anchor.diff:       %%                 ecdhe_psk_aes_256_cbc
        %%           ]}
       ].
  +tls_1_3_kex() ->
  +    [{group, ecdhe_1_3_rsa_cert}].
  +
  +tls_1_3_cipher_suites() ->
  +    [aes_256_gcm_sha384,
  +     aes_128_gcm_sha256,
  +     chacha20_poly1305_sha256,
  +     aes_128_ccm_sha256
  +    ].
   
   kex() ->
        rsa() ++ ecdsa() ++ dss() ++ anonymous().
  
positive.code:         _ ->
              {skip, "Missing AES_256_CCM crypto support"}
      end;
  init_per_testcase(TestCase, Config) ->
      Cipher = ssl_test_lib:test_cipher(TestCase, Config),
      SupCiphers = proplists:get_value(ciphers, crypto:supports()),
  
negative.code:     [{client_type, erlang}, {server_type, openssl} | Config];    
  do_init_per_group(GroupName, Config) when GroupName == ecdh_anon;
                                         GroupName == ecdhe_rsa;
                                         GroupName == ecdhe_psk;
                                         GroupName ==  ecdhe_1_3_rsa_cert->
      case proplists:get_bool(ecdh, proplists:get_value(public_keys, crypto:supports())) of
          true ->
              init_certs(GroupName, Config);
  