The kex hash.
K as an unsigned big-endian magnitude.
The exchange hash for this kex.
The session identifier (H of the first kex).
The byte lengths the negotiated ciphers/MACs need (same both ways).
The client-to-server and server-to-client key material.
Derives both directions' IV/key/MAC material from K, H, and the session id.