Check Finished

Client Finished

The client Finished value is recomputed from the transcript hash and shared secret.

highlighted = computed this step

The client sends the first Finished

The client Finished value is recomputed from transcript hash 43 and shared secret 2.

client Finished input\text{client Finished input}
Client FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Client Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

The toy label is included

This toy client check adds shared times 5 and client label 11 before reducing modulo 97.

Fc=(H+s⋅5+11) mod 97F_c=(H+s\cdot{}5+11)\bmod{}97
Client FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Client Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

The client value checks

The recomputed client Finished is 64.

Fc=64F_c=64
Client FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Client Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

If the transcript hash or shared secret changed, this client row would not match.

client row checked\text{client row checked}
Client FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Client Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check