-
2008-03-25
11/129,238
2005-05-12
US 7,350,168 B1
2008-03-25
-
-
Stacy Whitmore
2025-10-21
A system, method and computer program product are provided for equivalency checking between a first design and a second design having sequential differences. To accomplish the equivalency checking, sequential differences between a first design and a second design are identified. It is then determined whether the first design and the second design are equivalent, utilizing the identified sequential differences.
Get notified when new applications in this technology area are published.
The present invention relates to equivalence checking, and more particularly, to equivalence checking between designs.
A system, method and computer program product are provided for equivalency checking between a first design and a second design having sequential differences. To accomplish the equivalency checking, sequential differences between a first design and a second design are identified. It is then determined whether the first design and the second design are equivalent, utilizing the identified sequential differences.
FIG. 1 illustrates a method for equivalency checking between a first design and a second design, in accordance with one embodiment.
FIG. 2 illustrates an exemplary flow for equivalency checking between a first and second hardware design, in accordance with one embodiment.
FIG. 3 illustrates a mapping among a first design and a second design, in accordance with one embodiment.
FIG. 4A shows an exemplary difference in scheduling of computations among a first and second design, in accordance with one embodiment.
FIG. 4B shows a micro-architecture difference, in accordance with one embodiment.
FIG. 5 shows a transaction-accurate mapping, in accordance with one embodiment.
FIG. 6 illustrates an exemplary computer system with which the equivalence checking may be carried out, in accordance with one embodiment.
FIG. 1 illustrates a method 100 for equivalency checking between a first design and a second design, in accordance with one embodiment. In the context of the present description, such first and second design may include any software and/or hardware designs that are different in any respect. Just by way of example, the first design and the second design may differ with respect to a level of abstraction. In such example, the first design may include a specification design, and the second design may include an implementation design. Again, however, any software and/or hardware designs may be used that are different in any respect.
As shown in operation 102, sequential differences between the first design and the second design are identified. In the context of the present description, sequential differences may refer to any difference between the first and second design in terms of any aspect of timing, temporal characteristics, etc. associated with the architecture and/or functionality of the designs. Further, such identification of the sequential differences may be done in any desired manual and/or automated manner that is capable of identifying such differences.
Next, operation 104, it is then determined whether the first design and the second design are equivalent, utilizing the identified sequential differences. In the present description, the term equivalent may refer to a situation where given two corresponding inputs (but not necessarily at the same point in time), the same output is produced (but not necessarily at the same point in time). Also, such determination of operation 104 may involve any desired manual and/or automated processing that is capable of determining whether at least one aspect of the first design and the second design are equivalent.
It should be strongly noted that the foregoing technique may be implemented in any desired environment. Just by way of example, the method 100 may be used for equivalency checking with respect to a hardware environment where the first specification design may be a system level model (SLM) design, and the second implementation design may be a register transfer level (RTL) design. Of course, still other environments are contemplated such as RTL-RTL equivalency checking, as well as any other desired equivalency checking.
More illustrative information will now be set forth regarding various optional features with which the foregoing method 100 may or may not be implemented in a hardware SLM-RTL design environment, per the desires of the user. It should be strongly noted that the following information is set forth for illustrative purposes and should not be construed as limiting in any manner. Any of the following features may be optionally incorporated with or without the exclusion of other features described hereinabove.
FIG. 2 illustrates an exemplary flow 200 for equivalency checking between a first and second hardware design, in accordance with one embodiment. As an option, the flow 200 may be implemented in the context of the method 100 of FIG. 1. Of course, however, the flow 200 may be carried out in any desired environment.
As shown, a first and second design 202, 204 may be input to logic 208. In an SLM-RTL design environment, the SLM design may, in one embodiment, include an abstract, functional model of a design that removes a lot of micro-architectural details present in an RTL design. The SLM design may, however, include a notion of a system-level clock that defines what happens in one system-level cycle. In addition, such design may also have a notion of concurrency and have functional units that are operating concurrently. So, in general, the logic 208 may expect a SLM that is timed, in at least one aspect.
