I've been looking into TLS cipher suites of OpenSSL and mbedTLS (previously called PolarSSL) and noticed that mbedTLS supports the [CCM](https://www.cryptopp.com/wiki/CCM_Mode) mode of operation ([See list here](https://tls.mbed.org/supported-ssl-ciphersuites)), whereas OpenSSL does not. If I understand this correctly, this provides authenticated encryption and therefore covers the message hashing in TLS, like GCM.

Looking up CCM, I couldn't find much information on its security. How does it compare to GCM or SHA1/2?

---

Edit:

mbedTLS TLS cipher suites with CCM:

* TLS-RSA-WITH-AES-128-CCM
* TLS-RSA-WITH-AES-256-CCM
* TLS-RSA-WITH-AES-128-CCM-8
* TLS-RSA-WITH-AES-256-CCM-8
* TLS-DHE-RSA-WITH-AES-128-CCM
* TLS-DHE-RSA-WITH-AES-256-CCM
* TLS-DHE-RSA-WITH-AES-128-CCM-8
* TLS-DHE-RSA-WITH-AES-256-CCM-8
* TLS-ECDHE-ECDSA-WITH-AES-128-CCM
* TLS-ECDHE-ECDSA-WITH-AES-256-CCM
* TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
* TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
* TLS-PSK-WITH-AES-128-CCM
* TLS-PSK-WITH-AES-256-CCM
* TLS-PSK-WITH-AES-128-CCM-8
* TLS-PSK-WITH-AES-256-CCM-8
* TLS-DHE-PSK-WITH-AES-128-CCM
* TLS-DHE-PSK-WITH-AES-256-CCM
* TLS-DHE-PSK-WITH-AES-128-CCM-8
* TLS-DHE-PSK-WITH-AES-256-CCM-8