http://opsec3u4qp6dpif5ckkerqxyrovdyk2zsk3pam5f65nlqor2lurkwzyd.onion/guide/about-tor/how-tor-works/clearnet-websites
OR: Received the data from the OP : It verifies that the OP sent the right ID and B . Then it generates its own ephemeral keys y,Y = KEYGEN() . Computes S from yX , bX , ID , B , X , Y and PROTOID values. Computes AUTH hash from VERIFY , ID , B , Y , X , PROTOID , "Server" Sends Y public key and AUTH hash string to the OP .