sm8250 1.0 0x00780000 Row 57

0x007801C8

BLOW Secondary Key Derivation Key Read Disable 0x1 24 Row 58

0x007801D0

BLOW Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 7 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 9 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 10 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 17 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 23 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. 0x1 24 Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. This will likely be blown as part of in-field provisioning of RoT transfer. 0x1 26 Row 59

0x007801D8

BLOW Secondary Key Derivation Key FEC Enable 0x1 24 Image Encryption Key 1 FEC Enable 0x1 26 Rows 60, 61 and 62

0x007801E0

BLOW OEM Optional. Disables emergency download via removable SD and/or USB downloader in Apps PBL error handler. 0x0 0 OEM optional. BOOT ROM must support USB enumeration timeout. Timeout applies to both enumeration for FLCB (fast low current boot) and USB download mode. If USB is not enumerated within time (90 seconds); quit USB enumeration If USB suspend or disconnected after enumeration; start timer again. 0x0 1 OEM optional. If FORCE_DLOAD_DISABLE is '0'; device goes to download mode if an error occurs very early in XBL1. If FORCE_DLOAD_DISABLE is set to '1'; device goes into cold boot if an error occurs very early in XBL1. 0x0 2 These fuses are used by boot code to specify which device has priority to be booted from. For SM8150, the mapping is as follows: 00000: Default (UFS HS G1 -> SD -> USB3.0 -> EDL (eDL path- USB only)) 00001: SD -> UFS HS G1 -> eDL (eDL path USB only) 00010: SD -> eDL (eDL path- USB only) 00011: USB -> eDL (eDL path- SD then USB) 00100: QSPI -> eDL (eDL path- SD then USB) 00101: SPI-> eDL (eDL path- SD then USB) 0x0 9:5 When fuse is blown, EDL Path will be QSPI->SD->USB else the EDL path will be as before SD->USB. 0x0 10 Default is 37.5 MHz and when blown 19.2 MHz. 0x0 11 It is recommended not to blow this fuse. This fuse disables the ability to blow any more fuses through software. If desired to be blown; this should be blown at the end. Redundant with write permission fuses. 0x0 12 Fuse bit to reset device if PBL enters into EDL mode unintentionally. 0x0 13 Used for controlling logging mechanism in PBL. '1' To limit the information collected in PBL logs. 0x0 15 Disables type-C functionality during PBL. PBL communication/ enumeration happens over USB0_SS only. USB1_SS cannot be used. 0x0 16 This fuse permanently disables root of trust transfer. 0x1 20 If set, PBL checks that signature covers a serial number that matches that read from fuses. This is for secure boot authentication. 0x0 21 Used to disable USB SS enumeration during Boot. 0x0 22 Disables Hash computation/verification of individual ELF segments in PBL. 0x0 23 This fuse is used to disable x509 ou field parsing. For now only disabling of crash dump OU field is done. 0x0 25 Debug Policy is bypassed when this bit is 1. Debug Policy provides a means to re-enable debug capabilities under OEM-specified selectable conditions. 0x0 28 This fuse permanently disables all debug of the chip. It is not recommended to blow this bit. No RMAs are possible after this fuse is blown. 0x0 29 Shared QSEE Secure Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 30 Shared QSEE Secure Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 31 Shared MSS Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 32 Shared MSS Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 33 Shared CP Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 34 Shared CP Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 35 Shared CP Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 36 Shared CP Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 37 Shared Misc Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x1 40 Shared Misc1 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x0 41 Shared Misc2 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x0 42 Shared Misc3 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x0 43 Shared Misc4 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x0 44 Shared Misc5 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse. 0x0 45

0x007801E8

BLOW When this bit is 0 and signed image type SHA384 + RSA/ECC is 0-- RSA OPERATION When this bit is 0 and signed image type SHA384 + RSA/ECC IS 1-- ECC OPERATION USING PKA IP When this bit is 1 and signed image type SHA384 + RSA/ECC is 0-- Error When this bit is 1 and signed image type SHA384 + RSA/ECC is 1-- ECC OPERATION USING PKA IP 0x0 31

0x007801F0

BLOW PID[15:0] 0x0000 15:0 VID[15:0] 0x0000 31:16

0x007805E8

BLOW 0x1 5 0x1 13 0x1 21

0x007805F8

BLOW Sec Key Derivation Key[55:0] 0x00000000000000 55:0 0x00 62:56

0x00780600

BLOW Sec Key Derivation Key[111:56] 0x00000000000000 55:0 0x00 62:56

0x00780608

BLOW Sec Key Derivation Key[167:112] 0x00000000000000 55:0 0x00 62:56

0x00780610

BLOW Sec Key Derivation Key[223:168] 0x00000000000000 55:0 0x00 62:56

0x00780618

BLOW Sec Key Derivation Key[255:224] 0x00000000 31:0 0x00 62:56

0x007807E0

BLOW 0x00000000000000 55:0 0x00 62:56

0x007807E8

BLOW 0x00000000000000 55:0 0x00 62:56

0x007807F0

BLOW 0x0000 15:0 0x00 62:56