http://i3xi5qxvnvtjk3am4vkw3xvfecjitic3brox4tfgl6mxqyzctqudscqd.onion/tor-spec/create-created-cells.html
VER -- An optional shared verification string: The client computes: x,X = KEYGEN()
Bx = EXP(B,x)
secret_input_phase1 = Bx | ID | X | B | PROTOID | ENCAP(VER)
phase1_keys = KDF_msgkdf(secret_input_phase1)
(ENC_K1, MAC_K1) = PARTITION(phase1_keys, ENC_KEY_LEN, MAC_KEY_LEN)
encrypted_msg = ENC(ENC_K1, CM)
msg_mac = MAC_msgmac(MAC_K1, ID | B | X | encrypted_msg) The client then sends, as its CREATE handshake: Field Value Size NODEID ID ID_LEN bytes KEYID B...