Tldr on page 4: * The miner generates a random nonce * It initiates a TLS 1.2 connection to the victim server, and uses the nonce as `client_random` * The se

Tldr on page 4: * The miner generates a random nonce * It initiates a TLS 1.2 connection to the victim server, and uses the nonce as `client_random` * The server generates an ephemeral public key (eg. using ephemeral DH or ephemeral ECDH), and responds with a 32-byte `server_random` * The server sends its certificate chain as well as its public key, and signs the DH key exchange parameters along with `client-random` and `server-random`. This is the proof of work * The client computes the SHA256 hash of the DH params, the signature and the nonce, and does the usual difficulty check; if it passes, it is used to make a block