Client signs previous handshake messages with private key to prove it has possession of private key for client certificate. It should be a lot faster than a pu

Client signs previous handshake messages with private key to prove it has possession of private key for client certificate. It should be a lot faster than a purposefully slow kdf AFAIK.