1Bugfix
2   * Remove PSA'a AEAD finish/verify output buffer limitation for GCM.
3     The requirement of minimum 15 bytes for output buffer in
4     psa_aead_finish() and psa_aead_verify() does not apply to the built-in
5     implementation of GCM.
6   * Move GCM's update output buffer length verification from PSA AEAD to
7     the built-in implementation of the GCM.
8     The requirement for output buffer size to be equal or greater then
9     input buffer size is valid only for the built-in implementation of GCM.
10     Alternative GCM implementations can process whole blocks only.
11
12API changes
13   * New error code for GCM: MBEDTLS_ERR_GCM_BUFFER_TOO_SMALL.
14     Alternative GCM implementations are expected to verify
15     the length of the provided output buffers and to return the
16     MBEDTLS_ERR_GCM_BUFFER_TOO_SMALL in case the buffer length is too small.
17