Merge remote-tracking branch 'upstream-restricted/pr/443' into mbedtls-1.3-restricted