Turing-complete TLS handshakes, plus an auth-bypass via renegotiation, from legitimate OpenSSL and BoringSSL features.