Since the SLM is timed, in one embodiment, it may be viewed as a finite-state machine (FSM) where the states may be defined by variables that persist from one system-level cycle to the next. In each system-level cycle, the FSM may compute some outputs based on current values of the inputs and the state of the FSM and may also update the state. Similarly, the RTL may be viewed as a FSM that works on an RTL clock. Thus, the RTL FSM may be a refinement of the SLM FSM and a single transition in the SLM FSM may correspond to a transition through a set of states in the RTL FSM. The logic 208 may handle multiple clocks, in one optional embodiment.
Further received by the logic 208 is a plurality of sequential differences 206 between the first design and the second design 202, 204. It should be noted that the sequential differences may be specified using any desired technique. For example, sequential differences may be specified by using the notions of waveforms, constraints, maps and transactions. A waveform is a sequence of values. Waveforms can be transformed via temporal transformations to create new waveforms. The association of a waveform to a design signal creates a constraint. Maps provide a mechanism to specify the relationship between corresponding input signal pairs and output signal pairs. Both constraints and maps can be scoped with respect to transactions or can have global scope.
These concepts and specific exemplary mechanisms to specify these are described in Appendix A. It should be strongly understood that such examples are set forth for illustrative purposes only and should not be construed as limiting in any manner whatsoever. Of course, any technique capable of specifying such sequential differences may be employed per the desires of the user.
In use, it may be determined by the logic 208 whether the first design and the second design 202, 204 are equivalent by mapping inputs associated with the first design and the second design 202, 204 utilizing the specified sequential differences. In other words, sequential differences between the first design and the second design 202, 204 may be taken into account to determine a relationship among the inputs that are required for producing an equivalent output.
As an option, the specified sequential differences may further involve a mapping among the outputs of the first design and the second design 202, 204. FIG. 3 illustrates such mapping among the first design and the second design 202, 204, in accordance with one embodiment. As shown, a first input mapping 302 and a second output mapping 304 are provided. To this end, as will soon become apparent, such mapping may be used to determine whether outputs of the first design and the second design 202, 204 are equivalent.
As mentioned earlier, the term equivalent may refer to a situation where given two corresponding inputs (but not necessarily at the same point in time), the corresponding output is produced (but not necessarily at the same point in time). Again, the input sequences of the SLM and RTL are “corresponding” and not necessarily “identical,” since the RTL may have serial or fixed width parallel interfaces that accept data over multiple RTL cycles whereas the SLM may accept all of the data in one SLM cycle, etc.
With continuing reference to FIG. 2, based on the results of the equivalency checking, various outputs 210 may result. For example, if it is determined that the first design and the second design are equivalent, a proof of the equivalency may be output. On the other hand, if it is determined that the first design and the second design are not equivalent, a counter example may be output for illustrating the non-equivalency. Such counter example may be capable of being utilized for correcting the non-equivalency. More information regarding such output 210 will be set forth hereinafter in greater detail.
As mentioned earlier, in the context of the present description, sequential differences may refer to any difference between the first and second design in terms of any aspect of timing, temporal characteristics, etc. associated with the architecture and/or functionality of the designs. In one embodiment, such sequential differences may include a latency associated with the first design and the second design, a frequency at which inputs of the first design and the second design are sampled, a frequency at which outputs of the first design and the second design are produced, differences in a state mapping associated with the first design and the second design, and/or a protocol associated with the first design and the second design. Such protocol may include an input/output protocol. For example, a first protocol of the first design may include a serial protocol, and a second protocol of the second design may include a parallel protocol. Of course, such list of differences is illustrative in nature, and not exhaustive in any manner.
Further, it should be noted that, in the context of the present description, latency may refer to a number of cycles it takes for a design to process an input and produce an output based on that input. Further, throughput may refer to the frequency at which the design samples its input or produces its output. Of course, these are not necessarily fixed numbers for a design and designs can have data dependant latency or throughput.
