Lockstep Operation - Xilinx MicroBlaze Reference Manual

Lockstep Operation

MicroBlaze is able to operate in a lockstep configuration, where two or more identical
MicroBlaze cores execute the same program. By comparing the outputs of the cores, any
tampering attempts, transient faults or permanent hardware faults can be detected.
System Configuration
The parameter
except the master (or primary) core. The master core drives all the output signals, and
handles the debug functionality. The port
connected to the port
The slave cores should not drive any output signals, only receive input signals. This must be
ensured by only connecting signals to the input ports of the slaves. For buses this means
that each individual input port must be explicitly connected.
The port
Lockstep_Out
comparison. Unless an error occurs, individual signals from each of the cores are identical
every clock cycle.
To ensure that lockstep operation works properly, all input signals to the cores must be
synchronous. Input signals that could require external synchronization are
,
Reset Ext_Brk
Use Cases
Two common use cases are described here. In addition, lockstep operation provides the
basis for implementing triple modular redundancy on MicroBlaze core level.
Tamper Protection
This application represents a high assurance use case, where it is required that the system
is tamper-proof. A typically example is a cryptographic application.
The approach involves having two redundant MicroBlaze processors with dedicated local
memory and redundant comparators, each in a protected area. The outputs from each
processor feed two comparators and each processor receive copies of every input signal.
The redundant MicroBlaze processors are functionally identical and completely
independent of each other, without any connecting signals. The only exception is debug
logic and associated signals, because it is assumed that debugging is disabled before any
productization and certification of the system.
MicroBlaze Processor Reference Guide
UG984 (v2018.2) June 21, 2018
is set to one on all slave MicroBlaze cores in the system,
C_LOCKSTEP_SLAVE
Lockstep_Slave_In
on the master and slave cores provide all output signals for
, and .
Ext_Nm_Brk
www.xilinx.com
Chapter 2: MicroBlaze Architecture
Lockstep_Master_Out
on the slaves, in order to handle debugging.
on the master is
,
Interrupt
126
Send Feedback