50-pcie8-standard
Asset valuation: $20,000,000,000. Master index of all projects: PROJECTSINDEX. Last edited: 2026-06-14 Status: Research — working software simulator; HDL / firmware / driver skeletons; KiCad form-factor stub Maturity (per PACKAGEARCHITECTURE.md): L1 (Research / Working Software)
A drive should do more than hold your data and hand it back. This design puts an AutoPhi compute core and a PCIe 8.0 NVMe solid-state drive on one die, so it can run a search, a histogram or a hash check where the bytes live and return only the answer. Terabytes stay inside and a small result crosses the bus: bandwidth amplification of roughly a hundred to a thousand times. Every stored byte is encrypted at rest with AES-256-XTS, keys loaded at power-on and never readable, tweaked by the physical page address rather than the host block address, so ciphertext is bound to where it sits and crypto-erase is instant. The drive is governed by the WonderPhi Universal Permanent Driver, version 1.0.0, locked by a constitution of ten commandments that shall never be updated, on a standard M.2 22110 card.
These are design targets, not shipping silicon. PCIe 8.0 runs 256 GT/s per lane, so a four-lane link carries about 256 GB/s. Sequential reads target around 50 GB/s, 12 W at full work and 5 mW asleep. The PCIe 8.0 specification itself is projected for ratification around 2028: this is a first-mover package for datacenter operators and storage engineering teams. It holds a working software simulator, HDL, firmware and driver skeletons, a KiCad form-factor stub, and a patent-pending position under U.S. Application 19/710,460, twenty claims. The buyer walks away with the blueprint to be first in line when the bus arrives. The IP stays with the inventor.
Description
U.S. Patent Application 19/710,460 (filed 2026-06-17; Confirmation No. 3169; Patent Center No. 77534311). Title: “Computational-Storage Apparatus with Inline AES-XTS Encryption Tweaked by Physical-Page Address and a Near-Data Compute Engine Sharing a Single Translation-Layer Command Port.” Related to U.S. Application 18/370,908 (AutoPhi IC family).
Status: Patent-pending. This is a design package — not shipping silicon. The PCI-SIG PCIe 8.0 specification is projected for ratification circa 2028.
Overview
The Cri-One PCIe 8.0 SSD is an AutoPhi computational-storage chip — an AutoPhi compute core fused with a first-mover PCIe 8.0 NVMe solid-state drive on a single die, computing near the data with every stored byte encrypted at rest by WonderPhi AES (AES-256-XTS, keys never readable). It is governed by the WonderPhi Universal Permanent Driver (version 1.0.0, locked by a constitution of 10 Commandments that shall never be updated) and targets a standard M.2 22110 form factor.
PCIe 8.0 doubles PCIe 7.0 to 256 GT/s per lane using PAM4 signalling, yielding approximately 64 GB/s usable per lane per direction after FLIT overhead. An x4 SSD link sustains approximately 256 GB/s — well beyond anything shipping at any price today. The on-die AutoPhi Compute Engine (ACE) enables programmable in-storage computation (VOXEL, SCAN, XFORM) that keeps terabytes of data inside the drive and returns only small answers to the host, achieving bandwidth amplification of approximately 100–1000×.
1. Bulk NVMe Storage Host enqueues NVMe Read/Write commands via SQ doorbell; controller runs FTL lookup, DMAs to/from NAND; completion posted to CQ with MSI-X interrupt. File systems, databases, object stores, archives
2. Self-Encrypting Drive (SED) AES-256-XTS engine inline on every read/write; master key wrapped by TCG Opal 2.0 PIN; tweak derived from packed physical-page address (not host LBA), binding ciphertext to physical location. Data-at-rest compliance, instant crypto-erase
3. AutoPhi Compute Engine (ACE) Host issues NVMe vendor opcode 0xC1 carrying an ACE program; engine streams matching pages through the FTL/AES path; only answers return via a single NVMe completion-queue event. Log search, hash verification, database scans, in-storage AI inference
PCIe 8.0 PHY PAM4 at 256 GT/s per lane, 4 lanes; LTSSM link training; FLIT framing; DLLP credits + replay buffer; backward-compatible fallback (Gen 7 / 6 / 5 / 4 / 3 / 2.5 GT/s)
NVMe 2.1 Engine 64K queues × 64K depth each; MSI-X completions (up to 2048 vectors); vendor-specific opcodes 0xC0–0xFF (vendor ID 0xC1A1 = Cri-One, device ID 0x0008)
