"Spansion, Inc." and "Cypress Semiconductor Corp." have merged together to deliver high-performance, high-quality solutions at the heart of today's most advanced embedded systems, from automotive, industrial and networking platforms to highly interactive consumer and mobile devices. The new company "Cypress Semiconductor Corp." will continue to offer "Spansion, Inc." products to new and existing customers. Continuity of Specifications There is no change to this document as a result of offering the device as a Cypress product. Any changes that have been made are the result of normal document improvements and are noted in the document history page, where supported. Future revisions will occur when appropriate, and changes will be noted in a document history page. Continuity of Ordering Part Numbers Cypress continues to support existing part numbers. To order these products, please use only the Ordering Part Numbers listed in this document. For More Information Please contact your local sales office for additional information about Cypress products and solutions. S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) GL-T MirrorBit® Eclipse™ Flash Non-Volatile Memory Family General Description The Cypress® S29GL01GT/512T are MirrorBit Eclipse flash products fabricated on 45 nm process technology. These devices offer a fast page access time as fast as 15 ns, with a corresponding random access time as fast as 100 ns. They feature a Write Buffer that allows a maximum of 256 words/512 bytes to be programmed in one operation, resulting in faster effective programming time than standard programming algorithms. This makes these devices ideal for today’s embedded applications that require higher density, better performance, and lower power consumption. Distinctive Characteristics 45 nm MirrorBit Eclipse Technology Single supply (VCC) for read / program / erase (2.7V to 3.6V) Versatile I/O feature – Wide I/O voltage range (VIO): 1.65V to VCC Separate 2048-byte One Time Program (OTP) array – Four lockable regions (SSR0 - SSR3) – SSR0 is Factory Locked – SSR3 is Password Read Protect x8/x16 data bus Common Flash Interface (CFI) parameter table Asynchronous 32-byte Page read 512-byte Programming Buffer – Programming in Page multiples, up to a maximum of 512 bytes Temperature range: – Industrial (-40°C to +85°C) – Industrial Plus (-40°C to +105°C) Single word and multiple program on same word options 100,000 erase cycles for any sector typical Sector Erase – Uniform 128-kbyte sectors 20-year data retention typical Suspend and Resume commands for Program and Erase operations Status Register, Data Polling, and Ready/Busy pin methods to determine device status Packaging Options – 56-pin TSOP – 64-ball LAA Fortified BGA, 13 mm x 11 mm – 64-ball LAE Fortified BGA, 9 mm x 9 mm – 56-ball VBU Fortified BGA, 9 mm x 7 mm Advanced Sector Protection (ASP) – Volatile and non-volatile protection methods for each sector Cypress Semiconductor Corporation Document Number: 002-00247 Rev. *C • 198 Champion Court • San Jose, CA 95134-1709 • 408-943-2600 Revised Wednesday, August 26, 2015 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Performance Summary Performance Summary Industrial Temperature Range (-40°C to +85°C) Maximum Read Access Times Density 512 Mb 1 Gb Voltage Range Random Access Time (tACC) Page Access Time (tPACC) CE# Access Time (tCE) OE# Access Time (tOE) Full VCC = VIO 100 15 100 25 Versatile I/O VIO 110 25 110 35 Full VCC = VIO 100 15 100 25 Versatile I/O VIO 110 25 110 35 CE# Access Time (tCE) OE# Access Time (tOE) Performance Summary Industrial Plus Temperature Range (-40°C to +105°C) Maximum Read Access Times Density 512 Mb 1 Gb Voltage Range Random Access Time (tACC) Page Access Time (tPACC) Full VCC = VIO 110 15 110 25 Versatile I/O VIO 120 25 120 35 Full VCC = VIO 110 15 110 25 Versatile I/O VIO 120 25 120 35 Typical Program and Erase Rates Operation -40°C to +85°C -40°C to +105°C Buffer Programming (512 bytes) 1.14 MB/s 1.14 MB/s Sector Erase (128 kbytes) 245 kB/s 245 kB/s -40°C to +105°C Maximum Current Consumption Operation -40°C to +85°C Active Read at 5 MHz, 30 pF 60 mA 60 mA Program 100 mA 100 mA Erase 100 mA 100 mA Standby 100 µA 200 µA Document Number: 002-00247 Rev. *C Page 3 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Contents General Description ............................................................. 2 Distinctive Characteristics .................................................. 2 Performance Summary ........................................................ 3 1. Product Overview ........................................................ 5 Software Interface 2. 2.1 2.2 2.3 2.4 2.5 2.6 Address Space Overlays ............................................. 7 Flash Memory Array....................................................... 8 Device ID and CFI (ID-CFI) ASO ................................... 9 Status Register ASO.................................................... 10 Data Polling Status ASO.............................................. 10 Secure Silicon Region ASO ......................................... 10 Sector Protection Control............................................. 11 3. 3.1 3.2 3.3 3.4 Data Protection .......................................................... Device Protection Methods .......................................... Command Protection ................................................... Secure Silicon Region (OTP)....................................... Sector Protection Methods........................................... 4. 4.1 4.2 Read Operations ........................................................ 18 Asynchronous Read..................................................... 18 Page Mode Read ......................................................... 18 5. 5.1 5.2 5.3 5.4 5.5 5.6 Embedded Operations............................................... Embedded Algorithm Controller (EAC) ........................ Program and Erase Summary ..................................... Command Set .............................................................. Status Monitoring ......................................................... Error Types and Clearing Procedures ......................... Embedded Algorithm Performance Table.................... 6. 6.1 6.2 Software Interface Reference ................................... 44 Command Summary .................................................... 44 Device ID and Common Flash Interface (ID-CFI) ASO Map ..................................................................... 52 12 12 12 12 13 9.4 9.5 DC Characteristics ........................................................ 65 Capacitance Characteristics ......................................... 67 10. 10.1 10.2 10.3 10.4 Timing Specifications................................................. 68 Key to Switching Waveforms ........................................ 68 AC Test Conditions ....................................................... 68 Power-On Reset (POR) and Warm Reset .................... 69 AC Characteristics ........................................................ 71 11. 11.1 11.2 11.3 Physical Interface ....................................................... 84 56-Pin TSOP................................................................. 84 64-Ball FBGA ................................................................ 86 56-Ball FBGA ................................................................ 89 12. Special Handling Instructions for FBGA Package... 91 13. Ordering Information .................................................. 91 14. 14.1 14.2 14.3 Other Resources ......................................................... 93 Links to Software .......................................................... 93 Links to Application Notes............................................. 93 Specification Bulletins ................................................... 93 15. Revision History.......................................................... 94 19 19 19 21 33 39 42 Hardware Interface 7. 7.1 7.2 7.3 7.4 7.5 7.6 Signal Descriptions ................................................... Address and Data Configuration.................................. Input/Output Summary................................................. Word/Byte Configuration.............................................. Versatile I/O Feature.................................................... Ready/Busy# (RY/BY#) ............................................... Hardware Reset ........................................................... 57 57 57 58 58 58 58 8. 8.1 8.2 8.3 8.4 8.5 Signal Protocols......................................................... Interface States............................................................ Power-Off with Hardware Data Protection ................... Power Conservation Modes......................................... Read ............................................................................ Write............................................................................. 59 59 60 60 60 61 9. 9.1 9.2 9.3 Electrical Specifications............................................ Absolute Maximum Ratings ......................................... Latchup Characteristics ............................................... Operating Ranges........................................................ 62 62 62 62 Document Number: 002-00247 Rev. *C Page 4 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 1. Product Overview The GL-T family consists of 512-Mbit to 1-Gbit, 3.0V core, Versatile I/O, non-volatile, flash memory devices. These devices have an 8-bit (byte) / 16-bit (word) wide data bus and use only byte / word boundary addresses. All read accesses provide 8/16 bits of data on each bus transfer cycle. All writes take 8/16 bits of data from each bus transfer cycle. Figure 1.1 Block Diagram DQ15 - DQ0 RY/BY# VCC Sector Switches VSS VIO Erase Voltage Generator Input/Output Buffers RESET# WE# State Control WP#/ACC BYTE# Command Register PGM Voltage Generator Chip Enable Output Enable Logic CE# OE# Address Latch ** Amax – A0 (A-1) Timer Data Latch Y-Decoder Y-Gating X-Decoder Cell Matrix STB VCC Detector STB : Note: ** Amax GL01GT = A25, Amax GL512T = A24. The GL-T family combines the best features of eXecute In Place (XIP) and Data Storage flash memories. This family has the fast random access of XIP flash along with the high density and fast program speed of Data Storage flash. Read access to any random location takes 100 ns to 120 ns depending on device density and I/O power supply voltage. Each random (initial) access reads an entire 32-byte aligned group of data called a Page. Other words within the same Page may be read by changing only the low order 4 bits of word address. Each access within the same Page takes 15 ns to 25 ns. This is called Page Mode read. Changing any of the higher word address bits will select a different Page and begin a new initial access. All read accesses are asynchronous. Document Number: 002-00247 Rev. *C Page 5 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 1.1 S29GL-T Address Map x16 Type Address within Page x8 Count Addresses Count Addresses 16 A3 - A0 32 A3 - A-1 Address within Write Buffer 256 A7 - A0 256 A6 - A-1 Page 4096 A15 - A4 4096 A15 - A4 256 A15 - A8 512 A15 - A7 Write-Buffer-Line Sector 1024 (1 Gb) 512 (512 Mb) Amax - A16 1024 (1 Gb) 512 (512 Mb) Amax - A16 The device control logic is subdivided into two parallel operating sections, the Host Interface Controller (HIC) and the Embedded Algorithm Controller (EAC). HIC monitors signal levels on the device inputs and drives outputs as needed to complete read and write data transfers with the host system. HIC delivers data from the currently entered address space on read transfers; places write transfer address and data information into the EAC command memory; notifies the EAC of power transition, hardware reset, and write transfers. The EAC looks in the command memory, after a write transfer, for legal command sequences and performs the related Embedded Algorithms. Changing the non-volatile data in the memory array requires a complex sequence of operations that are called Embedded Algorithms (EA). The algorithms are managed entirely by the device internal EAC. The main algorithms perform programming and erase of the main array data. The host system writes command codes to the flash device address space. The EAC receives the commands, performs all the necessary steps to complete the command, and provides status information during the progress of an EA. The erased state of each memory bit is a logic 1. Programming changes a logic 1 (High) to a logic 0 (Low). Only an Erase operation is able to change a 0 to a 1. An erase operation must be performed on an entire 128-kbyte aligned and length group of data call a Sector. When shipped from Cypress all Sectors are erased. Programming is done via a 512-byte Write Buffer. In x16 it is possible to write from 1 to 256 words, anywhere within the Write Buffer before starting a programming operation. Within the flash memory array, each 512-byte aligned group of 512 bytes is called a Line. In x8 it is possible to write from 1 to 256 bytes, anywhere within the Write Buffer (A7 = 0 or A7 =1) before starting a program operation. A programming operation transfers volatile data from the Write Buffer to a non-volatile memory array Line. The operation is called Write Buffer Programming. The Write Buffer is filled with 1’s after reset or the completion of any operation using the Write Buffer. Any locations not written to a 0 by a Write to Buffer command are by default still filled with 1’s. Any 1’s in the Write Buffer do not affect data in the memory array during a programming operation. As each Page of data that was loaded into the Write Buffer is transferred to a memory array Line. Sectors may be individually protected from program and erase operations by the Advanced Sector Protection (ASP) feature set. ASP provides several, hardware and software controlled, volatile and non-volatile, methods to select which sectors are protected from program and erase operations. Document Number: 002-00247 Rev. *C Page 6 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Software Interface 2. Address Space Overlays There are several separate address spaces that may appear within the address range of the flash memory device. One address space is visible (entered) at any given time. Flash Memory Array: the main non-volatile memory array used for storage of data that may be randomly accessed by asynchronous read operations. ID/CFI: a memory array used for Cypress factory programmed device characteristics information. This area contains the Device Identification (ID) and Common Flash Interface (CFI) information tables. Secure Silicon Region (SSR): a One Time Programmable (OTP) non-volatile memory array used for Cypress factory programmed permanent data, and customer programmable permanent data. Lock Register: an OTP non-volatile word used to configure the ASP features and lock the SSR. Persistent Protection Bits (PPB): a non-volatile flash memory array with one bit for each Sector. When programmed, each bit protects the related Sector from erasure and programming. PPB Lock: a volatile register bit used to enable or disable programming and erasure of the PPB bits. Array Password: an OTP non-volatile array used to store a 64-bit password used to enable changing the state of the PPB Lock Bit when using Password Mode sector protection. SSR3 Password: an OTP non-volatile array used to store a 64-bit password used to enable reading the SSR3. Dynamic Protection Bits (DYB): a volatile array with one bit for each Sector. When set, each bit protects the related Sector from erasure and programming. Status Register: a volatile register used to display Embedded Algorithm status. Data Polling Status: a volatile register used as an alternate, legacy software compatible, way to display Embedded Algorithm status. The main Flash Memory Array is the primary and default address space but, it may be overlaid by one other address space, at any one time. Each alternate address space is called an Address Space Overlay (ASO). Each ASO replaces (overlays) the entire flash device address range. Any address range not defined by a particular ASO address map, is reserved for future use. All read accesses outside of an ASO address map returns non-valid (undefined) data. The locations will display actively driven data but the meaning of whatever 1’s or 0’s appear are not defined. There are four device operating modes that determine what appears in the flash device address space at any given time: Read Mode Data Polling Mode Status Register (SR) Mode Address Space Overlay (ASO) Mode In Read Mode the entire Flash Memory Array may be directly read by the host system memory controller. The memory device Embedded Algorithm Controller (EAC), puts the device in Read mode during Power-on, after a Hardware Reset, after a Command Reset, or after an Embedded Algorithm (EA) is suspended. Read accesses and command writes are accepted in read mode. A subset of commands are accepted in read mode when an EA is suspended. While in any mode, the Status Register read command may be issued to cause the Status Register ASO to appear at every word address in the device address space. In this Status Register ASO Mode, the device interface waits for a read access and, any write access is ignored. The next read access to the device accesses the content of the status register, exits the Status Register ASO, and returns to the previous (calling) mode in which the Status Register read command was received. In EA mode the EAC is performing an Embedded Algorithm, such as programming or erasing a non-volatile memory array. While in EA mode, none of the main Flash Memory Array is readable because the entire flash device address space is replaced by the Data Polling Status ASO. Data Polling Status will appear at every word location in the device address space. Document Number: 002-00247 Rev. *C Page 7 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) While in EA mode, only a Program / Erase suspend command or the Status Register Read command will be accepted. All other commands are ignored. Thus, no other ASO may be entered from the EA mode. When an Embedded Algorithm is suspended, the Data Polling ASO is visible until the device has suspended the EA. When the EA is suspended the Data Polling ASO is exited and Flash Array data is available. The Data Polling ASO is reentered when the suspended EA is resumed, until the EA is again suspended or finished. When an Embedded Algorithm is completed, the Data Polling ASO is exited and the device goes to the previous (calling) mode (from which the Embedded Algorithm was started). In ASO mode, one of the remaining overlay address spaces is entered (overlaid on the main Flash Array address map). Only one ASO may be entered at any one time. Commands to the device affect the currently entered ASO. Only certain commands are valid for each ASO. These are listed in the Table 6.1 on page 44, in each ASO related section of the table. The following ASOs have non-volatile data that may be programmed to change 1’s to 0’s: Secure Silicon Region Lock Register Persistent Protection Bits (PPB) Password Only the PPB ASO has non-volatile data that may be erased to change 0’s to 1’s When a program or erase command is issued while one of the non-volatile ASOs is entered, the EA operates on the ASO. The ASO is not readable while the EA is active. When the EA is completed the ASO remains entered and is again readable. Suspend and Resume commands are ignored during an EA operating on any of these ASOs. 2.1 Flash Memory Array The S29GL-T family has uniform sector architecture with a sector size of 128 kB. The following tables show the sector architecture of the different devices. Table 2.1 S29GL01GT Sector and Memory Address Map Sector Size (kbyte) Sector Count 128 1024 Sector Range Address Range (16-Bit) Address Range (8-Bit) Notes SA0 0000000h-000FFFFh 0000000h-001FFFFh Sector Starting Address : : : – SA1023 3FF0000h-3FFFFFFh 7FF0000h-7FFFFFFh Sector Ending Address Sector Range Address Range (16-Bit) Address Range (8-Bit) Notes SA0 0000000h-000FFFFh 0000000h-001FFFFh Sector Starting Address : : : – SA511 1FF0000h-1FFFFFFh 3FF0000h-3FFFFFFh Sector Ending Address Table 2.2 S29GL512T Sector and Memory Address Map Sector Size (kbyte) Sector Count 128 512 Note: These tables have been condensed to show sector related information for an entire device on a single page Sectors and their address ranges that are not explicitly listed (such as SA1-SA510 on the GL512T) have sectors starting and ending addresses that form the same pattern as all other sectors of that size. For example, all 128 kB sectors have the pattern XXX0000h-XXXFFFFh in x16 and XXX0000h-XXX1FFFF in x8. Document Number: 002-00247 Rev. *C Page 8 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 2.2 Device ID and CFI (ID-CFI) ASO There are two traditional methods for systems to identify the type of flash memory installed in the system. One has traditionally been called Autoselect and is now referred to as Device Identification (ID). The other method is called Common Flash Interface (CFI). For ID, a command is used to enable an address space overlay where up to 16 word locations can be read to get JEDEC manufacturer identification (ID), device ID, and some configuration and protection status information from the flash memory. The system can use the manufacturer and device IDs to select the appropriate driver software to use with the flash device. CFI also uses a command to enable an address space overlay where an extendable table of standard information about how the flash memory is organized and operates can be read. With this method the driver software does not have to be written with the specifics of each possible memory device in mind. Instead the driver software is written in a more general way to handle many different devices but adjusts the driver behavior based on the information in the CFI table. Traditionally these two address spaces have used separate commands and were separate overlays. However, the mapping of these two address spaces are non-overlapping and so can be combined in to a single address space and appear together in a single overlay. Either of the traditional commands used to access (enter) the Autoselect (ID) or CFI overlay will cause the now combined ID-CFI address map to appear. The ID-CFI address map appears overlays the entire Flash Array. The ID-CFI address map starts at location 0 of the selected sector. Locations above the maximum defined address of the ID-CFI ASO to the maximum address of the selected sector have undefined data. The ID-CFI enter commands use the same address and data values used on previous generation memories to access the JEDEC Manufacturer ID (Autoselect) and Common Flash Interface (CFI) information, respectively. Table 2.3 ID-CFI Address Map Overview Word Address Byte Address Description Read / Write (SA) + 0000h to 000Fh (SA) + 0000h to 001Fh Device ID (traditional Autoselect values) Read Only (SA) + 0010h to 0079h (SA) + 0020h to 00F2h CFI data structure Read Only (SA) + 0080h to FFFFh (SA) + 00F3h to 1FFFFh Undefined Read Only For the complete address map see Table 6.3 on page 52. 2.2.1 Device ID The Joint Electron Device Engineering Council (JEDEC) standard JEP106T defines the manufacturer ID for a compliant memory. Common industry usage defined a method and format for reading the manufacturer ID and a device specific ID from a memory device. The manufacturer and device ID information is primarily intended for programming equipment to automatically match a device with the corresponding programming algorithm. Cypress has added additional fields within this 32-byte address space. The original industry format was structured to work with any memory data bus width e. g. x8, x16, x32. The ID code values are traditionally byte wide but are located at bus width address boundaries such that incrementing the device address inputs will read successive byte, word, or double word locations with the ID codes always located in the least significant byte location of the data bus. Because the device data bus is word wide each code byte is located in the lower half of each word location. The original industry format made the high order byte always 0. Cypress has modified the format to use both bytes in some words of the address space. For the detail description of the Device ID address map see Table 6.3 on page 52. 2.2.2 Common Flash Memory Interface The JEDEC Common Flash Interface (CFI) specification (JESD68.01) defines a standardized data structure that may be read from a flash memory device, which allows vendor-specified software algorithms to be used for entire families of devices. The data structure contains information for system configuration such as various electrical and timing parameters, and special functions supported by the device. Software support can then be device-independent, Device ID-independent, and forward-and-backward-compatible for entire Flash device families. The system can read CFI information at the addresses within the selected sector as shown in Device ID and Common Flash Interface (ID-CFI) ASO Map on page 52. Document Number: 002-00247 Rev. *C Page 9 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Like the Device ID information, CFI information is structured to work with any memory data bus width e. g. x8, x16, x32. The code values are always byte wide but are located at data bus width address boundaries such that incrementing the device address reads successive byte, word, or double word locations with the codes always located in the least significant byte location of the data bus. Because the data bus is word wide each code byte is located in the lower half of each word location and the high order byte is always 0. For further information, please refer to the Spansion CFI Specification, Version 1.4 (or later), and the JEDEC publications JEP137-A and JESD68.01. Please contact JEDEC (http://www.jedec.org) for their standards and the Spansion CFI Specification may be found at the Cypress Web site (http://www.spansion.com/Support/TechnicalDocuments/Pages/ApplicationNotes.aspx at the time of this document's publication) or by contacting a local Cypress sales office listed on the web site. 2.3 Status Register ASO The Status Register ASO contains a single word of registered volatile status for Embedded Algorithms. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The Status Register content appears on all word locations. The first read access exits the Status Register ASO (with the rising edge of CE# or OE#) and returns to the address space map in use when the Status Register read command was issued. Write commands will not exit the Status Register ASO state. 