The resulting integer is converted to a byte stream, msb first. This byte stream is padded and encrypted identi- cally using the key with the larger modulus. After the client has sent the session key, it starts to use the selected algorithm and key for decrypting any received packets, and for encrypting any sent packets. It is one of 4 possible methods for the server to verify that the user in question may enter. This authentication method does not trust the remote host, the network, name services or anything else.
Authentication is based solely on the possession of the password.
Anyone in pos- session of the password can log in, but nobody else. I've verified that the code actually does all this.