import com.subgraph.orchid.misc.Utils; //导入依赖的package包/类
public boolean deriveKeysFromHandshakeResponse(byte[] handshakeResponse, byte[] keyMaterialOut, byte[] verifyHashOut) {
	isBad = false;
			
	final ByteBuffer hr = ByteBuffer.wrap(handshakeResponse);
	byte[] serverPub = new byte[CURVE25519_PUBKEY_LEN];
	byte[] authCandidate = new byte[DIGEST256_LEN];
	hr.get(serverPub);
	hr.get(authCandidate);

	final byte[] secretInput = buildSecretInput(serverPub);
	final byte[] verify = tweak("verify", secretInput);
	final byte[] authInput = buildAuthInput(verify, serverPub);
	final byte[] auth = tweak("mac", authInput);
	isBad |= !Utils.constantTimeArrayEquals(auth, authCandidate);
	final byte[] seed = tweak("key_extract", secretInput);
	
	final TorRFC5869KeyDerivation kdf = new TorRFC5869KeyDerivation(seed);
	kdf.deriveKeys(keyMaterialOut, verifyHashOut);
	
	return !isBad;
}