[unsnap_biceps]

It does, and there's typically a maximum number of attempts (MaxAuthTries defaults to 6 IIRC) before the server just rejects the connection attempt.

[84634E1A607A]

Yep, but this is server-side setting. Were I a sniffer, I would set this to 10000 and now I can correlate keys.