2.4 Data Polling Status ASO The Data Polling Status ASO contains a single word of volatile memory indicating the progress of an EA. The Data Polling Status ASO is entered immediately following the last write cycle of any command sequence that initiates an EA. Commands that initiate an EA are: Word Program Program Buffer to Flash Chip Erase Sector Erase Erase Resume / Program Resume Program Resume Enhanced Method Blank Check Lock Register Program Password Program PPB Program All PPB Erase Evaluate Erase Status The Data Polling Status word appears at all word locations in the device address space. When an EA is completed the Data Polling Status ASO is exited and the device address space returns to the address map mode where the EA was started. 2.5 Secure Silicon Region ASO The Secure Silicon Region (SSR) provides an extra memory area that can be programmed once and permanently protected from further changes, i. e., it is a One Time Program (OTP) area. The SSR is 2048 bytes in length. It consists of 512 bytes for Factory Locked Secure Silicon Region (SSR0), 1024 bytes for Customer Locked Secure Silicon Regions (SSR1 and SSR2), and 512 bytes for Customer Locked Secure Silicon Region with Read password (SSR3). SSR0 is shipped locked, preventing further programming. SSR1 and SSR2 are OTP with each having separate lock bits and once locked no further programming is allowed for that region. SSR3 is an OTP and requires a SSR3 password to read or program that region. Once SSR3 is locked no further programming is allowed for that region. Document Number: 002-00247 Rev. *C Page 10 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The sector address supplied during the Secure Silicon Entry command selects the Flash Memory Array sector that is overlaid by the Secure Silicon Region address map. The SSR is overlaid starting at location 0 in the selected sector. Use of the sector 0 address is recommended for future compatibility. While the SSR ASO is entered the content of all other sectors is memory core data for read operations. Program is not allowed outside of ASO. Table 2.4 Secure Silicon Region Word Address Range Byte Address Range Content Region Size (SA) + 0000h to 00FFh (SA) + 0000h to 01FFh Factory Locked Secure Silicon Region SSR0 512 bytes (SA) + 0100h to 01FFh (SA) + 0200h to 03FFh Customer Locked Secure Silicon Region SSR1 512 bytes (SA) + 0200h to 02FFh (SA) + 0400h to 05FFh Customer Locked Secure Silicon Region SSR2 512 bytes (SA) + 0300h to 03FFh (SA) + 0600h to 07FFh Customer Locked Secure Silicon Region with Read Password SSR3 512 bytes (SA) + 0400h to FFFFh (SA) + 0800h to 1FFFFh Undefined n/a 126 kbytes 2.6 2.6.1 Sector Protection Control Lock Register ASO The Lock register ASO contains a single word of OTP memory. When the ASO is entered the Lock Register appears at all word locations in the device address space. However, it is recommended to read or program the Lock Register only at location 0 of the device address space for future compatibility. 2.6.2 Persistent Protection Bits (PPB) ASO The PPB ASO contains one bit of a Flash Memory Array for each Sector in the device. When the PPB ASO is entered, the PPB bit for a sector appears in the Least Significant Bit (LSB) of each address in the sector. Reading any address in a sector displays data where the LSB indicates the non-volatile protection status for that sector. However, it is recommended to read or program the PPB only at address 0 of the sector for future compatibility. If the bit is 0 the sector is protected against programming and erase operations. If the bit is 1 the sector is not protected by the PPB. The sector may be protected by other features of ASP. 2.6.3 PPB LOCK ASO The PPB Lock ASO contains a single bit of volatile memory. The bit controls whether the bits in the PPB ASO may be programmed or erased. If the bit is 0 the PPB ASO is protected against programming and erase operations. If the bit is 1 the PPB ASO is not protected. When the PPB Lock ASO is entered the PPB Lock bit appears in the least significant bit (LSB) of each address in the device address space. However, it is recommended to read or program the PPB Lock only at address 0 of the device for future compatibility. 2.6.4 Password ASO The Password ASO contains four words of OTP memory. When the ASO is entered the Password appears starting at address 0 in the device address space. All locations above the fourth word are undefined. 2.6.5 Dynamic Protection Bits (DYB) ASO The DYB ASO contains one bit of a volatile memory array for each Sector in the device. When the DYB ASO is entered, the DYB bit for a sector appears in the least significant bit (LSB) of each address in the sector. Reading any address in a sector displays data where the LSB indicates the non-volatile protection status for that sector. However, it is recommended to read, set, or clear the DYB only at address 0 of the sector for future compatibility. If the bit is 0 the sector is protected against programming and erase operations. If the bit is 1 the sector is not protected by the DYB. The sector may be protected by other features of ASP. Document Number: 002-00247 Rev. *C Page 11 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 3. Data Protection The device offers several features to prevent malicious or accidental modification of any sector via hardware means. 3.1 Device Protection Methods 3.1.1 Power-Up Write Inhibit RESET#, CE#, WE#, and, OE# are ignored during Power-On Reset (POR). During POR, the device can not be selected, will not accept commands on the rising edge of WE#, and does not drive outputs. The Host Interface Controller (HIC) and Embedded Algorithm Controller (EAC) are reset to their standby states, ready for reading array data, during POR. CE# or OE# must go to VIH before the end of POR (tVCS). At the end of POR the device conditions are: all internal configuration information is loaded, the device is in read mode, the Status Register is at default value, all bits in the DYB ASO are set to un-protect all sectors, the Write Buffer is loaded with all 1’s, the EAC is in the standby state. 3.1.2 Low VCC Write Inhibit When VCC is less than VLKO, the HIC does not accept any write cycles and the EAC resets. This protects data during VCC power-up and power-down. The system must provide the proper signals to the control pins to prevent unintentional writes when VCC is greater than VLKO. 3.2 Command Protection Embedded Algorithms are initiated by writing command sequences into the EAC command memory. The command memory array is not readable by the host system and has no ASO. Each host interface write is a command or part of a command sequence to the device. The EAC examines the address and data in each write transfer to determine if the write is part of a legal command sequence. When a legal command sequence is complete the EAC will initiate the appropriate EA. Writing incorrect address or data values, or writing them in an improper sequence, will generally result in the EAC returning to its Standby state. However, such an improper command sequence may place the device in an unknown state, in which case the system must write the reset command, or possibly provide a hardware reset by driving the RESET# signal Low, to return the EAC to its Standby state, ready for random read. The address provided in each write may contain a bit pattern used to help identify the write as a command to the device. The upper portion of the address may also select the sector address on which the command operation is to be performed. The Sector Address (SA) includes Amax through A16 flash address bits (system byte address signals Amax through A16). A command bit pattern is located in A10 to A0 flash address bits (system byte address signals A11 through A1). The data in each write may be: a bit pattern used to help identify the write as a command, a code that identifies the command operation to be performed, or supply information needed to perform the operation. See Table 6.1 on page 44 for a listing of all commands accepted by the device. 3.3 Secure Silicon Region (OTP) See Section 2.5, Secure Silicon Region ASO on page 10 for a description of the secure silicon region. See Section 5.3.9.3, Secure Silicon Region ASO on page 31 for a description of the allowed commands. Document Number: 002-00247 Rev. *C Page 12 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 3.4 3.4.1 Sector Protection Methods Write Protect Signal If WP# = VIL, the lowest or highest address sector is protected from program or erase operations independent of any other ASP configuration. Whether it is the lowest or highest sector depends on the device ordering option (model) selected. If WP# = VIH, the lowest or highest address sector is not protected by the WP# signal but it may be protected by other aspects of ASP configuration. WP# has an internal pull-up; when unconnected, WP# is at VIH. WP# should not change between VIL and VIH during any embedded operation. 3.4.2 ASP Advanced Sector Protection (ASP) is a set of independent hardware and software methods used to disable or enable programming or erase operations, individually, in any or all sectors. This section describes the various methods of protecting data stored in the memory array. An overview of these methods is shown in Figure 3.1. Figure 3.1 Advanced Sector Protection Overview Lock Register (One Time Programmable) Password Method Persistent Method (DQ2) (DQ1) 64-bit Password (One Time Protect) PPB Lock Bit 0 = PPBs Locked 1,2,3 1 = PPBs Unlocked 1. Bit is volatile, and defaults to “1” on reset (to “0” if in Password Mode). 2. Programming to “0” locks all PPBs to their current state. 3. Once programmed to “0”, requires hardware reset to unlock or application of the password. Memory Array Persistent Protection Bit (PPB)5,6 Sector 0 PPB 0 DYB 0 Sector 1 PPB 1 DYB 1 Sector 2 PPB 2 DYB 2 Sector N-2 PPB N-2 DYB N-2 Sector N-1 PPB N-1 DYB N-1 PPB N DYB N 4 Sector N 4. N = Highest Address Sector. 5. 0 = Sector Protected, 1 = Sector Unprotected. 6. PPBs programmed individually, but cleared collectively Dynamic Protection Bit (DYB)7,8,9 7. 0 = Sector Protected, 1 = Sector Unprotected. 8. Protect effective only if corresponding PPB is “1” (unprotected). 9. Volatile Bits: defaults to user choice upon power-up (see ordering options). Every main flash array sector has a non-volatile (PPB) and a volatile (DYB) protection bit associated with it. When either bit is 0, the sector is protected from program and erase operations. Document Number: 002-00247 Rev. *C Page 13 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The PPB bits are protected from program and erase when the PPB Lock bit is 0. There are two methods for managing the state of the PPB Lock bit, Persistent Protection and Password Protection. The Persistent Protection method sets the PPB Lock to 1 during POR or Hardware Reset so that the PPB bits are unprotected by a device reset. There is a command to clear the PPB Lock bit to 0 to protect the PPB bits. There is no command in the Persistent Protection method to set the PPB Lock bit therefore the PPB Lock bit will remain at 0 until the next power-off or hardware reset. The Persistent Protection method allows boot code the option of changing sector protection by programming or erasing the PPB, then protecting the PPB from further change for the remainder of normal system operation by clearing the PPB Lock bit. This is sometimes called Boot-code controlled sector protection. The Password method clears the PPB Lock bit to 0 during POR or Hardware Reset to protect the PPB. A 64-bit password may be permanently programmed and hidden for the password method. A command can be used to provide a password for comparison with the hidden password. If the password matches the PPB Lock bit is set to 1 to unprotect the PPB. A command can be used to clear the PPB Lock bit to 0. The selection of the PPB Lock management method is made by programming OTP bits in the Lock Register so as to permanently select the method used. The Lock Register also contains OTP bits, for protecting the SSR. The PPB bits are erased so that all main flash array sectors are unprotected when shipped from Cypress. The Secured Silicon Region can be factory protected or left unprotected depending on the ordering option (model) ordered. 3.4.3 PPB Lock The Persistent Protection Bit Lock is a volatile bit for protecting all PPB bits. When cleared to 0, it locks all PPBs and when set to 1, it allows the PPBs to be changed. There is only one PPB Lock Bit per device. The PPB Lock command is used to clear the bit to 0. The PPB Lock Bit must be cleared to 0 only after all the PPBs are configured to the desired settings. In Persistent Protection mode, the PPB Lock is set to 1 during POR or a hardware reset. When cleared, no software command sequence can set the PPB Lock, only another hardware reset or power-up can set the PPB Lock bit. In the Password Protection mode, the PPB Lock is cleared to 0 during POR or a hardware reset. The PPB Lock can only set to 1 by the Password Unlock command sequence. The PPB Lock can be cleared by the PPB Lock Bit Clear command. 3.4.4 Persistent Protection Bits (PPB) The Persistent Protection Bits (PPB) are located in a separate nonvolatile flash array. One of the PPB bits is assigned to each sector. When a PPB is 0 its related sector is protected from program and erase operations. The PPB are programmed individually but must be erased as a group, similar to the way individual words may be programmed in the main array but an entire sector must be erased at the same time. Preprogramming and verification prior to erasure are handled by the EAC. Programming a PPB bit requires the typical word programming time. During a PPB bit programming operation or PPB bit erasing, Data polling Status DQ6 Toggle Bit I will toggle until the operation is complete. Erasing all the PPBs requires typical sector erase time. If the PPB Lock is 0, the PPB Program or erase commands do not execute and time-out without programming or erasing the PPB. The protection state of a PPB for a given sector can be verified by executing a PPB Status Read command when entered in the PPB ASO. 3.4.5 Dynamic Protection Bits (DYB) Dynamic Protection Bits are volatile and unique for each sector and can be individually modified. DYBs only control protection for sectors that have their PPBs erased. By issuing the DYB Set or Clear command sequences, the DYB are set to 0 or cleared to 1, thus placing each sector in the protected or unprotected state respectively, if the PPB for that sector is 1. This feature allows software to easily protect sectors against inadvertent changes, yet does not prevent the easy removal of protection when changes are needed. The DYB can be set to 0 or cleared to 1 as often as needed. Document Number: 002-00247 Rev. *C Page 14 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 3.4.6 Sector Protection States Summary Each sector can be in one of the following protection states: Unlocked – The sector is unprotected and protection can be changed by a simple command. The protection state defaults to unprotected after a power cycle or hardware reset. Dynamically Locked – A sector is protected and protection can be changed by a simple command. The protection state is not saved across a power cycle or hardware reset. Persistently Locked – A sector is protected and protection can only be changed if the PPB Lock Bit is set to 1. The protection state is non-volatile and saved across a power cycle or hardware reset. Changing the protection state requires programming or erase of the PPB bits. Table 3.1 Sector Protection States Protection Bit Values Sector State PPB Lock PPB DYB 1 1 1 Unprotected – PPB and DYB are changeable 1 1 0 Protected – PPB and DYB are changeable 1 0 1 Protected – PPB and DYB are changeable 1 0 0 Protected – PPB and DYB are changeable 0 1 1 Unprotected – PPB not changeable, DYB is changeable 0 1 0 Protected – PPB not changeable, DYB is changeable 0 0 1 Protected – PPB not changeable, DYB is changeable 0 0 0 Protected – PPB not changeable, DYB is changeable 3.4.7 Lock Register The Lock Register holds the non-volatile OTP bits for controlling protection of the SSR and determining the PPB Lock bit management method (protection mode). Table 3.2 Lock Register Bit Default Value 15-12 1 Reserved Name 11 1 SSR Region 3 Password Protection Mode Lock Bit 10 1 SSR Region 3 (Customer) Lock Bit 9 1 SSR Region 2 (Customer) Lock Bit 8 0 Reserved 7 1 Reserved 6 1 SSR Region 1 (Customer) Lock Bit 5 1 Reserved 4 1 Reserved 3 1 Reserved 2 1 Password Protection Mode Lock Bit 1 1 Persistent Protection Mode Lock Bit 0 0 SSR Region 0 (Factory) Lock Bit The Secure Silicon Region (SSR) protection bits must be used with caution, as once locked, there is no procedure available for unlocking the protected portion of the Secure Silicon Region and none of the bits in the protected Secure Silicon Region memory space can be modified in any way. Once the Secure Silicon Region area is protected, any further attempts to program in the area will fail with status indicating the area being programmed is protected. The Region 0 Indicator Bit is located in the Lock Register at bit location 0, Region 1 in bit location 6, Region 2 in bit location 9, and Region 3 in bit location 10. Document Number: 002-00247 Rev. *C Page 15 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) As shipped from the factory, all devices default to the Persistent Protection method, with all sectors unprotected, when power is applied. The device programmer or host system can then choose which sector protection method to use. Programming either of the following two, one-time programmable, non-volatile bits, locks the part permanently in that mode: Persistent Protection Mode Lock Bit (DQ1) Password Protection Mode Lock Bit (DQ2) If both lock bits are selected to be programmed at the same time, the operation will abort. Once the Password Mode Lock Bit is programmed, the Persistent Mode Lock Bit is permanently disabled and no changes to the protection scheme are allowed. Similarly, if the Persistent Mode Lock Bit is programmed, the Password Mode is permanently disabled. If the password mode is to be chosen, the password must be programmed prior to setting the corresponding lock register bit. Setting the Password Protection Mode Lock Bit (DQ2) will disable the ability to program or read the password. The programming time of the Lock Register is the same as the typical word programming time. During a Lock Register programming EA, Data polling Status DQ6 Toggle Bit I will toggle until the programming has completed. The system can also determine the status of the lock register programming by reading the Status Register. See Status Register on page 33 for information on these status bits. The user is not required to program DQ2 or DQ1, and DQ6 or DQ0 bits at the same time. This allows the user to lock the SSR before or after choosing the device protection scheme. When programming the Lock Bits, the Reserved Bits must be 1 (masked). 3.4.8 Persistent Protection Mode The Persistent Protection method sets the PPB Lock to 1 during POR or Hardware Reset so that the PPB bits are unprotected by a device reset. There is a command to clear the PPB Lock bit to 0 to protect the PPB. There is no command in the Persistent Protection method to set the PPB Lock bit to 1 therefore the PPB Lock bit will remain at 0 until the next power-off or hardware reset. 3.4.9 3.4.9.1 Password Protection Mode PPB Password Protection Mode PPB Password Protection Mode allows an even higher level of security than the Persistent Sector Protection Mode, by requiring a 64-bit password for setting the PPB Lock. In addition to this password requirement, after power up and reset, the PPB Lock is cleared to 0 to ensure protection at power-up. Successful execution of the Password Unlock command by entering the entire password sets the PPB Lock to 1, allowing for sector PPB modifications. Password Protection Notes: The Password Program Command is only capable of programming 0’s. The password is all 1’s when shipped from Cypress. It is located in its own memory space and is accessible through the use of the Password Program and Password Read commands. All 64-bit password combinations are valid as a password. Once the Password is programmed and verified, the Password Mode Locking Bit must be set in order to prevent reading or modification of the password. The Password Mode Lock Bit, once programmed, prevents reading the 64-bit password on the data bus and further password programming. All further read commands to the password region are disabled (data is read as 1’s). There is no means to verify what the password is after the Password Protection Mode Lock Bit is programmed. Password verification is only allowed before selecting the Password Protection mode. Any program operation will fail and will report the results as a normal program failure on a locked sector. The Password Mode Lock Bit is not erasable. Document Number: 002-00247 Rev. *C Page 16 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The exact password must be entered in order for the unlocking function to occur. – The addresses can be loaded in any order but all 4 words are required for a successful match to occur. – The Sector Addresses (Amax - A16) and Word Line Addresses (A15 - A8) are compared to ‘zero’ while the password address/ data are loaded. If the Sector Address or Word Line Address don’t match then the error will be reported at the end of that write cycle. The status register will return to the ready state with the Program Status Bit set to 1 and Write Buffer Abort Status Bit set to 1 indicating a failed programming operation. The data polling status will remain active, with DQ7 set to the complement of the DQ7 bit in the last word of the password unlock command, and DQ6 toggling. RY/BY# will remain low. – The specific address and data are compared after the Program Buffer To Flash command has been given. If they don’t match to the internal set value than the status register will return to the ready state with the Program Status Bit set to 1 indicating a failed programming operation. The data polling status will remain active, with DQ7 set to the complement of the DQ7 bit in the last word of the password unlock command, and DQ6 toggling. RY/BY# will remain low. The device requires tPPB for setting the PPB Lock after the valid 64-bit password is given to the device.This makes it take an unreasonably long time (58 million years) for a hacker to run through all the 64-bit combinations in an attempt to correctly match a password. The EA status checking methods may be used to determine when the EAC is ready to accept a new password command. If the password is lost after setting the Password Mode Lock Bit, there is no way to clear the PPB Lock. Document Number: 002-00247 Rev. *C Page 17 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 4. 4.1 Read Operations Asynchronous Read Each read access may be made to any location in the memory (random access). Each random access is self-timed with the same latency from CE# or address to valid data (tACC or tCE). 4.2 Page Mode Read Each random read accesses an entire 32-byte Page in parallel. Subsequent reads within the same Page have faster read access speed. The Page is selected by the higher address bits (Amax-A4), while the specific word of that page is selected by the least significant address bits A3-A0 (A3-A-1 in x8 mode). The higher address bits are kept constant and only A3-A0 (A3-A-1 in x8 mode) changed to select a different word in the same Page. This is an asynchronous access with data appearing on DQ15-DQ0 (DQ7-DQ0 in x8 mode) when CE# remains Low, OE# remains Low, and the asynchronous Page access time (tPACC) is satisfied. If CE# goes High and returns Low for a subsequent access, a random read access is performed and time is required (tACC or tCE). Document Number: 002-00247 Rev. *C Page 18 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5. Embedded Operations 5.1 Embedded Algorithm Controller (EAC) The EAC takes commands from the host system for programming and erasing the flash memory array and performs all the complex operations needed to change the non-volatile memory state. This frees the host system from any need to manage the program and erase processes. There are four EAC operation categories: Standby (Read Mode) Address Space Switching Embedded Algorithms (EA) Advanced Sector Protection (ASP) Management 5.1.1 EAC Standby In the standby mode current consumption is greatly reduced. The EAC enters its standby mode when no command is being processed and no Embedded Algorithm is in progress. If the device is deselected (CE# = High) during an Embedded Algorithm, the device still draws active current until the operation is completed (ICC3). ICC4 in DC Characteristics on page 65 represents the standby current specification when both the Host Interface and EAC are in their Standby state. 5.1.2 Address Space Switching Writing specific address and data sequences (command sequences) switch the memory device address space from the main flash array to one of the Address Space Overlays (ASO). Embedded Algorithms operate on the information visible in the currently active (entered) ASO. The system continues to have access to the ASO until the system issues an ASO Exit command, performs a Hardware RESET, or until power is removed from the device. An ASO Exit Command switches from an ASO back to the main flash array address space. The commands accepted when a particular ASO is entered are listed between the ASO enter and exit commands in the command definitions table. See Command Summary on page 44 for address and data requirements for all command sequences. 