I am a bit confused about packet decryption of Tor on the client.
I understand that if a client sends a request to a web server by using Tor, the request will be encrypted a couple of times, and sent to a Tor relay. The relay will decrypt a layer by using its private key, and when the request reaches to the exit node, eventually, it will be completely decrypted.
But the problem is, on the return path, answer to this question says that the same encryption way (I am also adding the image showing the concept below) is also used for the return path; So, when the packets reach to the client they will be encrypted. Without knowing the private keys of the relays, how will the client be able to decrypt received packets from the server?
Image showing the Tor concept