Sequential differences, such as those mentioned hereinabove, may reflect any variety of differences between the first and second design. For example, the sequential differences may reflect pipelining differences associated with the first design and the second design, differences in scheduling of computations associated with the first design and the second design, and/or micro-architecture differences associated with the first design and the second design. More information on such differences will be set forth hereinbelow in greater detail.
With respect to pipelining differences, pipelines are often added to a design to meet throughput requirements. Pipeline refinements include inserting or modifying the number of pipeline stages in data and control paths. Information on throughput and latency may be used by the equivalency checking logic 208 to align design interfaces and compare the designs for transactional equivalence. A common scenario might be to add a pipeline stage to a key datapath, increasing the implementation latency by one, followed by equivalency checking logic run to confirm that the longer pipeline still implements the original functional behavior.
FIG. 4A shows an exemplary difference 400 in scheduling of computations among a first and second design, in accordance with one embodiment. As shown, the SLM design may perform a computation in parallel while the RTL design schedules operations in multiple cycles with a scheduling FSM. Such difference introduces additional states due to scheduling. Further, some operations that can use the same resource may become temporally disjointed, resulting in resource sharing.
With respect to micro-architecture differences, FIG. 4B shows a micro-architecture difference 450, in accordance with one embodiment. Typically, a RTL has detailed micro-architectures like scan chains, sleep mode logic, clock gating, memory caches, bus-based communication along with bus arbitration, serial communication with handshakes, etc., all of which may constitute exemplary micro-architecture differences, which may result in sequential differences.
More information regarding sequential differences will now be set forth hereinafter in greater detail, in the specific context of an SLM-RTL design environment.
Due to the presence of sequential divergence between the SLM and RTL designs, information may be required regarding when to compare outputs of the SLM and RTL designs. Such information may be viewed as specifying a “transaction” on the SLM and RTL design. In one exemplary embodiment, a transaction may include the properties set forth in Table 1.
| TABLE 1 |
| Encapsulates one or more units of computation for a block under |
| consideration |
| It is self-contained and cleans up any transient states that would interfere |
| with the proper execution of the current or any future transactions |
Table 2 sets forth some additional examples of transactions, in accordance with one optional embodiment.
| TABLE 2 | |
| Discrete Cosine | the computation of DCT for |
| Transform (DCT) | one 8 Ă— 8 block could be a transaction in the |
| block: | SLM and RTL FSMs, since this is the smallest unit |
| of computation at the end of which the SLM and | |
| the RTL have outputs that are comparable. | |
| Microprocessor: | typically the SLM and RTL can be synchronized |
| after the execution of individual instructions. Hence, | |
| the execution of one instruction could be a | |
| transaction. Also, a bigger transaction could be | |
| composed for a microprocessor by saying that a | |
| sequence of k instruction executions constitute one | |
| transaction. Such a bigger transaction for a | |
| microprocessor would be useful in verifying the | |
| interactions between instructions in the instruction | |
| pipeline in the RTL and showing that the pipelining | |
| does not alter the correctness of the execution of | |
| each individual instruction. | |
| Network processor: | a transaction could be the routing of a single packet |
| from the input interface to the output. | |
| Memory: | A read or a write on a memory address. |
Specifying transaction does not necessarily require an understanding of the underlying state machines, but rather knowledge of when the machines can be compared in terms of their outputs or states. While a transaction may capture a subset of behaviors of a design, the transaction may be defined to include all interesting behaviors. In one exemplary trivial case where the SLM and RTL designs are identical state machines, the transaction may be one clock cycle.
