*
     * @param dialect the SMB dialect version
     * @param sessionKey the base session key
     * @param preauthIntegrity the pre-authentication integrity hash (for SMB 3.1.1) or null
     * @return derived signing key
     */
    public static byte[] deriveSigningKey(final int dialect, final byte[] sessionKey, final byte[] preauthIntegrity) {
        return derive(sessionKey, dialect == Smb2Constants.SMB2_DIALECT_0311 ? SIGNLABEL_311 : SIGNLABEL_300,

        super(andx);
        command = SMB_COM_SESSION_SETUP_ANDX;
        this.session = session;
        this.cred = cred;

        sessionKey = session.transport.sessionKey;
        capabilities = session.transport.capabilities;

        if (session.transport.server.security == SECURITY_USER) {
            if (cred instanceof final NtlmPasswordAuthentication auth) {

        buffer.putShort((short) 10); // maxNumberVcs
        buffer.putInt(8192); // maxBufferSize
        buffer.putInt(65536); // maxRawSize
        buffer.putInt(123456789); // sessionKey
        buffer.putInt(SmbConstants.CAP_UNICODE | SmbConstants.CAP_NT_SMBS); // capabilities
        buffer.putLong(new Date().getTime()); // serverTime
        buffer.putShort((short) -480); // serverTimeZone

                + ",maxMpxCount=" + server.maxMpxCount + ",maxNumberVcs=" + server.maxNumberVcs + ",maxBufferSize=" + server.maxBufferSize
                + ",maxRawSize=" + server.maxRawSize + ",sessionKey=0x" + Hexdump.toHexString(server.sessionKey, 8) + ",capabilities=0x"
                + Hexdump.toHexString(server.capabilities, 8) + ",serverTime=" + new Date(server.serverTime) + ",serverTimeZone="

        serverData.encryptedPasswords = true;
        serverData.encryptionKey = new byte[8];

        // Configure mock transport
        mockTransport.server = serverData;
        mockTransport.sessionKey = 0x12345678;
        mockTransport.capabilities = SmbConstants.CAP_UNICODE | SmbConstants.CAP_NT_SMBS;
        mockTransport.snd_buf_size = 16644;
        mockTransport.maxMpxCount = 50;

        // Configure mock session

        byte[] buf = new byte[256];
        int len = invokeProtectedInt(obj, "writeParameterWordsWireFormat", buf, 0);

        // Expected size: 2 (sendBuffer) + 2 (mpxCount) + 2 (vcNumber) + 4 (sessionKey) + 2 (blob length) + 4 (reserved) + 4 (capabilities)
        int expected = 2 + 2 + 2 + 4 + 2 + 4 + 4;
        assertEquals(expected, len);

        int off = 0;
        assertEquals(65535, SMBUtil.readInt2(buf, off));

                + ",maxMpxCount=" + this.negotiated.getNegotiatedMpxCount() + ",VC_NUMBER=" + getConfig().getVcNumber() + ",sessionKey="
                + this.negotiated.getNegotiatedSessionKey() + ",lmHash.length=" + (this.lmHash == null ? 0 : this.lmHash.length)