Skip to content

feat: add AES-CCM cipher suites - #289

Draft
stevefan1999-personal wants to merge 5 commits into
RustCrypto:masterfrom
stevefan1999-personal:stack/03-aes-ccm
Draft

feat: add AES-CCM cipher suites#289
stevefan1999-personal wants to merge 5 commits into
RustCrypto:masterfrom
stevefan1999-personal:stack/03-aes-ccm

Conversation

@stevefan1999-personal

@stevefan1999-personal stevefan1999-personal commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Summary

Independent PR based on master (not stacked).

  • Add AES-128/256-CCM and AES-128/256-CCM-8 AEAD modules
  • Wire TLS 1.2 and TLS 1.3 CCM cipher suites into the default provider
  • Update OpenSSL interop expectations for CCM / CCM-8

Test plan

  • cargo test --lib / clippy / no_std (1.85)
  • local openssl: CCM-SHA256 succeeds; CCM-8 may depend on OpenSSL build
  • CI green

Add TLS 1.2 ECDHE-ECDSA AES-CCM/CCM-8 and TLS 1.3 AES-128-CCM
cipher suites using the RustCrypto ccm crate.
Format CCM AEAD code and remove should_panic from CCM/CCM-8
cipher suite interop tests now that AES-CCM is supported.
AES-128-CCM interop works; CCM-8 still fails with no shared cipher
against the local OpenSSL harness, so leave that expectation in place.
CI OpenSSL negotiates TLS_AES_128_CCM_8_SHA256 successfully, so the
should_panic expectation was wrong.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant