I've read in DigitalOcean article about SSH that in order for a server to authenticate a client:
- The server sends the client this encrypted message.
- If the client actually has the associated private key, it will be able to decrypt the message using that key, revealing the original number.
But wasn't it enough for the client to sign the message, why do we need the encryption? Also, given that DSA keys can be used in SSH I'm starting to doubt that the article is correct.