Group-state machinery for MLS (RFC 9420): the TreeKEM ratchet tree, epoch transcript
hashing, key schedule, and the commit / proposal processing that drives them.
Wire-format codec for the MLS (RFC 9420) TLS-encoded structures: KeyPackage,
Welcome, MLSMessage, Commit, ApplicationData, and the rest of the protocol's
presentation-layer types.