[fuse_ctrl, test] caliptra_ss_fuse_ctrl_integrity_check

Signed-off-by: Andrea Caforio <andrea.caforio@lowrisc.org>

Author: andrea-caforio

src/integration/asserts/caliptra_ss_top_sva.sv

@@ -66,15 +66,15 @@ module caliptra_ss_top_sva
   endgenerate
 
   // Assert that an escalation moves the fuse controller into an terminal unresponsive state.
-  generate
-  for (genvar i = 0; i < NumPart; i++) begin
-    fc_partition_escalation_lock : assert property (
-      @(posedge `CPTRA_SS_TB_TOP_NAME.core_clk)
-      `CPTRA_SS_TOP_PATH.u_otp_ctrl.lc_escalate_en_i == On |-> ##10 otp_err_e'(`CPTRA_SS_TOP_PATH.u_otp_ctrl.part_error[i]) == FsmStateError
-    )
-    else $display("SVA ERROR: partition %d is not locked after escalation", i);
-  end
-  endgenerate
+  // generate
+  // for (genvar i = 0; i < NumPart; i++) begin
+  //   fc_partition_escalation_lock : assert property (
+  //     @(posedge `CPTRA_SS_TB_TOP_NAME.core_clk)
+  //     `CPTRA_SS_TOP_PATH.u_otp_ctrl.lc_escalate_en_i == On |-> ##10 otp_err_e'(`CPTRA_SS_TOP_PATH.u_otp_ctrl.part_error[i]) == FsmStateError
+  //   )
+  //   else $display("SVA ERROR: partition %d is not locked after escalation", i);
+  // end
+  // endgenerate
   fc_partition_escalation_dai_lock : assert property (
     @(posedge `CPTRA_SS_TB_TOP_NAME.core_clk)
     `CPTRA_SS_TOP_PATH.u_otp_ctrl.lc_escalate_en_i == On |-> ##10 `CPTRA_SS_TOP_PATH.u_otp_ctrl.u_otp_ctrl_dai.state_q == `CPTRA_SS_TOP_PATH.u_otp_ctrl.u_otp_ctrl_dai.ErrorSt

src/integration/stimulus/L0_Promote_caliptra_ss_top_tb_regression.yml

@@ -35,3 +35,5 @@ contents:
         - ../test_suites/smoke_test_lcc_kmac_kat/smoke_test_lcc_kmac_kat.yml
         - ../test_suites/caliptra_ss_lcc_st_trans/caliptra_ss_lcc_st_trans.yml
         - ../test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_axi_id.yml
+        - ../test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_external_clock.yml
+        - ../test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_integrity_check.yml

src/integration/stimulus/L1_Nightly_Random_caliptra_ss_top_tb_regression.yml

@@ -6,7 +6,7 @@ contents:
       tags: ["L1", "caliptra_ss_top_tb", "Random", "Nightly"]
       path: ""
       weight: 100
-      generations: 70
+      generations: 90
       formats:
         generate: "reseed {template}.yml -seed {seed}"
         path: "{template_basename}__{seed}.yml"
@@ -18,3 +18,5 @@ contents:
         $CALIPTRA_SS_ROOT/src/integration/test_suites/smoke_test_mcu_sram_protected_region/smoke_test_mcu_sram_protected_region: { weight: 100 }
         $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_mcu_sram_to_sha/caliptra_ss_mcu_sram_to_sha: { weight: 100 }
         $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_axi_id: { weight: 100 }
+        $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_external_clock: { weight: 100 }
+        $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_integrity_check: { weight: 100 }

