//nefariousplan

Rekey Is Not Reauth

An SSH or TLS implementation advances its authenticated-session state after processing a client-requested rekey, treating a transport-layer key refresh as the gate the application-layer authentication phase was supposed to pass.