Detailed Description

AEAD AES-CCM (NIST SP 800-38C) - see aesccm.h.

Arduino: mbedtls_ccm (AES routed to the ESP32 HW accelerator), detached tag natively. Native host: a software CCM built on the shared table-free AES block (crypto/cipher/aes_block.h) - CBC-MAC for authentication (formatting function per SP 800-38C Appendix A) and AES-CTR for encryption, both under the one key.

All working memory (key schedule, CBC-MAC accumulator, keystream, counter/format blocks) lives in the secure pool and is wiped when the borrow is released - no cipher state on the stack or in BSS.

Definition in file aesccm.cpp.