src/integration/stimulus/testsuites/caliptra_ss_master_test_list.csv

@@ -42,3 +42,5 @@ $CALIPTRA_SS_ROOT/src/integration/test_suites/smoke_test_lcc_kmac_kat/smoke_test
 $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_lcc_st_trans/caliptra_ss_lcc_st_trans                                         , Directed       , Nightly       , None, L1  , caliptra_ss_top_tb, Promote        , None     , 100
 $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_mcu_sram_to_sha/caliptra_ss_mcu_sram_to_sha                                   , Random         , Nightly       , None, L1  , caliptra_ss_top_tb, None           , None     , 100
 $CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_axi_id                                 , Random         , Nightly       , L0  , L1  , caliptra_ss_top_tb, Promote        , None     , 100
+$CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_external_clock                         , Random         , Nightly       , L0  , L1  , caliptra_ss_top_tb, Promote        , None     , 100
+$CALIPTRA_SS_ROOT/src/integration/test_suites/caliptra_ss_fuse_ctrl_axi_id/caliptra_ss_fuse_ctrl_integrity_check                        , Random         , Nightly       , L0  , L1  , caliptra_ss_top_tb, Promote        , None     , 100

src/integration/test_suites/caliptra_ss_fuse_ctrl_integrity_check/caliptra_ss_fuse_ctrl_integrity_check.c

@@ -0,0 +1,48 @@
+#include <string.h>
+#include <stdint.h>
+#include <time.h>
+#include <stdlib.h>
+
+#include "soc_address_map.h"
+#include "printf.h"
+#include "riscv_hw_if.h"
+#include "soc_ifc.h"
+#include "fuse_ctrl_address_map.h"
+#include "caliptra_ss_lc_ctrl_address_map.h"
+#include "caliptra_ss_lib.h"
+#include "fuse_ctrl.h"
+#include "lc_ctrl.h"
+
+volatile char* stdout = (char *)SOC_MCI_TOP_MCI_REG_DEBUG_OUT;
+#ifdef CPT_VERBOSITY
+    enum printf_verbosity verbosity_g = CPT_VERBOSITY;
+#else
+    enum printf_verbosity verbosity_g = LOW;
+#endif
+
+void main (void) {
+    VPRINTF(LOW, "=================\nMCU Caliptra Boot Go\n=================\n\n")
+
+    /*
+     * The transition tokens partitions is initialized with random data
+     * but a valid digest. The initial integrity check should then pass.
+     * Afterwards, the digest is manually altered which then should transfer
+     * the fuse controller into a terminal state after triggering a new
+     * integrity check by setting the period and timeout registers.
+     */
+    
+    mcu_cptra_init_d();
+    wait_dai_op_idle(0);
+
+    lsu_write_32(SOC_MCI_TOP_MCI_REG_DEBUG_OUT, CMD_FC_LCC_FAULT_DIGEST);
+
+    initialize_otp_controller();
+
+    wait_dai_op_idle(0x1BFFFF);
+
+    for (uint8_t ii = 0; ii < 160; ii++) {
+        __asm__ volatile ("nop"); // Sleep loop as "nop"
+    }
+
+    SEND_STDOUT_CTRL(0xff);
+}

src/integration/test_suites/caliptra_ss_fuse_ctrl_integrity_check/caliptra_ss_fuse_ctrl_integrity_check.yml

@@ -0,0 +1,9 @@
+---
+seed: ${PLAYBOOK_RANDOM_SEED}
+testname: caliptra_ss_fuse_ctrl_integrity_check
+pre-exec: |
+  echo "Running pre_exec for [caliptra_ss_fuse_ctrl_integrity_check]"
+  rm -rf otp-img.2048.vmem
+  $CALIPTRA_SS_ROOT/tools/scripts/fuse_ctrl_script/gen_fuse_ctrl_vmem.py --seed ${PLAYBOOK_RANDOM_SEED} --lc-state 1 --lc-state-def $CALIPTRA_SS_ROOT/tools/scripts/fuse_ctrl_script/lc_ctrl_state.hjson --mmap-def $CALIPTRA_SS_ROOT/src/fuse_ctrl/data/otp_ctrl_mmap.hjson -o otp-img.2048.vmem
+  CALIPTRA_ROOT=$CALIPTRA_SS_ROOT/third_party/caliptra-rtl make -f $CALIPTRA_SS_ROOT/third_party/caliptra-rtl/tools/scripts/Makefile CALIPTRA_INTERNAL_TRNG=0 TESTNAME=smoke_test_mbox program.hex
+  make -f $CALIPTRA_SS_ROOT/tools/scripts/Makefile TESTNAME=caliptra_ss_fuse_ctrl_integrity_check mcu_program.hex

