_cnt_oflw_error_o) begin -15- 399 fsm_state_d = PostTransSt; ==> 400 end else begin 401 fsm_state_d = CntProgSt; ==> 402 end 403 end 404 /////////////////////////////////////////////////////////////////// 405 // This programs the life cycle counter state. 406 CntProgSt: begin 407 otp_prog_req_o = 1'b1; 408 409 // If the clock mux has been steered, double check that this is still the case. 410 // Otherwise abort the transition operation. 411 if (lc_clk_byp_req_o != lc_clk_byp_ack[1]) begin -16- 412 fsm_state_d = PostTransSt; ==> 413 otp_prog_error_o = 1'b1; 414 end MISSING_ELSE ==> 415 416 // Check return value and abort if there 417 // was an error. 418 if (otp_prog_ack_i) begin -17- 419 if (otp_prog_err_i) begin -18- 420 fsm_state_d = PostTransSt; ==> 421 otp_prog_error_o = 1'b1; 422 end else begin 423 fsm_state_d = TransCheckSt; ==> 424 end 425 end MISSING_ELSE ==> 426 end 427 /////////////////////////////////////////////////////////////////// 428 // First transition valid check. This will be repeated several 429 // times below. 430 TransCheckSt: begin 431 if (trans_invalid_error_o) begin -19- 432 fsm_state_d = PostTransSt; ==> 433 end else begin 434 fsm_state_d = TokenHashSt; ==> 435 end 436 end 437 /////////////////////////////////////////////////////////////////// 438 // Hash and compare the token, no matter whether this transition 439 // is conditional or not. Unconditional transitions just use a known 440 // all-zero token value. That way, we always compare a hashed token 441 // and guarantee that no other control flow path exists that could 442 // bypass the token check. 443 // SEC_CM: TOKEN.DIGEST 444 TokenHashSt: begin 445 token_hash_req_o = 1'b1; 446 if (token_hash_ack_i) begin -20- 447 // This is the first comparison. 448 // The token is compared two more times further below. 449 // Also note that conditional transitions won't be possible if the 450 // corresponding token is not valid. This only applies to tokens stored in 451 // OTP. I.e., these tokens first have to be provisioned, before they can be used. 452 if (hashed_token_i == hashed_token_mux && -21- 453 !token_hash_err_i && 454 &hashed_token_valid_mux) begin 455 fsm_state_d = FlashRmaSt; ==> 456 end else begin 457 fsm_state_d = PostTransSt; ==> 458 token_invalid_error_o = 1'b1; 459 end 460 end MISSING_ELSE ==> 461 end 462 /////////////////////////////////////////////////////////////////// 463 // Flash RMA state. Note that we check the flash response again 464 // two times later below. 465 FlashRmaSt: begin 466 if (trans_target_i == {DecLcStateNumRep{DecLcStRma}}) begin -22- 467 lc_flash_rma_req = On; 468 if (lc_tx_test_true_strict(lc_flash_rma_ack_buf[0])) begin -23- 469 fsm_state_d = TokenCheck0St; ==> 470 end MISSING_ELSE ==> 471 end else begin 472 fsm_state_d = TokenCheck0St; ==> 473 end 474 end 475 /////////////////////////////////////////////////////////////////// 476 // Check again two times whether this transition and the hashed 477 // token are valid. Also check again whether the flash RMA 478 // response is valid. 479 // SEC_CM: TOKEN.DIGEST 480 TokenCheck0St, 481 TokenCheck1St: begin 482 if (trans_invalid_error_o) begin -24- 483 fsm_state_d = PostTransSt; ==> 484 end else begin 485 // If any of these RMA are conditions are true, 486 // all of them must be true at the same time. 487 if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -25- 488 lc_tx_test_false_strict(lc_flash_rma_req_o) && 489 lc_tx_test_false_strict(lc_flash_rma_ack_buf[1])) || 490 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 491 lc_tx_test_true_strict(lc_flash_rma_req_o) && 492 lc_tx_test_true_strict(lc_flash_rma_ack_buf[1]))) begin 493 if (hashed_token_i == hashed_token_mux && -26- 494 !token_hash_err_i && 495 &hashed_token_valid_mux) begin 496 if (fsm_state_q == TokenCheck1St) begin -27- 497 // This is the only way we can get into the 498 // programming state. 499 fsm_state_d = TransProgSt; ==> 500 end else begin 501 fsm_state_d = TokenCheck1St; ==> 502 end 503 end else begin 504 fsm_state_d = PostTransSt; ==> 505 token_invalid_error_o = 1'b1; 506 end 507 // The flash RMA process failed. 508 end else begin 509 fsm_state_d = PostTransSt; ==> 510 flash_rma_error_o = 1'b1; 511 end 512 end 513 end 514 /////////////////////////////////////////////////////////////////// 515 // Initiate OTP transaction. Note that the concurrent 516 // LC state check is continuously checking whether the 517 // new LC state remains valid. Once the ack returns we are 518 // done with the transition and can go into the terminal PosTransSt. 519 TransProgSt: begin 520 otp_prog_req_o = 1'b1; 521 522 // If the clock mux has been steered, double check that this is still the case. 523 // Otherwise abort the transition operation. 524 if (lc_clk_byp_req_o != lc_clk_byp_ack[2]) begin -28- 525 fsm_state_d = PostTransSt; ==> 526 otp_prog_error_o = 1'b1; 527 // Also double check that the RMA signals remain stable. 528 // Otherwise abort the transition operation. 529 end else if ((trans_target_i != {DecLcStateNumRep{DecLcStRma}} && -29- 530 (lc_flash_rma_req_o != Off || lc_flash_rma_ack_buf[2] != Off)) || 531 (trans_target_i == {DecLcStateNumRep{DecLcStRma}} && 532 (lc_flash_rma_req_o != On || lc_flash_rma_ack_buf[2] != On))) begin 533 fsm_state_d = PostTransSt; ==> 534 flash_rma_error_o = 1'b1; 535 end else if (otp_prog_ack_i) begin -30- 536 fsm_state_d = PostTransSt; ==> 537 otp_prog_error_o = otp_prog_err_i; 538 trans_success_o = ~otp_prog_err_i; 539 end MISSING_ELSE ==> 540 end 541 /////////////////////////////////////////////////////////////////// 542 // Terminal states. 543 ScrapSt, 544 PostTransSt: ; ==> 545 546 547 EscalateSt: begin 548 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 549 token_hash_req_chk_o = 1'b0; ==> 550 end 551 552 InvalidSt: begin 553 // During an escalation it is okay to de-assert token_hash_req without receivng ACK. 554 token_hash_req_chk_o = 1'b0; ==> 555 state_invalid_error_o = 1'b1; 556 end 557 /////////////////////////////////////////////////////////////////// 558 // Go to terminal error state if we get here. 559 default: begin 560 fsm_state_d = InvalidSt; ==>

