smc_efuse_wrapper

Wrap the vendor eFuse controller for the SMC peripheral map.

Presents the eFuse CSR window on the peripheral AXI-Lite map. Bridges fuse sense, program, shadow-register, and DFT sidebands into the SMC peripheral domain. JTAG AXI-Lite accesses receive an error response with data 0xBADCAB1E when the SEP lifecycle state is PROD or RMA_SiP or fails its integrity check, except reads of JTAG_PUBLIC_IDENTITY outside an integrity error.

Ports

Table 1. Ports
NameDirectionTypeDescription
clk_iinputlogicSMC core clock for the eFuse controller and JTAG access filter.
rst_niinputlogicPrimary reset, active-low, synchronized to clk_i.
test_en_iinputlogicDFT test-mode enable, active-high.
scan_rst_niinputlogicDFT scan reset, active-low, used while test_en_i is high.
axil_req_iinputsmc_pkg::smc_axil_32_32_req_tFunctional AXI4-Lite slave (from SMC peripherals xbar) request.
axil_resp_ooutputsmc_pkg::smc_axil_32_32_resp_tFunctional AXI4-Lite slave (from SMC peripherals xbar) response.
axil_smc_otp_jtag_req_iinputsmc_pkg::smc_axil_32_32_req_tJTAG AXI4-Lite slave request.
axil_smc_otp_jtag_resp_ooutputsmc_pkg::smc_axil_32_32_resp_tJTAG AXI4-Lite slave response.
lc_state_iinputlogic [2*smc_pkg::LcStateWidth-1:0]LC state from SEP (differentially encoded); PROD and RMA_SiP restrict JTAG access.
lc_sigint_err_ooutputlogicIntegrity error from the differential decode of lc_state_i, active-high; also blocks JTAG access.
fuse_bank_ctrl_req_ooutputsmc_pkg::smc_axil_32_32_req_teFuse SHIM CSR AXI4-Lite request.
fuse_bank_ctrl_resp_iinputsmc_pkg::smc_axil_32_32_resp_teFuse SHIM CSR AXI4-Lite response.
efuse_shim_command_req_ooutputsmc_efuse_pkg::fuse_command_req_tFuse sense and program command request to the SHIM state machine.
efuse_shim_command_resp_iinputsmc_efuse_pkg::fuse_command_resp_tFuse command response from the SHIM state machine.
sep_security_disable_iinputlogicSecurity disable from the SEP eFuse controller, active-high; skips automatic fuse sensing and releases the shadow registers without it.
ext_boot_seq_done_iinputlogicExternal boot sequence done (gate the released reset).
reset_n_ooutputlogicActive-low reset released through a synchronizer once fuse sensing and ext_boot_seq_done_i are both done.
fuse_sense_done_ooutputlogicHigh once shadow-register loading from the fuses completes.
shadow_regs_ooutputsmc_efuse_pkg::efuse_map_tShadow-register contents; zero until fuse sensing completes unless sep_security_disable_i is set.
efuse_debug_ooutputlogic [9:0]eFuse controller status, from bit 0: shadow-register write and read locks, program and read locks, write-setup-only, LC-state access, read and program timeouts, request error and secure-test-mode block.
locked_field_access_interrupt_ooutputlogicHigh during an access to the eFuse map window that a field lock blocks.