http://opsec3u4qp6dpif5ckkerqxyrovdyk2zsk3pam5f65nlqor2lurkwzyd.onion/guide/about-tor/how-tor-works/clearnet-websites
Then it generates its own ephemeral keys y,Y = KEYGEN() . Computes S from yX , bX , ID , B , X , Y and PROTOID values. Computes AUTH hash from VERIFY , ID , B , Y , X , PROTOID , "Server" Sends Y public key and AUTH hash string to the OP .