As EKR notes, GCM and CCM are designed so that it's OK to use one key for both confidentiality and integrity.