Implement wolfcrypt + wolfHAL example

[AlexLanzano]

• Bare-metal STM32WB55 Nucleo app: wolfcrypt_test() and benchmark_test()
• AES-ECB/CBC/GCM/CCM and RNG offloaded to hardware through the wolfSSL wolfHAL port
• boards/stm32wb55xx_nucleo/ brings up clock, GPIO, UART1, SysTick, AES1 and RNG
• wolfHAL pinned as a submodule at wolfHAL/wolfHAL
• README covering wolfHAL, supported boards, and how to build
• Implemented CI build test

This PR relies on the wolfHAL integration for wolfssl to be merged first wolfSSL/wolfssl#11033
CI test will fail

Output for STM32WB55 Nucleo board using wolfHAL

------------------------------------------------------------------------------
 wolfSSL version 5.9.2
  CryptoCB with DevID:5748
------------------------------------------------------------------------------
macro    test passed!
error    test passed!
MEMORY   test passed!
SHA-256  test passed!
RANDOM   test passed!
Hash     test passed!
GMAC     test passed!
AES      test passed!
AES256   test passed!
AES-CBC  test passed!
AES-GCM  test passed!
AES-CCM  test passed!
logging  test passed!
mutex    test passed!
memcb    test passed!
crypto callback test passed!
Test complete
wolfCrypt Benchmark (block bytes 1024, min 1.0 sec each)
RNG SHA-256 DRBG        SW     2 MiB took 1.005 seconds,    2.162 MiB/s
AES-128-CBC-enc         SW   325 KiB took 1.055 seconds,  308.057 KiB/s
AES-128-CBC-dec         SW   325 KiB took 1.064 seconds,  305.451 KiB/s
AES-256-CBC-enc         SW   250 KiB took 1.019 seconds,  245.339 KiB/s
AES-256-CBC-dec         SW   250 KiB took 1.028 seconds,  243.191 KiB/s
AES-128-CBC-enc         HW     5 MiB took 1.004 seconds,    4.790 MiB/s
AES-128-CBC-dec         HW     4 MiB took 1.002 seconds,    3.752 MiB/s
AES-256-CBC-enc         HW     4 MiB took 1.000 seconds,    4.175 MiB/s
AES-256-CBC-dec         HW     3 MiB took 1.000 seconds,    3.394 MiB/s
AES-128-GCM-enc         SW   150 KiB took 1.053 seconds,  142.450 KiB/s
AES-128-GCM-dec         SW   150 KiB took 1.079 seconds,  139.018 KiB/s
AES-256-GCM-enc         SW   150 KiB took 1.179 seconds,  127.226 KiB/s
AES-256-GCM-dec         SW   125 KiB took 1.005 seconds,  124.378 KiB/s
AES-128-GCM-enc-no_AAD  SW   150 KiB took 1.044 seconds,  143.678 KiB/s
AES-128-GCM-dec-no_AAD  SW   150 KiB took 1.070 seconds,  140.187 KiB/s
AES-256-GCM-enc-no_AAD  SW   150 KiB took 1.170 seconds,  128.205 KiB/s
AES-256-GCM-dec-no_AAD  SW   150 KiB took 1.196 seconds,  125.418 KiB/s
AES-128-GCM-enc         HW     3 MiB took 1.004 seconds,    2.651 MiB/s
AES-128-GCM-dec         HW     3 MiB took 1.005 seconds,    2.721 MiB/s
AES-256-GCM-enc         HW     2 MiB took 1.004 seconds,    2.456 MiB/s
AES-256-GCM-dec         HW     3 MiB took 1.009 seconds,    2.541 MiB/s
AES-128-GCM-enc-no_AAD  HW     3 MiB took 1.006 seconds,    2.718 MiB/s
AES-128-GCM-dec-no_AAD  HW     3 MiB took 1.005 seconds,    2.696 MiB/s
AES-256-GCM-enc-no_AAD  HW     3 MiB took 1.005 seconds,    2.502 MiB/s
AES-256-GCM-dec-no_AAD  HW     2 MiB took 1.006 seconds,    2.475 MiB/s
GMAC Default            SW   275 KiB took 1.043 seconds,  263.663 KiB/s
GMAC Default            SW     3 MiB took 1.002 seconds,    3.021 MiB/s
AES-128-ECB-enc         SW   352 KiB took 1.031 seconds,  341.416 KiB/s
AES-128-ECB-dec         SW   363 KiB took 1.026 seconds,  353.801 KiB/s
AES-256-ECB-enc         SW   275 KiB took 1.035 seconds,  265.700 KiB/s
AES-256-ECB-dec         SW   275 KiB took 1.007 seconds,  273.088 KiB/s
AES-128-ECB-enc         HW     5 MiB took 1.002 seconds,    4.878 MiB/s
AES-128-ECB-dec         HW     4 MiB took 1.001 seconds,    3.831 MiB/s
AES-256-ECB-enc         HW     4 MiB took 1.001 seconds,    4.293 MiB/s
AES-256-ECB-dec         HW     3 MiB took 1.000 seconds,    3.448 MiB/s
AES-CCM-enc             SW   175 KiB took 1.129 seconds,  155.004 KiB/s
AES-CCM-dec             SW   175 KiB took 1.129 seconds,  155.004 KiB/s
AES-CCM-enc-no_AAD      SW   175 KiB took 1.130 seconds,  154.867 KiB/s
AES-CCM-dec-no_AAD      SW   175 KiB took 1.130 seconds,  154.867 KiB/s
AES-CCM-enc             HW     2 MiB took 1.004 seconds,    2.213 MiB/s
AES-CCM-dec             HW     2 MiB took 1.010 seconds,    2.151 MiB/s
AES-CCM-enc-no_AAD      HW     2 MiB took 1.007 seconds,    2.206 MiB/s
AES-CCM-dec-no_AAD      HW     2 MiB took 1.010 seconds,    2.151 MiB/s
SHA-256                 SW     1 MiB took 1.023 seconds,    1.026 MiB/s
SHA-256                 HW     1 MiB took 1.014 seconds,    1.011 MiB/s
RNG      256 SHA256 Init/Free  40712 ops took 1.000 sec, avg 0.025 ms, 40712.000 ops/sec
Benchmark complete