5.1.3 Embedded Algorithms (EA) Changing the non-volatile data in the memory array requires a complex sequence of operations that are called Embedded Algorithms (EA). The algorithms are managed entirely by the device internal Embedded Algorithm Controller (EAC). The main algorithms perform programming and erasing of the main array data and the ASO’s. The host system writes command codes to the flash device address space. The EAC receives the commands, performs all the necessary steps to complete the command, and provides status information during the progress of an EA. 5.2 Program and Erase Summary Flash data bits are erased in parallel in a large group called a sector. The Erase operation places each data bit in the sector in the logical 1 state (High). Flash data bits may be individually programmed from the erased 1 state to the programmed logical 0 (low) state. A data bit of 0 cannot be programmed back to a 1. A succeeding read shows that the data is still 0. Only erase operations can convert a 0 to a 1. Programming the same word location more than once with different 0 bits will result in the logical AND of the previous data and the new data being programmed. The duration of program and erase operations is shown in Embedded Algorithm Performance Table on page 42. Document Number: 002-00247 Rev. *C Page 19 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Program and erase operations may be suspended. An erase operation may be suspended to allow either programming or reading of another sector (not in the erase sector). No other erase operation can be started during an erase suspend. A program operation may be suspended to allow reading of another location (not in the Line being programmed). No other program or erase operation may be started during a suspended program operation – program or erase commands will be ignored during a suspended program operation. After an intervening program operation or read access is complete the suspended erase or program operation may be resumed. The resume can happen at any time after the suspend, assuming the device is not in the process of executing another command. Program and Erase operations may be interrupted as often as necessary but in order for a program or erase operation to progress to completion there must be some periods of time between resume and the next suspend commands greater than or equal to tPRS or tERS in Embedded Algorithm Performance Table on page 42. When an Embedded Algorithm (EA) is complete, the EAC returns to the operation state and address space from which the EA was started (Erase Suspend, EAC Standby, ...). The system can determine the status of a program or erase operation by reading the Status Register or using Data Polling Status. Refer to Status Register on page 33 for information on these status bits. Refer to Data Polling Status on page 35 for more information. Any commands written to the device during the Embedded Program Algorithm are ignored except the Program Suspend (x51h), Status Read command (x70h), and Erase Suspend/Program Suspend command (xB0h). Any commands written to the device during the Embedded Erase Algorithm are ignored except Status Read (x70h) and Erase Suspend/Program Suspend command (xB0h). A hardware reset immediately terminates any in progress program / erase operation and returns to read mode after tRPH time. The terminated operation should be reinitiated once the device has returned to the idle state, to ensure data integrity. For performance and reliability reasons reading and programming is internally done on full 32-byte Pages. ICC3 in DC Characteristics on page 65 represents the active current specification for a write (Embedded Algorithm) operation. 5.2.1 Program Granularity The S29GL-T supports two methods of programming, Word or Write Buffer Programming. Each Page can be programmed by either method. Pages programmed by different methods may be mixed within a Line for the Industrial Temperature version (-40°C to +85°C). For the Industrial Plus version (-40°C to +105°C) the device will only support one programming operation on each 32-byte page between erase operations and Single Word Programming command is not supported. Word programming examines the data word supplied by the command and programs 0’s in the addressed memory array word to match the 0’s in the command data word. Write Buffer Programming examines the write buffer and programs 0’s in the addressed memory array Pages to match the 0’s in the write buffer. The write buffer does not need to be completely filled with data. It is allowed to program as little as a single bit, several bits, a single word, a few words, a Page, multiple Pages, or the entire buffer as one programming operation. Use of the write buffer method reduces host system overhead in writing program commands and reduces memory device internal overhead in programming operations to make Write Buffer Programming more efficient and thus faster than programming individual words with the Word Programming command. 5.2.2 Incremental Programming The same word location may be programmed more than once, by either the Word or Write Buffer Programming methods, to incrementally change 1’s to 0’s. Document Number: 002-00247 Rev. *C Page 20 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3 5.3.1 5.3.1.1 Command Set Program Methods Word Programming Word programming is used to program a single word anywhere in the main Flash Memory Array. The Word Programming command is a four-write-cycle sequence. The program command sequence is initiated by writing two unlock write cycles, followed by the program set up command. The program address and data are written next, which in turn initiate the Embedded Word Program algorithm. The system is not required to provide further controls or timing. The device automatically generates the program pulses and verifies the programmed cell margin internally. When the Embedded Word Program algorithm is complete, the EAC then returns to its standby mode. The system can determine the status of the program operation by using Data Polling Status, reading the Status Register, or monitoring the RY/BY# output. See Status Register on page 33 for information on these status bits. See Data Polling Status on page 35 for information on these status bits. See Figure 5.1 on page 21 for a diagram of the word programming operation. Any commands other than Program Suspend written to the device during the Embedded Program algorithm are ignored. Note that a hardware reset (RESET# = VIL) immediately terminates the programming operation and returns the device to read mode after tRPH time. To ensure data integrity, the Program command sequence should be reinitiated once the device has completed the hardware reset operation. A modified version of the Word Programming command, without unlock write cycles, is used for programming when entered into the Lock Register, Password, and PPB ASOs or the Unlock Bypass mode. The same command is used to change volatile bits when entered in to the PPB Lock, and DYB ASOs. See Table 6.1 on page 44 for program command sequences. Figure 5.1 Word Program Operation START Write Program Command Sequence Data Poll from System Embedded Program algorithm in progress Verify Word? No Yes No Last Addresss? Increment Address Yes Programming Completed 5.3.1.2 Write Buffer Programming A write buffer is used to program data within a 512-byte address range aligned on a 512-byte boundary (Line). Thus, a full Write Buffer Programming operation must be aligned on a Line boundary. Programming operations of less than a full 512 bytes may start on any word boundary but may not cross a Line boundary. At the start of a Write Buffer programming operation all bit locations in the buffer are all 1’s (FFFFh words) thus any locations not loaded will retain the existing data. See Product Overview on page 5 for information on address map. Write Buffer Programming allows up to 512 bytes to be programmed in one operation. It is possible to program from 1 bit up to 512 bytes in each Write Buffer Programming operation. It is recommended that a multiple of Pages be written and each Page written only once. For the very best performance, programming should be done in full Lines of 512 bytes aligned on 512-byte boundaries. Write Buffer Programming is supported only in the main flash array or the SSR ASO. Document Number: 002-00247 Rev. *C Page 21 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The Write Buffer Programming operation is initiated by first writing two unlock cycles. This is followed by a third write cycle of the Write to Buffer command with the Sector Address (SA), in which programming is to occur. Next, the system writes the number of word locations minus 1. This tells the device how many write buffer addresses are loaded with data and therefore when to expect the Program Buffer to flash confirm command. The Sector Address must match in the Write to Buffer command and the Write Word Count command. The Sector to be programmed must be unlocked (unprotected). The system then writes the starting address / data combination. This starting address is the first address / data pair to be programmed, and selects the write-buffer-Line address. The Sector address must match the Write to Buffer Sector Address or the operation will abort and goes to the Abort state. All subsequent address / data pairs must be in sequential order. All write buffer addresses must be within the same Line. If the system attempts to load data outside this range, the operation will abort and go to the Abort state. The counter decrements for each data load operation. Note that while counting down the data writes, every write is considered to be data being loaded into the write buffer. No commands are possible during the write buffer loading period. The only way to stop loading the write buffer is to write with an address that is outside the Line of the programming operation. This invalid address will immediately abort the Write to Buffer command. Once the specified number of write buffer locations has been loaded, the system must then write the Program Buffer to Flash command at the Sector Address. The device then goes busy. The Embedded Program algorithm automatically programs and verifies the data for the correct data pattern. The system is not required to provide any controls or timings during these operations. If an incorrect number of write buffer locations have been loaded the operation will abort and goes to the Abort state. The abort occurs when anything other than the Program Buffer to Flash is written when that command is expected at the end of the word count. The write-buffer embedded programming operation can be suspended using the Program Suspend command. When the Embedded Program algorithm is complete, the EAC then returns to the EAC standby or Erase Suspend standby state where the programming operation was started. The system can determine the status of the program operation by using Data Polling Status, reading the Status Register, or monitoring the RY/BY# output. See Status Register on page 33 for information on these status bits. See Data Polling Status on page 35 for information on these status bits. See Figure 5.2 on page 23 for a diagram of the programming operation. The Write Buffer Programming Sequence will be aborted under the following conditions: Load a Word Count value greater than the buffer size (255). Write an address that is outside the Line provided in the Write to Buffer command. The Program Buffer to Flash command is not issued after the Write Word Count number of data words is loaded. When any of the conditions that cause an abort of write buffer command occur the abort will happen immediately after the offending condition, and will indicate a Program Fail in the Status Register at bit location 4 (PSB = 1) due to Write Buffer Abort bit location 3 (WBASB = 1). The next successful program operation will clear the failure status or a Clear Status Register may be issued to clear the PSB status bit. The Write Buffer Programming Sequence can be stopped by the following: Hardware Reset or Power cycle. However, these using either of these methods may leave the area being programmed in an intermediate state with invalid or unstable data values. In this case the same area will need to be reprogrammed with the same data or erased to ensure data values are properly programmed or erased. Document Number: 002-00247 Rev. *C Page 22 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 5.2 Write Buffer Programming Operation with Data Polling Status Write “Write to Buffer” command Sector Address Write “Word Count” to program - 1 (WC) Sector Address Write Starting Address/Data Yes WC = 0? Write to a different Sector Address No ABORT Write to Buffer Operation? Yes Write to Buffer ABORTED. Must write “Write-to-Buffer ABORT RESET” command sequence to return to READ mode. No Write next Address/Data pair (Note 4) WC = WC - 1 Write Program Buffer to Flash Confirm, Sector Address Read DQ7-DQ0 with Addr = LAST LOADED ADDRESS Yes DQ7 = Data? No No No DQ1 = 1? Yes DQ5 = 1? Yes Read DQ7-DQ0 with Addr = LAST LOADED ADDRESS Yes DQ7 = Data? No FAIL or ABORT (Note 2) PASS Notes: 1. DQ7 should be rechecked even if DQ5 = 1 because DQ7 may change simultaneously with DQ5. 2. If this flowchart location was reached because DQ5 = 1, then the device FAILED. If this flowchart location was reached because DQ1 = 1, then the Write Buffer operation was ABORTED. In either case the proper RESET command must be written to the device to return the device to READ mode. Write-Buffer-ProgrammingAbort-Rest if DQ1 = 1, either Software RESET or Write-Buffer-Programming-Abort-Reset if DQ5 = 1. 3. See Table 6.1, Command Definitions x16 on page 44 for the command sequence as required for Write Buffer Programming. 4. When Sector Address is specified, any address in the selected sector is acceptable. However, when loading Write-Buffer address locations with data, all addresses MUST fall within the selected Write-Buffer Page. Document Number: 002-00247 Rev. *C Page 23 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 5.3 Write Buffer Programming Operation with Status Register Write “Write to Buffer” command Sector Address Write “Word Count” to program - 1 (WC) Sector Address Write Starting Address/Data Yes WC = 0? Write to a different Sector Address No ABORT Write to Buffer Operation? Yes Write to Buffer ABORTED. Must write “Write-to-Buffer ABORT RESET” command sequence to return to READ mode. No (Note 2) Write next Address/Data pair WC = WC - 1 Write Program Buffer to Flash Confirm, Sector Address Read Status Register DRB SR[7] = 0? Yes No PSB SR[4] = 0? Yes No Program Fail Yes Program Successful WBASB SR[3] = 1? No SLSB SR[1] = 0? Yes No Program aborted during Write to Buffer command Sector Locked Error Program Fail Notes: 1. See Table 6.1, Command Definitions x16 on page 44 for the command sequence as required for Write Buffer Programming. 2. When Sector Address is specified, any address in the selected sector is acceptable. However, when loading Write-Buffer address locations with data, all addresses MUST fall within the selected Write-Buffer Page. Document Number: 002-00247 Rev. *C Page 24 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 5.1 Write Buffer Programming Command Sequence x16 x8 Sequence Comment Address Data Address Data Issue Unlock Command 1 555 AA AAA AA Issue Unlock Command 2 2AA 55 555 55 Issue Write to Buffer Command at Sector Address SA 0025h SA 25h Issue Number of Locations at Sector Address Example: WC of 0 = 1 word to pgm WC of 1 = 2 words to pgm SA WC SA WC WC = number of words to program – 1 (in x8 mode WC = number of bytes to program – 1) Starting Address PD Starting Address PD Selects Write-Buffer-Page and loads first Address/Data Pair. Load next Address / Data pair WBL PD WBL PD All addresses MUST be within the selected write-buffer-page boundaries, and have to be loaded in sequential order. Load LAST Address/Data pair WBL PD WBL PD All addresses MUST be within the selected write-buffer-page boundaries, and have to be loaded in sequential order. SA 0029h SA 29h This command MUST follow the last write buffer location loaded, or the operation will ABORT. Load Starting Address / Data pair Issue Write Buffer Program Confirm at Sector Address Device goes busy. Legend: SA = Sector Address (Non-Sector Address bits are don't care. Any address within the Sector is sufficient.) WBL = Write Buffer Location (MUST be within the boundaries of the Write-Buffer-Line specified by the Starting Address.) WC =Word Count PD = Program Data 5.3.2 Program Suspend / Program Resume Commands The Program Suspend command allows the system to interrupt an embedded programming operation so that data can read from any non-suspended Line. When the Program Suspend command is written during a programming process, the device halts the programming operation within tPSL (program suspend latency) and updates the status bits. Addresses are don't-cares when writing the Program Suspend command. There are two commands available for program suspend. The legacy combined Erase / Program suspend command (B0h command code) and the separate Program Suspend command (51h command code). There are also two commands for Program resume. The legacy combined Erase / Program resume command (30h command code) and the separate Program Resume command (50h command code). It is recommended to use the separate program suspend and resume commands for programming and use the legacy combined command only for erase suspend and resume. After the programming operation has been suspended, the system can read array data from any non-suspended Line. The Program Suspend command may also be issued during a programming operation while an erase is suspended. In this case, data may be read from any addresses not in Erase Suspend or Program Suspend. After the Program Resume command is written, the device reverts to programming and the status bits are updated. The system can determine the status of the program operation by reading the Status Register or using Data Polling. Refer to Status Register on page 33 for information on these status bits. Refer to Data Polling Status on page 35 for more information. Accesses and commands that are valid during Program Suspend are: Read to any other non-erase-suspended sector Read to any other non-program-suspended Line Status Read command Status Register Clear Exit ASO or Command Set Exit Program Resume command Document Number: 002-00247 Rev. *C Page 25 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The system must write the Program Resume command to exit the Program Suspend mode and continue the programming operation. Further writes of the Program Resume command are ignored. Another Program Suspend command can be written after the device has resumed programming. Program operations can be interrupted as often as necessary but in order for a program operation to progress to completion there must be some periods of time between resume and the next suspend command greater than or equal to tPRS in Embedded Algorithm Controller (EAC) on page 19. Program suspend and resume is not supported while entered in an ASO. 5.3.3 Accelerated Programming The device supports program operations when the system asserts VHH on the WP#/ACC or ACC pin. When WP#/ACC or ACC pin is lowered back to VIH or VIL the device exits the Accelerated Programming mode and returns to normal operation. The WP#/ACC is VHH tolerant but is not designed to accelerate the program functions. If the system asserts VHH on this input, the device automatically enters the Unlock Bypass mode. The system can then use the Write Buffer Load command sequence provided by the Unlock Bypass mode. Note that if a ‘Write-to-Buffer-Abort Reset’ is required while in Unlock Bypass mode, the full 3-cycle RESET command sequence must be used to reset the device. Removing VHH from the ACC input, upon completion of the embedded program operation, returns the device to normal operation. Note that the WP#/ACC pin must not be at VHH for operations other than accelerated programming, or device damage may result. WP# contains an internal pull-up; when unconnected, WP# is at VIH. Accelerated programming is supported at room temperature only. Sectors must be unlocked prior to raising WP#/ACC to VHH. It is recommended that WP#/ACC apply VHH after power-up sequence is completed. In addition, it is recommended that WP#/ACC apply from VHH to VIH/VIL before powering down VCC/VIO. 5.3.4 Unlock Bypass This device features an Unlock Bypass mode to facilitate shorter programming commands. Once the device enters the Unlock Bypass mode, only two write cycles are required to program data, instead of the normal four cycles.The device will also support the Write to Buffer command and will only require four+ write cycles. This mode dispenses with the initial two unlock cycles required in the standard program command sequence, resulting in faster total programming time. The Command Summary on page 44 shows the requirements for the unlock bypass command sequences. During the unlock bypass mode, only the Read, Program, Write Buffer Programming, Write-to-Buffer-Abort Reset, Status Register Read, Status Register Clear, Soft Reset, Unlock Bypass Sector Erase, Unlock Bypass Chip Erase, Unlock Erase Suspend/Resume, Unlock Bypass Suspend/Resume, and Unlock Bypass Reset commands are valid. To exit the unlock bypass mode, the system must issue the two-cycle unlock bypass reset command sequence. The first cycle address is ‘don't care’ and the data 90h. The second cycle need only contain the data 00h. The sector then returns to the read mode. Software Functions and Sample Code The following are C source code examples of using the unlock bypass entry, program, and exit functions. Refer to the Cypress Low Level Driver User’s Guide for general information on Cypress flash memory software development guidelines. Table 5.2 Unlock Bypass Entry (LLD Function = lld_UnlockBypassEntryCmd) Cycle Description Operation Byte Address 1 Unlock Write 2 Unlock Write 3 Entry Command Write Document Number: 002-00247 Rev. *C Word Adddress Data Base + AAAh Base + 555h 00AAh Base + 555h Base + 2AAh 0055h Base + AAAh Base + 555h 0020h Page 26 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) /* *( *( *( /* /* /* /* /* Example: Unlock Bypass Entry Command */ (UINT16 *)base_addr + 0x555 ) = 0x00AA; /* write unlock cycle 1 */ (UINT16 *)base_addr + 0x2AA ) = 0x0055; /* write unlock cycle 2 */ (UINT16 *)base_addr + 0x555 ) = 0x0020; /* write unlock bypass command */ At this point, programming only takes two write cycles. */ Once you enter Unlock Bypass Mode, do a series of like */ operations (programming or sector erase) and then exit */ Unlock Bypass Mode before beginning a different type of */ operations. */ Table 5.3 Unlock Bypass Program (LLD Function = lld_UnlockBypassProgramCmd) /* /* *( *( /* /* /* Cycle Description Operation Byte Address Word Adddress Data 1 Program Setup Write Base + XXXh Base + XXXh 00A0h 2 Program Command Write Program Address Program Address Program Data Example: Unlock Bypass Program Command */ Do while in Unlock Bypass Entry Mode! */ (UINT16 *)base_addr ) = 0x00A0; /* write program setup command */ (UINT16 *)pa ) = data; /* write data to be programmed */ Poll until done or error. */ If done and more to program, */ do above two cycles again. */ Table 5.4 Unlock Bypass Reset (LLD Function = lld_UnlockBypassResetCmd) Cycle Description Operation Byte Address Word Adddress Data 1 Reset Cycle 1 Write Base + XXXh Base + XXXh 0090h 2 Reset Cycle 2 Write Program Address Program Address 0000h /* Example: Unlock Bypass Exit Command */ *( (UINT16 *)base_addr ) = 0x0090; *( (UINT16 *)base_addr ) = 0x0000; 5.3.5 Evaluate Erase Status The Evaluate Erase Status (EES) command verifies that the last erase operation on the addressed sector was completed successfully (i.e. “Trust Worthy”). The EES command can be used to detect erase operations failed due to loss of power, reset, or failure during the erase operation. To initiate a EES on a Sector, write 35h to address 555h in the Sector, while the EAC is in the standby state. The EES command may not be written while the device is actively programming or erasing or suspended. The EES command does not allow for reads to the array during the operation. Use the Status Register or Polling method (only DQ6 toggles) to determine if the device is busy or completed. Once completed use the Status Register read to confirm if the sector is trust worthy or not. Bit 5 of the Status Register (SR[5]) will be cleared to 0 if the sector is trust worthy. If the sector is not trust worthy than SR[5] will be set to 1, RD/BY# will stay low, and either a Software Reset / ASO Exit command or a Status Register Clear command is required to return the device to the Standby State. Once the EES is completed, the EAC will return to the Standby State. The EES command requires tEES to complete and update the erase status in SR. The DRB bit (SR[7]) may be read to determine when the EES command is finished. If a sector is found not erased with SR[5]=1, the sector must be erased again to ensure reliable storage of data in the sector. Document Number: 002-00247 Rev. *C Page 27 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3.6 Blank Check The Blank Check command will confirm if the selected main flash array sector is currently erased (i.e. “Trust Worthy” and “Blank”). The Blank Check command does not allow for reads to the array during the Blank Check. Reads to the array while this command is executing will return polling data. To initiate a Blank Check on a Sector, write 33h to address 555h in the Sector, while the EAC is in the standby state. The Blank Check command may not be written while the device is actively programming or erasing or suspended. Use the Status Register or Polling method (equivalent to an embedded erase operation) to determine if the device is busy or completed. Once completed the Status Register and the Polling method will display if the sector is blank (equivalent to a successful erase operation) or if the sector is not erased. Bit 5 of the Status Register (SR[5]) will be cleared to 0 if the sector is blank. If the sector is not blank than SR[5] will be set to 1, RD/BY# will stay low, and either a Software Reset / ASO Exit command or a Status Register Clear command is required to return the device to the Standby State. As soon as any bit is found to not be erased, the device will halt the operation and report the results. Once the Blank Check is completed, the EAC will return to the Standby State. 5.3.7 5.3.7.1 Erase Methods Chip Erase The chip erase function erases the entire main Flash Memory Array. The device does not require the system to preprogram prior to erase. The Embedded Erase algorithm automatically programs and verifies the entire memory for an all 0 data pattern prior to electrical erase. After a successful chip erase, all locations within the device contain FFFFh. The system is not required to provide any controls or timings during these operations. The chip erase command sequence is initiated by writing two unlock cycles, followed by a set up command. Two additional unlock write cycles are then followed by the chip erase command, which in turn invokes the Embedded Erase algorithm. When WE# goes high, at the end of the 6th cycle, the RY/BY# goes low. When the Embedded Erase algorithm is complete, the EAC returns to the standby state. Note that while the Embedded Erase operation is in progress, the system can not read data from the device. The system can determine the status of the erase operation by reading the RY/BY#, Status Register or using Data Polling. Refer to Ready/Busy# (RY/BY#) on page 58 for information on RY/ BY#. Refer to Status Register on page 33 for information on these status bits. Refer to Data Polling Status on page 35 for more information. Once the chip erase operation has begun, only a Status Read, Hardware RESET or Power cycle are valid. All other commands are ignored. However, a Hardware Reset or Power Cycle immediately terminates the erase operation and returns to read mode after tRPH time. If a chip erase operation is terminated, the chip erase command sequence must be reinitiated once the device has returned to the idle state to ensure data integrity. See Table 5.7 on page 42, Asynchronous Write Operations on page 76 and Alternate CE# Controlled Write Operations on page 82 for parameters and timing diagrams. Sectors protected by the ASP DYB and PPB bits will not be erased. See ASP on page 13. If a sector is protected during chip erase, chip erase will skip the protected sector and continue with next sector erase. The status register erase status bit and sector lock bit are not set to 1 by a failed erase on a protected sector. 