DTLS 1.3 introduces new mandatoriy cipher suites ([RFC 8446 section 9.1](https://www.rfc-editor.org/rfc/rfc8446#section-9.1)). This is _partly_ blocked by #755, as DTLS 1.3 defines a new record layer encoding. ### MUST - TLS_AES_128_GCM_SHA256 ### SHOULD - TLS_AES_256_GCM_SHA384 - TLS_CHACHA20_POLY1305_SHA256