diff --git a/scripts/config.py b/scripts/config.py
index a77ead0..f9f0605 100755
--- a/scripts/config.py
+++ b/scripts/config.py
@@ -197,6 +197,7 @@
     'MBEDTLS_TEST_NULL_ENTROPY', # removes a feature
     'MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION', # influences the use of X.509 in TLS
     'MBEDTLS_X509_REMOVE_INFO', # removes a feature
+    'MBEDTLS_INTERNAL_CCM_NO_ZEROIZE_ON_TAG_FAIL', # lowers security of CCM
 ])
 
 def is_seamless_alt(name):