5.3.7.2 Sector Erase The sector erase function erases one sector in the memory array. The device does not require the system to preprogram prior to erase. The Embedded Erase algorithm automatically programs and verifies the entire sector for an all 0 data pattern prior to electrical erase. After a successful sector erase, all locations within the erased sector contain FFFFh. The system is not required to provide any controls or timings during these operations. The sector erase command sequence is initiated by writing two unlock cycles, followed by a set up command. Two additional unlock write cycles are then followed by the address of the sector to be erased, and the sector erase command. When WE# goes high, at the end of the 6th cycle, the RY/BY# goes low. Document Number: 002-00247 Rev. *C Page 28 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) After the command sequence is written, a sector erase time-out of tSEA occurs. During the time-out period, additional sector addresses and sector erase commands may be written. Invalid commands will be ignored during the time-out period. Loading the sector erase buffer may be done in any sequence, and the number of sectors may be from one sector to all sectors. The time between these additional cycles must be less than tSEA, otherwise erasure may begin. Any sector erase address and command following the exceeded time-out may or may not be accepted. It is recommended that processor interrupts be disabled during this time to ensure all commands are accepted. The interrupts can be re-enabled after the last Sector Erase command is written. Note that the Secured Silicon Sector, autoselect, and CFI functions are unavailable when an erase operation in is progress. The system must rewrite the command sequence and any additional addresses and commands. The system can determine the status of the erase operation by reading the RY/BY#, Status Register or using Data Polling. Refer to Ready/Busy# (RY/BY#) on page 58 for information on RY/BY#. Refer to Status Register on page 33 for information on these status bits. Refer to Data Polling Status on page 35 for more information. Once the sector erase operation has begun, the Status Register Read and Erase Suspend commands are valid. All other commands are ignored. However, note that a hardware reset immediately terminates the erase operation and returns to read mode after tRPH time. If a sector erase operation is terminated, the sector erase command sequence must be reinitiated once the device has reset operation to ensure data integrity. Sector(s) protected by the ASP DYB and PPB bits or Password Protection will not be erased. See ASP on page 13. If a sector is protected during multi-sector erase, sector erase will skip the protected sector and continue with next sector erase. The status register erase status bit and sector lock bit are not set to 1 by a failed erase on a protected sector. See Embedded Algorithm Controller (EAC) on page 19 for parameters and timing diagrams. Sectors protected by the ASP DYB and PPB bits will not be erased. See ASP on page 13. Figure 5.4 Sector Erase Operation Write Unlock Cycles (x16): Address 555h, Data AAh Address 2AAh, Data 55h Unlock Cycle 1 Unlock Cycle 2 Write Sector Erase Cycles (x16): Address 555h, Data 80h Address 555h, Data AAh Address 2AAh, Data 55h Sector Address, Data 30h No Command Cycle 1 Command Cycle 2 Command Cycle 3 Specify first sector for erasure Select Additional Sectors? Yes Write Additional Sector Addresses • Each additional cycle must be written within tSEA timeout • The host system may monitor Status Register DQ7 or Data Polling DQ3 or wait tSEA to ensure acceptance of erase commands • No limit on number of sectors No Poll DQ3. DQ3 = 1? Yes Last Sector Selected? • Commands other than Erase Suspend or selecting additional sectors for erasure during timeout reset device to reading array data No Yes Perform Write Operation Status Algorithm Yes Status may be obtained by reading Status Register, Data Polling, or RD/BY# methods Done? No Erase Error? No Error condition (Exceeded Timing Limits) Yes PASS. Device returns to reading array. FAIL. Write reset command to return to reading array. Note: 1. See command summary for x8 bus cycles. Document Number: 002-00247 Rev. *C Page 29 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3.8 Erase Suspend / Erase Resume The Erase Suspend command allows the system to interrupt a sector erase operation and then read data from, or program data to, the main flash array. This command is valid only during sector erase or program operation. The Erase Suspend command is ignored if written during the chip erase operation. When the Erase Suspend command is written during the sector erase operation, the device requires a maximum of tESL (erase suspend latency) to suspend the erase operation and update the status bits. After the erase operation has been suspended, the part enters the erase-suspend mode. The system can read data from or program data to the main flash array. Reading at any address within erase-suspended sectors produces undetermined data. The system can determine if a sector is actively erasing or is erase-suspended by reading the Status Register or using Data Polling. Refer to Status Register on page 33 for information on these status bits. Refer to Data Polling Status on page 35 for more information. After an erase-suspended program operation is complete, the EAC returns to the erase-suspend state. The system can determine the status of the program operation by reading the Status Register, just as in the standard program operation. If a program failure occurs during erase suspend the Status Register Clear or Soft Reset commands will return the device to the erase suspended state. Erase will need to be resumed and completed before again trying to program the memory array. Accesses and commands that are valid during Erase Suspend are: Read to any other non-suspended sector Program to any other non-suspended sector Status Register Read Status Register Clear Erase Resume command To resume the sector erase operation, the system must write the Erase Resume command. The device will revert to erasing and the status bits will be updated. Further writes of the Resume command are ignored. Another Erase Suspend command can be written after the chip has resumed erasing. Erase suspend and resume is not supported while entered in an ASO. 5.3.9 5.3.9.1 ASO Entry and Exit ID-CFI ASO The system can access the ID-CFI ASO by issuing the ID-CFI Entry command sequence during Read Mode. See the detail description Table 6.3 on page 52. The ID-CFI ASO allows the following activities: Read ID-CFI ASO, using the same SA as used in the entry command. Read Sector Protection State at Sector Address (SA) + 2h. Location 2h provides volatile information on the current state of sector protection for the sector addressed. Bit 0 of the word at location 2h shows the logical NAND of the PPB and DYB bits related to the addressed sector such that if the sector is protected by either the PPB=0 or the DYB=0 bit for that sector the state shown is protected. (1= Sector protected, 0= Sector unprotected.) ASO Exit. The following is a C source code example of using the CFI Entry and Exit functions. Refer to the Cypress Low Level Driver User's Guide for general information on Cypress flash memory software development guidelines. /* Example: CFI Entry command */ *( (UINT16 *)base_addr + 0x55 ) = 0x0098; /* write CFI entry command */ /* Example: CFI Exit command */ *( (UINT16 *)base_addr + 0x000 ) = 0x00F0; /* write cfi exit command */ Document Number: 002-00247 Rev. *C Page 30 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3.9.2 Status Register ASO The Status Register ASO contains a single word of registered volatile status for Embedded Algorithms. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The Status Register content appears on all word locations. The first read access exits the Status Register ASO (with the rising edge of CE# or OE#) and returns to the address space map in use when the Status Register read command was issued. Write commands will not exit the Status Register ASO state. 5.3.9.3 Secure Silicon Region ASO The system can access the Secure Silicon Region by issuing the Secure Silicon Region Entry command sequence during Read Mode. This entry command uses the Sector Address (SA) in the command to determine which sector will be overlaid. The Secure Silicon Region ASO allows the following activities: Read Secure Silicon Regions. Program the customer Secure Silicon Region is allowed using the Word or Write Buffer Programming commands. The Unlock Bypass commands and using ACC is not allowed. ASO Exit using legacy Secure Silicon Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO - alternative for a consistent exit method. The recommended procedure for using the SSR region 3 read password mode is as follows: Program the data you want in SSR region 3. Clear lock register bit 10 to 0, which disable further program operations. Program the SSR region 3 password. Clear lock register bit 11 to 0, which will enable the SSR region 3 password feature which requires that a password be applied before reading SSR region 3 is allowed. 5.3.9.4 Lock Register ASO The system can access the Lock Register by issuing the Lock Register entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The Lock Register appears at word location 0 in the device address space. All other locations in the device address space are undefined. The Lock Register ASO allows the following activities: Read Lock Register, using device address location 0. Program the customer Lock Register using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO — alternative for a consistent exit method. 5.3.9.5 Password ASO The system can access the Password ASO by issuing the Password entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The Password appears at word locations 0 to 3 in the device address space. All other locations in the device address space are undefined. The Password ASO allows the following activities: Read Password, using device address location 0 to 3 (if not locked). Program the Password using a modified Word Programming command. Unlock the PPB Lock bit with the Password Unlock command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO — alternative for a consistent exit method. Document Number: 002-00247 Rev. *C Page 31 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3.9.6 PPB ASO The system can access the PPB ASO by issuing the PPB entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The PPB bit for a sector appears in bit 0 of all word locations in the sector. The PPB ASO allows the following activities: Read PPB protection status of a sector in bit 0 of any word in the sector. Program the PPB bit using a modified Word Programming command. Erase all PPB bits with the PPB erase command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO — alternative for a consistent exit method. 5.3.9.7 PPB Lock ASO The system can access the PPB Lock ASO by issuing the PPB Lock entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The global PPB Lock bit appears in bit 0 of all word locations in the device. The PPB Lock ASO allows the following activities: Read PPB Lock protection status in bit 0 of any word in the device address space. Set the PPB Lock bit using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO — alternative for a consistent exit method. 5.3.9.8 DYB ASO The system can access the DYB ASO by issuing the DYB entry command sequence during Read Mode. This entry command does not use a sector address from the entry command. The DYB bit for a sector appears in bit 0 of all word locations in the sector. The DYB ASO allows the following activities: Read DYB protection status of a sector in bit 0 of any word in the sector. Set the DYB bit using a modified Word Programming command. Clear the DYB bit using a modified Word Programming command. ASO Exit using legacy Command Set Exit command for backward software compatibility. ASO Exit using the common exit command for all ASO — alternative for a consistent exit method. 5.3.9.9 Software (Command) Reset / ASO exit Software reset is part of the command set (See Table 6.1, Command Definitions x16 on page 44) that also returns the EAC to standby state and must be used for the following conditions: Exit ASO modes Clear timeout bit (DQ5) for data polling when timeout occurs Software Reset does not affect EA mode. Reset commands are ignored once programming or erasure has begun, until the operation is complete. Software Reset does not affect outputs; it serves primarily to return to Read Mode from an ASO mode or from a failed program or erase operation. Software Reset may cause a return to Read Mode from undefined states that might result from invalid command sequences. However, a Hardware Reset may be required to return to normal operation from some undefined states. There is no software reset latency requirement. The reset command is executed during the tWPH period. Document Number: 002-00247 Rev. *C Page 32 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.3.9.10 Continuity Check Feature The Continuity Check provides a basic test of connectivity from package connectors to each die pad and to each individual die in a DDP. This feature is an extension of the legacy unlock cycle sequence used at the beginning of several commands. The unlock sequence is two writes with alternating ones and zeros pattern on the lower portion of the address and data lines with the pattern inverted between the first and second write. To perform a continuity check these patterns are extended to cover all address (Amax to 0) and data lines (DQ15 to 0). A logic comparison circuit looks for the alternating one and zero pattern that is inverted between the two write cycles. In the case of a DDP the A26 input is used to select which die the writes are sent to. When the correct patterns are detected the status register bit zero is set to one. The status register clear command will clear the status register bit zero to a zero. The following table describes the continuity check sequence for a single die (e.g. GL01GT) in x16. Phase Set-up Access type Address A26 Address A25 to A0 Data Write n/a XXXX555 XX71 Clear die zero status Write Status Register Read command to die zero Comment Write n/a 555 XX70 Read n/a x RD Write n/a 2AAAA55 FF00 First continuity cycle Write n/a 15555AA 00FF Second continuity cycle Write n/a 555 XX70 Write Status Register Read command to die zero Read n/a x RD Read status from die zero to confirm status bit zero = 0 Continuity Pattern Verify continuity pattern detected Read status from die zero to confirm status bit zero = 1 for continuity pattern detected The following table describes the continuity check sequence for a single die (e.g. GL01GT)in x8. Address A26 Address A25 to A-1 Write n/a XXXX555 71 Clear die zero status Write n/a AAA 70 Write Status Register Read command to die zero Read n/a x RD Read status from die zero to confirm status bit zero = 0 First continuity cycle Access type Phase Set-up Data Comment Write n/a 55554AB FF Write n/a 2AAAB54 00 Second continuity cycle Write n/a 555 70 Write Status Register Read command to die zero Read n/a x RD Read status from die zero to confirm status bit zero = 1 for continuity pattern detected Continuity Pattern Verify continuity pattern detected 5.4 Status Monitoring There are three methods for monitoring EA status. Previous generations of the S29GL flash family used the methods called Data Polling and Ready/Busy# (RY/BY#) Signal. These methods are still supported by the S29GL-T family. One additional method is reading the Status Register. 5.4.1 Status Register The status of program and erase operations is provided by a single 16-bit status register. The Status Register Read command is written followed by a read access of the status register information. When the Status Register read command is issued, the current status is captured (by the rising edge of WE#) into the register and the ASO is entered. The contents of the status register is aliased (overlaid) the full memory address space. Valid read (CE# and OE# low) access in the Status Register ASO exits the ASO (with the rising edge of CE# or OE# for tCEPH/tOEPH time) and returns to the address space map in use when the Status Register Read command was issued. While in x8 mode the full Status Register can be read (both the upper byte and lower byte) with one Status Register entry by keeping CE# and OE# low and having a transition on A-1. Write operations are ignored and the device will stay in Status Register ASO. Document Number: 002-00247 Rev. *C Page 33 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The status register contains bits related to the results – success or failure – of the most recently completed Embedded Algorithms (EA): Erase Status (bit 5), Program Status (bit 4), Write Buffer Abort (bit 3), Sector Locked Status (bit 1), Continuity Check Pattern Detected (bit 0). and, bits related to the current state of any in process EA: Device Busy (bit 7), Erase Suspended (bit 6), Program Suspended (bit 2), The current state bits indicate whether an EA is in process, suspended, or completed. The upper 8 bits (bits 15:8) are reserved. These have undefined High or Low value that can change from one status read to another. These bits should be treated as don't care and ignored by any software reading status. The Soft Reset Command will clear to 0 bits [5, 4, 1, 0] of the status register if Status Register bit 3 =0. It will not affect the current state bits. The Clear Status Register Command will clear to 0 bits [5, 4, 3, 1, 0] of the status register but will not affect the current state bits. Table 5.5 Status Register Bit # Bit Description 15:8 Reserved Bit Name 7 6 5 4 3 2 1 0 Sector Lock Status Bit Continuity Check CC Device Ready Bit Erase Suspend Status Bit Erase Status Bit Program Status Bit Write Buffer Abort Status Bit Program Suspend Status Bit DRB ESSB ESB PSB WBASB PSSB SLSB Reset Status X 1 0 0 0 0 0 0 0 Busy Status Invalid 0 Invalid Invalid Invalid Invalid Invalid Invalid Invalid 0= Ready Status X 1 0=No Erase in Suspension 1=Erase in Suspension 0=Erase successful 1=Erase fail 0=Program successful 0=Program not aborted 1=Program fail 1=Program aborted during Write to Buffer command 0=No Program in suspension 1=Program in suspension 0=Sector not locked during operation 1=Sector locked error Continuity Check Pattern not detected 1= Continuity Check Pattern detected Notes: 1. Bits 15 thru 8 are reserved for future use and may display as 0 or 1. These bits should be ignored (masked) when checking status. 2. Bit 7 is 1 when there is no Embedded Algorithm in progress in the device. 3. Bits 6 thru 1 are valid only if Bit 7 is 1. 4. All bits are put in their reset status by cold reset or warm reset. 5. Bits 5, 4, 3, and 1 are cleared to 0 by the Clear Status Register command or Reset command. 6. Upon issuing the Erase Suspend Command, the user must continue to read status until DRB becomes 1. 7. ESSB is cleared to 0 by the Erase Resume Command. 8. ESB reflects success or failure of the most recent erase operation. 9. PSB reflects success or failure of the most recent program operation. 10. During erase suspend, programming to the suspended sector or a sector in the queue, will be ignored and no error reported. 11. Upon issuing the Program Suspend Command, the user must continue to read status until DRB becomes 1. 12. PSSB is cleared to 0 by the Program Resume Command. 13. SLSB indicates that a program or erase operation failed because the sector was locked. 14. SLSB reflects the status of the most recent program or erase operation. Document Number: 002-00247 Rev. *C Page 34 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.4.2 Data Polling Status During an active Embedded Algorithm the EAC switches to the Data Polling ASO to display EA status to any read access. A single word of status information is aliased in all locations of the device address space. In the status word there are several bits to determine the status of an EA. These are referred to as DQ bits as they appear on the data bus during a read access while an EA is in progress. DQ bits 15 to 8, DQ4, and DQ0 are reserved and provide undefined data. Status monitoring software must mask the reserved bits and treat them as don't care. In X8 mode A-1 is ignored when performing Data Polling. Table 5.6 on page 38 and the following subsections describe the functions of the remaining bits. 5.4.2.1 DQ7: Data# Polling The Data# Polling bit, DQ7, indicates to the host system whether an Embedded Algorithm is in progress or has completed. Data# Polling is valid after the rising edge of the final WE# pulse in the program or erase command sequence. Note that the Data# Polling is valid only for the last word being programmed in the write-buffer-page during Write Buffer Programming. Reading Data# Polling status on any word other than the last word to be programmed in the write-buffer-page will return false status information. During the Embedded Program algorithm, the device outputs on DQ7 the complement of the data bit programmed to DQ7. This DQ7 status also applies to programming during Erase Suspend. When the Embedded Program algorithm is complete, the device outputs the data bit programmed to bit 7 of the last word programmed. In case of a Program Suspend, the device allows only reading array data. If a program address falls within a protected sector, Data# Polling on DQ7 is active for tDP, then the device returns to reading array data. During the Embedded Erase, Evaluate Erase Status, or Blank Check algorithms, Data# Polling produces a 0 on DQ7. When the algorithm is complete, or if the device enters the Erase Suspend mode, Data# Polling produces a 1 on DQ7. This is analogous to the complement / true datum output described for the Embedded Program algorithm: the erase function changes all the bits in a sector to 1; prior to this, the device outputs the complement or '0'. The system must provide an address within the sector selected for erasure to read valid status information on DQ7. After an erase command sequence is written, if the sector selected for erasing is protected, Data# Polling on DQ7 is active for tDP, then the device returns to reading array data. Just prior to the completion of an Embedded Program or Erase operation, DQ7 may change asynchronously with DQ6-DQ0 while Output Enable (OE#) is asserted low. That is, the device may change from providing status information to valid data on DQ7. Depending on when the system samples the DQ7 output, it may read the status or valid data. Even if the device has completed the program or erase operation and DQ7 has valid data, the data outputs on DQ6-DQ0 may be still invalid. Valid data on DQ7-D00 appears on successive read cycles. When the system detects DQ7 has changed from the complement to true data, it can read valid data at DQ15-DQ0 (Dq7-DQ0 in x8 mode) on the following read cycles. This is because DQ7 may change asynchronously with DQ6-DQ0 while Output Enable (OE#) is asserted Low. This is illustrated in Figure 10.17 on page 81. Table 5.6 on page 38 shows the outputs for Data# polling on DQ7. Figure 5.2 on page 23 shows the Data# polling algorithm use in Write Buffer Programming. Valid DQ7 data polling status may only be read from: the address of the last word loaded into the Write Buffer for a Write Buffer programming operation; the location of a single word programming operation; a location in a sector being erased, or evaluate erase status, or blank checked; or a location in any sector during chip erase. Document Number: 002-00247 Rev. *C Page 35 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 5.5 Data# Polling Algorithm START Read DQ7-DQ0 - DQ7 = Data? Yes No No DQ5 = 1? Yes Read DQ 7 -DQ0 DQ7 = Data? Yes No FAIL PASS Note: 1. DQ7 should be rechecked even if DQ5 = 1 because DQ7 may change simultaneously with DQ5. 5.4.2.2 DQ6: Toggle Bit I Toggle Bit I on DQ6 indicates whether an Embedded Program or Erase algorithm is in progress or complete, or whether the device has entered the Program Suspend or Erase Suspend mode. Toggle Bit I may be read at any address, and is valid after the rising edge of the final WE# pulse in the command sequence (prior to the program or erase operation). During an Embedded Program or Erase algorithm operation, successive read cycles to any address cause DQ6 to toggle. (The system may use either OE# or CE# to control the read cycles). When the operation is complete, DQ6 stops toggling. After an erase command sequence is written, if the sector selected for erasing is protected, DQ6 toggles for tDP, then the EAC returns to standby (Read Mode). If the selected sector is not protected, the Embedded Erase algorithm erases the unprotected sector. The system can use DQ6 and DQ2 together to determine whether a sector is actively erasing or erase-suspended. When the device is actively erasing (that is, the Embedded Erase algorithm is in progress), DQ6 toggles. When the device enters the Program Suspend mode or Erase Suspend mode, DQ6 stops toggling. However, the system must also use DQ2 to determine which sectors are erasing, or erase-suspended. Alternatively, the system can use DQ7 (see DQ7: Data# Polling on page 35). DQ6 also toggles during the erase-suspend-program mode, and stops toggling once the Embedded Program algorithm is complete. Table 5.6 on page 38 shows the outputs for Toggle Bit I on DQ6. Figure 5.6 on page 37 shows the toggle bit algorithm in flowchart form, and the Reading Toggle Bits DQ6/DQ2 on page 37 explains the algorithm. Figure 5.6 on page 37 shows the toggle bit timing diagrams. See also DQ2: Toggle Bit II on page 37. 5.4.2.3 DQ3: Sector Erase Timer After writing a sector erase command sequence, the system may read DQ3 to determine whether or not erasure has begun. See Sector Erase on page 28 for more details. (The sector erase timer does not apply to the chip erase command.) If additional sectors are selected for erasure, the entire time-out also applies after each additional sector erase command. When the time-out period is complete, DQ3 switches from a 0 to a 1. If the time between additional sector erase commands from the system can be assumed to be less than tSEA, then the system need not monitor DQ3. After the sector erase command is written, the system should read the status of DQ7 (Data# Polling) or DQ6 (Toggle Bit I) to ensure that the device has accepted the command sequence, and then read DQ3. If DQ3 is 1, the Embedded Erase algorithm has begun; all further commands (except Erase Suspend) are ignored until the erase operation is complete. If DQ3 is 0, the device accepts additional sector erase commands. To ensure the command has been accepted, the system software should check the status of DQ3 prior to and following each sub-sequent sector erase command. If DQ3 is high on the second status check, the last command might not have been accepted. Table 5.6 on page 38 shows the status of DQ3 relative to the other status bits. Document Number: 002-00247 Rev. *C Page 36 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.4.2.4 DQ2: Toggle Bit II Toggle Bit II on DQ2, when used with DQ6, indicates whether a particular sector is actively erasing (that is, the Embedded Erase algorithm is in progress), or whether that sector is erase-suspended. Toggle Bit II is valid after the rising edge of the final WE# pulse in the command sequence. DQ2 toggles when the system reads at addresses within the sector selected for erasure (or all sectors selected for erase operation during multi-sector erase). (The system may use either OE# or CE# to control the read cycles). But DQ2 cannot distinguish whether the sector is actively erasing or is erase-suspended. DQ6, by comparison, indicates whether the device is actively erasing, or is in Erase Suspend, but cannot distinguish if the sector is selected for erasure. Thus, both status bits are required for sector and mode information. Refer to Table 5.6 on page 38 to compare outputs for DQ2 and DQ6. Figure 5.5 on page 36 shows the toggle bit algorithm in flowchart form, and the Reading Toggle Bits DQ6/DQ2 on page 37 explains the algorithm. See also Figure 5.6 on page 37 shows the toggle bit timing diagram. 