[Copilot]

Pull request overview

Adds a new bare-metal wolfCrypt + wolfHAL example targeting the STM32WB55 Nucleo, and wires it into CI/manifest so it is cross-built against wolfSSL master.

Changes:

• Introduces wolfHAL/ example app + STM32WB55 board bring-up (clock, UART, SysTick, AES1, RNG) and wolfCrypt configuration for hardware offload via wolfHAL.
• Adds a dedicated build system (board-owned toolchain/linker/driver list; objects in build/) and documentation for building/flashing and adding boards.
• Adds CI workflow + composite action to cross-build the board(s), and registers the example in the repo’s manifest + nightly.

Reviewed changes

Copilot reviewed 18 out of 18 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
wolfHAL/user_settings.h	wolfCrypt configuration for the example (wolfHAL + RNG + AES offload, embedded-only feature set).
wolfHAL/syscalls.c	Bare-metal libc stubs and UART-backed stdout support.
wolfHAL/README.md	Build/flash instructions, supported boards, and guidance for adding new boards.
wolfHAL/Makefile	Example build system compiling wolfCrypt from source + board sources + wolfHAL drivers.
wolfHAL/main.c	Example entrypoint running wolfcrypt_test() then benchmark_test() with SysTick timing hook.
wolfHAL/boards/stm32wb55xx_nucleo/linker.ld	Board linker script defining memory layout, heap/stack bounds, and sections.
wolfHAL/boards/stm32wb55xx_nucleo/ivt.c	Startup/vector table and reset initialization code for the board.
wolfHAL/boards/stm32wb55xx_nucleo/board.mk	Board toolchain selection, CFLAGS/LDFLAGS, and driver source list.
wolfHAL/boards/stm32wb55xx_nucleo/board.h	Board device configuration/macros consumed by wolfHAL drivers and wolfSSL wolfHAL port dispatch.
wolfHAL/boards/stm32wb55xx_nucleo/board.c	Board bring-up/deinit: clock tree, GPIO, UART, SysTick timer, RNG, AES.
wolfHAL/.gitignore	Ignore example build outputs (updated as part of PR).
.gitmodules	Adds wolfHAL as a pinned submodule at wolfHAL/wolfHAL.
.github/workflows/wolfhal.yml	CI workflow to cross-build wolfHAL boards against wolfSSL master.
.github/workflows/nightly.yml	Registers wolfHAL workflow in nightly.
.github/scripts/manifest.py	Registers wolfhal job/path for manifest job tracking.
.github/examples-manifest.yml	Adds wolfhal example entry (tier: cross, build-only).
.github/actions/wolfhal-build/action.yml	Composite action to build a board and assert wolfHAL port is linked/dispatching.

Suppressed comments (1)

wolfHAL/boards/stm32wb55xx_nucleo/ivt.c:22

• ISR declarations use empty parameter lists, which will warn/error with -Wstrict-prototypes. Also, SysTick_Handler is declared noreturn via alias, but the real SysTick_Handler implementation returns (board.c), which can also trigger attribute mismatch diagnostics under -Werror.

void Reset_Handler() __attribute__((weak));
void NMI_Handler() __attribute__((weak, noreturn, alias("Default_Handler")));
void HardFault_Handler() __attribute__((weak, noreturn, alias("Default_Handler")));
void MemManage_Handler() __attribute__((weak, noreturn, alias("Default_Handler")));
void BusFault_Handler() __attribute__((weak, noreturn, alias("Default_Handler")));

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.