support for CCM mode (only specified for AES)