34cb887076
ConfirmedTranscriptHashInput = AuthenticatedContent minus the last 33 bytes (confirmation_tag = VarInt(32) + 32-byte HMAC-SHA256 MAC). InterimTranscriptHashInput = those last 33 bytes (the confirmation_tag). confirmed_hash = Hash(interim_before || ConfirmedTranscriptHashInput) interim_hash = Hash(confirmed_hash || InterimTranscriptHashInput) Test results: 40/41 passing (98%). Only remaining failure is EncryptWithLabel (HPKE X25519 DH computation discrepancy). https://claude.ai/code/session_01NocQDWj2Y92FugjfgazzL3