Well, to prove my point of you guys coming across as cocky know-it-alls. Here you just did it again, perhaps without realizing it -

> People asked – why take a random value from server and a random value from client and combine both with a creepy function?

People well-versed in applied crypto would never ask this question, because all standard key exchange protocols most certainly use both sides as a source of randomness. Furthermore - "creepy"? That's all you got away from all those comments that said your KDF was unproven, not peer-reviewed and weak in comparison? You basically cherry-picked a dumb question (I assume you haven't made it up) and then proceeded to demonstrate how clever you are. Guess what? You just reiterated basic facts, but assigned them to yourself.

Let me repeat what I said. Your problem is not your crypto. Your problem is the attitude.