byte[] ks = reply.getKS();
if (!hv.isTrusted(transport, reply.getKeyFormat(), ks)) {
throw new SSHException("Server host key not trusted");
}
SSHPublicKey pubkey = pkf.decode(ks);
Signature verifier = pubkey.getVerifier();
dg.reset();
dg.update(Utils.encodeBytes(transport.getVC()));
dg.update(Utils.encodeBytes(transport.getVS()));
dg.update(Utils.encodeBytes(transport.getIC()));