Make TLS encryption levels match the QUIC ones

(This patch was originally written by nharper)

gfe-relnote: protected by disabled flag quic_supports_tls_handshake
PiperOrigin-RevId: 244081747
Change-Id: I74fd042607ff3eb297536811ac60826e4f89a7a7

quic/core/tls_handshaker.cc

diff --git a/quic/core/tls_handshaker.cc b/quic/core/tls_handshaker.cc
index 3a45f36..51602b4 100644
--- a/quic/core/tls_handshaker.cc
+++ b/quic/core/tls_handshaker.cc
@@ -105,8 +105,9 @@
     case ssl_encryption_initial:
       return ENCRYPTION_INITIAL;
     case ssl_encryption_early_data:
-    case ssl_encryption_handshake:
       return ENCRYPTION_ZERO_RTT;
+    case ssl_encryption_handshake:
+      return ENCRYPTION_HANDSHAKE;
     case ssl_encryption_application:
       return ENCRYPTION_FORWARD_SECURE;
   }
@@ -119,8 +120,9 @@
     case ENCRYPTION_INITIAL:
       return ssl_encryption_initial;
     case ENCRYPTION_HANDSHAKE:
-    case ENCRYPTION_ZERO_RTT:
       return ssl_encryption_handshake;
+    case ENCRYPTION_ZERO_RTT:
+      return ssl_encryption_early_data;
     case ENCRYPTION_FORWARD_SECURE:
       return ssl_encryption_application;
     default: