tls13_handshake_legacy_state
struct tls13_handshake_legacy_state {
tls13_handshake_legacy_state(struct tls13_ctx *ctx, int *out_state)