diff --git a/handshake/server_config_client.go b/handshake/server_config_client.go
new file mode 100644
index 000000000..ed4cfe380
--- /dev/null
+++ b/handshake/server_config_client.go
@@ -0,0 +1,118 @@
+package handshake
+
+import (
+	"bytes"
+	"encoding/binary"
+	"errors"
+	"time"
+
+	"github.com/lucas-clemente/quic-go/qerr"
+)
+
+type serverConfigClient struct {
+	ID     []byte
+	obit   []byte
+	expiry time.Time
+}
+
+var (
+	errMessageNotServerConfig = errors.New("ServerConfig must have TagSCFG")
+)
+
+// parseServerConfig parses a server config
+func parseServerConfig(data []byte) (*serverConfigClient, error) {
+	tag, tagMap, err := ParseHandshakeMessage(bytes.NewReader(data))
+	if err != nil {
+		return nil, err
+	}
+	if tag != TagSCFG {
+		return nil, errMessageNotServerConfig
+	}
+
+	scfg := &serverConfigClient{}
+	err = scfg.parseValues(tagMap)
+	if err != nil {
+		return nil, err
+	}
+
+	return scfg, nil
+}
+
+func (s *serverConfigClient) parseValues(tagMap map[Tag][]byte) error {
+	// SCID
+	scfgID, ok := tagMap[TagSCID]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "SCID")
+	}
+	if len(scfgID) != 16 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "SCID")
+	}
+	s.ID = scfgID
+
+	// KEXS
+	// TODO: allow for P256 in the list
+	// TODO: setup Key Exchange
+	kexs, ok := tagMap[TagKEXS]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "KEXS")
+	}
+	if len(kexs)%4 != 0 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "KEXS")
+	}
+	if !bytes.Equal(kexs, []byte("C255")) {
+		return qerr.Error(qerr.CryptoNoSupport, "KEXS")
+	}
+
+	// AEAD
+	aead, ok := tagMap[TagAEAD]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "AEAD")
+	}
+	if len(aead)%4 != 0 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "AEAD")
+	}
+	var aesgFound bool
+	for i := 0; i < len(aead)/4; i++ {
+		if bytes.Equal(aead[4*i:4*i+4], []byte("AESG")) {
+			aesgFound = true
+			break
+		}
+	}
+	if !aesgFound {
+		return qerr.Error(qerr.CryptoNoSupport, "AEAD")
+	}
+
+	// PUBS
+	// TODO: save this value
+	pubs, ok := tagMap[TagPUBS]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "PUBS")
+	}
+	if len(pubs) != 35 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "PUBS")
+	}
+
+	// OBIT
+	obit, ok := tagMap[TagOBIT]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "OBIT")
+	}
+	if len(obit) != 8 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "OBIT")
+	}
+	s.obit = obit
+
+	// EXPY
+	expy, ok := tagMap[TagEXPY]
+	if !ok {
+		return qerr.Error(qerr.CryptoMessageParameterNotFound, "EXPY")
+	}
+	if len(expy) != 8 {
+		return qerr.Error(qerr.CryptoInvalidValueLength, "EXPY")
+	}
+	s.expiry = time.Unix(int64(binary.LittleEndian.Uint64(expy)), 0)
+
+	// TODO: implement VER
+
+	return nil
+}
diff --git a/handshake/server_config_client_test.go b/handshake/server_config_client_test.go
new file mode 100644
index 000000000..0367be658
--- /dev/null
+++ b/handshake/server_config_client_test.go
@@ -0,0 +1,198 @@
+package handshake
+
+import (
+	"bytes"
+	"time"
+
+	. "github.com/onsi/ginkgo"
+	. "github.com/onsi/gomega"
+)
+
+var _ = Describe("Server Config", func() {
+	var tagMap map[Tag][]byte
+
+	BeforeEach(func() {
+		// This tagMap can be passed to parseValues and doesn't cause any errors
+		tagMap = make(map[Tag][]byte)
+		tagMap[TagSCID] = bytes.Repeat([]byte{'F'}, 16)
+		tagMap[TagKEXS] = []byte("C255")
+		tagMap[TagAEAD] = []byte("AESG")
+		tagMap[TagPUBS] = bytes.Repeat([]byte{0}, 35)
+		tagMap[TagOBIT] = bytes.Repeat([]byte{0}, 8)
+		tagMap[TagEXPY] = bytes.Repeat([]byte{0}, 8)
+	})
+
+	Context("parsing the server config", func() {
+		It("rejects a handshake message with the wrong message tag", func() {
+			var serverConfig bytes.Buffer
+			WriteHandshakeMessage(&serverConfig, TagCHLO, make(map[Tag][]byte))
+			_, err := parseServerConfig(serverConfig.Bytes())
+			Expect(err).To(MatchError(errMessageNotServerConfig))
+		})
+
+		It("errors on invalid handshake messages", func() {
+			var serverConfig bytes.Buffer
+			WriteHandshakeMessage(&serverConfig, TagSCFG, make(map[Tag][]byte))
+			_, err := parseServerConfig(serverConfig.Bytes()[:serverConfig.Len()-2])
+			Expect(err).To(MatchError("unexpected EOF"))
+		})
+
+		It("passes on errors encountered when reading the TagMap", func() {
+			var serverConfig bytes.Buffer
+			WriteHandshakeMessage(&serverConfig, TagSCFG, make(map[Tag][]byte))
+			_, err := parseServerConfig(serverConfig.Bytes())
+			Expect(err).To(MatchError("CryptoMessageParameterNotFound: SCID"))
+		})
+
+		It("reads an example Handshake Message", func() {
+			var serverConfig bytes.Buffer