Branches:
-1--2--3--4--5--6--7--8--9--10--11--12--13--14--15--16--17--18--19--20--21--22--23--24--25--26--27--28--29--30-StatusTestsExclude Annotation
ResetSt 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
ResetSt 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - 0 - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T24,T41
IdleSt - - 1 - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T15,T17,T18
IdleSt - - 0 1 1 1 1 - - - - - - - - - - - - - - - - - - - - - - Excluded T1,T61 VC_COV_UNR
IdleSt - - 0 1 1 1 0 - - - - - - - - - - - - - - - - - - - - - - Covered T24,T41,T36
IdleSt - - 0 1 1 0 - - - - - - - - - - - - - - - - - - - - - - - Excluded VC_COV_UNR
IdleSt - - 0 1 0 - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T41,T36
IdleSt - - 0 0 - - - 1 - - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T5
IdleSt - - 0 0 - - - 0 - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 1 1 - - - - - - - - - - - - - - - - - - - Covered T7,T11,T14
IdleSt - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - - - Covered T1,T2,T3
IdleSt - - - - - - - - 0 - - - - - - - - - - - - - - - - - - - - Covered T2,T4,T7
ClkMuxSt - - - - - - - - - - 1 1 1 - - - - - - - - - - - - - - - - Covered T7,T14,T17
ClkMuxSt - - - - - - - - - - 1 1 0 - - - - - - - - - - - - - - - - Covered T17,T73,T74
ClkMuxSt - - - - - - - - - - 1 0 - - - - - - - - - - - - - - - - - Covered T2,T4,T5
ClkMuxSt - - - - - - - - - - 0 - - - - - - - - - - - - - - - - - - Covered T2,T4,T7
CntIncrSt - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - - Covered T13,T45,T52
CntIncrSt - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - 1 - - - - - - - - - - - - - - Covered T13,T16,T45
CntProgSt - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - - Covered T2,T4,T5
CntProgSt - - - - - - - - - - - - - - - 1 1 - - - - - - - - - - - - Covered T4,T5,T55
CntProgSt - - - - - - - - - - - - - - - 1 0 - - - - - - - - - - - - Covered T2,T7,T12
CntProgSt - - - - - - - - - - - - - - - 0 - - - - - - - - - - - - - Covered T2,T4,T5
TransCheckSt - - - - - - - - - - - - - - - - - 1 - - - - - - - - - - - Covered T13,T42,T45
TransCheckSt - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - - Covered T2,T7,T12
TokenHashSt - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - - - Covered T2,T7,T12
TokenHashSt - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - - - Covered T13,T16,T42
TokenHashSt - - - - - - - - - - - - - - - - - - 0 - - - - - - - - - - Covered T2,T7,T12
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 1 - - - - - - - Covered T2,T7,T14
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 1 0 - - - - - - - Covered T2,T7,T14
FlashRmaSt - - - - - - - - - - - - - - - - - - - - 0 - - - - - - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 1 - - - - - - Covered T42,T47,T43
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 1 - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 1 0 - - - Covered T2,T7,T12
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 1 0 - - - - Not Covered
TokenCheck0St TokenCheck1St - - - - - - - - - - - - - - - - - - - - - - 0 0 - - - - - Covered T13,T16,T45
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 1 - - Covered T56,T57,T58
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 1 - Covered T46,T59,T60
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 1 Covered T2,T7,T12
TransProgSt - - - - - - - - - - - - - - - - - - - - - - - - - - 0 0 0 Covered T2,T7,T12
ScrapSt PostTransSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T1,T2,T4
EscalateSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T4,T5,T12
InvalidSt - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T12,T16,T20
default - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Covered T12,T53,T21


