KSP Playground● IDLE
Handshake Protocol
KSP establishes a session in 2 round-trips via mutual key exchange and authentication.
ClientHello
Versions + capabilities + ephemeral pub key
ServerHello
Selected params + server ephemeral pub + session ID
Certificate
Server Ed25519 cert + binding signature
X25519 ECDH
shared_secret = X25519(client_priv, server_pub)
HKDF Key Derive
client_write_key / server_write_key / IVs
AuthRequest/Response
Encrypted credentials exchange
HandshakeFinish
HMAC transcript verification — both sides
Secure Channel
Full duplex AEAD-encrypted session
Session State
No active session.
Click Start Handshake to begin.