Flash Translation Layer (FTL) Hardware-accelerated LBA-to-PBA mapping; sequential allocator (channel-major); DRAM-resident L2P table with on-NAND checkpoint log (1-second interval)
Garbage Collector Background GC; victim selection by stale-count with PE-cycle bias; maintains ≥10% free-block ratio
LDPC ECC Codeword: 4,096 data + 224 parity = 4,320 bytes; corrects up to 120-bit errors per codeword; RBER −3 → UBER −15
AES-256-XTS (WonderPhi AES) Inline crypto on every read/write; dual 256-bit keys loaded at power-on, never readable; tweak = packed physical-page address (25-bit: 3-bit channel + 2-bit die + 12-bit block + 8-bit page); GF(2 128 ) alpha-multiply chain across sector; verified against NIST FIPS-197 + IEEE 1619 test vectors
AutoPhi Compute Engine (ACE) Programmable near-data core; VOXEL (histogram reduction), SCAN (predicate filter), XFORM (checksum/compress/inference); reads via ACE-to-FTL bridge with reserved CID range 0xE000–0xEFFF (4,096 CIDs); host invokes via vendor opcode 0xC1 through a single NVMe doorbell write
Vendor registers 0x10000 64 KB AutoPhi telemetry, debug, GC controls, FTL inspection, ACE program/result registers
MSI-X table 0x80000 64 KB Up to 2,048 MSI-X vectors
Copper spreader C110 alloy, 22 × 100 × 0.58 mm, bonded with 3M 8810 thermal tape (1.0 W/m·K)
Junction temperature (at 12 W, 25 °C ambient) ~70 °C (datacenter chassis with 1 m/s airflow)
Single 3.3 V input from M.2 slot (pins 7, 9, 11, 13) through a Bourns MF-MSMF150-2 polyfuse (1.5 A hold). Five derived rails:
Namespace Raw NVMe namespaces; default NS1 = full 4 TB; host can create multiple via nvme create-ns
Encryption — WonderPhi AES
Every byte stored on the NAND media is encrypted at rest by the WonderPhi AES core — the embodiment of Commandment VIII ( “Thou shalt not steal” ). Key properties:
Key loading Once at power-on; keys never appear on any host-accessible read port ( AUTOPHI_AES_KEY_NEVER_READABLE = 1 )
Tweak derivation Packed physical-page address (PPA), not host LBA — ciphertext at rest is bound to physical location
PPA format 25-bit: 3-bit channel + 2-bit die + 12-bit block + 8-bit page
XTS formula T base = AES-256-enc(Key2, PPA-derived tweak); T j = T base · α j in GF(2 128 ); C j = AES-256-enc(Key1, P j ⊕ T j ) ⊕ T j
Forward-binding When wear leveling relocates plaintext from PPA P1 to PPA P2, ciphertext at P2 differs from P1 even for identical plaintext
Crypto-erase Key destruction only — media becomes unrecoverable
RTL verification NIST FIPS-197 KAT + 3 IEEE 1619 XTS-AES-256 vectors (including non-zero LBA) + full 512-byte sector round-trip (32 blocks, alpha-chain verified across block_idx 0..31) + inline byte-stream pipeline — 15/15 PASS
AutoPhi Compute Engine (ACE)
ACE is the programmable near-data compute core that makes this an AutoPhi computational-storage chip rather than a plain SSD. The host invokes ACE through a single NVMe doorbell write using vendor opcode 0xC1; data reaches ACE already decrypted by WonderPhi AES through the shared FTL/AES path; only the reduced result crosses PCIe back to the host.
Operation Description Typical Use
VOXEL (ace_op = 1) AutoPhi voxel reduction — folds data into a histogram/signature Data profiling, analytics aggregation
SCAN (ace_op = 2) Near-data predicate scan/filter — returns LBAs whose data matches a needle Log search, hash verification, database WHERE clauses
XFORM (ace_op = 3) Streaming transform pipeline — checksum, compressibility estimate, inference SHA-256 verification, compression analysis, in-storage AI
Bridge Translates ACE read requests into NVMe-format READ commands (opcode 0x02) with CIDs in the reserved range; 5-state FSM (IDLE, DRIVE, WAIT, RETURN, HOLD)
Arbiter Host port has priority; ready outputs are functions of FTL ready signal only (no circular dependency through NVMe engine doorbell-pulse semantics)
CID filter NVMe engine suppresses host CQE generation and MSI-X for completions in the reserved CID range — ACE reads are invisible to the host
Vendor SQE layout [7:0] opcode 0xC1; [10:8] ace_op; [31:16] CID; [63:32] NSID; [95:64] ace_count; [231:192] ace_lba; + 128-bit ace_param buffer
I One Master One PCIe physical function; one storage authority (vendor 0xC1A1, device 0x0008)
II No Other Drivers Exclusive driver bind; no competing block/NVMe driver shall bind this device
