[aes] Add missing countermeasure labels to RTL

Signed-off-by: Pirmin Vogel <vogelpi@lowrisc.org>
diff --git a/hw/ip/aes/rtl/aes.sv b/hw/ip/aes/rtl/aes.sv
index 8245821..3ff1ecd 100644
--- a/hw/ip/aes/rtl/aes.sv
+++ b/hw/ip/aes/rtl/aes.sv
@@ -86,6 +86,7 @@
   // Inputs //
   ////////////
 
+  // SEC_CM: BUS.INTEGRITY
   // SEC_CM: AUX.CONFIG.SHADOW
   // SEC_CM: AUX.CONFIG.REGWEN
   // SEC_CM: KEY.SW_UNREADABLE
diff --git a/hw/ip/aes/rtl/aes_control_fsm.sv b/hw/ip/aes/rtl/aes_control_fsm.sv
index 587dece..1d9ab83 100644
--- a/hw/ip/aes/rtl/aes_control_fsm.sv
+++ b/hw/ip/aes/rtl/aes_control_fsm.sv
@@ -638,6 +638,7 @@
       end
 
       ERROR: begin
+        // SEC_CM: MAIN.FSM.GLOBAL_ESC
         // SEC_CM: MAIN.FSM.LOCAL_ESC
         // Terminal error state
         alert_o = 1'b1;