Table 3 illustrates exemplary information for specifying a transaction for an FSM.
| TABLE 3 | ||
| 1. | Reset: | There is a sequence of inputs that specify the |
| beginning of a transaction. For example, there | ||
| may be an explicit strobe signal that needs to go | ||
| high to indicate that a new DCT computation | ||
| is starting. This signal may initialize some | ||
| scheduling state machines to start accepting new | ||
| data and initialize the machine to perform the | ||
| DCT computation. | ||
| 2. | Constraints | These are constraints that need to be true during |
| and maps: | the execution of a transaction for the transaction | |
| to execute properly. These are constraints on | ||
| inputs that need to be asserted for the duration of | ||
| the transaction. | ||
| 3. | Ready-for-next- | This specifies when the next transaction |
| transaction | can start. In pipelined designs, transactions can | |
| condition: | overlap and hence new transactions can start | |
| before the previous one has ended. Also, in | ||
| situations where the delay of a transaction is | ||
| variable (dependent on the input data or some | ||
| internal state), then the design may have a signal | ||
| to indicate to the environment that it can accept a | ||
| new transaction. | ||
| 4. | Output checks: | This specifies the condition when the output of |
| the transaction is valid. It can also be viewed as | ||
| specifying the end of the transaction, since the | ||
| output/state is valid and comparable to that in the | ||
| other model at the end of a transaction. | ||
FIG. 5 shows a transaction-accurate mapping 500, in accordance with one embodiment. Once transactions have been defined in both the SLM and RTL models, the equivalency checking logic may validate the equivalence of the models with respect to that transaction or generate a counter-example illustrating a scenario where the output/state check for the transaction fails to match, as mentioned previously. The equivalency checking logic verifies formally the equivalence of the SLM and RTL transactions. Thus, the notion of transaction allows the user to control the granularity at which the equivalence between the SLM and RTL is done and it allows for verification of a subset of the entire functionality in cases where verifying the entire functionality in one shot is not tractable.
The various embodiments set forth herein may be implemented utilizing hardware, software, or any desired combination thereof. For that matter, any type of logic may be utilized which is capable of implementing the various functionality set forth herein.
For example, FIG. 6 illustrates an exemplary computer system 600 with which the equivalence checking may be carried out. As shown, a computer system 600 is provided including one or more processors, such as processor 601, which is connected to a communication bus 602. The computer system 600 also includes a main memory 604. Control logic (software) and data are stored in the main memory 604 which may take the form of random access memory (RAM). The computer system 1100 also includes a display 1108, i.e. a computer monitor, as well as any other unillustrated I/O devices.
The computer system 600 may also include a secondary storage 610. The secondary storage 610 includes, for example, a hard disk drive and/or a removable storage drive, representing a floppy disk drive, a magnetic tape drive, a compact disk drive, etc. The removable storage drive reads from and/or writes to a removable storage unit in a well known manner. Computer programs, or computer control logic algorithms, may be stored in the main memory 604 and/or the secondary storage 610. Such computer programs, when executed, enable the computer system 600 to perform various functions, including the above-described equivalency checking. Memory 604 and storage 610 are thus examples of computer-readable media.
Appendix A sets for exemplary specifications for sequential differences. It should be strongly understood that such examples are set forth for illustrative purposes only and should not be construed as limiting in any manner whatsoever. Of course, any technique capable of specifying such sequential differences may be employed.
create_constraint
Synopsis
Usage
Waveform Constraint
Transactor Constraint
Synopsis
Usage
Input Maps
Output Maps
Flop Maps
create_state_encoding
Synopsis
Usage
create_waveform
Synopsis
Usage
Explicit Waveforms
Transformed Waveforms
Aggregated Waveforms
While various embodiments have been described above, it should be understood that they have been presented by way of example only, and not limitation. Thus, the breadth and scope of a preferred embodiment should not be limited by any of the above-described exemplary embodiments, but should be defined only in accordance with the following claims and their equivalents.
1. A method for equivalency checking between a first design and a second design, comprising:
identifying sequential differences between a first design and a second design;
determining whether the first design and the second design are equivalent, utilizing the identified sequential differences; and
outputting an indication as to the equivalency based on the determination;
wherein the sequential differences include differences in an input to output latency of the first design and the second design, differences in a frequency at which inputs of the first design and the second design are sampled, and differences in a frequency at which outputs of the first design and the second design are produced.
2. The method of claim 1, wherein the sequential differences include a protocol associated with the first design and the second design.