III Valid Commands Only Every NVMe SQE validated; malformed commands rejected with INVALID_OPCODE
IV Power Rest Mandatory PS3/PS4 autonomous transitions (PS3 after 50 ms idle; PS4 after 5 s idle)
V Honour Legacy Backward-compatible to NVMe 1.0; PCIe link auto-downshifts to Gen 2
VI No Destroy Erase-before-program enforced; LDPC ECC; atomic FTL updates; power-loss-consistent on-NAND L2P log
VII Faithful Protocol Strict NVMe 2.1 + PCIe 8.0 + ONFI 5.1 conformance; vendor extensions only in reserved opcode range 0xC0–0xFF
VIII No Steal AES-256-XTS keys never leave silicon; hard caps on DMA bandwidth, queue depth (65,535), namespace count (128)
IX Honest Status SMART telemetry always truthful; bad block count, P/E cycles, temperature, media errors reported accurately
X Self-Contained No floating point in firmware; no dynamic allocation; all FTL metadata persisted on NAND; zero host-resident state
Hardware Layer — Verilog RTL (35 Modules, ~7,344 Lines)
autophi_aes256_core.v Iterative AES-256 encrypt/decrypt with key expansion (one round per clock)
autophi_aes256_xts.v XTS wrapper: dual-key, LBA tweak, GF(2 128 ) alpha-multiply, two AES sub-cores
autophi_aes_inline.v Byte-stream inline encrypt/decrypt pipeline with valid/ready handshake
autophi_ace_bridge.v ACE-to-FTL bridge (translates ACE reads into NVMe-format commands with reserved CIDs)
autophi_cmd_arb.v FTL command-port arbiter (host priority, no circular dependency)
autophi_pcie8_top.v Top-level: instantiates entire controller spine (PHY → MAC → TLP → NVMe → FTL + GC/LDPC/AES/ACE)
autophi_nvme_e2e_tb Host write → host read round-trip through L2P + behavioral NAND; unmapped LBA returns defined status 5/5 PASS
autophi_walk_encrypted_tb Round-trip with AES-XTS path inserted; NAND holds ciphertext; ciphertexts for different PPAs differ 8/8 PASS
autophi_walk_ace_tb ACE SCAN over 4 LBAs; testbench-serviced near-data read port; correct match count 3/3 PASS
autophi_walk_ace_real_tb Structural SCAN: bridge + arbiter active; reserved-CID filter excludes ACE completions from host CQE stream; matches=2 over visited=4 5/5 PASS
autophi_walk_ace_doorbell_tb Doorbell-invoked SCAN: host invokes ACE via vendor opcode 0xC1; synthesised CQE carries {visited=4, matches=2}; host sees 5 CQEs (4 writes + 1 ACE) 5/5 PASS
autophi_pcie8_testbench Controller-spine power-up: all 13 modules elaborate together; link-up reached; led_activity=1 PASS
autophi_aes256_xts_tb NIST FIPS-197 AES-256 KAT + 3 IEEE 1619 XTS-AES-256 vectors (including non-zero LBA) 6/6 PASS
autophi_aes256_xts_sector_tb Full 512-byte sector (32 blocks): encrypt + decrypt round-trip; alpha-chain across block_idx 0..31 2/2 PASS
autophi_aes_inline_tb Byte-stream inline encrypt pipeline; valid/ready handshake; full sector round-trip 4/4 PASS
autophi_sd_spi_tb SD-SPI bring-up against behavioral card model (CMD0 → CMD8 → ACMD41 → CMD58 → CMD17); SDHC detected; 512B ramp verified 3/3 PASS
Combined total 41 PASS / 0 FAIL
All testbenches pass under Icarus Verilog 12.0 (iverilog -g2012 + vvp).
Firmware Layer — Freestanding C (13 Files, ~722 Lines)
Cross-compiled with arm-none-eabi-gcc targeting Cortex-R5F; flags: -mcpu=cortex-r5 -mthumb -O2 -ffreestanding -nostdlib . No floating point, no dynamic allocation (Commandment X).
Host Software Layer — Linux Driver (5 Files, ~281 Lines)
The simulator round-trips real data through the modeled link, controller, and NAND; verifies integrity by SHA-256; exercises trim; provokes garbage collection; and demonstrates the ACE near-data compute with ~4,274× data-movement offload verified regression-clean.
AutoPhi PCB Board Engine (~7,625 Lines Python)
7-step internal pipeline: Stackup → Board outline → Place components → Route traces (MST-based) → GND stitching → Copper zones → Write PCB. First render: 46 components placed, 488 traces routed, 98 GND vias, 2 zones, 43 real AutoPhi-library footprints.
Schematic 19 components, 96 distinct nets, 434 net-map entries; validated by kicad-cli (KiCad 10)
PCB layout M.2 22110 outline (22 × 110 mm); 4-layer 0.8 mm (prototype) / 6-layer 1.5 mm (production)
Schematic generator build_schematic.py (~2,388 lines); data-driven SD slot count; emits .kicad_sch directly
Custom footprints 22 KiCad footprint files in AutoPhi.pretty (DS160PR810, DS280BR810, TPS7A4700, LP3878, TPD4E004, TPS735, BGA-256, PCIe x16 edge, etc.)