567 if (esc_scrap_state0_i || esc_scrap_state1_i) begin -1- 568 fsm_state_d = EscalateSt; ==> 569 // SEC_CM: MAIN.FSM.LOCAL_ESC 570 // If at any time the life cycle state encoding or any other FSM state within this module 571 // is not valid, we jump into the terminal error state right away. 572 // Note that state_invalid_error is a multibit error signal 573 // with different error sources - need to reduce this to one bit here. 574 end else if ((|state_invalid_error | token_if_fsm_err_i) && (fsm_state_q != EscalateSt)) begin -2- 575 fsm_state_d = InvalidSt; ==> 576 state_invalid_error_o = 1'b1; 577 end MISSING_ELSE ==>

Branches:
-1--2-StatusTests
1 - Covered T4,T5,T12
0 1 Covered T12,T16,T20
0 0 Covered T1,T2,T3


584 `PRIM_FLOP_SPARSE_FSM(u_fsm_state_regs, fsm_state_d, fsm_state_q, fsm_state_e, ResetSt) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


585 `PRIM_FLOP_SPARSE_FSM(u_state_regs, lc_state_d, lc_state_q, lc_state_e, LcStScrap) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


586 `PRIM_FLOP_SPARSE_FSM(u_cnt_regs, lc_cnt_d, lc_cnt_q, lc_cnt_e, LcCnt24) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


589 if (!rst_ni) begin -1- 590 lc_state_valid_q <= 1'b0; ==> 591 end else begin 592 lc_state_valid_q <= lc_state_valid_d; ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


684 if (lc_tx_test_true_strict(test_tokens_valid[0])) begin -1- 685 hashed_tokens_lower[TestUnlockTokenIdx] = test_unlock_token_lower; ==> 686 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


687 if (lc_tx_test_true_strict(test_tokens_valid[1])) begin -1- 688 hashed_tokens_upper[TestUnlockTokenIdx] = test_unlock_token_upper; ==> 689 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


691 if (lc_tx_test_true_strict(test_tokens_valid[2])) begin -1- 692 hashed_tokens_lower[TestExitTokenIdx] = test_exit_token_lower; ==> 693 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


