Finished

Finished Check

Finished binds the transcript hash to the DH shared secret. The toy checks are recomputed, not trusted.

highlighted = computed this step

What Finished proves here

Finished combines the transcript hash with the DH shared secret. A peer that changed the transcript or missed the secret will compute a different toy check.

Finished uses H and shared\text{Finished uses }H\text{ and shared}
Toy Finished checksToy TLS transcript table recomputed from DH and RSA pins.Toy Finished checks - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Check the client Finished

With hash 43 and shared secret 2, the client Finished value is 64.

Fc=64F_c=64
Toy Finished checksToy TLS transcript table recomputed from DH and RSA pins.Toy Finished checks - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Check the server Finished

The server side uses the same hash and shared secret, but a different toy label. It recomputes Finished value 70.

Fs=70F_s=70
Toy Finished checksToy TLS transcript table recomputed from DH and RSA pins.Toy Finished checks - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

Finished is the capstone check: transcript plus shared secret. NOTE: toy-modulus; no-padding; no-side-channel; no-production; never-roll-your-own. Toy transcript only: not real TLS bytes, not real certificate validation, no AEAD record protection, and no security-size claims.

Finished values recomputed\text{Finished values recomputed}
Toy Finished checksToy TLS transcript table recomputed from DH and RSA pins.Toy Finished checks - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check