5.4.2.5 Reading Toggle Bits DQ6/DQ2 Refer to Figure 5.5 on page 36 for the following discussion. Whenever the system initially begins reading toggle bit status, it must read DQ7-DQ0 at least twice in a row to determine whether a toggle bit is toggling. Typically, the system would note and store the value of the toggle bit after the first read. After the second read, the system would compare the new value of the toggle bit with the previous value. If the toggle bit is not toggling, the device has completed the program or erases operation. The system can read array data on DQ15-DQ0 (DQ7-DQ0 in x8 mode) on the following read cycle. However, if after the initial two read cycles, the system determines that the toggle bit is still toggling, the system also should note whether the value of DQ5 is High (see DQ5: Exceeded Timing Limits on page 38). If it is, the system should then determine again whether the toggle bit is toggling, since the toggle bit may have stopped toggling just as DQ5 went High. If the toggle bit is no longer toggling, the device has successfully completed the program or erase operation. If it is still toggling, the device did not complete the operation successfully, and the system must write the reset command to return to reading array data. It is recommended that data read for polling purposes only be used for polling purposes. Once toggling has stopped array data will be available on subsequent reads. The remaining scenario is that the system initially determines that the toggle bit is toggling and DQ5 has not gone High. The system may continue to monitor the toggle bit and DQ5 through successive read cycles, determining the status as described in the previous paragraph. Alternatively, it may choose to perform other system tasks. In this case, the system must start at the beginning of the algorithm when it returns to determine the status of the operation (top of Figure 5.6 on page 37). Figure 5.6 Toggle Bit Program START Read DQ7 -DQ0 Read DQ7 -DQ0 (Note 1) Toggle Bit = Toggle? No Yes No DQ5 = 1? Yes Read DQ7 -DQ0 Twice (Notes 1, 2) Toggle Bit = Toggle? No Yes Erase/Program Operation Not Complete Erase/Program Operation Complete Notes: 1. Read toggle bit twice to determine whether or not it is toggling. See text. 2. Recheck toggle bit because it may stop toggling as DQ5 changes to 1. See text. Document Number: 002-00247 Rev. *C Page 37 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.4.2.6 DQ5: Exceeded Timing Limits DQ5 indicates whether the program or erase time has exceeded a specified internal pulse count limit. Under these conditions DQ5 produces a 1. This is a failure condition that indicates the program or erase cycle was not successfully completed. The system must issue the reset command to return the device to reading array data. When a timeout occurs, the software must send a Soft Reset or Status Register Reset command to clear the timeout bit (DQ5) and to return the EAC to the initial state. In this case, it is possible that the flash will continue to communicate busy for up to tTOR after the reset command is sent. 5.4.2.7 DQ1: Write-to-Buffer Abort DQ1 indicates whether a Write-to-Buffer operation was aborted. Under these conditions DQ1 produces a 1. The system must issue the Write-to-Buffer-Abort-Reset command sequence or Status Register Clear command to return the EAC to standby (Read Mode) and the Status Register failed bits are cleared. See Write Buffer Programming on page 21 for more details. Table 5.6 Data Polling Status Standard Mode Program Suspend Mode (Note 3) Erase Suspend Mode (Note 7) Write-toBuffer (Note 4) (Note 6) Operation DQ7 (Note 2) DQ6 DQ5 (Note 1) DQ3 DQ2 (Note 2) Embedded Program Algorithm DQ1 (Note 4) RY/BY# DQ7# Toggle 0 N/A No Toggle 0 0 Reading within Erasing Sector (Note 5) 0 Toggle 0 1 Toggle N/A 0 Reading Outside erasing Sector (Note 5) 0 Toggle 0 1 No Toggle N/A 0 Reading within Program Suspended Sector Reading within Non-Program Suspended Sector Reading within Erase Suspended Sector INVALID INVALID INVALID INVALID INVALID INVALID (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) (Not Allowed) Data Data Data Data Data Data 1 1 1 No Toggle 0 N/A Toggle N/A 1 Reading within Non-Erase Suspend Sector Data Data Data Data Data Data 1 Programming within Non-Erase Suspended Sector DQ7# Toggle 0 N/A N/A N/A 0 BUSY State DQ7# Toggle 0 N/A No Toggle 0 0 Exceeded Timing Limits DQ7# Toggle 1 N/A N/A 0 0 ABORT State DQ7# Toggle 0 N/A N/A 1 0 Notes: 1. DQ5 switches to '1' when an Embedded Program or Embedded Erase operation has exceeded the maximum timing limits. See DQ5: Exceeded Timing Limits on page 38 for more information. 2. DQ7 and DQ2 require a valid address when reading status information. Refer to the appropriate subsection for further details. 3. Data are invalid for addresses in a Program Suspended Line. All addresses other than the Program Suspended Line can be read for valid data. 4. DQ1 indicates the Write-to-Buffer ABORT status during Write-Buffer-Programming operations. 5. DQ3 = 0 for 50 µs after last sector is loaded during a multi-sector erase. 6. Applies only to program operations. 7. If SECSI is over laid on a suspended sector, if a program operation is initiated while in the SECSI mode, DQ6 will toggle and DQ2 will not toggle during the embedded operation. Document Number: 002-00247 Rev. *C Page 38 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.5 Error Types and Clearing Procedures There are three types of errors reported by the embedded operation status methods. Depending on the error type, the status reported and procedure for clearing the error status is different. Following is the clearing of error status: If an ASO was entered before the error the device remains entered in the ASO awaiting ASO read or a command write. If an erase was suspended before the error the device returns to the erase suspended state awaiting flash array read or a command write. Otherwise, the device will be in standby state awaiting flash array read or a command write. 5.5.1 Embedded Operation Error If an error occurs during an embedded operation (program, erase, blank check, or password unlock) the device (EAC) remains busy. The RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows ready with valid status bits. The device remains busy until the error status is detected by the host system status monitoring and the error status is cleared. During embedded algorithm error status the Data Polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer or last word of the password in the case of the password unlock command. DQ7 = 0 for an erase, evaluate erase status, blank check failure DQ6 continues to toggle DQ5 = 1; Failure of the embedded operation DQ4 is RFU and should be treated as don’t care (masked) DQ3 = 1 to indicate an embedded sector erase was in progress or 0 to indicate an embedded program was in progress DQ2 continues to toggle, independent of the address used to read status DQ1 = 0; Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) During embedded algorithm error status the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended during the EA error SR[5] = 1 on erase or blank check error; else = 0 SR[4] = 1 on program or password unlock error; else = 0 SR[3] = 0; Write buffer abort SR[2] = 0; Program suspended SR[1] = 0; Protected sector SR[0] = X; RFU, treat as don’t care (masked) When the embedded algorithm error status is detected, it is necessary to clear the error status in order to return to normal operation, with RY/BY# High, ready for a new read or command write. The error status can be cleared by writing: Reset command Status Register Clear command Commands that are accepted during embedded algorithm error status are: Status Register Read Reset command Status Register Clear command Document Number: 002-00247 Rev. *C Page 39 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.5.2 Protection Error If an embedded algorithm attempts to change data within a protected area (program, or erase of a protected sector or OTP area) the device (EAC) goes busy for a period of tDP then returns to normal operation. During the busy period the RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows not ready with invalid status bits (SR[7] = 0). During the protection error status busy period the data polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer. DQ7 = 0 for an erase failure DQ6 continues to toggle, independent of the address used to read status DQ5 = 0; to indicate no failure of the embedded operation during the busy period DQ4 is RFU and should be treated as don’t care (masked) DQ3 = 1 to indicate embedded sector erase in progress DQ2 continues to toggle, independent of the address used to read status DQ1 = 0; Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) Commands that are accepted during the protection error status busy period are: Status Register Read When the busy period ends the device returns to normal operation, the data polling status is no longer overlaid, RY/BY# is High, and the status register shows ready with valid status bits. The device is ready for flash array read or write of a new command. After the protection error status busy period the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended after the protection error busy period SR[5] = 1 on erase error, else = 0 SR[4] = 1 on program error, else = 0 SR[3] = 0; Program not aborted SR[2] = 0; No Program in suspension SR[1] = 1; Error due to attempting to change a protected location SR[0] = X; RFU, treat as don’t care (masked) Commands that are accepted after the protection error status busy period are: 5.5.3 Any command Write Buffer Abort If an error occurs during a Write to Buffer command the device (EAC) remains busy. The RY/BY# output remains Low, data polling status continues to be overlaid on all address locations, and the status register shows ready with valid status bits. The device remains busy until the error status is detected by the host system status monitoring and the error status is cleared. During write to buffer abort (WBA) error status the Data Polling status will show the following: DQ7 is the inversion of the DQ7 bit in the last word loaded into the write buffer DQ6 continues to toggle, independent of the address used to read status DQ5 = 0; to indicate no failure of the programming operation. WBA is an error in the values input by the Write to Buffer command before the programming operation can begin DQ4 is RFU and should be treated as don’t care (masked) DQ3 is don't care after program operation as no erase is in progress. If the Write Buffer Program operation was started after an erase operation had been suspended then DQ3 = 1. If there was no erase operation in progress then DQ3 is a don't care and should be masked. Document Number: 002-00247 Rev. *C Page 40 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) DQ2 does not toggle after program operation as no erase is in progress. If the Write Buffer Program operation was started after an erase operation had been suspended then DQ2 will toggle in the sector where the erase operation was suspended and not in any other sector. If there was no erase operation in progress then DQ2 is a don't care and should be masked. DQ1 = 1: Write buffer abort error DQ0 is RFU and should be treated as don’t care (masked) During write to buffer abort (WBA) error status the Status Register will show the following: SR[7] = 1; Valid status displayed SR[6] = X; May or may not be erase suspended during the WBA error status SR[5] = 0; Erase successful SR[4] = 1; Programming related error SR[3] = 1; Write buffer abort SR[2] = 0; No Program in suspension SR[1] = 0; Sector not locked during operation SR[0] = X; RFU, treat as don’t care (masked) When the WBA error status is detected, it is necessary to clear the error status in order to return to normal operation, with RY/BY# High, ready for a new read or command write. The error status can be cleared and device returned to normal operation by writing: Write Buffer Abort Reset command Status Register Clear command Commands that are accepted during write to buffer abort (WBA) error status are: Status Register Read –Reads the status register and returns to WBA busy state Write Buffer Abort Reset command Status Register Clear command Document Number: 002-00247 Rev. *C Page 41 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 5.6 Embedded Algorithm Performance Table The Joint Electron Device Engineering Council (JEDEC) standard JESD22-A117 defines the procedural requirements for performing valid endurance and retention tests based on a qualification specification. This methodology is intended to determine the ability of a flash device to sustain repeated data changes without failure (program/erase endurance) and to retain data for the expected life (data retention). Endurance and retention qualification specifications are specified in JESD47 or may be developed using knowledge-based methods as in JESD94. Table 5.7 Embedded Algorithm Characteristics (-40°C to +85°C) Typ (Note 2) Max (Note 3) Unit 535 3500 ms GL512T 274 1792 (Note 1) s GL01GT 548 3584 (Note 1) s 160 750 µs 2-byte (Note 1) 160 750 Parameter Min Sector Erase Time 128 kbyte Chip Erase Single Word Programming Time (Note 1) 32-byte (Note 1) 195 750 64-byte (Note 1) 219 750 128-byte (Note 1) 258 750 256-byte (Note 1) 327 750 512-byte (Note 6) 451 750 512-byte 1.76 Buffer Programming Time Effective Write Buffer Program Operation per Word Comments Includes pre-programming prior to erasure (Note 7) µs Sector Programming Time 128 kB (full Buffer Programming) 115.4 µs 192 ms Erase Suspend Latency (tESL) 40 µs Program Suspend Latency (tPSL) 40 µs (Note 8) Erase Resume to next Erase Suspend (tERS) 100 µs Minimum of 60 µs but typical periods are needed for Erase to progress to completion. Program Resume to next Program Suspend (tPRS) 100 µs Minimum of 60 µs but typical periods are needed for Program to progress to completion. Evaluate Erase Status (tEES) 25 30 µs Blank Check 6.2 8.5 ms NOP (Number of Program-operations, per Line) Erase per Sector (Note 1) 256 100K cycles Notes: 1. Not 100% tested. 2. Typical program and erase times assume the following conditions: 25°C, 3.0V VCC, 10,000 cycle, and a random data pattern. 3. Under worst case conditions of 90°C, VCC = 2.70V, 100,000 cycles, and a random data pattern. 4. Data retention of 20 years is based on 1K erase cycles. 5. Effective write buffer specification is based upon a 512-byte write buffer operation. 6. 512-byte load is not supported in x8 mode. 7. In the pre-programming step of the Embedded Erase algorithm, all words are programmed to 0000h before Sector and Chip erasure. 8. System-level overhead is the time required to execute the bus-cycle sequence for the program command. See Table 6.1, Command Definitions x16 on page 44 for further information on command definitions. Document Number: 002-00247 Rev. *C Page 42 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 5.8 Embedded Algorithm Characteristics (-40°C to +105°C) Parameter Min Sector Erase Time 128 kbyte GL512T Typ (Note 2) Max (Note 3) Unit 535 3500 ms 274 1792 (Note 1) Chip Erase Includes pre-programming prior to erasure (Note 7) s GL01GT 548 3584 (Note 1) Single Word Programming Time (Note 1) 160 1050 2-byte (Note 1) 160 1050 32-byte (Note 1) 195 1050 64-byte (Note 1) 219 1050 128-byte (Note 1) 258 1050 256-byte (Note 1) 327 1050 512-byte (Note 1) 451 1050 512-byte 1.76 Buffer Programming Time Effective Write Buffer Program Operation per Word Comments µs µs Sector Programming Time 128 kB (full Buffer Programming) µs 115.4 269 ms Erase Suspend Latency (tESL) 50 µs Program Suspend Latency (tPSL) 50 µs (Note 8) Erase Resume to next Erase Suspend (tERS) 100 µs Minimum of 60 ns but typical periods are needed for Erase to progress to completion. Program Resume to next Program Suspend (tPRS) 100 µs Minimum of 60 ns but typical periods are needed for Program to progress to completion. Evaluate Erase Status (tEES) 25 30 µs Blank Check 7.6 9.0 ms NOP (Number of Program-operations, per Line) Erase per Sector (Note 1) 1 per 16 word 100K cycles Notes: 1. Not 100% tested. 2. Typical program and erase times assume the following conditions: 25°C, 3.0V VCC, 10,000 cycle, and a random data pattern. 3. Under worst case conditions of 105°C, VCC = 2.70V, 100,000 cycles, and a random data pattern. 4. Data retention of 20 years is based on 1K erase cycles. 5. Effective write buffer specification is based upon a 512-byte write buffer operation. 6. 512-byte load is not supported in x8 mode. 7. In the pre-programming step of the Embedded Erase algorithm, all words are programmed to 0000h before Sector and Chip erasure. 8. System-level overhead is the time required to execute the bus-cycle sequence for the program command. See Table 6.1, Command Definitions x16 on page 44 for further information on command definitions. Document Number: 002-00247 Rev. *C Page 43 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 6. Software Interface Reference 6.1 Command Summary Command Sequence (Note 1) Cycles Table 6.1 Command Definitions x16 Bus Cycles (Notes 2-5) First Second Addr Data Read (Note 6) 1 RA RD Reset/ASO Exit (Notes 7, 18) 1 XXX F0 Status Register Read 2 555 70 Status Register Clear 1 555 71 Addr Data XXX RD Third Fourth Addr Data Addr Data 4 555 AA 2AA 55 555 A0 PA PD Write to Buffer 6 555 AA 2AA 55 SA 25 SA WC Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 13) 3 555 AA 2AA 55 555 F0 555 20 WBL PD Unlock Bypass Word Program Enter 3 555 AA 2AA 55 Program (Note 9) 2 XXX A0 PA PD Write-to-Buffer (Note 9) 4 SA 25 SA WC WBL PD Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 13) 3 555 AA 2AA 55 555 F0 Sector Erase (Note 9) 2 XXX 80 SA 30 Chip Erase (Note 9) 2 XXX 80 XXX 10 Command Set Exit (Note 10) 2 XXX 90 XXX 00 Fifth Sixth Seventh Addr Data Addr Data WBL PD WBL PD Chip Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 555 10 Sector Erase (Note 20) 6 555 AA 2AA 55 555 80 555 AA 2AA 55 SA 30 Erase Suspend/Program Suspend Legacy Method (Note 11) 1 XXX B0 1 XXX 30 Program Suspend Enhanced Method 1 XXX 51 Program Resume Enhanced Method 1 XXX 50 Evaluate Erase State 1 (SA) 555 35 Blank Check 1 (SA) 555 33 CFI Enter (Note 8) 1 (SA) 55 98 Continuity Check 7 555 71 555 70 XX RD 2AAA A55 FF00 15555 AA 00FF 555 70 Addr Data XX RD Erase Suspend Enhanced Method Erase Resume/Program Resume Legacy Method (Note 12) Erase Resume Enhanced Method Document Number: 002-00247 Rev. *C Page 44 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) ID-CFI (Autoselect) ASO Command Sequence (Note 1) Cycles Table 6.1 Command Definitions x16 (Continued) ID (Autoselect) Entry 3 Bus Cycles (Notes 2-5) First Second Third Fourth Addr Data Addr Data Addr Data 555 AA 2AA 55 555 90 CFI Enter (Note 8) 1 55 98 ID-CFI Read 1 RA RD CFI Exit 1 XXX FF Reset/ASO Exit (Notes 7, 18) 1 XXX F0 Addr Fifth Data Sixth Seventh Addr Data Addr Data WBL PD WBL PD Addr Data Secure Silicon Region (SSR) ASO Secure Silicon Region Command Definitions SSR Entry 3 555 AA Read (Note 6) Word Program 1 RA RD 4 555 AA Write to Buffer 6 555 AA Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 13) 3 555 AA SSR Exit (Note 13) 4 555 AA Reset/ASO Exit (Notes 7, 18) 1 XXX F0 Document Number: 002-00247 Rev. *C 55 (SA) 555 88 2AA 55 555 A0 PA PD 2AA 55 SA 25 SA WC 2AA 55 555 F0 2AA 55 555 90 XX 0 2AA Page 45 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Command Sequence (Note 1) Cycles Table 6.1 Command Definitions x16 (Continued) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Data Fifth Sixth Seventh Addr Data Addr Data Addr Data 2 PWD2 3 PWD3 0 29 Lock Register ASO Lock Register Command Set Definitions Lock Register Entry 3 555 AA 2AA 55 Program (Note 17) 2 XXX A0 XXX PD Read (Note 17) 1 0 RD Command Set Exit (Notes 14, 18) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 18) 1 XXX F0 Password ASO Entry 3 555 AA 2AA 55 Program (Note 16) 2 XXX A0 PWAx PWDx 555 40 Password ASO Password Protection Command Set Definitions 555 60 Read (Note 15) 4 0 PWD0 1 PWD1 2 PWD2 3 PWD3 Unlock (Note 15) 7 0 25 0 3 0 PWD0 1 PWD1 Command Set Exit (Notes 14, 18) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 18) 1 XXX F0 PPB Entry 3 555 AA 2AA 55 PPB Program (Note 19) 2 XXX A0 SA 0 All PPB Erase (Note 19) 2 XXX 80 0 30 PPB Read (Note 19) 1 SA RD (0) Command Set Exit (Notes 14, 18) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 7, 18) 1 XXX F0 PPB Lock Entry 3 555 AA 2AA 55 PPB Lock Bit Cleared 2 XXX A0 XXX 0 PPB Lock Status Read (Note 19) 1 XXX RD (0) Command Set Exit (Notes 14, 18) 2 XXX 90 XXX 0 Reset/ASO Exit (Note 18) 1 XXX F0 PPB (Non-Volatile Sector Protection) Non-Volatile Sector Protection Command Set Definitions 555 C0 PPB Lock Bit Global Non-Volatile Sector Protection Freeze Command Set Definitions Document Number: 002-00247 Rev. *C 555 50 Page 46 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Command Sequence (Note 1) Cycles Table 6.1 Command Definitions x16 (Continued) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Data Fifth Addr Data Sixth Addr Data Seventh Addr Data DYB (Volatile Sector Protection) ASO Volatile Sector Protection Command Set Definitions DYB ASO Entry 3 555 AA 2AA 55 DYB Set (Note 19) 2 XXX A0 SA 0 SA 1 XXX 0 DYB Clear (Note 19) 2 XXX A0 DYB Status Read (Note 19) 1 SA RD (0) Command Set Exit (Notes 14, 18) 2 XXX 90 Reset/ASO Exit (Note 18) 1 XXX F0 555 E0 Legend: X = Don't care. RA = Address of the memory to be read. RD = Data read from location RA during read operation. PA = Address of the memory location to be programmed. PD = Data to be programmed at location PA. SA = Address of the sector selected. Address bits Amax-A16 uniquely select any sector. WBL = Write Buffer Location. The address must be within the same Line. WC = Word Count is the number of write buffer locations to load minus 1. PWAx = PPB Password address for word0 = 00h, word1 = 01h, word2 = 02h, and word3 = 03h. SSR3 Password address for word0 = 10h, word1 = 11h, word2 = 12h, and word3 = 13h. PWDx = Password data word0, word1, word2, and word3. Gray vs. White Box = Read vs. Write Operation. Notes: 1. See Table 8.1, Interface States on page 59 for description of bus operations. 2. All values are in hexadecimal. 3. Except for the following, all bus cycles are write cycle: read cycle during Read, ID/CFI Read (Manufacturing ID / Device ID), Indicator Bits, Secure Silicon Region Read, SSR Lock Read, and 2nd cycle of Status Register Read. 4. Data bits DQ15-DQ8 are don't care in command sequences, except for RD, PD, WC and PWD. 5. Address bits Amax-A11 are don't cares for unlock and command cycles, unless SA or PA required. (Amax is the Highest Address pin.). 6. No unlock or command cycles required when reading array data. 7. The Reset command is required to return to reading array data when device is in the ASO mode, or if DQ5 goes High (while the device is providing status data). 8. Command is valid when device is ready to read array data. 9. The Unlock-Bypass command is required prior to the Unlock-Bypass-Program and the unlock bypass write to buffer commands. 10. The Unlock-Bypass-Reset command is required to return to reading array data when the device is in the unlock bypass mode. 11. The system can read and program/program suspend in non-erasing sectors, or enter the ID-CFI ASO, when in the Erase Suspend mode. The Erase Suspend command is valid only during a sector erase operation. 12. The Erase Resume/Program Resume command is valid only during the Erase Suspend/Program Suspend modes. 13. Issue this command sequence to return to Read State after detecting device is in a Write-to-Buffer-Abort state. IMPORTANT: the full command sequence is required if resetting out of ABORT. 14. The Exit command returns the device to reading the array. 15. The password portion can be entered or read in any order as long as the entire 64-bit password is entered or read. Addresses are 10h-13h if the SSR3 is being accessed. 16. For PWDx, only one portion of the password can be programmed per each A0 command. Portions of the password must be programmed in sequential order (PWD0 - PWD3). 17. All Lock Register bits are one-time programmable. The program state = 0 and the erase state = 1. Also, both the Persistent Protection Mode Lock Bit and the Password Protection Mode Lock Bit cannot be programmed at the same time or the Lock Register Bits Program operation halts and returns the device to Read State. Lock Register bits that are reserved for future use are undefined and may be 0’s or 1's. 18. If any of the Entry commands was issued, an Exit command must be issued to reset the device into Read State. 