STM32: fix check-source-text (wrap overlong lines, update macro list)

- Wrap source lines >80 cols added by the STM32 bare/DHUK/CCB port:
  reformat the P-256 CCB curve constants to 8 bytes/line, break long
  SAES/PKA register writes and pka_read_be calls, and rewrap doxygen and
  in-code comments (port/st/stm32.c + stm32.h, aes.c, ecc.c, random.c,
  doc/dox_comments/header_files/stm32.h).
- .wolfssl_known_macro_extras: add AES_CR_CPHASE, RCC_AHB2ENR_CCBEN, and
  WOLFSSL_STM32_RNG_LEGACY_FAILFAST; drop the now-recognized
  WOLFSSL_STM32_CCB.

Author: dgarske

.wolfssl_known_macro_extras

@@ -1,6 +1,7 @@
 AES
 AES1
 AES_CR_CCFC
+AES_CR_CPHASE
 AES_GCM_GMULT_NCT
 AES_ICR_CCF
 AES_ISR_CCF
@@ -525,6 +526,7 @@ RCC_AHB2ENR1_HASHEN
 RCC_AHB2ENR1_PKAEN
 RCC_AHB2ENR1_SAESEN
 RCC_AHB2ENR_AESEN
+RCC_AHB2ENR_CCBEN
 RCC_AHB2ENR_HASHEN
 RCC_AHB2ENR_PKAEN
 RCC_AHB2ENR_SAESEN
@@ -987,8 +989,8 @@ WOLFSSL_STM32C5
 WOLFSSL_STM32F3
 WOLFSSL_STM32F427_RNG
 WOLFSSL_STM32U0
-WOLFSSL_STM32_CCB
 WOLFSSL_STM32_DHUK_UNWRAP
+WOLFSSL_STM32_RNG_LEGACY_FAILFAST
 WOLFSSL_STM32_USE_SAES
 WOLFSSL_STRONGEST_HASH_SIG
 WOLFSSL_STSAFE_TAKES_SLOT

doc/dox_comments/header_files/stm32.h

@@ -5,10 +5,11 @@
     crypto-callback device. After registering at WC_DHUK_DEVID, bind an object
     to the device by setting its devId at init (wc_AesInit / wc_ecc_init_ex) and
     supply the per-key 256-bit seed as the key (wc_AesGcmSetKey) or via
-    wc_ecc_import_wrapped_private; normal wolfCrypt AES / GMAC / ECDSA calls then
-    run transparently with the working key derived inside the SAES. Available on
-    STM32 builds with WOLFSSL_DHUK, WOLF_CRYPTO_CB, and a DHUK-capable SAES
-    (WC_STM32_HAS_DHUK); on the CubeMX path it is also provided for CCB ECDSA.
+    wc_ecc_import_wrapped_private; normal wolfCrypt AES / GMAC / ECDSA calls
+    then run transparently with the working key derived inside the SAES.
+    Available on STM32 builds with WOLFSSL_DHUK, WOLF_CRYPTO_CB, and a
+    DHUK-capable SAES (WC_STM32_HAS_DHUK); on the CubeMX path it is also
+    provided for CCB ECDSA.
 
     \return 0 Returned on success.
     \return <0 A negative error code is returned if device registration fails.
@@ -35,8 +36,8 @@ int wc_Stm32_DhukRegister(int devId);
     \ingroup STM32
 
     \brief This function unregisters the STM32 DHUK crypto-callback device that
-    was registered with wc_Stm32_DhukRegister. Call it once transparent DHUK / CCB
-    operations are complete.
+    was registered with wc_Stm32_DhukRegister. Call it once transparent
+    DHUK / CCB operations are complete.
 
     \return none No return value.
 
@@ -62,9 +63,9 @@ void wc_Stm32_DhukUnRegister(int devId);
     builds with WOLFSSL_DHUK and a DHUK-capable SAES.
 
     \return 0 Returned on success.
-    \return BAD_FUNC_ARG Returned if a required pointer is NULL, if inSz is not a
-    supported block size, if the iv is non-NULL with ivSz != 16, or (software-key
-    path) if the wrapping key length is not 16 or 32.
+    \return BAD_FUNC_ARG Returned if a required pointer is NULL, if inSz is
+    not a supported block size, if the iv is non-NULL with ivSz != 16, or
+    (software-key path) if the wrapping key length is not 16 or 32.
     \return <0 A negative error code may be returned on a hardware error.
 
