Split out ECDHE from tls_process_key_exchange()