STATEMENT OF WORK

Title: Questasim Simulation Tool License Questasim One Sim Ap SW part number248496

Lab: GCPN 6.05 Memory Characterization Platform

I. BACKGROUND INFORMATION

GCPN 6.05 requires the purchase of Questsim One Sim Ap SW part number 248496 and Verification Software license for developing a Field Programmable Gate Array (FPGA) design in this project. This project requires the development of an FPGA-based memory device characterization platform, which involves programming and reading the memory devices, along with offloading several computationally intensive tasks to the FPGAs. To perform this process in the FPGA and verify the functionality of the design before implementation, it is required to simulate and verify the entire FPGA design with various constraints. Simulating the FPGA design with Questasim before implementation also guarantees functional and behavioral accuracy which is very essential for characterizing the memory devices. Questasim will be installed in our lab server and will be accessible to engineers and scientists in the group through floating license features.

II. PURPOSE

GCPN 6.05 development of Memory Device Characterization Platform requires a Questasim simulation and verification tool to simulate the Hardware Description Language (HDL) code written for Field Programmable Gate Arrays (FPGA). This tool will enable the FPGA developer to develop the HDL design for the Memory Device Characterization platform with greater accuracy by emulating the behavior and exercising the design with various constraints before it is implemented in the real hardware. It is necessary to maintain the accuracy in the design functionality to prevent any damage to the memory device and provide error-free benchmarking of the memory device. Purchasing this tool license for the year 2025 is crucial to designing a robust memory characterization platform, as the results collected from the first phase will serve as a guidepost for the final deliverable, a cost-effective testbed for expediting innovation in emerging memory technologies, which promise long-term advantage for the semiconductor industry.

III. MINIMUM REQUIREMENTS

The Contractor shall provide a system that meets all technical specifications identified below. All items must be new. Used or remanufactured equipment will not be considered for award. Experimental, prototype, or custom items will not be considered.

The use of “gray market” components are not acceptable. All line items shall be shipped in the original manufacturer’s packaging and include all original documentation and software, when applicable.

Line Item 0001:

2 | P a g e

Description: Brand Name Only Questa One Sim Ap SW product number 248496 and Verification Software License.

A. Technical Specifications

a. The Tool shall provide mixed language (VHDL, Verilog, System Verilog) simulation support seamlessly.

b. Tool shall support Unified Verification Methodology capabilities.

c. Too shall support verification through Verification IPs from major FPGA vendors

d. The tool shall simulate functional and behavioral models.

e. Tool shall provide libraries for Intel, Xilinx, and Microsemi FPGAs

f. Tool shall support Vivado version 2020 and beyond

g. Tool shall run in multi-thread and multi-processor mode.

h. Tool shall provide a minimum of 6x speed compared to the integrated

Vivado simulator.

i. Tool shall support installation and operation on the Linux operating system. Specifically, Ubuntu 22.4.

IV. SCHEDULE OF DELIVERABLES

Deliverable Number Description Quantity Due Date

Place of Delivery

1 Questasim Questa One Sim Ap SW part number 248496 Software License for 1 year

4 weeks ARO NIST Gaithersburg

Standards of Acceptance: The NIST TPOC shall review all the above deliverables and respond with an acceptance or request for revision email to the Contractor Point of Contact (POC) within 4 weeks of receipt of deliverable. This section applies to deliverables which must be reviewed and approved for acceptances (e.g., draft plans, drawings, etc.)

PLACE OF PERFORMANCE

Gaithersburg

PERIOD OF PERFORMANCE

12 months from the date of award. This does not include warranty.

V. DELIVERY TERMS

Delivery shall be F.O.B Destination (or equivalent incoterms, such as DDP) and shall occur in accordance with the delivery due dates provided in the below table.

FOB Destination means: The contractor shall pack and mark the shipment in conformance with carrier requirements, deliver the shipment in good order and condition to the point of delivery specified in the purchase order, be responsible for any loss of and/or damage to the goods occurring before receipt and acceptance of the shipment

3 | P a g e by the consignee at the delivery point specified in the purchase order; and pay all charges to the specified point of delivery.

