Chapter 2 of 3 · Clock, Reset, CDC and Power

Select CDC protocols and constrain real clock relationships

Match levels, events, bundles, and streams to safe crossings, quantify metastability risk, preserve Gray-pointer assumptions, and gate clocks without glitches.

Explore relative MTBF Practice questions

Payload-driven CDC

Transfer meaning, not merely wires.

A CDC structure preserves the meaning of a payload. First classify persistence, coherence, event rate, throughput, and backpressure—then choose circuitry.

Recommended mechanism

Dual-clock asynchronous FIFO

1Write local RAM2Cross Gray pointers3Read local RAM

Contract: Data stays in dual-port storage. Each side computes full or empty from a synchronized, possibly stale opposite pointer.
Delivery: Elastic until the rate difference and burst envelope consume depth.
Do not use it when: Gray encoding is not a replacement for synchronizer stages, reset coordination, or pointer-bus skew constraints.

One-bit Gray transitions and bounded bus skew
Full/empty at wrap boundaries
Overflow, underflow, reset convergence, and rate stress

Async FIFO · ownership topologyMove pointers across domains, not the data bus.

clk_sensorWrite pointerbinary → Gray → 2FF

01234567Dual-port storage

clk_computeRead pointerbinary → Gray → 2FF

Binary wrap0111 → 1000Four bits may change

Gray wrap0100 → 1100One bit changes

Three-bit binary to Gray progression
Binary	Gray	Δ bits
000	000	0
001	001	1
010	011	1
011	010	1
100	110	1
101	111	1
110	101	1
111	100	1

The synchronized opposite pointer may be stale, which makes full or empty conservative. Gray coding reduces incoherent transitions; it does not remove the synchronizers or the pointer-bus skew constraint.

Relative reliability explorer

Resolution time changes risk exponentially.

Relative to the baseline1× baseline

MTBF ∝e^{Tresolve / τ}fclk · fdata · C

Resolution time 2.0 nsDestination clock 500 MHzAsync toggle rate 10 MHzIllustrative τ 60 ps

This is a sensitivity comparison, not an absolute MTBF prediction. The fixed baseline is 2 ns, 500 MHz, 10 MHz, and τ = 60 ps; C is held constant. Device-specific τ and C come from characterized library data and vary with process, voltage, temperature, cell choice, placement, and routing. Metastability risk approaches zero with more resolution time; it never becomes zero.

Clocks and gating

Prove the relationship before applying an exception.

A crossing can be timed only when the tool knows the actual phase relationship. Clock gating is a separate functional contract that must preserve complete pulses.

Clock interaction reportSubsystem relationship matrix

Highlighting · clk_sensor ↔ clk_aon / clk_compute

clk_aonclk_sensorclk_computeclk_aonSELFASYNCRELATEDclk_sensorASYNCSELFASYNCclk_computeRELATEDASYNCSELF

Relationship: No fixed phase relationship exists, even if two independent oscillators happen to have the same nominal frequency.
Timing action: Use a recognized CDC structure. Constrain the relationship without pretending ordinary setup/hold can prove functional sampling.
Design boundary: Review every crossing by payload semantics with structural CDC and protocol evidence.
Evidence: Clock interaction + CDC/RDC analysis

Integrated clock gateCapture enable while the positive-edge clock is low.

functional_enLow-level latchscan_enAND with root clockgclk_compute

root_clk low · functional_en risesThe low-level latch admits the enable request.
↓ latched_en highThe captured enable stays stable through each high clock phase.
↓ gclk emits complete pulsesThe root clock passes only while latched_en is high.
↓ functional_en fallsDisable is captured during a low phase; gclk then remains low.

The latch prevents enable transitions during the high phase, so the AND gate cannot create a runt pulse. Use a library ICG cell, include the test override, constrain the generated clock, and verify min pulse width—not a hand-built RTL AND gate.

Check your understanding

Questions to reason through.

Why does a two-flop synchronizer reduce risk instead of eliminate it?

The first destination flop can still enter metastability when an asynchronous transition violates its sampling aperture. The second stage gives that analog state additional resolution time, which improves MTBF exponentially, but the probability is never mathematically zero and depends on library parameters, placement, clock rate, data-toggle rate, and available resolution time.

Why is synchronizing every bit of a bus independently unsafe?

Each bit can resolve on a different destination edge, so the receiver may observe a word that never existed at the source. Preserve coherence with a bundled-data handshake, Gray-coded control state, source-synchronous transfer, or asynchronous FIFO selected for the payload and throughput contract.

Put it into practice

Explain the decision behind the design.

Practice Clock, Reset, CDC and Power in the question bank

Continue the learning path

Next: Power and sequencing

Connect the adjacent layer