Check Finished

Server Finished

The server Finished value checks the same transcript with a different toy label.

highlighted = computed this step

The server checks the same transcript

The server uses the same transcript hash 43 and the same shared secret 2.

same H and shared\text{same }H\text{ and shared}
Server FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Server Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

The server label is different

The toy server check uses server label 17 before reducing modulo 97.

Fs=(H+s⋅5+17) mod 97F_s=(H+s\cdot{}5+17)\bmod{}97
Server FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Server Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

The server value checks

The recomputed server Finished is 70.

Fs=70F_s=70
Server FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Server Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

Both Finished rows depend on the same transcript hash and shared secret.

server row checked\text{server row checked}
Server FinishedToy TLS Finished rows are recomputed from the transcript hash and shared secret.Server Finished - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check