sep_efuse_wrapper

Wrap efuse_interface_controller with SEP datapath conversion, JTAG policy, and secure test mode.

Downsizes the functional 64-bit AXI4 slave to 32-bit, converts it to AXI4-Lite, and muxes it with the Key Manager AXI-Lite path into the eFuse controller register port. The controller's shim CSR port leaves through an axi_cut. In a restricted state (PROD / RMA_SiP, or an LC-state differential-decode integrity error), JTAG accesses outside the MMR / token register space receive DECERR with read data 0xBADCAB1E; the MMR space stays accessible for RMA_SiP token programming. secure_tm_req_i is latched into secure_tm_o on the second clock edge after rst_ni release when security is disabled, and otherwise on the rising edge of fuse sense done.

Parameters

Table 1. Parameters
Name	Type	Default	Description
`SEP_SEC_DISABLE_TOKEN`	`bit [255:0]`	`256'b0`	Netlist-embedded secure-disable token digest; replace at synthesis.

Ports

Table 2. Ports
Name	Direction	Type	Description
`clk_i`	input	`logic`	System clock.
`rst_ni`	input	`logic`	Active-low reset.
`test_en_i`	input	`logic`	DFT test-enable (scan-enable).
`scan_rst_ni`	input	`logic`	DFT scan reset, active-low; bypasses the reset synchronizer.
`secure_tm_req_i`	input	`logic`	Secure test mode request strap, latched into secure_tm_o.
`ext_boot_seq_done_i`	input	`logic`	Integration boot-sequence completion (memory repair and SMC straps); gates release of sep_intermediate_reset_no.
`security_disable_o`	output	`logic`	Security-disable status from eFuse token processing, active-high.
`lc_state_o`	output	`logic [2*sep_pkg::LcStateBitWidth-1:0]`	Differentially encoded lifecycle state from the eFuse shadow registers.
`shadow_regs_o`	output	`sep_efuse_pkg::efuse_map_t`	eFuse shadow register contents; secret fields read as zero in secure test mode.
`fuse_sense_done_o`	output	`logic`	High once the shadow registers have been loaded from the fuses.
`secure_tm_o`	output	`logic`	Latched secure test mode, active-high; captured on the second clock edge after rst_ni release when security is disabled, otherwise on the rising edge of fuse sense done.
`axil_sep_otp_jtag_req_i`	input	`sep_efuse_pkg::efuse_axil_req_t`	OTP debug AXI-Lite manager interface, filtered by the lifecycle JTAG policy.
`axil_sep_otp_jtag_resp_o`	output	`sep_efuse_pkg::efuse_axil_resp_t`	Response to the OTP debug manager; DECERR for accesses the JTAG policy blocks.
`km_efuse_axil_req_i`	input	`sep_efuse_pkg::efuse_axil_req_t`	Key Manager AXI-Lite manager interface, muxed with the functional path.
`km_efuse_axil_resp_o`	output	`sep_efuse_pkg::efuse_axil_resp_t`	Response from the eFuse controller to the Key Manager.
`sep_efuse_axi_req_i`	input	`sep_pkg::sep_crypto_axi_req_t`	Functional 64-bit AXI4 slave; in sep_crypto, the merged crypto eFuse and eFuse shim CSR legs.
`sep_efuse_axi_resp_o`	output	`sep_pkg::sep_crypto_axi_resp_t`	Response on the functional AXI4 slave.
`efuse_bank_ctrl_req_o`	output	`sep_efuse_pkg::efuse_axil_req_t`	eFuse controller AXI-Lite requests to the eFuse shim CSRs.
`efuse_bank_ctrl_resp_i`	input	`sep_efuse_pkg::efuse_axil_resp_t`	Response from the eFuse shim CSRs.
`efuse_shim_command_req_o`	output	`sep_efuse_pkg::fuse_command_req_t`	eFuse read and program commands on the custom shim command interface.
`efuse_shim_command_resp_i`	input	`sep_efuse_pkg::fuse_command_resp_t`	Shim response to the eFuse commands.
`sep_intermediate_reset_no`	output	`logic`	Active-low SEP reset, synchronized to clk_i and released once fuse sense and the external boot sequence are done; to sep_reset_ctrl before the JTAG override.
`sep_efuse_debug_o`	output	`logic [9:0]`	eFuse controller debug flags: [0] shadow write locked, [1] shadow read locked, [2] program locked, [3] read locked, [4] write set-only, [5] LC-state access, [6] read timeout, [7] program timeout, [8] request error, [9] secure TM blocked.
`sep_efuse_token_match_sip_debug_o`	output	`logic [5:0]`	RMA SiP token match status code; 6'b010101 indicates a match.
`sep_efuse_token_match_chiplet_debug_o`	output	`logic [5:0]`	RMA chiplet token match status code; 6'b010101 indicates a match.
`locked_field_access_interrupt_o`	output	`logic`	Interrupt raised when an access targets a locked eFuse field.
`token_match_fault_o`	output	`logic`	Token Comparator Redundancy Fault Interrupt.