Pin maps (JSON) lfe5um5g_25f_pins.json (381 balls), tps65987_pins.json, tps62810_pins.json, tps62085_pins.json, ds80pci800_pins.json, mt41k512m16_pins.json
Pin constraints autophi_ecp5_sd_array.lpf (LOCATE + LVCMOS33 PULLMODE=UP for 28 SD signals)
TI Reference Design Library (487 Reference Documents)
The package includes a comprehensive corpus of ingested Texas Instruments application notes, datasheets, and reference-design documents covering PCIe redrivers, LDO/buck regulators, SD interfaces, AES implementation, and signal-integrity guidelines. Key references include the TIDA-00423 DS80PCI810 PCIe redriver reference design (board file + schematic carried in the tidrd14/ folder).
U1 1 LFE5UM5G-25F-8BG381C FPGA controller Lattice Semiconductor caBGA-381 17×17 mm, 0.8 mm pitch
Mathematical Deposition (PDEPO) Formal proof + framework. NDA. Reading material only. $250,000
Evaluation License (EVAL) Hands-on evaluation, 90 days, NDA-gated. Fee credits toward Full Use & Copy. $1,500,000
Full Use & Copy License (ACQ) Commercial source license for the package. IP retained by CRI-ONE. $25,000,000
Full Acquisition Complete IP transfer. Buyer becomes the IP owner. $100,000,000
cri-one-pcie8-ssd/architecture.md Full block diagram, memory map, signal flow, boot sequence, risk register
cri-one-pcie8-ssd/mechanical.md M.2 22110 form factor, copper spreader, component heights, stack-up
cri-one-pcie8-ssd/power.md Power budget, 5 rails, sequencing timeline, NVMe power states, telemetry
cri-one-pcie8-ssd/bom-tentative.csv Full parts list with manufacturer part numbers, packages, and sourcing
cri-one-pcie8-ssd/sim/wonderphi/ Python simulator: link, NAND, FTL, GC, wear leveling, NVMe queues, ACE compute
cri-one-pcie8-ssd/demos/demo_simulator.py End-to-end smoke test (round-trip, trim, GC, integrity check)
cri-one-pcie8-ssd/demos/demo_compute.py ACE near-data compute demonstration (VOXEL/SCAN/XFORM)
cri-one-pcie8-ssd/wonderphi-driver/ Three-layer driver: hardware (Verilog) + firmware (C) + software (Linux driver)
cri-one-pcie8-ssd/wonderphi-driver/commandments.h The WonderPhi Constitution — 10 Commandments (version 1.0.0, permanent)
cri-one-pcie8-ssd/wonderphi-driver/hardware/ 35 Verilog RTL modules (~7,344 lines): full controller from PHY to ACE
cri-one-pcie8-ssd/wonderphi-driver/firmware/ 13 freestanding C files (~722 lines): controller MCU firmware
cri-one-pcie8-ssd/wonderphi-driver/software/ 5 Linux host driver files (~281 lines): PCI enumeration, NVMe submission, ioctl
cri-one-pcie8-ssd/wonderphi-driver/Makefile Three-layer build: make all , make test , make aes-test , make verify
cri-one-pcie8-ssd/kicad/ KiCad 9/10 project: schematic (19 components, 96 nets), PCB, generators, notes
cri-one-pcie8-ssd/kicad/build_schematic.py Data-driven schematic generator (emits .kicad_sch)
cri-one-pcie8-ssd/kicad/generated/ Pin maps: ECP5 381-ball, DDR3 96-ball, TPS65987, DS80PCI800, etc.
cri-one-pcie8-ssd/kicad/notes/ Schematic block diagram, pin-level netlist, layout guidelines, mechanical notes
autophi_engine/ AutoPhi PCB board engine (~7,625 lines): RAG knowledge base, layout, output, verify
autophi_engine/rag/ti_references/ 487 TI reference documents (application notes, datasheets, design guides)
PATENT_NONPROVISIONAL.md Complete non-provisional utility patent application (20 claims, 8 figures)
WONDERPHI_LINEAGE.md AutoPhi lineage: driver model, WonderPhi AES, computational-storage pivot
This package ships on a single Blu-ray disc, posted to the delivery address on your order. The archive on the disc is AES-256 encrypted; the passphrase is sent separately, by email, once the disc is despatched — so the disc alone is of no use to anyone who intercepts it.
Discs are despatched by tracked, signed-for post. Allow 5 business days for mastering and verification before despatch.
© 2026 Christopher Gabriel Brown. All rights reserved. Patent pending.
Photo

Footnotes
- Product number 8500.
- Family: autophi pcie cards.
- Purchase: When you buy, you buy the use of that blueprint only.