Merge remote-tracking branch 'upstream-restricted/pr/413' into mbedtls-1.3-restricted