Merge pull request #5536 from mpg/fix-ecdh-psa-2.28

[Backport 2.28] Fix PSA-based ECDH in TLS 1.2