Then the client sends a Change_cipher_spec message, which is not a TLS Handshake Message: it has its own TLS ContentType, so it will be sent in a Record Protocol of its own. Change_cipher_spec contents are purely symbolic (a single byte of value 1). This message marks the point at which the client switches to the newly negotiated Cipher Suite and Master Secret Key. All subsequent records from the client will then be sent using Encryption.