+			WriteHandshakeMessage(&serverConfig, TagSCFG, tagMap)
+			scfg, err := parseServerConfig(serverConfig.Bytes())
+			Expect(err).ToNot(HaveOccurred())
+			Expect(scfg.ID).To(Equal(tagMap[TagSCID]))
+			Expect(scfg.obit).To(Equal(tagMap[TagOBIT]))
+		})
+	})
+
+	Context("Reading values fromt the TagMap", func() {
+		var scfg *serverConfigClient
+
+		BeforeEach(func() {
+			scfg = &serverConfigClient{}
+		})
+
+		Context("ServerConfig ID", func() {
+			It("parses the ServerConfig ID", func() {
+				id := []byte{0xb2, 0xa4, 0xbb, 0x8f, 0xf6, 0x51, 0x28, 0xfd, 0x4d, 0xf7, 0xb3, 0x9a, 0x91, 0xe7, 0x91, 0xfb}
+				tagMap[TagSCID] = id
+				err := scfg.parseValues(tagMap)
+				Expect(err).ToNot(HaveOccurred())
+				Expect(scfg.ID).To(Equal(id))
+			})
+
+			It("errors if the ServerConfig ID is missing", func() {
+				delete(tagMap, TagSCID)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: SCID"))
+			})
+
+			It("rejects ServerConfig IDs that have the wrong length", func() {
+				tagMap[TagSCID] = bytes.Repeat([]byte{'F'}, 17) // 1 byte too long
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: SCID"))
+			})
+		})
+
+		Context("KEXS", func() {
+			It("rejects KEXS values that have the wrong length", func() {
+				tagMap[TagKEXS] = bytes.Repeat([]byte{'F'}, 5) // 1 byte too long
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: KEXS"))
+			})
+
+			It("rejects KEXS values other than C255", func() {
+				tagMap[TagKEXS] = []byte("P256")
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoNoSupport: KEXS"))
+			})
+
+			It("errors if the KEXS is missing", func() {
+				delete(tagMap, TagKEXS)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: KEXS"))
+			})
+		})
+
+		Context("AEAD", func() {
+			It("rejects AEAD values that have the wrong length", func() {
+				tagMap[TagAEAD] = bytes.Repeat([]byte{'F'}, 5) // 1 byte too long
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: AEAD"))
+			})
+
+			It("rejects AEAD values other than AESG", func() {
+				tagMap[TagAEAD] = []byte("S20P")
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoNoSupport: AEAD"))
+			})
+
+			It("recognizes AESG in the list of AEADs, at the first position", func() {
+				tagMap[TagAEAD] = []byte("AESGS20P")
+				err := scfg.parseValues(tagMap)
+				Expect(err).ToNot(HaveOccurred())
+			})
+
+			It("recognizes AESG in the list of AEADs, not at the first position", func() {
+				tagMap[TagAEAD] = []byte("S20PAESG")
+				err := scfg.parseValues(tagMap)
+				Expect(err).ToNot(HaveOccurred())
+			})
+
+			It("errors if the AEAD is missing", func() {
+				delete(tagMap, TagAEAD)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: AEAD"))
+			})
+		})
+
+		Context("PUBS", func() {
+			It("rejects PUBS values that have the wrong length", func() {
+				tagMap[TagPUBS] = bytes.Repeat([]byte{'F'}, 100) // completely wrong length
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: PUBS"))
+			})
+
+			It("errors if the PUBS is missing", func() {
+				delete(tagMap, TagPUBS)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: PUBS"))
+			})
+		})
+
+		Context("OBIT", func() {
+			It("parses the OBIT value", func() {
+				obit := []byte{0x1, 0x2, 0x3, 0x4, 0x5, 0x6, 0x7, 0x8}
+				tagMap[TagOBIT] = obit
+				err := scfg.parseValues(tagMap)
+				Expect(err).ToNot(HaveOccurred())
+				Expect(scfg.obit).To(Equal(obit))
+			})
+
+			It("errors if the OBIT is missing", func() {
+				delete(tagMap, TagOBIT)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: OBIT"))
+			})
+
+			It("rejets OBIT values that have the wrong length", func() {
+				tagMap[TagOBIT] = bytes.Repeat([]byte{'F'}, 7) // 1 byte too short
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: OBIT"))
+			})
+		})
+
+		Context("EXPY", func() {
+			It("parses the expiry date", func() {
+				tagMap[TagEXPY] = []byte{0xdc, 0x89, 0x0e, 0x59, 0, 0, 0, 0} // UNIX Timestamp 0x590e89dc = 1494125020
+				err := scfg.parseValues(tagMap)
+				Expect(err).ToNot(HaveOccurred())
+				year, month, day := scfg.expiry.Date()
+				Expect(year).To(Equal(2017))
+				Expect(month).To(Equal(time.Month(5)))
+				Expect(day).To(Equal(7))
+			})
+
+			It("errors if the EXPY is missing", func() {
+				delete(tagMap, TagEXPY)
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoMessageParameterNotFound: EXPY"))
+			})
+
+			It("rejects EXPY values that have the wrong length", func() {
+				tagMap[TagEXPY] = bytes.Repeat([]byte{'F'}, 9) // 1 byte too long
+				err := scfg.parseValues(tagMap)
+				Expect(err).To(MatchError("CryptoInvalidValueLength: EXPY"))
+			})
+		})
+	})
+})