     \param aes pointer to an initialized Aes; aes->devId selects the wrap key.
@@ -86,10 +87,10 @@ int wc_Stm32_Aes_Wrap(struct Aes* aes, const byte* in, word32 inSz, byte* out,
     \brief This function brings up the STM32 CCB (Coupling and Chaining Bridge)
     peripheral and reports whether it is usable: it enables the CCB / PKA / SAES
     / RNG clocks, pulse-resets the engines, waits for BUSY to clear, and checks
-    for an operation error. Bare-metal only (WOLFSSL_STM32_BARE). The transparent
-    CCB sign path calls this internally, so most callers do not invoke it
-    directly. Available on STM32 builds with WOLFSSL_STM32_CCB on CCB silicon
-    (STM32U3 or STM32C5).
+    for an operation error. Bare-metal only (WOLFSSL_STM32_BARE). The
+    transparent CCB sign path calls this internally, so most callers do not
+    invoke it directly. Available on STM32 builds with WOLFSSL_STM32_CCB on
+    CCB silicon (STM32U3 or STM32C5).
 
     \return 0 Returned when the CCB is up and usable.
     \return WC_TIMEOUT_E Returned if BUSY does not clear within the timeout.
@@ -115,7 +116,8 @@ int wc_Stm32_CcbInit(void);
 
     \return 0 Returned on success.
     \return NOT_COMPILED_IN Returned if curveId is an unsupported curve.
-    \return BAD_FUNC_ARG Returned if a required pointer is NULL or dLen is wrong.
+    \return BAD_FUNC_ARG Returned if a required pointer is NULL or dLen is
+    wrong.
     \return WC_TIMEOUT_E Returned if a hardware step times out.
 
     \param curveId the ECC curve id; currently ECC_SECP256R1.

wolfcrypt/src/aes.c

@@ -4167,8 +4167,9 @@ static WARN_UNUSED_RESULT int wc_AesDecrypt(Aes* aes, const byte* inBlock,
     #ifdef WOLF_CRYPTO_CB
         /* Keep a raw (non-reversed) copy for crypto-callback offload, e.g. the
          * DHUK device reads the seed from devKey. Mirrors the generic
-         * wc_AesSetKey cryptocb path: only for a cryptocb-bound key, and reject
-         * an oversized key (matches the other devKey copy sites in this file). */
+         * wc_AesSetKey cryptocb path: only for a cryptocb-bound key, and
+         * reject an oversized key (matches the other devKey copy sites in
+         * this file). */
         if (aes->devId != INVALID_DEVID) {
             if (keylen > sizeof(aes->devKey)) {
                 return BAD_FUNC_ARG;
@@ -5747,7 +5748,8 @@ int wc_AesSetIV(Aes* aes, const byte* iv)
          * callback). CBC has no crypto-callback entry on the BARE path, so a
          * DHUK key -- devId == WC_DHUK_DEVID, where wc_AesSetKey stored the
          * derivation seed in aes->key -- would run with the seed as the AES
-         * key. Reject rather than silently produce a non-device-bound result. */
+         * key. Reject rather than silently produce a non-device-bound
+         * result. */
         if (aes->devId == WC_DHUK_DEVID) {
             return NOT_COMPILED_IN;
         }

wolfcrypt/src/ecc.c

@@ -288,9 +288,9 @@ ECC Curve Sizes:
      * verify (mode 0x26) correctly, so use the SW verify helper rather than the
      * HW-accelerator sigRS path. Note the helper's scalar multiplications still
      * run on the HW PKA generic-mul (stm32.c provides wc_ecc_mulmod_ex under
-     * !WC_STM32_PKA_VERIFY_ONLY) -- the C5 issue is specifically the verify-mode
-     * wrapper, not the point math, which is exercised and correct (the lead for
-     * a future real HW verify). */
+     * !WC_STM32_PKA_VERIFY_ONLY) -- the C5 issue is specifically the
+     * verify-mode wrapper, not the point math, which is exercised and correct
+     * (the lead for a future real HW verify). */
     #undef  HAVE_ECC_VERIFY_HELPER
     #define HAVE_ECC_VERIFY_HELPER
 #endif
@@ -8264,8 +8264,8 @@ int wc_ecc_dev_make_key(WC_RNG* rng, int keysize, ecc_key* key, int curve_id)
         }
     }
     if (ret == 0) {
-        ret = wc_ecc_import_wrapped_private_ex(key, curve_id, wrapped, wrappedSz,
-                                     iv, (word32)sizeof(iv), tag,
+        ret = wc_ecc_import_wrapped_private_ex(key, curve_id, wrapped,
+                                     wrappedSz, iv, (word32)sizeof(iv), tag,
                                      (word32)sizeof(tag), pub,
                                      (word32)(2 * modSz));
     }