19. Protected State = 00h, Unprotected State = 01h. The sector address for DYB set, DYB clear, or PPB Program command may be any location within the sector - the lower order bits of the sector address are don't care. 20. See Section 5.3.7.2, Sector Erase on page 28 for description of Multi-Sector Erase. Document Number: 002-00247 Rev. *C Page 47 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Command Sequence (Note 1) Cycles Table 6.2 Command Definitions x8 Bus Cycles (Notes 2-5) First Second Addr Data Read (Note 5) 1 RA RD Reset/ASO Exit (Notes 6, 17) 1 XXX F0 Status Register Read 2 AAA 70 Status Register Clear 1 AAA 71 Addr Data XXX RD Third Fourth Addr Data Addr Data 4 AAA AA 555 55 AAA A0 PA PD Write to Buffer (Note 19) 6 AAA AA 555 55 SA 25 SA WC Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 12) 3 AAA AA 555 55 AAA F0 Enter 3 AAA AA 555 55 AAA 20 Program (Note 8) 2 XXX A0 PA PD Write-to-Buffer (Note 8) 4 SA 25 SA WC WBL PD WBL PD Program Buffer to Flash (confirm) (Note 8) 1 SA 29 Write-to-Buffer-Abort Reset (Note 12) 3 AAA AA 555 55 AAA F0 Sector Erase (Note 8) 2 XXX 80 SA 30 Chip Erase (Note 8) 2 XXX 80 XXX 10 Command Set Exit (Note 9) 00 Unlock Bypass Word Program Fifth Sixth Seventh Addr Data Addr Data WBL PD WBL PD 2 XXX 90 XXX Chip Erase 6 AAA AA 555 55 AAA 80 AAA AA 555 55 AAA 10 Sector Erase (Note 19) 6 AAA AA 555 55 AAA 80 AAA AA 555 55 SA 30 Erase Suspend/Program Suspend Legacy Method (Note 10) 1 XXX B0 1 XXX 30 Program Suspend Enhanced Method 1 XXX 51 Program Resume Enhanced Method 1 XXX 50 Evaluate Erase State 1 (SA) AAA 35 Blank Check 1 (SA) AAA 33 CFI Enter (Note 7) 1 (SA) AA 98 Continuity Check 7 AAA 71 AAA 70 XX RD 55554 AB FF 2AAA B54 00 AAA 70 ID (Autoselect) Entry 3 AAA AA 555 55 AAA 90 CFI Enter (Note 7) 1 AA 98 Addr Data XX RD Erase Suspend Enhanced Method Erase Resume/Program Resume Legacy Method (Note 11) ID-CFI (Autoselect) ASO Erase Resume Enhanced Method ID-CFI Read 1 RA RD CFI Exit 1 XXX FF Reset/ASO Exit (Notes 6, 17) 1 XXX F0 Secure Silicon Region Command Definitions Document Number: 002-00247 Rev. *C Page 48 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Secure Silicon Region (SSR) ASO Command Sequence (Note 1) Cycles Table 6.2 Command Definitions x8 (Continued) SSR Entry 3 Bus Cycles (Notes 2-5) First Addr Second Data AAA AA RD Addr 555 Third Fourth Data Addr Data 55 (SA) AAA 88 Addr Fifth Data Read (Note 5) 1 RA Word Program 4 AAA AA 555 55 AAA A0 PA PD Write to Buffer (Note 19) 6 AAA AA 555 55 SA 25 SA WC Program Buffer to Flash (confirm) 1 SA 29 Write-to-Buffer-Abort Reset (Note 12) 3 AAA AA 555 55 AAA F0 SSR Exit (Note 12) 4 AAA AA 555 55 AAA 90 XX 0 Reset/ASO Exit (Notes 6, 17) 1 XXX F0 Document Number: 002-00247 Rev. *C Sixth Seventh Addr Data Addr Data WBL PD WBL PD Addr Data Page 49 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Command Sequence (Note 1) Cycles Table 6.2 Command Definitions x8 (Continued) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Data Fifth Sixth Seventh Addr Data Addr Data Addr Data Lock Register ASO Lock Register Command Set Definitions Lock Register Entry 3 AAA AA 555 55 Program (Note 16) 2 XXX A0 XXX PD XXX 0 Read (Note 16) 1 0 RD Command Set Exit (Notes 13, 17) 2 XXX 90 Reset/ASO Exit (Notes 6, 17) 1 XXX F0 Password ASO Entry 3 AAA AA 555 55 Program (Note 15) 2 XXX A0 PWAx PWDx Read (Note 14) 8 0 PWD0 1 7 PWD7 Unlock (Note 14) 11 Command Set Exit (Notes 13, 17) AAA 40 Password ASO Password Protection Command Set Definitions AAA 60 PWD1 2 PWD2 3 PWD3 4 PWD4 5 PWD5 6 PWD6 2 PWD2 3 PWD3 4 PWD4 0 25 0 3 0 PWD0 1 PWD1 5 PWD5 6 PWD6 7 PWD7 0 29 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 6, 17) 1 XXX F0 PPB Entry 3 AAA AA 555 55 PPB Program (Note 18) 2 XXX A0 SA 0 All PPB Erase (Note 18) 2 XXX 80 0 30 PPB Read (Note 18) 1 SA RD (0) Command Set Exit (Notes 13, 17) 2 XXX 90 XXX 0 Reset/ASO Exit (Notes 6, 17) 1 XXX F0 PPB Lock Entry 3 AAA AA 555 55 PPB Lock Bit Cleared 2 XXX A0 XXX 0 PPB Lock Status Read (Note 18) 1 XXX RD (0) Command Set Exit (Notes 13, 17) 2 XXX 90 XXX 0 Reset/ASO Exit (Note 17) 1 XXX F0 PPB (Non-Volatile Sector Protection) Non-Volatile Sector Protection Command Set Definitions AAA C0 PPB Lock Bit Global Non-Volatile Sector Protection Freeze Command Set Definitions Document Number: 002-00247 Rev. *C AAA 50 Page 50 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Command Sequence (Note 1) Cycles Table 6.2 Command Definitions x8 (Continued) Bus Cycles (Notes 2-5) First Addr Second Data Addr Data Third Addr Fourth Data Addr Data Fifth Addr Data Sixth Addr Data Seventh Addr Data DYB (Volatile Sector Protection) ASO Volatile Sector Protection Command Set Definitions DYB ASO Entry 3 AAA AA 555 55 DYB Set (Note 18) 2 XXX A0 SA 0 DYB Clear (Note 18) 2 XXX A0 SA 1 DYB Status Read (Note 18) 1 SA RD (0) Command Set Exit (Notes 13, 17) 2 XXX 90 XXX 0 Reset/ASO Exit (Note 17) 1 XXX F0 AAA E0 Legend: X = Don't care. RA = Address of the memory to be read. RD = Data read from location RA during read operation. PA = Address of the memory location to be programmed. PD = Data to be programmed at location PA. SA = Address of the sector selected. Address bits Amax-A16 uniquely select any sector. WBL = Write Buffer Location. The address must be within the same Line. WC = Word Count is the number of write buffer locations to load minus 1. PWAx = PPB Password address for byte0 = 00h, byte1 = 01h, byte2 = 02h, byte3 = 03h, byte04= 04h, byte5 = 05h, byte6 = 06h, and byte7 = 07h. SSR3 Password address for byte0 = 20h, byte1 = 21h, byte2 = 22h, byte3 = 23h, byte04= 24h, byte5 = 25h, byte6 = 26h, and byte7 = 27h. PWDx = Password data byte0, byte1, byte2, byte3, byte4, byte5, byte6, and byte7 Gray vs. White Box = Read vs. Write Operation. Notes: 1. See Table 8.1, Interface States on page 59 for description of bus operations. 2. All values are in hexadecimal. 3. Except for the following, all bus cycles are write cycle: read cycle during Read, ID/CFI Read (Manufacturing ID / Device ID), Indicator Bits, Secure Silicon Region Read, SSR Lock Read, and 2nd cycle of Status Register Read . 4. Address bits Amax-A11 are don't cares for unlock and command cycles, unless SA or PA required. (Amax is the Highest Address pin.). 5. No unlock or command cycles required when reading array data. 6. The Reset command is required to return to reading array data when device is in the ASO mode, or if DQ5 goes High (while the device is providing status data). 7. Command is valid when device is ready to read array data. 8. The Unlock-Bypass command is required prior to the Unlock-Bypass-Program command and the unlock bypass write to buffer commands. 9. The Unlock-Bypass-Reset command is required to return to reading array data when the device is in the unlock bypass mode. 10. The system can read and program/program suspend in non-erasing sectors, or enter the ID-CFI ASO, when in the Erase Suspend mode. The Erase Suspend command is valid only during a sector erase operation. 11. The Erase Resume/Program Resume command is valid only during the Erase Suspend/Program Suspend modes. 12. Issue this command sequence to return to Read State after detecting device is in a Write-to-Buffer-Abort state. IMPORTANT: the full command sequence is required if resetting out of ABORT. 13. The Exit command returns the device to reading the array. 14. The password portion can be entered or read in any order as long as the entire 64-bit password is entered or read. Addresses are 20h-27h if the SSR3 is being accessed. 15. For PWDx, only one portion of the password can be programmed per each A0 command. Portions of the password must be programmed in sequential order (PWD0 - PWD7). 16. All Lock Register bits are one-time programmable. The program state = 0 and the erase state = 1. Also, both the Persistent Protection Mode Lock Bit and the Password Protection Mode Lock Bit cannot be programmed at the same time or the Lock Register Bits Program operation aborts and returns the device to Read State. Lock Register bits that are reserved for future use are undefined and may be 0’s or 1's. 17. If any of the Entry commands was issued, an Exit command must be issued to reset the device into Read State. 18. Protected State = 00h, Unprotected State = 01h. The sector address for DYB set, DYB clear, or PPB Program command may be any location within the sector - the lower order bits of the sector address are don't care. 19. See Section 5.3.7.2, Sector Erase on page 28 for description of Multi-Sector Erase. 20. In x8 mode the WC represents 2 x8 WBL/PD cycles (e.g. if WC = 0, then 5th bus cycle would load data to lower byte address A-1 = low and 6th bus cycle would load data to upper byte address A-1 = high). Document Number: 002-00247 Rev. *C Page 51 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 6.2 Device ID and Common Flash Interface (ID-CFI) ASO Map The Device ID portion of the ASO (word locations 0h to 0Fh) provides manufacturer ID, device ID, Sector Protection State, and basic feature set information for the device. The access time to read location 02h is always tACC and a read of this location requires CE# to go High before the read and return Low to initiate the read (asynchronous read access). Page mode read between location 02h and other ID locations is not supported. Page mode read between ID locations other than 02h is supported. In x8 mode, address A-1 is ignored and the lower 8 bits of data will be returned for both address, in CFI only. While in x8 only CFI or only Autoselect data can be read. In x16 mode, able to read both memories from either command. For additional information see ID-CFI ASO on page 30. Table 6.3 ID (Autoselect) Address Map Description Address (x16) Address (x8) Manufacture ID (SA) + 0000h (SA) + 0000h Device ID (SA) + 0001h (SA) + 0002h 227Eh (SA) + 0004h Sector Protection State (1= Sector protected, 0= Sector unprotected). To read a different SA protection state only a new SA needs to be given. Protection Verification (SA) + 0002h Read Data 0001h DQ15-DQ08 = 1 (Reserved) DQ7 - Factory Locked Secure Silicon Region 1 = Locked, 0 = Not Locked DQ6 - Customer Locked Secure Silicon Region 1 = Locked Indicator Bits (SA) + 0003h (SA) + 0006h 0 = Not Locked DQ5 = 1 (Reserved) DQ4 - WP# Protects 0 = lowest address Sector 1 = highest address Sector DQ3 - DQ0 = 1 (Reserved) (SA) + 0004h (SA) + 0008h Reserved (SA) + 0005h (SA) + 000Ah Reserved (SA) + 0006h (SA) + 000Ch Reserved (SA) + 0007h (SA) + 000Eh Reserved (SA) + 0008h (SA) + 0010h Reserved (SA) + 0009h (SA) + 0012h Reserved (SA) + 000Ah (SA) + 0014h Reserved (SA) + 000Bh (SA) + 0016h Reserved RFU Bit 0 - Status Register Support 1 = Status Register Supported 0 = Status Register not supported Bit 1 - DQ polling Support 1 = DQ bits polling supported Lower Software Bits (SA) + 000Ch (SA) + 0018h 0 = DQ bits polling not supported Bit 3-2 - Command Set Support 11 = reserved 10 = reserved 01 = Reduced Command Set 00 = Classic Command set Bits 4-15 - Reserved = 0 Upper Software Bits (SA) + 000Dh (SA) + 001Ah Reserved Device ID (SA) + 000Eh (SA) + 001Ch 2228h = 1 Gb 2223h = 512 Mb Device ID (SA) + 000Fh (SA) + 001Eh 2201h Document Number: 002-00247 Rev. *C Page 52 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 6.4 CFI Query Identification String Word Address Byte Address Data (SA) + 0010h (SA) + 0020h 0051h (SA) + 0011h (SA) + 0022h 0052h (SA) + 0012h (SA) + 0024h 0059h (SA) + 0013h (SA) + 0026h 0002h (SA) + 0014h (SA) + 0028h 0000h (SA) + 0015h (SA) + 002Ah 0040h (SA) + 0016h (SA) + 002Ch 0000h (SA) + 0017h (SA) + 002Eh 0000h (SA) + 0018h (SA) + 0030h 0000h (SA) + 0019h (SA) + 0032h 0000h (SA) + 001Ah (SA) + 0034h 0000h Description Query Unique ASCII string “QRY” Primary OEM Command Set Address for Primary Extended Table Alternate OEM Command Set (00h = none exists) Address for Alternate OEM Extended Table (00h = none exists) Table 6.5 CFI System Interface String Word Address Byte Address Data (SA) + 001Bh (SA) + 0036h 0027h VCC Min. (erase/program) (D7-D4: volts, D3-D0: 100 mV) (SA) + 001Ch (SA) + 0038h 0036h VCC Max. (erase/program) (D7-D4: volts, D3-D0: 100 mV) (SA) + 001Dh (SA) + 003Ah 0000h VPP Min. voltage (00h = no VPP pin present) (SA) + 001Eh (SA) + 003Ch 0000h VPP Max. voltage (00h = no VPP pin present) (SA) + 001Fh (SA) + 003Eh 0008h Typical timeout per single word write 2N µs (SA) + 0020h (SA) + 0040h 0009h Typical timeout for max multi-byte program, 2N µs (00h = not supported) (SA) + 0021h (SA) + 0042h 000Ah Typical timeout per individual block erase 2N ms (SA) + 0022h (SA) + 0044h (SA) + 0023h (SA) + 0046h (SA) + 0024h (SA) + 0048h (SA) + 0025h (SA) + 004Ah 0002h Max. timeout per individual block erase 2N times typical (SA) + 0026h (SA) + 004Ch 0002h Max. timeout for full chip erase 2N times typical (00h = not supported) 0014h (1 Gb) 0013h (512 Mb) 0002h (85°C) 0003h (105°C) 0001h (85°C) 0002h (105°C) Document Number: 002-00247 Rev. *C Description Typical timeout for full chip erase 2N ms (00h = not supported) Max. timeout for single word write 2N times typical Max. timeout for buffer write 2N times typical Page 53 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 6.6 CFI Device Geometry Definition Word Address Byte Address Data 001Bh (1 Gb) (SA) + 0027h (SA) + 004Eh (SA) + 0028h (SA) + 0050h 0002h (SA) + 0029h (SA) + 0052h 0000h (SA) + 002Ah (SA) + 0054h 0009h (SA) + 002Bh (SA) + 0056h 0000h (SA) + 002Ch (SA) + 0058h 0001h (SA) + 002Dh (SA) + 005Ah 00XXh (SA) + 002Eh (SA) + 005Ch 000Xh (SA) + 002Fh (SA) + 005Eh 0000h (SA) + 0030h (SA) + 0060h 000Xh (SA) + 0031h (SA) + 0062h 0000h (SA) + 0032h (SA) + 0064h 0000h (SA) + 0033h (SA) + 0066h 0000h (SA) + 0034h (SA) + 0068h 0000h (SA) + 0035h (SA) + 006Ah 0000h (SA) + 0036h (SA) + 006Ch 0000h (SA) + 0037h (SA) + 006Eh 0000h (SA) + 0038h (SA) + 0070h 0000h (SA) + 0039h (SA) + 0072h 0000h (SA) + 003Ah (SA) + 0074h 0000h (SA) + 003Bh (SA) + 0076h 0000h 001Ah (512 Mb) Description Device Size = 2N byte; Flash Device Interface Description 0 = x8-only, 1 = x16-only, 2 = x8/x16 capable Max. number of byte in multi-byte write = 2N (00 = not supported) Number of Erase Block Regions within device 1 = Uniform Device, 2 = Boot Device Erase Block Region 1 Information (refer to JEDEC JESD68-01 or JEP137 specifications) 00FFh, 0003h, 0000h, 0002h =1 Gb 00FFh, 0001h, 0000h, 0002h = 512 Mb Erase Block Region 2 Information (refer to CFI publication 100) Erase Block Region 3 Information (refer to CFI publication 100) Erase Block Region 4 Information (refer to CFI publication 100) (SA) + 003Ch (SA) + 0078h 0000h (SA) + 003Dh (SA) + 007Ah FFFFh (SA) + 003Eh (SA) + 007Ch FFFFh (SA) + 003Fh (SA) + 007Eh FFFFh Document Number: 002-00247 Rev. *C Reserved Page 54 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 6.7 CFI Primary Vendor-Specific Extended Query Word Address Byte Address Data (SA) + 0040h (SA) + 0080h 0050h (SA) + 0041h (SA) + 0082h 0052h Description Query-unique ASCII string “PRI” (SA) + 0042h (SA) + 0084h 0049h (SA) + 0043h (SA) + 0086h 0031h Major version number, ASCII (SA) + 0044h (SA) + 0088h 0035h Minor version number, ASCII Address Sensitive Unlock (Bits 1-0) 00b = Required 01b = Not Required Process Technology (Bits 5-2) 0000b = 0.23 µm Floating Gate 0001b = 0.17 µm Floating Gate (SA) + 0045h (SA) + 008Ah 0024h 0010b = 0.23 µm MirrorBit 0011b = 0.13 µm Floating Gate 0100b = 0.11 µm MirrorBit 0101b = 0.09 µm MirrorBit 0110b = 0.09 µm Floating Gate 0111b = 0.065 µm MirrorBit Eclipse 1000b = 0.065 µm MirrorBit 1001b = 0.045 µm MirrorBit (SA) + 0046h (SA) + 008Ch 0002h Erase Suspend 0 = Not Supported 1 = Read Only 2 = Read and Write (SA) + 0047h (SA) + 008Eh 0001h Sector Protect 00 = Not Supported 0000h Temporary Sector Unprotect 00 = Not Supported X = Number of sectors in smallest group (SA) + 0048h (SA) + 0090h 01 = Supported (SA) + 0049h (SA) + 0092h 0008h Sector Protect/Unprotect Scheme 04 = High Voltage Method 05 = Software Command Locking Method 08 = Advanced Sector Protection Method (SA) + 004Ah (SA) + 0094h 0000h Simultaneous Operation 00 = Not Supported X = Number of banks (SA) + 004Bh (SA) + 0096h 0000h Burst Mode Type 00 = Not Supported 01 = Supported Page Mode Type 00 = Not Supported (SA) + 004Ch (SA) + 0098h 0003h 01 = 4 Word Page 02 = 8 Word Page 03 =16 Word Page (SA) + 004Dh (SA) + 009Ah 00B5h ACC (Acceleration) Supply Minimum 00 = Not Supported D7-D4: Volt D3-D0: 100 mV (SA) + 004Eh (SA) + 009Ch 00C5h ACC (Acceleration) Supply Maximum 00 = Not Supported D7-D4: Volt D3-D0: 100 mV Document Number: 002-00247 Rev. *C Page 55 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 6.7 CFI Primary Vendor-Specific Extended Query (Continued) Word Address Byte Address Data Description WP# Protection 00h = Flash device without WP Protect (No Boot) 01h = Eight 8 kB Sectors at TOP and Bottom with WP (Dual Boot) (SA) + 004Fh (SA) + 009Eh 0004h (Bottom) 0005h (Top) 02h = Bottom Boot Device with WP Protect (Bottom Boot) 03h = Top Boot Device with WP Protect (Top Boot) 04h = Uniform, Bottom WP Protect (Uniform Bottom Boot) 05h = Uniform, Top WP Protect (Uniform Top Boot) 06h = WP Protect for all sectors 07h = Uniform, Top and Bottom WP Protect (SA) + 0050h (SA) + 00A0h 0001h Program Suspend 00 = Not Supported 0001h Unlock Bypass 00 = Not Supported 01 = Supported (SA) +0051h (SA) +00A2h 01 = Supported (SA) + 0052h (SA) + 00A4h 0009h Secured Silicon Sector (Customer OTP Area) Size 2N (bytes) Software Features bit 0: status register polling (1 = supported, 0 = not supported) bit 1: DQ polling (1 = supported, 0 = not supported) bit 2: new program suspend/resume commands (1 = supported, 0 = not supported) (SA) + 0053h (SA) + 00A6h 008Fh bit 3: word programming (1 = supported, 0 = not supported) bit 4: bit-field programming (1 = supported, 0 = not supported) bit 5: autodetect programming (1 = supported, 0 = not supported) bit 6: RFU bit 7: multiple writes per Line (1 = supported, 0 = not supported) (SA) + 0054h (SA) + 00A8h 0005h Page Size = 2N bytes (SA) + 0055h (SA) + 00AAh 0006h Erase Suspend Timeout Maximum < 2N (µs) (SA) + 0056h (SA) + 00ACh 0006h Program Suspend Timeout Maximum < 2N (µs) (SA) + 0057h to (SA) + 0077h (SA) + 00AEh to (SA) + 00ACh FFFFh Reserved (SA) + 0078h (SA) + 00F0h 0006h Embedded Hardware Reset Timeout Maximum < 2N (µs) Reset with Reset Pin (SA) + 0079h (SA) + 00F2h 0009h Non-Embedded Hardware Reset Timeout Maximum < 2N (µs) Power on Reset Document Number: 002-00247 Rev. *C Page 56 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Hardware Interface 7. Signal Descriptions 7.1 Address and Data Configuration Address and data are connected in parallel (ADP) via separate signal inputs and I/Os. 7.2 Input/Output Summary Table 7.1 I/O Summary Symbol Type Description RESET# Input Hardware Reset. At VIL, causes the device to reset control logic to its standby state, ready for reading array data. CE# Input Chip Enable. At VIL, selects the device for data transfer with the host memory controller. OE# Input Output Enable. At VIL, causes outputs to be actively driven. At VIH, causes outputs to be high impedance (High-Z). WE# Input Write Enable. At VIL, indicates data transfer from host to device. At VIH, indicates data transfer is from device to host. Amax-A0 Input Address inputs. A25-A0 for S29GL01GT A24-A0 for S29GL512T DQ14-DQ0 Input/Output Data inputs and outputs DQ15/A-1 Input/Output DQ15: Data inputs and outputs A-1: LSB address input in byte mode WP#/ACC Input Write Protect. At VIL, disables program and erase functions in the lowest or highest address 64-kword (128-kB) sector of the device. At VIH, the sector is not protected. At VHH, automatically places device in unlock bypass mode. WP# has an internal pull up; When unconnected WP# is at VIH. RY/BY# Output – open drain Ready/Busy. Indicates whether an Embedded Algorithm is in progress or complete. At VIL, the device is actively engaged in an Embedded Algorithm such as erasing or programming. At High-Z, the device is ready for read or a new command write - requires external pull-up resistor to detect the High-Z state. Multiple devices may have their RY/BY# outputs tied together to detect when all devices are ready. BYTE# Input Selects data bus width. At VIL, the device is in byte configuration and data I/O pins DQ7-DQ0 are active and DQ15/A-1 becomes the LSB address input. At VIH, the device is in word configuration and data I/O pins DQ15-DQ0 are active. VCC Power Supply Core power supply VIO Power Supply Versatile I/O power supply. VSS Power Supply Power supplies ground NC No Connect Not Connected internally. The pin/ball location may be used in Printed Circuit Board (PCB) as part of a routing channel. RFU No Connect Reserved for Future Use. Not currently connected internally but the pin/ball location should be left unconnected and unused by PCB routing channel for future compatibility. The pin/ball may be used by a signal in the future. DNU Reserved Do Not Use. Reserved for use by Cypress. The pin/ball is connected internally. The input has an internal pull down resistance to VSS. The pin/ball can be left open or tied to VSS on the PCB. Document Number: 002-00247 Rev. *C Page 57 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 7.3 Word/Byte Configuration The BYTE# pin controls whether the device data I/O pins operate in the byte or word configuration. If the BYTE# pin is set at logic 1, the device is in word configuration, DQ0-DQ15 are active and controlled by CE# and OE#. If the BYTE# pin is set at logic 0, the device is in byte configuration, and only data I/O pins DQ0-DQ7 are active and controlled by CE# and OE#. The data I/O pins DQ8-DQ14 are tri-stated, and the DQ15 pin is used as an input for the LSB (A-1) address function. The BYTE# pin can only be switch while the device is in standby (read mode). The BYTE# pin has an internal pull-up. Though not required in a x16 only system, the pin should be connected to high (e.g. VIO) 7.4 Versatile I/O Feature The maximum output voltage level driven by, and input levels acceptable to, the device are determined by the VIO power supply. This supply allows the device to drive and receive signals to and from other devices on the same bus having interface signal levels different from the device core voltage. 7.5 Ready/Busy# (RY/BY#) RY/BY# is a dedicated, open drain output pin that indicates whether an Embedded Algorithm, Power-On Reset (POR), or Hardware Reset is in progress or complete. The RY/BY# status is valid after the rising edge of the final WE# pulse in a command sequence, when VCC is above VCC minimum during POR, or after the falling edge of RESET#. Since RY/BY# is an open drain output, several RY/BY# pins can be tied together in parallel with a pull up resistor to VIO. If the output is Low (Busy), the device is actively erasing, programming, or resetting. (This includes programming in the Erase Suspend mode). If the output is High (Ready), the device is ready to read data (including during the Erase Suspend mode), or is in the standby mode. Table 5.6, Data Polling Status on page 38 shows the outputs for RY/BY# in each operation. If an Embedded algorithm has failed (Program / Erase failure as result of max pulses or Program Abort), RY/BY# will stay Low (busy) until status register bits 4 and 5 are cleared and the reset command is issued. If an Embedded algorithm has failed (Sector is locked), RY/BY# will return High (ready). This includes Erase or Programming on a locked sector. 7.6 Hardware Reset The RESET# input provides a hardware method of resetting the device to standby state. When RESET# is driven Low for at least a period of tRP, the device immediately: terminates any operation in progress, exits any ASO, tristates all outputs, resets the Status Register, resets the EAC to standby state. CE# is ignored for the duration of the reset operation (tRPH). To meet the Reset current specification (ICC5) CE# must be held High. To ensure data integrity any operation that was interrupted should be reinitiated once the device is ready to accept another command sequence. Document Number: 002-00247 Rev. *C Page 58 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 8. Signal Protocols The following sections describe the host system interface signal behavior and timing for the 29GL-T family flash devices. 8.1 Interface States Table 8.1 describes the required value of each interface signal for each interface state. Table 8.1 Interface States Interface State Power-Off with Hardware Data Protection WP#/ ACC Amax-A0 (Note 1) DQ0-DQ7 X L or H X X X X L or H X X X X L or H H H X X H L X X H L H H H L L H VIO RESET# < VLKO VCC X X X X X L Power-On (Cold) Reset VCC min Hardware (Warm) Reset VCC min Interface Standby VCC min Automatic Sleep (Notes 2, 4) VCC min Read with Output Disable (Note 3) VCC min Random Read VCC min VIO min VCC VIO min VCC VIO min VCC VIO min VCC VIO min VCC DQ8-DQ15 (Note 6) VCC CE# OE# WE# BYTE# BYTE# = VIH BYTE = VIL High-Z High-Z High-Z X High-Z High-Z High-Z X X High-Z High-Z High-Z L or H H X High-Z High-Z High-Z L or H H Valid Output Available Output Available DQ8-DQ14 = High-Z, DQ15 = A-1 X Valid High-Z High-Z High-Z X Valid Output Valid Output Valid DQ8-DQ14 = High-Z, DQ15 = A-1 Output Valid Output Valid DQ8-DQ14 = High-Z, DQ15 = A-1 Input Valid Input Valid DQ8-DQ14 = High-Z, DQ15 = A-1 L or H Page Read VCC min Write VCC min VIO min VIO min VCC VIO min VCC Amax-A4 Valid H L L H H L H L L or H L or H X A3-A0 (or A3-A-1) Modified (Note 5) Valid Legend: L = VIL H = VIH X = either VIL or VIH L/H = rising edge H/L = falling edge Valid = all bus signals have stable L or H level Modified = valid state different from a previous valid state Available = read data is internally stored with output driver controlled by OE# Notes: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode. 2. WE# and OE# can not be at VIL at the same time. 3. Read with Output Disable is a read initiated with OE# High. 4. Automatic Sleep is a read/write operation where data has been driven on the bus for an extended period, without CE# going High and the device internal logic has gone into standby mode to conserve power. 5. If WP# = VIL, on the outermost sector remains protected. If WP# = VIH, the outermost sector is unprotected. WP# has an internal pull-up; when unconnected, WP# is at VIH. 6. VIL = VSS and VIH = VIO. Document Number: 002-00247 Rev. *C Page 59 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 8.2 Power-Off with Hardware Data Protection The memory is considered to be powered off when the core power supply (VCC) drops below the lock-out voltage (VLKO). When VCC is below VLKO, the entire memory array is protected against a program or erase operation. This ensures that no spurious alteration of the memory content can occur during power transition. During a power supply transition down to Power-Off, VIO should remain less than or equal to VCC. If VCC goes below VRST (Min) then returns above VRST (Min) to VCC minimum, the Power-On Reset interface state is entered and the EAC starts the Cold Reset Embedded Algorithm. 8.3 8.3.1 Power Conservation Modes Interface Standby Standby is the default, low power, state for the interface while the device is not selected by the host for data transfer (CE# = High). All inputs are ignored in this state and all outputs except RY/BY# are high impedance. RY/BY# is a direct output of the EAC, not controlled by the Host Interface. 8.3.2 Automatic Sleep The automatic sleep mode reduces device interface energy consumption to the sleep level (ICC6) following the completion of a random read access time. The device automatically enables this mode when addresses remain stable for tACC + 30 ns. While in automatic sleep mode, output data is latched and always available to the system. Output of the data depends on the level of the OE# signal but, the automatic sleep mode current is independent of the OE# signal level. Standard address access timings (tACC or tPACC) provide new data when addresses are changed. Refer the DC Characteristics on page 65 for the automatic sleep mode current specification ICC6. Automatic sleep helps reduce current consumption especially when the host system clock is slowed for power reduction. During slow system clock periods, read and write cycles may extend many times their length versus when the system is operating at high speed. Even though CE# may be Low throughout these extended data transfer cycles, the memory device host interface will go to the Automatic Sleep current at tACC + 30 ns. The device will remain at the Automatic Sleep current for tASSB. Then the device will transition to the standby current level. This keeps the memory at the Automatic Sleep or standby power level for most of the long duration data transfer cycles, rather than consuming full read power all the time that the memory device is selected by the host system. However, the EAC operates independent of the automatic sleep mode of the host interface and will continue to draw current during an active Embedded Algorithm. Only when both the host interface and EAC are in their standby states is the standby level current achieved. 