Detailed Description

Deterministic TLS engine implementation (mbedTLS + static pool).

ESP32/Arduino only. All mbedTLS allocations are served from a fixed BSS arena (MBEDTLS_MEMORY_BUFFER_ALLOC_C) so no system heap is touched; the RNG is the ESP32 hardware CSPRNG; the transport BIO reads ciphertext straight from the connection's rx ring and writes via tcp_write. v2/v3 mbedTLS differences are bridged with MBEDTLS_VERSION_MAJOR guards (same approach as the SSH layer).

Definition in file tls.cpp.