For anyone curious about SSH implementation internals or cryptographic protocols, every CL in that chain (listed on the right hand side in Gerrit) has a detailed commit message, especially https://go.dev/cl/392015 which fixes a vulnerability near-miss.