Split out SRP from tls_process_key_exchange()