TLS Handshake (ECDH + HKDF)

Generate ephemeral P-256 keys, derive a shared secret via ECDH, then derive traffic keys with HKDF-SHA-256.

Client

Public Key

—

Shared Secret (client)

—

Traffic Key

—

Server

Public Key

—

Shared Secret (server)

—

Traffic Key

—

Entropy Receipt

No receipt yet. Click “Get Entropy Receipt” or run the Receipted handshake.