The contractor shall deliver all Line Items to:

National Institute of Standards and Technology

Shipping and Receiving

100 Bureau Drive, Building 301

Gaithersburg, MD 20899

TBD 216/E110

VI. INSPECTION & ACCEPTANCE

In addition to the inspection and acceptance terms articulated in the specific FAR clause that allows the Government reserves the right to perform such performance tests and evaluations as defined below to verify specified system performance. Such tests and evaluations, if performed, shall be conducted within the environment that the system is to be operated. The Contractor has the right to be present during the tests and evaluations, if performed, at the Contractor’s expense.

Performance Tests:

1. List performance tests here if applicable

NIST may choose at its discretion to forego this part of acceptance testing.

A visual inspection of the equipment will be performed by the NIST POC to identify surface defects or any form of indication that any equipment was damaged during transport to NIST. The Government shall have sole discretion to require repair or replacement of damaged and/or nonconforming supplies at no cost to the Government. The Government at any time prior to acceptance shall reject the equipment due to defects and/or nonconformance. The vendor is responsible for latent defects discovered any time after final inspection. However, the extent of its liability shall be prorated over the useful life of the equipment.

Ownership of the equipment shall transfer to NIST upon acceptance by the Government.

The Government will test, inspect, and accept or reject the equipment within 2 weeks of the receipt of the equipment unless otherwise indicated above. The Government reserves the right to conduct quality assurance testing to confirm that a given instrument(s) meets the manufacturer’s and/or the Government’s performance specifications. It is anticipated that the equipment will meet all manufacturer’s specifications and/or the Government’s performance specifications identified in the most recent operations and maintenance manual for each piece of equipment and/or in this document.

VII. PAYMENT SCHEDULE

4 | P a g e

Define how the contractor will be paid if more information besides what is included in the payment clause is needed. If firm-fixed-price construction, for example, it may warrant further definition.

The Contractor will be paid, in accordance with the payments clause in the contract and as otherwise noted in this document, upon receipt of a proper invoice.

1. 100% after delivery and acceptance by the TPOC of fully installed system.

NOTE: Partial shipments and partial invoices will not be accepted, unless otherwise requested and accepted by the Contracting Officer prior to award offer.

Proposed payment schedules shall be submitted with vendor’s response to the

RFQ for consideration.

VIII. CYBERSECURITY PRIVACY REQUIREMENTS

NIST seeks a solution that provides security and privacy protection consistent with requirements defined by applicable federal laws, regulations, policies, and standards

(e.g., the Federal Information Security Management Act (FISMA), OMB Circular A-130, and FIPS Publication 200). The solution provider (including subcontractors) may meet these requirements through various means, including but not limited to FedRAMP authorization, current third-party assessments (e.g., SSAE, PCI), and/or responses to

NIST special publication control set SP 800-171.

Minimally Acceptable Controls

• System security plan describing physical, technical, and administrative controls implemented to protect systems and sensitive personally identifiable information

(SPII).

• IT management processes to establish and manage secure configuration baselines including routine patching for all operating systems and applications.

• Access to SPII is restricted to those with a need to know. Personnel with access to SPII have background investigations performed (e.g. criminal, financial etc.), and are trained on secure handling of SPII.

• Access Controls for SPII meet or exceed industry best practices for access and identification control including, but not limited to, connectivity to servers and databases, multi-factor authentication for remote accesses for administration, secure configurations for any devices accessing the system, and strong physical security for any place where the data is accessed.

• The solution supports multifactor authentication for users and/or supports integration with customer federation services for Single-Sign capability.

• Processes for scanning on a continual basis for vulnerabilities and proper configurations for all aspects of the system, as well as processes for timely mitigation of findings.

5 | P a g e

• Auditing and Incident Response processes including customer notification of suspected or actual incidents and logging with sufficient information to perform forensics on any incident. Processes for notifying and providing appropriate mitigations, including but not limited to credit monitoring services, for subsidy applicants in the event of suspected or actual incidents.

• SPII is encrypted in transit using TLS 1.2 or better and encrypted at rest in all places the SPII is stored. All encryption algorithms and modules are FIPS 140- 2/140-3 validated.

If unable to meet any of the requirements listed above, the solution provider may provide details of mitigations or alternative protections in place to ensure the appropriate handling and protection of SPII.

If the solution provider provides services to other Federal agencies, provide a general description of the security risk management approach and client point of contact.