diff --git a/include/mbedtls/ccm.h b/include/mbedtls/ccm.h
index ceac36c..5f427ab 100644
--- a/include/mbedtls/ccm.h
+++ b/include/mbedtls/ccm.h
@@ -92,6 +92,7 @@
  *
  * \param ctx       The CCM context to initialize. This must not be \c NULL.
  */
+MBEDTLS_DEPRECATED
 void mbedtls_ccm_init( mbedtls_ccm_context *ctx );
 
 /**
@@ -107,6 +108,7 @@
  * \return          \c 0 on success.
  * \return          A CCM or cipher-specific error code on failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_setkey( mbedtls_ccm_context *ctx,
                         mbedtls_cipher_id_t cipher,
                         const unsigned char *key,
@@ -119,6 +121,7 @@
  * \param ctx       The CCM context to clear. If this is \c NULL, the function
  *                  has no effect. Otherwise, this must be initialized.
  */
+MBEDTLS_DEPRECATED
 void mbedtls_ccm_free( mbedtls_ccm_context *ctx );
 
 /**
@@ -157,6 +160,7 @@
  * \return          \c 0 on success.
  * \return          A CCM or cipher-specific error code on failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_encrypt_and_tag( mbedtls_ccm_context *ctx, size_t length,
                          const unsigned char *iv, size_t iv_len,
                          const unsigned char *add, size_t add_len,
@@ -205,6 +209,7 @@
  * \return          \c 0 on success.
  * \return          A CCM or cipher-specific error code on failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_star_encrypt_and_tag( mbedtls_ccm_context *ctx, size_t length,
                          const unsigned char *iv, size_t iv_len,
                          const unsigned char *add, size_t add_len,
@@ -242,6 +247,7 @@
  * \return          #MBEDTLS_ERR_CCM_AUTH_FAILED if the tag does not match.
  * \return          A cipher-specific error code on calculation failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_auth_decrypt( mbedtls_ccm_context *ctx, size_t length,
                       const unsigned char *iv, size_t iv_len,
                       const unsigned char *add, size_t add_len,
@@ -287,6 +293,7 @@
  * \return          #MBEDTLS_ERR_CCM_AUTH_FAILED if the tag does not match.
  * \return          A cipher-specific error code on calculation failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_star_auth_decrypt( mbedtls_ccm_context *ctx, size_t length,
                       const unsigned char *iv, size_t iv_len,
                       const unsigned char *add, size_t add_len,
@@ -300,6 +307,7 @@
  * \return         \c 0 on success.
  * \return         \c 1 on failure.
  */
+MBEDTLS_DEPRECATED
 int mbedtls_ccm_self_test( int verbose );
 #endif /* MBEDTLS_SELF_TEST && MBEDTLS_AES_C */