Comment by djmdjm

This is completely irrelevant to password based SSH authentication. The timing obfuscation is for the session _after_ authentication.