Merge remote-tracking branch 'upstream-restricted/pr/402' into mbedtls-1.3-restricted