694 if (lc_tx_test_true_strict(test_tokens_valid[3])) begin -1- 695 hashed_tokens_upper[TestExitTokenIdx] = test_exit_token_upper; ==> 696 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


698 if (lc_tx_test_true_strict(rma_token_valid[0])) begin -1- 699 hashed_tokens_lower[RmaTokenIdx] = rma_token_lower; ==> 700 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


701 if (lc_tx_test_true_strict(rma_token_valid[1])) begin -1- 702 hashed_tokens_upper[RmaTokenIdx] = rma_token_upper; ==> 703 end MISSING_ELSE ==>

Branches:
-1-StatusTests
1 Covered T2,T4,T5
0 Covered T16,T46,T37


882 `ASSERT_FPV_LINEAR_FSM(SecCmCFILinear_A, fsm_state_q, fsm_state_e) -1- ==> ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


608 if(!rst_ni) begin -1- 609 strap_en_override_q <= '0; ==> 610 volatile_raw_unlock_success_q <= prim_mubi_pkg::MuBi8False; 611 end else begin 612 strap_en_override_q <= {strap_en_override_q[NumStrapDelayRegs-2:0], ==>

Branches:
-1-StatusTests
1 Covered T1,T2,T3
0 Covered T1,T2,T3


Assert Coverage for Instance : tb.dut.u_lc_ctrl_fsm
TotalAttemptedPercentSucceeded/MatchedPercent
Assertions 15 15 100.00 15 100.00
Cover properties 0 0 0
Cover sequences 0 0 0
Total 15 15 100.00 15 100.00




Assertion Details

NameAttemptsReal SuccessesFailuresIncomplete
ClkBypStaysOnOnceAsserted_A 61004413 3472077 0 66
EscStaysOnOnceAsserted_A 61004413 11088580 0 9
FlashRmaStaysOnOnceAsserted_A 61004413 405693 0 9
FsmStateKnown_A 61004413 57841848 0 0
LcCntKnown_A 61004413 57841848 0 0
LcStateKnown_A 61004413 57841848 0 0
NoClkBypInProdStates_A 61004413 8488343 0 0
SecCmCFILinear_A 61004413 252983 0 2079
SecCmCFITerminal0_A 61004413 8867421 0 0
SecCmCFITerminal1_A 61004413 80879 0 0
SecCmCFITerminal2_A 61004413 4433491 0 0
SecCmCFITerminal3_A 61004413 6587084 0 0
u_cnt_regs_A 56257205 53399572 0 0
u_fsm_state_regs_A 59562327 56511982 0 0
u_state_regs_A 57520453 54662687 0 0


ClkBypStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 3472077 0 66
T7 50526 5654 0 0
T8 0 101881 0 1
T9 0 0 0 1
T11 18445 15354 0 1
T12 13618 0 0 0
T13 36722 0 0 0
T14 26054 3270 0 0
T15 39675 0 0 0
T16 32655 0 0 0
T17 4051 136 0 0
T18 0 13097 0 0
T19 0 3223 0 1
T22 0 26295 0 1
T24 1806 0 0 0
T25 3460 0 0 0
T39 0 0 0 1
T50 0 18880 0 0
T75 0 186 0 0
T76 0 0 0 1
T77 0 0 0 1
T78 0 0 0 1
T79 0 0 0 1

EscStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 11088580 0 9
T4 3067 362 0 0
T5 17537 2458 0 0
T6 7233 0 0 0
T7 50526 0 0 0
T11 18445 0 0 0
T12 13618 1014 0 0
T13 36722 1261 0 0
T14 26054 0 0 0
T15 0 19589 0 0
T16 0 6685 0 0
T17 0 11 0 0
T18 0 3436 0 0
T20 0 16457 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T34 0 0 0 1
T55 0 1711 0 0
T80 0 0 0 1
T81 0 0 0 1
T82 0 0 0 1
T83 0 0 0 1
T84 0 0 0 1
T85 0 0 0 1
T86 0 0 0 1
T87 0 0 0 1

