Skip to content

A. State Machine

RFC 8446
This appendix provides a summary of the legal state transitions for
the client and server handshakes.  State names (in all capitals,
e.g., START) have no formal meaning but are provided for ease of
comprehension.  Actions which are taken only in certain circumstances
are indicated in [].  The notation "K_{send,recv} = foo" means "set
the send/recv key to the given key".

The state machines shown in the following section won't map completely to the RFC. This is because of the model not covering all TLS features and extensions.