Back-port TLS AEAD framework [from HEAD].