Finished

Why TLS Can Reuse the Parts

TLS assembles ordering, key exchange, signatures, hashing, and Finished into one checked transcript.

highlighted = computed this step

What TLS assembles

The capstone combines the earlier pieces: ordered messages, DH, RSA verification, transcript hash, and Finished.

order+DH+RSA+H+Finished\text{order}+DH+RSA+H+Finished
TLS assembledToy TLS handshake order with Finished checks.TLS assembledClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check

Name the exact pins

This toy run uses DH modulus 23, RSA modulus 55, shared secret 2, and final checks 64 and 70.

toy pins are exact\text{toy pins are exact}
TLS assembled valuesToy TLS transcript table recomputed from DH and RSA pins.TLS assembled values - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Name what is not modeled

NOTE: toy-modulus; no-padding; no-side-channel; no-production; never-roll-your-own. This transcript omits real TLS bytes, real certificate path validation, and AEAD record protection.

toy model, narrow claims\text{toy model, narrow claims}
TLS assembled valuesToy TLS transcript table recomputed from DH and RSA pins.TLS assembled values - hash=43itemvaluecheckClientHello4pinnedServerHello9pinnedCertificate digest33root signatureServerKeyShare19DH publicClientKeyShare8DH publicTranscript hash43weighted mod 97Shared secret2DH recomputeClient Finished64toy checkServer Finished70toy check

Summary

TLS is not magic here; it is an ordered transcript with every displayed value recomputed at the trust boundary. NOTE: toy-modulus; no-padding; no-side-channel; no-production; never-roll-your-own. Toy transcript only: not real TLS bytes, not real certificate validation, no AEAD record protection, and no security-size claims.

TLS assembled exactly\text{TLS assembled exactly}
TLS assembledToy TLS handshake order with Finished checks.TLS assembledClientServerClientHello seq=4 toy randomServerHello seq=9 toy randomCertificate seq=33 sigServerKeyShare seq=19 DH shareClientKeyShare seq=8 DH shareFinished seq=64 toy checkFinished seq=70 toy check