I am having some difficulties in understanding why is the finishedClient needed.

In case an attacker attempts an attack like a replay attack, it will show immediately that the attacker wasn't able to derive the correct set of keys.

However, this would be evident even without this message as the attacker wouldn't be able to encrypt and decrypt messages.

Is that the reason for this message, or is there another reason? What can we learn from this message that we wouldn't have learned without it?

  • $\begingroup$ @schroeder Where? It seems like a question about the structure itself. $\endgroup$ – EL_9 Jan 24 at 21:11
  • $\begingroup$ It might not answer you. However, questions like these are often covered on Crypto.SE. $\endgroup$ – schroeder Jan 24 at 21:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy