Security
   * Fix TLS 1.3 clients to reject a HelloRetryRequest whose selected group was
     not advertised in the original ClientHello. Reported independently by
     Din Asotić / Xiangdong Li, Beijing University of Posts and
     Telecommunications (BUPT), and NVIDIA Project Vanessa.
     CVE-2026-25832.