When I first saw this post, I got excited that someone had finally addressed the side channel from 17 years ago, which gathered inter-packet timing from ssh packets (and the fact that passwords are not echo'd) to a) detect when passwords were being typed, and b) use Hidden Markov Models to extract keystroke timing to try to extract the likely passwords.
There have been defenses proposed over the years, but none were accepted by OpenSSH AFAICT.
There have been defenses proposed over the years, but none were accepted by OpenSSH AFAICT.
https://users.ece.cmu.edu/~vsekar/Teaching/Spring19/18731/re...
https://www.researchgate.net/publication/2907598_Timing_Anal...