The toy transcript has a fixed order before Finished is checked.

highlighted = computed this step

The transcript has an order

Finished checks the ordered transcript, not a loose bag of values.

order matters\text{order matters}
Ordered transcriptToy TLS handshake order is recomputed from the same transcript pins.Ordered transcriptClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check

The hello values start it

ClientHello is 4 and ServerHello is 9.

ClientHello=4ServerHello=9\text{ClientHello}=4\quad\text{ServerHello}=9
Ordered transcript valuesToy TLS transcript rows are recomputed from DH and certificate pins.Ordered transcript values - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Certificate and shares follow

The certificate digest is 33, then the server share is 19, then the client share is 8.

ordered values are pinned\text{ordered values are pinned}
Ordered transcript valuesToy TLS transcript rows are recomputed from DH and certificate pins.Ordered transcript values - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

The transcript table gives the exact values and the flow shows their order.

same pins, fixed order\text{same pins, fixed order}
Ordered transcriptToy TLS handshake order is recomputed from the same transcript pins.Ordered transcriptClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check