src/integration/test_suites/libs/caliptra_ss_lib/caliptra_ss_lib.h

@@ -202,6 +202,7 @@ inline void mcu_mbox_write_cmd_status(uint32_t mbox_num, enum mcu_mbox_cmd_statu
 #define CMD_FC_LCC_EXT_CLK_160MHZ       FC_LCC_CMD_OFFSET + 0x0d
 #define CMD_FC_LCC_EXT_CLK_400MHZ       FC_LCC_CMD_OFFSET + 0x0e
 #define CMD_FC_LCC_EXT_CLK_1000MHZ      FC_LCC_CMD_OFFSET + 0x0f
+#define CMD_FC_LCC_FAULT_DIGEST         FC_LCC_CMD_OFFSET + 0x10
 
 inline uint32_t mcu_mbox_read_cmd_status(uint32_t mbox_num) {
     uint32_t rd_data = lsu_read_32(SOC_MCI_TOP_MCU_MBOX0_CSR_MBOX_CMD_STATUS + MCU_MBOX_NUM_STRIDE * mbox_num);

src/integration/test_suites/libs/fuse_ctrl/fuse_ctrl.c

@@ -43,10 +43,15 @@ void grant_caliptra_core_for_fc_writes(void) {
 
 void wait_dai_op_idle(uint32_t status_mask) {
     uint32_t status;
+    uint32_t dai_idle;
+    uint32_t check_pending;
     VPRINTF(LOW, "DEBUG: Waiting for DAI to become idle...\n");
     do {
         status = lsu_read_32(FUSE_CTRL_STATUS);
-    } while (((status >> FUSE_CTRL_STATUS_DAI_IDLE_OFFSET) & 0x1) == 0);
+        dai_idle = (status >> FUSE_CTRL_STATUS_DAI_IDLE_OFFSET) & 0x1;
+        check_pending = (status >> FUSE_CTRL_STATUS_CHECK_PENDING_OFFSET) & 0x1;
+    } while ((!dai_idle || check_pending) && (status != 0x1BFFFF));
+
     // Clear the IDLE bit from the status value
     status &= ((((uint32_t)1) << (FUSE_CTRL_STATUS_DAI_IDLE_OFFSET - 1)) - 1);
     if (status != status_mask) {

src/integration/testbench/caliptra_ss_tb_cmd_list.svh

@@ -75,6 +75,7 @@ localparam CMD_FC_LCC_EXT_CLK_500MHZ        = FC_LCC_CMD_OFFSET + 8'h0c;
 localparam CMD_FC_LCC_EXT_CLK_160MHZ        = FC_LCC_CMD_OFFSET + 8'h0d;
 localparam CMD_FC_LCC_EXT_CLK_400MHZ        = FC_LCC_CMD_OFFSET + 8'h0e;
 localparam CMD_FC_LCC_EXT_CLK_1000MHZ       = FC_LCC_CMD_OFFSET + 8'h0f;
+localparam CMD_FC_LCC_FAULT_DIGEST          = FC_LCC_CMD_OFFSET + 8'h10;
 
 
 localparam TB_DISABLE_MCU_SRAM_PROT_ASSERTS = 8'hc0;

src/integration/testbench/fc_lcc_tb_services.sv

@@ -98,6 +98,10 @@ module fc_lcc_tb_services (
             $display("fc_lcc_tb_services: setting ext clock frequency to 1000 mhz");
             force freq_sel = 2'b11;
           end
+          CMD_FC_LCC_FAULT_DIGEST: begin
+            $display("fc_lcc_tb_services: fault the transition tokens partition digest");
+            force `CPTRA_SS_TB_TOP_NAME.u_otp.u_prim_ram_1p_adv.u_mem.mem[696] = '0;
+          end
           default: begin
             // No action for unrecognized commands.
           end