anchor.diff:  let serverHelloDoneBytes = makeMessage HT_server_hello_done [||] 
   
   
  +/// ClientKeyExchange
  +
   let makeClientKEXBytes state clSpecInfo =
       if canEncryptPMS state.hs_next_info.cipher_suite then
           let pms = genPMS state.hs_next_info state.poptions.maxVer in
  
positive.code:             let ycBytes = [||] in
              let pms = empty_pms state.hs_next_info in
              correct ((makeMessage HT_client_key_exchange ycBytes),pms)
  
  (* Obsolete *)
  (*
  
negative.code: let find_client_cert (certReqMsg:certificateRequest) : (cert list) option =
      (* TODO *) None
  
  
  let certificateVerifyCheck (state:hs_state) (payload:bytes) =
      (* TODO: pretend client sent valid verification data. 
  