8.4 8.4.1 Read Read With Output Disable When the CE# signal is asserted Low, the host system memory controller begins a read or write data transfer. Often there is a period at the beginning of a data transfer when CE# is Low, Address is valid, OE# is High, and WE# is High. During this state a read access is assumed and the Random Read process is started while the data outputs remain at high impedance. If the OE# signal goes Low, the interface transitions to the Random Read state, with data outputs actively driven. If the WE# signal is asserted Low, the interface transitions to the Write state. Note, OE# and WE# should never be Low at the same time to ensure no data bus contention between the host system and memory. 8.4.2 Random (Asynchronous) Read When the host system interface selects the memory device by driving CE# Low, the device interface leaves the Standby state. If WE# is High when CE# goes Low, a random read access is started. The data output depends on the address map mode and the address provided at the time the read access is started. Document Number: 002-00247 Rev. *C Page 60 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The data appears on DQ15-DQ0 (DQ7-DQ0 in x8 mode) when CE# is Low, OE# is Low, WE# remains High, address remains stable, and the asynchronous access times are satisfied. Address access time (tACC) is equal to the delay from stable addresses to valid output data. The chip enable access time (tCE) is the delay from stable CE# to valid data at the outputs. In order for the read data to be driven on to the data outputs the OE# signal must be Low at least the output enable time (tOE) before valid data is available. At the completion of the random access time from CE# active (tCE), address stable (tACC), or OE# active (tOE), whichever occurs latest, the data outputs will provide valid read data from the currently active address map mode. If CE# remains Low and any of the Amax to A4 address signals change to a new value, a new random read access begins. If CE# remains Low and OE# goes High the interface transitions to the Read with Output Disable state. If CE# remains Low, OE# goes High, and WE# goes Low, the interface transitions to the Write state. If CE# returns High, the interface goes to the Standby state. Back to Back accesses, in which CE# remains Low between accesses, requires an address change to initiate the second access. See Asynchronous Read Operations on page 71. 8.4.3 Page Read After a Random Read access is completed, if CE# remains Low, OE# remains Low, the Amax to A4 address signals remain stable, and any of the A3 to A0 address signals change, a new access within the same Page begins. In x8 mode, when any of the A3 to A1 address signals change, a new access within the same Page begins. The Page Read completes much faster (tPACC) than a Random Read access. 8.5 8.5.1 Write Asynchronous Write When WE# goes Low after CE is Low, there is a transition from one of the read states to the Write state. If WE# is Low before CE# goes Low, there is a transition from the Standby state directly to the Write state without beginning a read access. When CE# is Low, OE# is High, and WE# goes Low, a write data transfer begins. Note, OE# and WE# should never be Low at the same time to ensure no data bus contention between the host system and memory. When the asynchronous write cycle timing requirements are met the WE# can go High to capture the address and data values in to EAC command memory. Address is captured by the falling edge of WE# or CE#, whichever occurs later. Data is captured by the rising edge of WE# or CE#, whichever occurs earlier. When CE# is Low before WE# goes Low and stays Low after WE# goes High, the access is called a WE# controlled Write. When WE# is High and CE# goes High, there is a transition to the Standby state. If CE# remains Low and WE# goes High, there is a transition to the Read with Output Disable state. When WE# is Low before CE# goes Low and remains Low after CE# goes High, the access is called a CE# controlled Write. A CE# controlled Write transitions to the Standby state. If WE# is Low before CE# goes Low, the write transfer is started by CE# going Low. If WE# is Low after CE# goes High, the address and data are captured by the rising edge of CE#. These cases are referred to as CE# controlled write state transitions. Write followed by Read accesses, in which CE# remains Low between accesses, requires an address change to initiate the following read access. Back to Back accesses, in which CE# remains Low between accesses, requires an address change to initiate the second access. The EAC command memory array is not readable by the host system and has no ASO. The EAC examines the address and data in each write transfer to determine if the write is part of a legal command sequence. When a legal command sequence is complete the EAC will initiate the appropriate EA. 8.5.2 Write Pulse “Glitch” Protection Noise pulses of less than 5 ns (typical) on WE# will not initiate a write cycle. 8.5.3 Logical Inhibit Write cycles are inhibited by holding OE# at VIL, or CE# at VIH, or WE# at VIH. To initiate a write cycle, CE# and WE# must be Low (VIL) while OE# is High (VIH). Document Number: 002-00247 Rev. *C Page 61 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 9. Electrical Specifications 9.1 Absolute Maximum Ratings Table 9.1 Absolute Maximum Ratings Storage Temperature Plastic Packages -65°C to +150°C Ambient Temperature with Power Applied -65°C to +125°C Voltage with Respect to Ground All pins other than RESET# (Note 1) -0.5V to (VIO + 0.5V) RESET# (Note 1) -0.5V to (VCC + 0.5V) Output Short Circuit Current (Note 2) 100 mA -0.5V to +4.0V VCC VIO -0.5V to +4.0V ACC -0.5V to +12.5V Notes: 1. Minimum DC voltage on input or I/O pins is -0.5V. During voltage transitions, input or I/O pins may undershoot VSS to -2.0V for periods of up to 20 ns. See Figure 9.3 on page 64. Maximum DC voltage on input or I/O pins is VCC +0.5V. During voltage transitions, input or I/O pins may overshoot to VCC +2.0V for periods up to 20 ns. See Figure 9.4 on page 64. 2. No more than one output may be shorted to ground at a time. Duration of the short circuit should not be greater than one second. 3. Stresses above those listed under Absolute Maximum Ratings may cause permanent damage to the device. This is a stress rating only; functional operation of the device at these or any other conditions above those indicated in the operational sections of this data sheet is not implied. Exposure of the device to absolute maximum rating conditions for extended periods may affect device reliability. 9.2 Latchup Characteristics This product complies with JEDEC standard JESD78C latchup testing requirements. 9.3 Operating Ranges 9.3.1 Temperature Ranges Spec Parameter Symbol Conditions Unit Min Ambient Temperature 9.3.2 TA Max Industrial (I) Devices -40 +85 °C Industrial Plus (V) Devices -40 +105 °C Power Supply Voltages VCC 2.7V to 3.6V VIO 1.65V to VCC + 200 mV Note: 1. Operating ranges define those limits between which the functionality of the device is guaranteed. 9.3.3 Power-Up and Power-Down During power-up or power-down VCC must always be greater than or equal to VIO (VCC VIO). The device ignores all inputs until a time delay of tVCS has elapsed after the moment that VCC and VIO both rise above, and stay above, the minimum VCC and VIO thresholds. During tVCS the device is performing power on reset operations. During power-down or voltage drops below VCC Lockout maximum (VLKO), the VCC and VIO voltages must drop below VCC Reset (VRST) minimum for a period of tPD for the part to initialize correctly when VCC and VIO again rise to their operating ranges. See Figure 9.2 on page 63. If during a voltage drop the VCC stays above VLKO maximum the part will stay initialized and will work correctly when VCC is again above VCC minimum. If the part locks up from improper initialization, a hardware reset can be used to initialize the part correctly. Document Number: 002-00247 Rev. *C Page 62 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Normal precautions must be taken for supply decoupling to stabilize the VCC and VIO power supplies. Each device in a system should have the VCC and VIO power supplies decoupled by a suitable capacitor close to the package connections (this capacitor is generally on the order of 0.1 µF). At no time should VIO be greater then 200 mV above VCC (VCC VIO - 200 mV). Table 9.2 Power-Up/Power-Down Voltage and Timing Symbol Parameter Min Max Unit 2.7 3.6 V 2.5 V VCC VCC Power Supply VLKO VCC level below which re-initialization is required (Note 1) VRST VCC and VIO Low voltage needed to ensure initialization will occur (Note 1) 1.0 V tVCS VCC and VIO minimum to first access (Note 1) 300 µs tPD Duration of VCC VRST(min) (Note 1) 15 µs Note: 1. Not 100% tested. Figure 9.1 Power-Up P o w e r S u p p ly Voltage V cc (m a x) V cc(m in) VIO (m a x) VIO (m in) V cc tV C S VIO F ull D e vice A ccess tim e Figure 9.2 Power-Down and Voltage Drop V C C and V IO V C C (m ax) N o D e vice A ccess A llow e d V C C (m in ) t VCS V L K O (m ax) F u ll D evice A ccess A llow ed V R S T (m in ) tP D tim e Document Number: 002-00247 Rev. *C Page 63 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 9.3.4 Input Signal Overshoot Figure 9.3 Maximum Negative Overshoot Waveform 20 ns 20 ns VIL max VIL min -2.0V 20 n s Figure 9.4 Maximum Positive Overshoot Waveform 20 ns VIO + 2.0 V VIH max VIH min 20 ns Document Number: 002-00247 Rev. *C 20 ns Page 64 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 9.4 DC Characteristics Table 9.3 DC Characteristics (-40°C to +85°C) Parameter Description Typ (Note 2) Max All others ±0.02 ±1.0 WP#, BYTE# ±0.5 ±2.0 ±0.02 ±1.0 µA Test Conditions Min VIN = VSS to VCC, VCC = VCC max Unit µA ILI Input Load Current ILO Output Leakage Current VOUT = VSS to VCC, VCC = VCC max ICC1 VCC Active Read Current CE# = VIL, OE# = VIH, Address switching@ 5 MHz, VCC = VCC max 55 60 mA ICC2 VCC Intra-Page Read Current CE# = VIL, OE# = VIH, Address switching@ 33 MHz, VCC = VCC max 9 25 mA ICC3 VCC Active Erase/Program Current (1) (2) CE# = VIL, OE# = VIH, VCC = VCC max 45 100 mA ICC4 VCC Standby Current CE#, RESET#, OE# = VIH, VIH = VIO VIL = VSS, VCC = VCC max 70 100 µA ICC5 VCC Reset Current (2) (7) CE# = VIH, RESET# = VIL, VCC = VCC max 10 20 mA 6 mA Automatic Sleep Mode (3) VIH = VIO, VIL = VSS VCC = VCC max, tACC + 30 ns 3 ICC6 VIH = VIO, VIL = VSS, VCC = VCC max, tASSB 100 150 µA RESET# = VIO, CE# = VIO, OE# = VIO, VCC = VCC max, 53 80 mA V ICC7 VCC Current during power up (2) (6) VIL Input Low Voltage (4) -0.5 0.3 x VIO VIH Input High Voltage (4) 0.7 x VIO VIO + 0.4 V VHH Voltage for ACC Program Acceleration VCC = 2.7 - 3.6 V 11.5 12.5 V VOL Output Low Voltage (4) (8) IOL = 100 µA for DQ15-DQ0; IOL = 2 mA for RY/BY# 0.15 x VIO V VOH Output High Voltage (4) IOH = 100 µA VLKO Low VCC Lock-Out Voltage(2) VRST Low VCC Power on Reset Voltage (2) 0.85 x VIO V 2.25 2.5 1.0 V V Notes: 1. ICC active while Embedded Algorithm is in progress. 2. Not 100% tested. 3. Automatic sleep mode enables the lower power mode when addresses remain stable for the specified designated time. 4. VIO = 1.65V to VCC or 2.7V to VCC depending on the model. 5. VCC = 3V and VIO = 3V or 1.8V. When VIO is at 1.8V, I/O pins cannot operate at >1.8V. 6. During power-up there are spikes of current demand, the system needs to be able to supply this current to insure the part initializes correctly. 7. If an embedded operation is in progress at the start of reset, the current consumption will remain at the embedded operation specification until the embedded operation is stopped by the reset. If no embedded operation is in progress when reset is started, or following the stopping of an embedded operation, ICC5 will be drawn during the remainder of tRPH. After the end of tRPH the device will go to standby mode until the next read or write. 8. The recommended pull-up resistor for RY/BY# output is 5k to 10k ohms. Document Number: 002-00247 Rev. *C Page 65 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 9.4 DC Characteristics (-40°C to +105°C) Parameter Description Typ (Note 2) Max All others ±0.02 ±1.0 WP#, BYTE# ±0.5 ±2.0 Test Conditions Min VIN = VSS to VCC, VCC = VCC max Unit µA ILI Input Load Current ILO Output Leakage Current VOUT = VSS to VCC, VCC = VCC max ±0.02 ±1.0 µA ICC1 VCC Active Read Current CE# = VIL, OE# = VIH, Address switching@ 5 MHz, VCC = VCC max 55 60 mA ICC2 VCC Intra-Page Read Current CE# = VIL, OE# = VIH, Address switching@ 33 MHz, VCC = VCC max 9 25 mA ICC3 VCC Active Erase/Program Current (1) (2) CE# = VIL, OE# = VIH, VCC = VCC max 45 100 mA ICC4 VCC Standby Current CE#, RESET#, OE# = VIH, VIH = VIO VIL = VSS, VCC = VCC max 70 200 µA ICC5 VCC Reset Current (2) (7) CE# = VIH, RESET# = VIL, VCC = VCC max 10 20 mA VIH = VIO, VIL = VSS VCC = VCC max, tACC + 30 ns 3 6 mA VIH = VIO, VIL = VSS, VCC = VCC max, tASSB 100 200 µA RESET# = VIO, CE# = VIO, OE# = VIO, VCC = VCC max, 53 80 mA V ICC6 Automatic Sleep Mode (3) ICC7 VCC Current during power up (2) (6) VIL Input Low Voltage (4) -0.5 0.3 x VIO VIH Input High Voltage (4) 0.7 x VIO VIO + 0.4 V VHH Voltage for ACC Program Acceleration VCC = 2.7 - 3.6 V 11.5 12.5 V VOL Output Low Voltage (4) (8) IOL = 100 µA for DQ15-DQ0; IOL = 2 mA for RY/BY# 0.15 x VIO V IOH = 100 µA 2.5 V VOH Output High Voltage (4) VLKO Low VCC Lock-Out Voltage(2) VRST Low VCC Power on Reset Voltage (2) 0.85 x VIO V 2.25 1.0 V Notes: 1. ICC active while Embedded Algorithm is in progress. 2. Not 100% tested. 3. Automatic sleep mode enables the lower power mode when addresses remain stable for the specified designated time. 4. VIO = 1.65V to VCC or 2.7V to VCC depending on the model. 5. VCC = 3V and VIO = 3V or 1.8V. When VIO is at 1.8V, I/O pins cannot operate at >1.8V. 6. During power-up there are spikes of current demand, the system needs to be able to supply this current to insure the part initializes correctly. 7. If an embedded operation is in progress at the start of reset, the current consumption will remain at the embedded operation specification until the embedded operation is stopped by the reset. If no embedded operation is in progress when reset is started, or following the stopping of an embedded operation, ICC7 will be drawn during the remainder of tRPH. After the end of tRPH the device will go to standby mode until the next read or write. 8. The recommended pull-up resistor for RY/BY# output is 5k to 10k ohms. Document Number: 002-00247 Rev. *C Page 66 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 9.5 Capacitance Characteristics Table 9.5 Connector Capacitance for FBGA (LAA) Package Parameter Symbol Parameter Description Test Setup Typ Max Unit CIN Input Capacitance VIN = 0 4 5.5 pF COUT Output Capacitance VOUT = 0 3.5 5 pF CIN2 Control Pin Capacitance VIN = 0 4 8 pF RY/BY# Output Capacitance VOUT = 0 3 4 pF RESET# Reset Input Capacitance VIN = 0 21 23 pF Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Table 9.6 Connector Capacitance for FBGA (LAE) Package Parameter Symbol Parameter Description Test Setup Typ Max Unit CIN Input Capacitance VIN = 0 3.5 5 pF COUT Output Capacitance VOUT = 0 3.5 5 pF CIN2 Control Pin Capacitance VIN = 0 3.5 7 pF RY/BY# Output Capacitance VOUT = 0 2.5 3.5 pF RESET# Reset Input Capacitance VIN = 0 20 22 pF Test Setup Typ Max Unit Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Table 9.7 Connector Capacitance for FBGA (VBU) Package Parameter Symbol Parameter Description CIN Input Capacitance VIN = 0 3.5 5 pF COUT Output Capacitance VOUT = 0 3.5 5 pF CIN2 Control Pin Capacitance VIN = 0 3.5 7 pF RY/BY# Output Capacitance VOUT = 0 3 4 pF RESET# Reset Input Capacitance VIN = 0 20 22 pF Unit Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Table 9.8 Connector Capacitance for TSOP Package Parameter Symbol Parameter Description Test Setup Typ Max CIN Input Capacitance VIN = 0 3 5 pF COUT Output Capacitance VOUT = 0 3 4.5 pF CIN2 Control Pin Capacitance VIN = 0 3.5 7 pF RY/BY# Output Capacitance VOUT = 0 2.5 3.5 pF RESET# Reset Input Capacitance VIN = 0 20 22 pF Notes: 1. Sampled, not 100% tested. 2. Test conditions TA = 25°C, f = 1.0 MHz. Document Number: 002-00247 Rev. *C Page 67 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 10. Timing Specifications 10.1 Key to Switching Waveforms Waveform Inputs Outputs Steady Changing from H to L Changing from L to H 10.2 Don't Care, Any Change Permitted Changing, State Unknown Does Not Apply Center Line is High Impedance State (High-Z) AC Test Conditions Figure 10.1 Test Setup Device Under Test CL Table 10.1 Test Specification Parameter Output Load Capacitance, CL Input Rise and Fall Times (Note 1) All Speeds Units 30 pF 1.5 ns 0.0-VIO V Input timing measurement reference levels VIO/2 V Output timing measurement reference levels VIO/2 V Input Pulse Levels Note: 1. Measured between VIL max and VIH min. Figure 10.2 Input Waveforms and Measurement Levels VIO 0.0 V Input 0.5 VIO Document Number: 002-00247 Rev. *C Measurement Level 0.5 VIO Output Page 68 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 10.3 Power-On Reset (POR) and Warm Reset Normal precautions must be taken for supply decoupling to stabilize the VCC and VIO power supplies. Each device in a system should have the VCC and VIO power supplies decoupled by a suitable capacitor close to the package connections (this capacitor is generally on the order of 0.1 µF). Table 10.2 Power ON and Reset Parameters Parameter Limit Value tVCS VCC Setup Time to first access (1) (2) Description Min 300 Unit µs tVIOS VIO Setup Time to first access (1) (2) Min 300 µs tRPH RESET# Low to CE# Low Min 35 µs ns tRP RESET# Pulse Width Min 200 tRH Time between RESET# (High) and CE# (low) Min 50 ns tCEH CE# Pulse Width High Min 20 ns Notes: 1. Not 100% tested. 2. Timing measured from VCC reaching VCC minimum and VIO reaching VIO minimum to VIH on Reset and VIL on CE#. 3. RESET# Low is optional during POR. If RESET is asserted during POR, the later of tRPH, tVIOS, or tVCS will determine when CE# may go Low. If RESET# remains Low after tVIOS, or tVCS is satisfied, tRPH is measured from the end of tVIOS, or tVCS. RESET must also be High tRH before CE# goes Low. 4. VCC VIO - 200 mV during power-up. 5. VCC and VIO ramp rate can be non-linear. 6. Sum of tRP and tRH must be equal to or greater than tRPH. 10.3.1 Power-On (Cold) Reset (POR) During the rise of power supplies the VIO supply voltage must remain less than or equal to the VCC supply voltage. VIH also must remain less than or equal to the VIO supply. The Cold Reset Embedded Algorithm requires a relatively long, hundreds of µs, period (tVCS) to load all of the EAC algorithms and default state from non-volatile memory. During the Cold Reset period all control signals including CE# and RESET# are ignored. If CE# is Low during tVCS the device may draw higher than normal POR current during tVCS but the level of CE# will not affect the Cold Reset EA. RESET# may be High or Low during tVCS. If RESET# is Low during tVCS it may remain Low at the end of tVCS to hold the device in the Hardware Reset state. If RESET# is High at the end of tVCS the device will go to the Standby state. When power is first applied, with supply voltage below VRST then rising to reach operating range minimum, internal device configuration and warm reset activities are initiated. CE# is ignored for the duration of the POR operation (tVCS or tVIOS). RESET# Low during this POR period is optional. If RESET# is driven Low during POR it must satisfy the Hardware Reset parameters tRP and tRPH. In which case the Reset operations will be completed at the later of tVCS or tVIOS or tRPH. A CE#, OE#, or Address transition will initiate the 1st read operation. If CE# is held low during POR than the current address will be automatically read. During Cold Reset the device will draw ICC7 current. Figure 10.3 Power-Up Diagram tVCS VCC tVIOS VIO RESET# tRH tCEH CE# Document Number: 002-00247 Rev. *C Page 69 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 10.3.2 Hardware (Warm) Reset During Hardware Reset (tRPH) the device will draw ICC5 current. When RESET# continues to be held at VSS, the device draws CMOS standby current (ICC4). If RESET# is held at VIL, but not at VSS, the standby current is greater. If a Cold Reset has not been completed by the device when RESET# is asserted Low after tVCS, the Cold Reset# EA will be performed instead of the Warm RESET#, requiring tVCS time to complete. See Figure 10.4, Hardware Reset on page 70. After the device has completed POR and entered the Standby state, any later transition to the Hardware Reset state will initiate the Warm Reset Embedded Algorithm. A Warm Reset is much shorter than a Cold Reset, taking tens of µs (tRPH) to complete. During the Warm Reset EA, any in progress Embedded Algorithm is stopped and the EAC is returned to its POR state without reloading EAC algorithms from non-volatile memory. After the Warm Reset EA completes, the interface will remain in the Hardware Reset state if RESET# remains Low. When RESET# returns High the interface will transit to the Standby state. If RESET# is High at the end of the Warm Reset EA, the interface will directly transit to the Standby state. If CE# is held low during Warm Reset than the current address will be automatically read. If POR has not been properly completed by the end of tVCS, a later transition to the Hardware Reset state will cause a transition to the Power-on Reset interface state and initiate the Cold Reset Embedded Algorithm. This ensures the device can complete a Cold Reset even if some aspect of the system Power-On voltage ramp-up causes the POR to not initiate or complete correctly. The RY/ BY# pin is Low during cold or warm reset as an indication that the device is busy performing reset operations. Hardware Reset is initiated by the RESET# signal going to VIL. Figure 10.4 Hardware Reset tRP RESET# tRH tRPH tCEH CE# Document Number: 002-00247 Rev. *C Page 70 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 10.4 AC Characteristics 10.4.1 Asynchronous Read Operations Table 10.3 Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +85°C) Speed Option Parameter Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay tPACC Test Setup 512 Mb, 1 Gb Min 100 ns CE# = VIL OE# = VIL 512 Mb, 1 Gb Max 100 ns OE# = VIL 512 Mb, 1 Gb Max 100 ns ns Page Access Time tGLQV tOE Output Enable to Output Delay tAXQX tOH Output Hold time from Addresses, CE# or OE#, whichever occurs first tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) tBLEL Unit 100 512 Mb, 1 Gb Max 15 Read Max 25 Poll Max 35 Min 0 ns ns ns Max 15 Read Min 0 ns Poll Min 10 ns 15 ns tOEH Output Enable Hold Time (Note 1) tASO Address Setup Time Poll Min tASH Address Hold Time Poll Min 0 ns tCEPH CE# High Poll Min 20 ns tOEP OE# Low Poll Min 25 ns tOEPH OE# High Poll Min 20 ns tOEC OE# Cycle Time Poll Min 60 ns CE# = VIL, Address stable Typ 5 µs Max 8 µs Min 10 ns tASSB Automatic Sleep to Standby time (Note 1) tFLEL BYTE# Low to CE# Low tBHEL tFHEL BYTE# High to CE# Low Min 10 ns tBLQV tFLQV BYTE# Low to Output High-Z (Note 1) Max 1 µs tBHQV tFHQV BYTE# High to Output Delay Max 1 µs Note: 1. Not 100% tested. Document Number: 002-00247 Rev. *C Page 71 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 10.4 Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +85°C) Speed Option Parameter Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 110 512 Mb, 1 Gb Min 110 ns CE# = VIL OE# = VIL 512 Mb, 1 Gb Max 110 ns OE# = VIL 512 Mb, 1 Gb Max 110 ns Page Access Time 512 Mb, 1 Gb Min 25 ns tGLQV tOE Output Enable to Output Delay Read and Poll Max 35 ns tAXQX tOH Output Hold time from Addresses, CE# or OE#, whichever occurs first Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 20 ns tPACC Read Min 0 ns Poll Min 10 ns Poll Min 15 ns Poll Min 0 ns Poll Min 20 ns Poll Min 25 ns OE# High Poll Min 20 ns tOEC OE# Cycle Time Poll Min 60 ns 5 µs Automatic Sleep to Standby time (Note 1) CE# = VIL, Address stable Typ tASSB Max 8 µs tBLEL tFLEL BYTE# Low to CE# Low Min 10 ns tBHEL tFHEL BYTE# High to CE# Low Min 10 ns tBLQV tFLQV BYTE# Low to Output High-Z (Note 1) Max 1 µs tBHQV tFHQV BYTE# High to Output Delay Max 1 µs tOEH Output Enable Hold Time (Note 1) tASO Address Setup tASH Address Hold Time tCEPH CE# High tOEP OE# Low tOEPH Note: 1. Not 100% tested. Document Number: 002-00247 Rev. *C Page 72 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 10.5 Read Operation VIO = VCC = 2.7V to 3.6V (-40°C to +105°C) Speed Option Parameter Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay tPACC Test Setup Unit 110 512 Mb, 1 Gb Min 110 ns CE# = VIL OE# = VIL 512 Mb, 1 Gb Max 110 ns OE# = VIL 512 Mb, 1 Gb Max 110 ns ns Page Access Time tGLQV tOE Output Enable to Output Delay tAXQX tOH Output Hold time from Addresses, CE# or OE#, whichever occurs first tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) 512 Mb, 1 Gb Max 15 Read Max 25 Poll Max 35 Min 0 ns ns ns Max 15 Read Min 0 ns Poll Min 10 ns tOEH Output Enable Hold Time (Note 1) tASO Address Setup Time Poll Min 15 ns tASH Address Hold Time Poll Min 0 ns tCEPH CE# High Poll Min 20 ns tOEP OE# Low Poll Min 25 ns tOEPH OE# High Poll Min 20 ns tOEC OE# Cycle Time Poll Min 60 ns CE# = VIL, Address stable Typ 5 µs tASSB Automatic Sleep to Standby time (Note 1) Max 8 µs tBLEL tFLEL BYTE# Low to CE# Low Min 10 ns tBHEL tFHEL BYTE# High to CE# Low Min 10 ns tBLQV tFLQV BYTE# Low to Output High-Z (Note 1) Max 1 µs tBHQV tFHQV BYTE# High to Output Delay Max 1 µs Note: 1. Not 100% tested. Document Number: 002-00247 Rev. *C Page 73 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 10.6 Read Operation VIO = 1.65V to VCC, VCC = 2.7V to 3.6V (-40°C to +105°C) Speed Option Parameter Description JEDEC Std tAVAV tRC Read Cycle Time (Note 1) tAVQV tACC Address to Output Delay tELQV tCE Chip Enable to Output Delay Test Setup Unit 120 512 Mb, 1 Gb Min 120 ns CE# = VIL OE# = VIL 512 Mb, 1 Gb Max 120 ns OE# = VIL 512 Mb, 1 Gb Max 120 ns Page Access Time 512 Mb, 1 Gb Max 25 ns tGLQV tOE Output Enable to Output Delay Read and Poll Max 35 ns tAXQX tOH Output Hold time from Addresses, CE# or OE#, whichever occurs first Min 0 ns tEHQZ tDF Chip Enable or Output Enable to Output High-Z (Note 1) Max 15 ns tPACC Read Min 0 ns Poll Min 10 ns Address Setup Time Poll Min 15 ns tOEH Output Enable Hold Time (Note 1) tASO tASH Address Hold Time Poll Min 0 ns tCEPH CE# High Poll Min 20 ns tOEP OE# Low Poll Min 25 ns tOEPH OE# High Poll Min 20 ns tOEC OE# Cycle Time Poll Min 60 ns CE# = VIL, Address stable Typ 5 µs Max 8 µs ns tASSB Automatic Sleep to Standby time (Note 1) tBLEL tFLEL BYTE# Low to CE# Low Min 10 tBHEL tFHEL BYTE# High to CE# Low Min 10 ns tBLQV tFLQV BYTE# Low to Output High-Z (Note 1) Max 1 µs tBHQV tFHQV BYTE# High to Output Delay Max 1 µs Note: 1. Not 100% tested. Figure 10.5 Back to Back Read (tACC) Operation Timing Diagram tACC tOH Amax-A0 tDF tCE tOH CE# tDF tOE tOH OE# DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Document Number: 002-00247 Rev. *C Page 74 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.6 Back to Back Read Operation (tRC)Timing Diagram tRC tACC tOH Amax-A0 tCE CE# tOE tOH tDF OE# DQ15-DQ0 Notes: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. 