Check Finished

Honesty Boundary

This is a toy Finished walkthrough, not production TLS.

highlighted = computed this step

Finished is the last toy check here

The flow ends with client Finished 64 and server Finished 70.

647064\quad70
Finished closes the toy transcriptToy TLS Finished message order is recomputed from the same pins.Finished closes the toy transcriptClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check

A mismatch would stop trust

In this toy model, a peer accepts only when the recomputed Finished row equals the displayed row.

recompute before accepting\text{recompute before accepting}
Finished honesty boundaryToy TLS Finished rows are recomputed from the transcript hash and shared secret.Finished honesty boundary - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Honesty boundary

NOTE: toy-modulus; no-padding; no-side-channel; no-production; never-roll-your-own. Toy TLS Finished only. This is not real TLS HKDF, HMAC transcript hashing, AEAD, cipher-suite negotiation, certificate validation, record protection, wire-compatible Finished bytes, or production security guidance.

toy Finished check only\text{toy Finished check only}
Finished honesty boundaryToy TLS Finished rows are recomputed from the transcript hash and shared secret.Finished honesty boundary - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

Finished ties together transcript order, transcript values, and the shared secret in one final toy check.

transcript plus shared secret\text{transcript plus shared secret}
Finished closes the toy transcriptToy TLS Finished message order is recomputed from the same pins.Finished closes the toy transcriptClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check