FlashRmaStaysOnOnceAsserted_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 405693 0 9
T2 1896 18 0 0
T3 939 0 0 0
T4 3067 0 0 0
T5 17537 0 0 0
T6 7233 0 0 0
T7 50526 367 0 0
T11 18445 0 0 0
T12 13618 0 0 0
T13 36722 0 0 0
T14 26054 87 0 0
T15 0 661 0 0
T16 0 1027 0 0
T17 0 61 0 0
T19 0 116 0 0
T21 0 4307 0 0
T24 0 1409 0 1
T42 0 676 0 0
T88 0 0 0 1
T89 0 0 0 1
T90 0 0 0 1
T91 0 0 0 1
T92 0 0 0 1
T93 0 0 0 1
T94 0 0 0 1
T95 0 0 0 1

FsmStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

LcCntKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

LcStateKnown_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 57841848 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13618 12428 0 0
T13 36722 30121 0 0

NoClkBypInProdStates_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 8488343 0 0
T2 1896 173 0 0
T3 939 0 0 0
T4 3067 1097 0 0
T5 17537 0 0 0
T6 7233 0 0 0
T7 50526 2384 0 0
T11 18445 0 0 0
T12 13618 0 0 0
T13 36722 2344 0 0
T14 26054 0 0 0
T15 0 3947 0 0
T16 0 3941 0 0
T17 0 80 0 0
T25 0 3360 0 0
T42 0 7122 0 0
T51 0 4089 0 0

SecCmCFILinear_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 252983 0 2079
T2 1896 22 0 11
T3 939 0 0 1
T4 3067 18 0 1
T5 17537 24 0 1
T6 7233 0 0 1
T7 50526 143 0 11
T11 18445 0 0 1
T12 13618 112 0 1
T13 36722 587 0 1
T14 26054 66 0 11
T15 0 676 0 0
T16 0 541 0 0
T17 0 178 0 0

SecCmCFITerminal0_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 8867421 0 0
T1 821 519 0 0
T2 1896 1054 0 0
T3 939 0 0 0
T4 3067 210 0 0
T5 17537 3200 0 0
T6 7233 0 0 0
T7 50526 5515 0 0
T11 18445 0 0 0
T12 13618 1646 0 0
T13 36722 14431 0 0
T14 0 626 0 0
T15 0 11 0 0
T24 0 1196 0 0

SecCmCFITerminal1_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 80879 0 0
T15 39675 4 0 0
T16 32655 0 0 0
T17 4051 11 0 0
T18 108434 3436 0 0
T19 17308 0 0 0
T34 0 1562 0 0
T42 49486 0 0 0
T51 24486 0 0 0
T52 0 5 0 0
T55 5834 0 0 0
T68 0 4 0 0
T69 0 147 0 0
T70 0 122 0 0
T75 0 9 0 0
T96 0 3224 0 0
T97 1774 0 0 0
T98 654 0 0 0

SecCmCFITerminal2_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 4433491 0 0
T4 3067 365 0 0
T5 17537 2462 0 0
T6 7233 0 0 0
T7 50526 0 0 0
T11 18445 0 0 0
T12 13618 744 0 0
T13 36722 1270 0 0
T14 26054 0 0 0
T15 0 19677 0 0
T16 0 4315 0 0
T20 0 8835 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T53 0 9066 0 0
T55 0 1724 0 0
T67 0 735 0 0

SecCmCFITerminal3_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 61004413 6587084 0 0
T12 13618 271 0 0
T13 36722 0 0 0
T14 26054 0 0 0
T15 39675 0 0 0
T16 32655 2401 0 0
T17 4051 0 0 0
T20 0 7627 0 0
T21 0 7360 0 0
T24 1806 0 0 0
T25 3460 0 0 0
T42 49486 0 0 0
T46 0 1859 0 0
T53 0 5402 0 0
T54 0 3882 0 0
T67 0 274 0 0
T69 0 5420 0 0
T97 1774 0 0 0
T99 0 707 0 0

u_cnt_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 56257205 53399572 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13253 12146 0 0
T13 36722 30121 0 0

u_fsm_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 59562327 56511982 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 13258 12156 0 0
T13 36722 30121 0 0

u_state_regs_A
NameAttemptsReal SuccessesFailuresIncomplete
Total 57520453 54662687 0 0
T1 821 759 0 0
T2 1896 1663 0 0
T3 939 865 0 0
T4 3067 2752 0 0
T5 17537 17195 0 0
T6 7233 7148 0 0
T7 50526 49405 0 0
T11 18445 18381 0 0
T12 12899 11879 0 0
T13 36722 30121 0 0

0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%