The ssl_ticket module references cipher.h in its API. This API will disappear in TF-PSA-Crypto 1.0, which Mbed TLS 4.0 will consume. The goal of this issue is to adapt ssl_ticket.h to not indirectly expose cipher.h APIs.

It's ok if the ssl_ticket module still references cipher.h interfaces in private places: inside ssl_ticket.c, or in private fields of structures defined in ssl_ticket.h.

The goal of this issue is therefore to adapt the one place where ssl_ticket.h publicly exposes a cipher.h interface: the function mbedtls_ssl_ticket_setup, which takes an argument of type mbedtls_cipher_type_t. Change this function to take two arguments instead: a PSA key type and a PSA algorithm. Adapt the implementation and all the code in our code base that calls this function.