2. Back to Back operations, in which CE# remains Low between accesses, requires an address change to initiate the second access. Figure 10.7 Page Read Timing Diagram tACC Amax-A4 A3-A0 tCE CE# tOE OE# tPACC DQ15-DQ0 Notes: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. 2. Toggle A3:A0. in word mode; A3:A-1 in byte mode. Document Number: 002-00247 Rev. *C Page 75 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 10.4.2 Asynchronous Write Operations Table 10.7 Write Operations Parameter VIO = 2.7V to VCC Description JEDEC Std tAVAV tWC Write Cycle Time (Note 1) Min tAS tAVWL VIO = 1.65V to VCC 60 Unit ns Address Setup Time Min 0 ns tASO Address Setup Time to OE# Low during toggle bit polling Min 15 ns tAH Address Hold Time Min 45 ns tAHT Address Hold Time From CE# or OE# High during toggle bit polling Min 0 ns tDVWH tDS Data Setup Time Min 30 ns tWHDX tDH Data Hold Time Min 0 ns tGHWL tGHWL Read Recovery Time Before Write (OE# High to WE# Low) Min 0 ns tWLAX tELWL tCS CE# Setup Time Min 0 ns tWHEH tCH CE# Hold Time Min 0 ns tWLWH tWP WE# Pulse Width Min 25 ns tWHWL tWPH WE# Pulse Width High Min 20 ns tSEA Sector Erase Time-Out Min 50 µs Note: 1. Not 100% tested. Figure 10.8 Back to Back Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCS tCH CE# OE# tWP tWPH WE# tDS tDH DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Document Number: 002-00247 Rev. *C Page 76 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.9 Back to Back (CE#VIL) Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCS CE# OE# tWP tWPH WE# tDS tDH DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Figure 10.10 Write to Read (tACC) Operation Timing Diagram tAH tAS tSR/W tACC tOH Amax-A0 tOH tCS tDF CE# tOH tOEH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Document Number: 002-00247 Rev. *C Page 77 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.11 Write to Read (tCE) Operation Timing Diagram tAH tAS tSR/W tACC tOH Amax-A0 tOH tCS tCH tCE tDF CE# tOH tOEH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Figure 10.12 Read to Write (CE# VIL) Operation Timing Diagram tAS tACC tOH tAH Amax-A0 tCE tCH CE# tGHWL tOH tOE tDF OE# tWP WE# tDS tDH DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Document Number: 002-00247 Rev. *C Page 78 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.13 Read to Write (CE# Toggle) Operation Timing Diagram tAS tACC tOH tAH Amax-A0 tOH tCE tDF tCS tCH CE# tGHWL tOH tOE tDF OE# tWP WE# tDH tDS DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Table 10.8 Erase/Program Operations Parameter VIO = 2.7V to VCC Description JEDEC Std tWHWH1 tWHWH1 tWHWH2 tWHWH2 VIO = 1.65V to VCC Unit Write Buffer Program Operation Typ (Note 3) µs Effective Write Buffer Program Operation per Word Typ (Note 3) µs Program Operation per Word or Page Typ (Note 3) µs ms Sector Erase Operation (Note 1) Typ (Note 3) tBUSY Erase/Program Valid to RY/BY# Delay Max 80 ns tSR/W Latency between Read and Write operations (Note 2) Min 10 ns tESL Erase Suspend Latency Max (Note 3) µs tPSL Program Suspend Latency Max (Note 3) µs tRB RY/BY# Recovery Time Min 0 µs tPPB PPB Lock Unlock Min 80 Max 120 µs Min 3 Max 20 Min 3 Max 100 Data Polling to Protected Sector (Program) tDP µs Data Polling to Protected Sector (Erase) tVHH VHH Rise and Fall Time (Note 1) Min 250 ns tTOR Exceeded Timing Cleared (DQ5) Min 100 ns Notes: 1. Not 100% tested. 2. Upon the rising edge of WE#, must wait tSR/W before switching to another address. 3. See Table 5.7 on page 42 and Table 5.8 on page 43 for specific values. Document Number: 002-00247 Rev. *C Page 79 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.14 Accelerated Program Operation Timing Diagram VHH ACC VIL or VIH VIL or VIH tVHH tVHH Figure 10.15 Program Operation Timing Diagram Program Command Sequence (last two cycles) tAS tWC Addresses Read Status Data (last two cycles) 555h PA PA PA tAH CE# tCH OE# tWHWH1 tWP WE# tWPH tCS tDS Data A0h tDH PD Status tBUSY DOUT tRB RY/BY# Notes: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. 2. PA = program address, PD = program data, DOUT is the true data at the program address. Document Number: 002-00247 Rev. *C Page 80 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.16 Chip/Sector Erase Operation Timing Diagram Erase Command Sequence (last two cycles) tAS tWC Addresses Read Status Data (last two cycles) 2AAh VA SA VA 555h for chip erase tAH CE# tCH OE# tWP WE# tWPH tCS tWHWH2 tDS tDH Data 55h In Progress 30h Complete 10 for Chip Erase tBUSY tRB RY/BY# Notes: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. 2. SA = sector address (for sector erase), VA = valid address for reading status data. Figure 10.17 Data# Polling Timing Diagram (During Embedded Algorithms) tRC Addresses VA VA VA tACC tCE CE# tCH tOE OE# tOEH tDF WE# tOH High Z DQ7 Complement Complement True Valid Data Status Data Status Data True Valid Data High Z DQ6–DQ0 tBUSY RY/BY# Note: 1. VA = Valid address. Illustration shows first status cycle after command sequence, last status read cycle, and array data read cycle. Document Number: 002-00247 Rev. *C Page 81 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Figure 10.18 Toggle Bit Timing Diagram (During Embedded Algorithms) tAHT tAS Addresses tAHT tASO CE# tCEPH tOEH WE# tOEPH OE# tDH DQ2 and DQ6 tOE Valid Data Valid Status Valid Status Valid Status (first read) (second read) (stops toggling) Valid Data RY/BY# Note: 1. DQ6 will toggle at any read address while the device is busy. DQ2 will toggle if the address is within the actively erasing sector. Figure 10.19 DQ2 vs. DQ6 Relationship Diagram Enter Embedded Erasing Erase Suspend Erase WE# Enter Erase Suspend Program Erase Suspend Read Erase Suspend Program Erase Resume Erase Suspend Read Erase Complete Erase DQ6 DQ2 Note: 1. The system may use OE# or CE# to toggle DQ2 and DQ6. DQ2 toggles only when read at an address within the erase-suspended sector. 10.4.3 Alternate CE# Controlled Write Operations Table 10.9 Alternate CE# Controlled Write Operations Parameter VIO = 2.7V to VCC Description VIO = 1.65V to VCC Unit JEDEC Std tAVAV tWC Write Cycle Time (Note 1) Min 60 ns tAVWL tAS Address Setup Time Min 0 ns tWLAX tDVWH tASO Address Setup Time to OE# Low during toggle bit polling Min 15 ns tAH Address Hold Time Min 45 ns tAHT Address Hold Time From CE# or OE# High during toggle bit polling Min 0 ns tDS Data Setup Time Min 30 ns tDH ns Data Hold Time Min 0 tCEPH CE# High during toggle bit polling Min 20 ns t0EPH OE# High during toggle bit polling Min 20 ns tGHEK tGHEL Read Recovery Time Before Write (OE# High to WE# Low) Min 0 ns tWLEL tWS WE# Setup Time Min 0 ns tWHDX Document Number: 002-00247 Rev. *C Page 82 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Table 10.9 Alternate CE# Controlled Write Operations (Continued) Parameter VIO = 2.7V to VCC Description VIO = 1.65V to VCC Unit JEDEC Std tELWH tWH WE# Hold Time tELEH tCP CE# Pulse Width Min 25 ns tEHEL tCPH CE# Pulse Width High Min 20 ns tSEA Sector Erase Time-Out Min 50 µs Min 0 ns Note: 1. Not 100% tested. Figure 10.20 Back to Back (CE#) Write Operation Timing Diagram tWC Amax-A0 tAS tAH tCP tCPH CE# OE# tWS tWH WE# tDS tDH DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Figure 10.21 (CE#) Write to Read Operation Timing Diagram tWC tAS tACC Amax-A0 tAH tCE tDF CE# tOEH tOE OE# tWS tWH WE# tDH tDS tOH DQ15-DQ0 Note: 1. Address are Amax:A0 in word mode; Amax:A-1 in byte mode, Data are DQ15-DQ0 in word mode; DQ7-DQ0 in byte mode. Document Number: 002-00247 Rev. *C Page 83 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11. Physical Interface 11.1 11.1.1 56-Pin TSOP Connection Diagram Figure 11.1 56-Pin Standard TSOP A23 A22 A15 A14 A13 A12 A11 A10 A9 A8 A19 A20 WE# RESET# A21 WP#/ACC RY/BY# A18 A17 A7 A6 A5 A4 A3 A2 A1 RFU RFU 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 56-Pin TSOP 56 55 54 53 52 51 50 49 48 47 46 45 44 43 42 41 40 39 38 37 36 35 34 33 32 31 30 29 A24 NC for GL512T A25 A16 BYTE# VSS DQ15/A-1 DQ7 DQ14 DQ6 DQ13 DQ5 DQ12 DQ4 VCC DQ11 DQ3 DQ10 DQ2 DQ9 DQ1 DQ8 DQ0 OE# VSS CE# A0 RFU VIO Note: 1. Pin 27, 28, and 30 are Reserved for Future Use (RFU). Document Number: 002-00247 Rev. *C Page 84 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.1.2 Physical Diagram Figure 11.2 56-Pin Thin Small Outline Package (TSOP), 14 x 20 mm PACKAGE SYMBOL NOTES: TS 56 JEDEC MO-142 (B) EC MIN. NOM. MAX. 1 CONTROLLING DIMENSIONS ARE IN MILLIMETERS (mm). (DIMENSIONING AND TOLERANCING CONFORMS TO ANSI Y14.5M-1982.) A --- --- 1.20 2 PIN 1 IDENTIFIER FOR STANDARD PIN OUT (DIE UP). A1 0.05 --- 0.15 3 A2 0.95 1.00 1.05 b1 0.17 0.20 0.23 TO BE DETERMINED AT THE SEATING PLANE -C- . THE SEATING PLANE IS DEFINED AS THE PLANE OF CONTACT THAT IS MADE WHEN THE PACKAGE LEADS ARE ALLOWED TO REST FREELY ON A FLAT HORIZONTAL SURFACE. b c1 0.17 0.10 0.22 --- 0.27 0.16 4 DIMENSIONS D1 AND E DO NOT INCLUDE MOLD PROTRUSION. ALLOWABLE MOLD PROTUSION IS 0.15 mm PER SIDE. 5 c 0.10 --- 0.21 DIMENSION b DOES NOT INCLUDE DAMBAR PROTUSION. ALLOWABLE DAMBAR PROTUSION SHALL BE 0.08 mm TOTAL IN EXCESS OF b DIMENSION AT MAX MATERIAL CONDITION. MINIMUM SPACE BETWEEN PROTRUSION AND AN ADJACENT LEAD TO BE 0.07 mm. 6 THESE DIMESIONS APPLY TO THE FLAT SECTION OF THE LEAD BETWEEN 0.10 mm AND 0.25 mm FROM THE LEAD TIP. 7 LEAD COPLANARITY SHALL BE WITHIN 0.10 mm AS MEASURED FROM THE SEATING PLANE. 8 DIMENSION "e" IS MEASURED AT THE CENTERLINE OF THE LEADS. D 19.80 20.00 20.20 D1 18.30 18.40 18.50 E 13.90 14.00 14.10 e L 0.50 BASIC 0.50 0.60 0.70 O 0˚ - 8˚ R 0.08 --- 0.20 N 56 Document Number: 002-00247 Rev. *C 3160\38.10A Page 85 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.2 11.2.1 64-Ball FBGA Connection Diagram Figure 11.3 64-ball Fortified Ball Grid Array TOP VIEW PRODUCT Pinout A B C D E F G H NC for GL512T 8 NC A22 A23 VIO VSS A24 7 A13 A12 A14 A15 A16 BYTE# DQ15 / A-1 VSS 6 A9 A8 A10 A11 DQ7 DQ14 DQ13 DQ6 5 WE# RESET# A21 A19 DQ5 DQ12 VCC DQ4 4 RY/BY# WP#/ ACC A18 A20 DQ2 DQ10 DQ11 DQ3 3 A7 A17 A6 A5 DQ0 DQ8 DQ9 DQ1 2 A3 A4 A2 A1 A0 CE# OE# VSS 1 NC RFU RFU RFU RFU Vio RFU NC A25 NC Notes: 1. Balls A1, A8, H1, and H8, No Connect (NC). 2. Balls B1, C1, D1, E1, and G1 Reserved for Future Use (RFU). Document Number: 002-00247 Rev. *C Page 86 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.2.2 Physical Diagram – LAE064 Figure 11.4 LAE064—64-ball Fortified Ball Grid Array (FBGA), 9 x 9 mm NOTES: PACKAGE LAE 064 JEDEC 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 9.00 mm x 9.00 mm PACKAGE 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010? EXCEPT AS NOTED). SYMBOL MIN NOM MAX A --- --- 1.40 A1 0.40 --- --- A2 0.60 --- --- NOTE PROFILE HEIGHT STANDOFF 9.00 BSC. BODY SIZE E 9.00 BSC. BODY SIZE D1 7.00 BSC. MATRIX FOOTPRINT E1 7.00 BSC. MATRIX FOOTPRINT MD 8 MATRIX SIZE D DIRECTION ME 8 MATRIX SIZE E DIRECTION N 64 BALL COUNT 0.50 0.60 0.70 BALL DIAMETER eD 1.00 BSC. BALL PITCH - D DIRECTION eE 1.00 BSC. BALL PITCH - E DIRECTION SD / SE 0.50 BSC. SOLDER BALL PLACEMENT ? NONE DEPOPULATED SOLDER BALLS e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. BODY THICKNESS D b 4. N IS THE TOTAL NUMBER OF SOLDER BALLS. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN ? THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 3623 \ 16-038.12 \ 1.16.07 Document Number: 002-00247 Rev. *C Page 87 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.2.3 Physical Diagram — LAA064 NOTES: PACKAGE LAA 064 JEDEC 1. DIMENSIONING AND TOLERANCING PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 13.00 mm x 11.00 mm PACKAGE 3. BALL POSITION DESIGNATION PER JESD 95-1, SPP-010 (EXCEPT AS NOTED). SYMBOL MIN NOM MAX NOTE A --- --- 1.40 A1 0.40 --- --- STANDOFF A2 0.60 --- --- BODY THICKNESS PROFILE HEIGHT D 13.00 BSC. BODY SIZE E 11.00 BSC. BODY SIZE D1 7.00 BSC. MATRIX FOOTPRINT E1 7.00 BSC. MATRIX FOOTPRINT MD 8 MATRIX SIZE D DIRECTION ME 8 MATRIX SIZE E DIRECTION N 64 BALL COUNT φb 0.50 0.60 0.70 BALL DIAMETER eD 1.00 BSC. BALL PITCH - D DIRECTION eE 1.00 BSC. BALL PITCH - E DIRECTION SD / SE 0.50 BSC. SOLDER BALL PLACEMENT NONE DEPOPULATED SOLDER BALLS 4. e REPRESENTS THE SOLDER BALL GRID PITCH. 5. SYMBOL "MD" IS THE BALL ROW MATRIX SIZE IN THE "D" DIRECTION. SYMBOL "ME" IS THE BALL COLUMN MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF SOLDER BALLS. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW PARALLEL TO THE D OR E DIMENSION, RESPECTIVELY, SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 8. NOT USED. 9. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 3354 \ 16-038.12d Document Number: 002-00247 Rev. *C Page 88 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.3 11.3.1 56-Ball FBGA Connection Diagram Figure 11.5 56-ball Fortified Ball Grid Array TOP VIEW Product Pinout A B C D E F G A24 VSS H 1 Gb Only 8 A15 A21 A22 A11 A12 A13 A14 A8 A19 A9 A10 WE# A23 A20 A16 7 RFU/A25 DQ15/A-1 DQ7 DQ14 DQ13 DQ12 DQ5 DQ4 VIO BYTE# DQ3 VCC DQ11 6 DQ6 5 4 WP#/ACC RESET# RY/BY# 3 RFU RFU A18 A17 DQ1 DQ9 DQ10 DQ2 A7 A6 A5 A4 VSS OE# DQ0 DQ8 A3 A2 A1 A0 CE# RFU 2 1 Note: 1. Balls A3, B3, and G1 Reserved for Future Use (RFU). Document Number: 002-00247 Rev. *C Page 89 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 11.3.2 Physical Diagram — VBU 056 A D D1 e 0.10 C (2X) 8 7 SE 7 6 5 E E1 4 3 e 2 1 9 H A1 CORNER INDEX MARK B TOP VIEW G F E D C B A A1 CORNER 6 SD 56 b 0.10 C 7 0.08 M C 0.15 M C A B (2X) BOTTOM VIEW 0.10 C A A1 SEATING PLANE C 0.08 C SIDE VIEW NOTES: PACKAGE VBU 056 JEDEC 1. DIMENSIONING AND TOLERANCING METHODS PER ASME Y14.5M-1994. N/A 2. ALL DIMENSIONS ARE IN MILLIMETERS. 9.00 mm x 7.00 mm NOM PACKAGE SYMBOL MIN NOM MAX A --- --- 1.00 A1 0.17 --- --- NOTE OVERALL THICKNESS 4. BALL HEIGHT 5. SYMBOL "MD" IS THE BALL MATRIX SIZE IN THE "D" DIRECTION. D 9.00 BSC. BODY SIZE E 7.00 BSC. BODY SIZE D1 5.60 BSC. BALL FOOTPRINT E1 5.60 BSC. BALL FOOTPRINT MD 8 ROW MATRIX SIZE D DIRECTION ME 8 ROW MATRIX SIZE E DIRECTION N 56 TOTAL BALL COUNT b 0.35 0.40 0.45 0.80 BSC. BALL PITCH SD / SE 0.40 BSC. SOLDER BALL PLACEMENT e REPRESENTS THE SOLDER BALL GRID PITCH. SYMBOL "ME" IS THE BALL MATRIX SIZE IN THE "E" DIRECTION. N IS THE TOTAL NUMBER OF POPULATED SOLDER BALL POSITIONS FOR MATRIX SIZE MD X ME. 6 DIMENSION "b" IS MEASURED AT THE MAXIMUM BALL DIAMETER IN A PLANE PARALLEL TO DATUM C. 7 SD AND SE ARE MEASURED WITH RESPECT TO DATUMS A AND B AND DEFINE THE POSITION OF THE CENTER SOLDER BALL IN THE OUTER ROW. BALL DIAMETER e A1,A8,D4,D5,E4,E5,H1,H8 3. BALL POSITION DESIGNATION PER JEP95, SECTION 4.3, SPP-010. WHEN THERE IS AN ODD NUMBER OF SOLDER BALLS IN THE OUTER ROW SD OR SE = 0.000. WHEN THERE IS AN EVEN NUMBER OF SOLDER BALLS IN THE OUTER ROW, SD OR SE = e/2 DEPOPULATED SOLDER BALLS 8. "+" INDICATES THE THEORETICAL CENTER OF DEPOPULATED BALLS. 9 A1 CORNER TO BE IDENTIFIED BY CHAMFER, LASER OR INK MARK, METALLIZED MARK INDENTATION OR OTHER MEANS. 10. OUTLINE AND DIMENSIONS PER CUSTOMER REQUIREMENT. g1055\ 16-038.25 \ 01.26.12 Document Number: 002-00247 Rev. *C Page 90 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 12. Special Handling Instructions for FBGA Package Special handling is required for flash memory products in FBGA packages. Flash memory devices in FBGA packages may be damaged if exposed to ultrasonic cleaning methods. The package and/or data integrity may be compromised if the package body is exposed to temperatures above 150°C for prolonged periods of time. 13. Ordering Information Valid Combinations The Recommended Combinations table lists configurations planned to be available in volume. The table below will be updated as new combinations are released. Consult your local sales representative to confirm availability of specific combinations and to check on newly released combinations. Table 13.1 S29GL-T Valid Combinations S29GL-T Valid Combinations Base OPN Speed (ns) Package and Temperature (Note 1) Model Number Packing Type (Note 2) Ordering Part Number (yy = Model Number, x = Packing Type) S29GL01GT10DHIyyx 100 DHI, FHI, GHI, TFI S29GL01GT10FHIyyx 01, 02 S29GL01GT10GHIyyx S29GL01GT10TFIyyx S29GL01GT11DHIyyx S29GL01GT 110 DHI, FHI, TFI V1, V2 0, 3 S29GL01GT11FHIyyx S29GL01GT11TFIyyx 110 120 DHV, TFV DHV, TFV S29GL01GT11DHVyyx 01, 02 S29GL01GT11TFVyyx S29GL01GT12DHVyyx V1, V2 S29GL01GT12TFVyyx S29GL512T10DHIyyx 100 DHI, FHI, GHI, TFI S29GL512T10FHIyyx 01, 02 S29GL512T10GHIyyx S29GL512T10TFIyyx S29GL512T11DHIyyx S29GL512T 110 DHI, FHI, TFI V1, V2 0, 3 S29GL512T11FHIyyx S29GL512T11TFIyyx 110 120 DHV, TFV DHV, TFV 01, 02 V1, V2 S29GL512T11DHVyyx S29GL512T11TFVyyx S29GL512T12DHVyyx S29GL512T12TFVyyx Notes: 1. Additional speed, package, and temperature options maybe offered in the future. Check with your local sales representative for availability. 2. Package Type 0 is standard option. Document Number: 002-00247 Rev. *C Page 91 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) The ordering part number for the General Market device is formed by a valid combination of the following: S29GL01GT 10 D H I 01 0 Packing Type 0 = Tray 3 = 13” Tape and Reel Model Number (VIO and VCC Range) 01 = VIO = VCC = 2.7 to 3.6V, highest address sector protected 02 = VIO = VCC = 2.7 to 3.6V, lowest address sector protected V1 = VIO = 1.65 to VCC, VCC = 2.7 to 3.6V, highest address sector protected V2 = VIO = 1.65 to VCC, VCC = 2.7 to 3.6V, lowest address sector protected Temperature Range I = Industrial (-40°C to +85°C) V = Industrial Plus (-40°C to +105°C) Package Materials Set F = Lead Free (Pb-Free) H = Low Halogen, Pb-Free Package Type D = Fortified Ball-Grid Array Package (LAE064) 9 mm x 9 mm F = Fortified Ball-Grid Array Package (LAA064) 13 mm x 11 mm G = Fortified Ball-Grid Array Package (VBU056) 9 mm x 7 mm T = Thin Small Outline Package (TSOP) Standard Pinout Speed Option 10 = 100 ns random access time 11 = 110 ns random access time 12 = 120 ns random access time Device Number/Description S29GL01GT, S29GL512T 3.0 Volt Core, with VIO Option, 1024, 512 Megabit Page-Mode Flash Memory, Manufactured on 45 nm MirrorBit Eclipse Process Technology Document Number: 002-00247 Rev. *C Page 92 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 14. Other Resources Visit www.spansion.com to obtain the following related documents: 14.1 Links to Software Downloads and related information on flash device support is available at http://www.spansion.com/Support/Pages/DriversSoftware.aspx Spansion low-level drivers Enhanced flash drivers Flash file system Downloads and related information on simulation modeling and CAD modeling support is available at http://www.spansion.com/Support/Pages/SimulationModels.aspx VHDL and Verilog IBIS ORCAD 14.2 Links to Application Notes The following is a sample list of application notes related to this product. All application notes are available at http://www.spansion.com/Support/TechnicalDocuments/Pages/ApplicationNotes.aspx Common Flash Interface Version 1.5 Vendor Specific Extensions Common Flash Memory Interface Specification Connecting Unused Data Lines of MirrorBit Flash Developing System-Level Validation Routines Flash Memory: An Overview Interfacing i.MX3x to S29GL MirrorBit NOR Flash Interfacing the S29GL-S to Freescale Coldfire Processor Interfacing Spansion GL MirrorBit Family to Freescale i.MX31 Processors MirrorBit Flash Memory Write Buffer Programming and Page Buffer Read Optimizing Program/Erase Times Practical Guide to Endurance and Data Retention Programmer’s Guide for the Spansion 65 nm GL-S Eclipse Family Architecture Reset Voltage and Timing Requirements for MirrorBit Flash Signal Integrity and Reliable Flash Operations Understanding AC Characteristics Understanding Load Capacitance and Access Time Understanding Page Mode Flash Memory Devices Using CFI to Read and Debug Systems Versatile I/O: DQ and Enhanced Wear Leveling 14.3 Specification Bulletins Contact your local sales office for details. Document Number: 002-00247 Rev. *C Page 93 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) 15. Revision History Spansion Publication Number: S29GL_512T_01GT Section Description Revision 01 (January 19, 2015) Initial release Revision 02 (May 8, 2015) Performance Summary Typical Program and Erase Rates table: updated Sector Erase for -40°C to +85°C Embedded Algorithm Performance Table Embedded Algorithm Characteristics (-40°C to +85°C) table: updated Sector Erase Time, Chip Erase, and Max Single Word Programming Time Device ID and Common Flash Interface (ID-CFI) ASO Map CFI System Interface String table: updated ‘(SA) + 0023h’ Data Revision 03 (July 29, 2015) Performance Summary Typical Program and Erase Rates table: updated Sector Erase for -40°C to +105°C Embedded Algorithm Performance Table Embedded Algorithm Characteristics (-40°C to +105°C) table: updated Sector Erase Time, Chip Erase, Single Word Programming Time, Buffer Programming Time, Effective Write Buffer Program Operation per Word, and Sector Programming Time 128 kB Device ID and Common Flash Interface (ID-CFI) ASO Map CFI System Interface String table: updated Data for Word Address (SA) + 0023h and (SA) + 0024h Document History Page Document Title: S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte), GL-T MirrorBit® Eclipse™ Flash Non-Volatile Memory Family Document Number: 002-00247 Rev. ECN No. Orig. of Change Submission Date ** RYSU 01/19/2015 *A RYSU 05/08/2015 Description of Change Initial release Performance Summary: Typical Program and Erase Rates table: updated Sector Erase for -40°C to +85°C Embedded Algorithm Performance Table: Embedded Algorithm Characteristics (-40°C to +85°C) table: updated Sector Erase Time, Chip Erase, and Max Single Word Programming Time Device ID and Common Flash Interface (ID-CFI) ASO Map: CFI System Interface String table: updated ‘(SA) + 0023h’ Data Performance Summary: Typical Program and Erase Rates table: updated Sector Erase for -40°C to +105°C *B RYSU 07/29/2015 Embedded Algorithm Performance Table: Embedded Algorithm Characteristics (-40°C to +105°C) table: updated Sector Erase Time, Chip Erase, Single Word Programming Time, Buffer Programming Time, Effective Write Buffer Program Operation per Word, and Sector Programming Time 128 kB Device ID and Common Flash Interface (ID-CFI) ASO Map: CFI System Interface String table: updated Data for Word Address (SA) + 0023h and (SA) + 0024h *C 4892315 BWHA 08/24/2015 Document Number: 002-00247 Rev. *C Updated to Cypress template Page 94 of 95 S29GL01GT 1 Gbit (128 Mbyte), S29GL512T 512 Mbit (64 Mbyte) Sales, Solutions, and Legal Information Worldwide Sales and Design Support Cypress maintains a worldwide network of offices, solution centers, manufacturer’s representatives, and distributors. To find the office closest to you, visit us at Cypress Locations. Products PSoC® Solutions Automotive..................................cypress.com/go/automotive psoc.cypress.com/solutions Clocks & Buffers ................................ cypress.com/go/clocks PSoC 1 | PSoC 3 | PSoC 4 | PSoC 5LP Interface......................................... cypress.com/go/interface Cypress Developer Community Lighting & Power Control............ cypress.com/go/powerpsoc Community | Forums | Blogs | Video | Training Memory........................................... cypress.com/go/memory PSoC ....................................................cypress.com/go/psoc Touch Sensing .................................... cypress.com/go/touch Technical Support cypress.com/go/support USB Controllers....................................cypress.com/go/USB Wireless/RF .................................... cypress.com/go/wireless © Cypress Semiconductor Corporation, 2015. The information contained herein is subject to change without notice. Cypress Semiconductor Corporation assumes no responsibility for the use of any circuitry other than circuitry embodied in a Cypress product. Nor does it convey or imply any license under patent or other rights. Cypress products are not warranted nor intended to be used for medical, life support, life saving, critical control or safety applications, unless pursuant to an express written agreement with Cypress. Furthermore, Cypress does not authorize its products for use as critical components in life-support systems where a malfunction or failure may reasonably be expected to result in significant injury to the user. The inclusion of Cypress products in life-support systems application implies that the manufacturer assumes all risk of such use and in doing so indemnifies Cypress against all charges. Any Source Code (software and/or firmware) is owned by Cypress Semiconductor Corporation (Cypress) and is protected by and subject to worldwide patent protection (United States and foreign), United States copyright laws and international treaty provisions. Cypress hereby grants to licensee a personal, non-exclusive, non-transferable license to copy, use, modify, create derivative works of, and compile the Cypress Source Code and derivative works for the sole purpose of creating custom software and or firmware in support of licensee product to be used only in conjunction with a Cypress integrated circuit as specified in the applicable agreement. Any reproduction, modification, translation, compilation, or representation of this Source Code except as specified above is prohibited without the express written permission of Cypress. Disclaimer: CYPRESS MAKES NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Cypress reserves the right to make changes without further notice to the materials described herein. Cypress does not assume any liability arising out of the application or use of any product or circuit described herein. Cypress does not authorize its products for use as critical components in life-support systems where a malfunction or failure may reasonably be expected to result in significant injury to the user. The inclusion of Cypress’ product in a life-support systems application implies that the manufacturer assumes all risk of such use and in doing so indemnifies Cypress against all charges. Use may be limited by and subject to the applicable Cypress software license agreement. Document Number: 002-00247 Rev. *C ® ® ® ® Revised Wednesday, August 26, 2015 Page 95 of 95 Cypress , Spansion , MirrorBit , MirrorBit Eclipse™, ORNAND™ and combinations thereof, are trademarks and registered trademarks of Cypress Semiconductor Corp. All products and company names mentioned in this document may be the trademarks of their respective holders.