3. The method of claim 2, wherein the protocol includes an input/output protocol.
4. The method of claim 2, wherein a first protocol of the first design includes a serial protocol, and a second protocol of the second design includes a parallel protocol.
5. The method of claim 1, wherein the sequential differences include differences in a state mapping associated with the first design and the second design.
6. The method of claim 1, wherein the sequential differences reflect pipelining differences associated with the first design and the second design.
7. The method of claim 1, wherein the sequential differences reflect differences in scheduling of computations associated with the first design and the second design.
8. The method of claim 1, wherein the sequential differences reflect micro-architecture differences associated with the first design and the second design.
9. The method of claim 1, wherein the sequential differences are specified utilizing waveforms.
10. The method of claim 9, wherein the waveforms reflect a time variation of a signal.
11. The method of claim 1, wherein the sequential differences are specified utilizing constraints.
12. The method of claim 11, wherein the constraints are associated with temporal transformations of signals.
13. The method of claim 1, wherein the sequential differences are specified utilizing transactions.
14. The method of claim 13, wherein normal transactions of the first and second designs are proven to be equivalent with respect to a reset transaction.
15. The method of claim 13, wherein normal transactions of the first and second designs are proven to be equivalent without a reset transaction.
16. The method of claim 1, wherein the first design is a system level model design.
17. The method of claim 1, wherein the second design is a register transfer level design.
18. The method of claim 1, wherein it is determined whether the first design and the second design are equivalent by mapping the inputs associated with the first design and the second design utilizing the identified sequential differences, and determining whether the outputs of the first design and the second design are equivalent.
19. The method of claim 1, wherein if it is determined that the first design and the second design are equivalent, a proof of the equivalency is output.
20. The method of claim 1, wherein if it is determined that the first design and the second design are not equivalent, a counter example is output for illustrating the non-equivalency.
21. The method of claim 20, wherein the counter example is utilized for correcting the non-equivalency.
22. The method of claim 1, wherein the input to output latency of the first design and the second design includes a number of cycles for the first design and the second design to process the input and generate an output based on the input.
23. A computer program product embodied on a computer readable medium for equivalency checking between a first design and a second design, comprising:
computer code for identifying sequential differences between a first design and a second design;
computer code for determining whether the first design and the second design are equivalent, utilizing the identified sequential differences; and
computer code for outputting an indication as to the equivalency based on the determination;
wherein the sequential differences include differences in an input to output latency of the first design and the second design, differences in a frequency at which inputs of the first design and the second design are sampled, and differences in a frequency at which outputs of the first design and the second design are produced.
24. A system for equivalency checking between a first design and a second design, comprising:
a processor coupled to memory and an output device, the processor executing computer code for determining whether a first design and a second design are equivalent, utilizing a plurality of sequential differences;
wherein an indication as to the equivalency is output utilizing the output device;
wherein the sequential differences include differences in an input to output latency of the first design and the second design, differences in a frequency at which inputs of the first design and the second design are sampled, and differences in a frequency at which outputs of the first design and the second design are produced.
25. A data structure embodied on a computer readable medium for equivalency checking between a first design and a second design, comprising:
an object identifying sequential differences between a first design and a second design;
wherein the object is utilized for determining whether the first design and the second design are equivalent;
wherein an indication as to the equivalency is output based on the determination;
wherein the sequential differences include differences in an input to output latency of the first design and the second design, differences in a frequency at which inputs of the first design and the second design are sampled, and differences in a frequency at which outputs of the first design and the second design are produced.
26. A method for equivalency checking between a first design and a second design, comprising:
mapping inputs associated with a first design and a second design utilizing a plurality of sequential differences;
determining whether outputs of the first design and the second design are equivalent; and
outputting an indication as to the equivalency based on the determination;
wherein the sequential differences include differences in an input to output latency of the first design and the second design, differences in a frequency at which the inputs of the first design and the second design are sampled, and differences in a frequency at which the outputs of the first design and the second design are produced.