byte[] client = hex("DEADBEEFCAFEBABE");

        // Act
        byte[] a = NtlmUtil.getNTLM2Response(pwdHash, server, client);
        server[7] ^= 0x01; // mutate
        byte[] b = NtlmUtil.getNTLM2Response(pwdHash, server, client);

        // Assert
        assertEquals(24, a.length);
        assertFalse(Arrays.equals(a, b), "Changing server challenge must alter the response");
    }

    @Test

     * @param clientChallenge the client challenge bytes
     * @return the calculated response
     * @throws GeneralSecurityException if a cryptographic error occurs
     */
    public static byte[] getNTLM2Response(final byte[] passwordHash, final byte[] serverChallenge, final byte[] clientChallenge)
            throws GeneralSecurityException {
        final byte[] sessionHash = new byte[8];

                final byte[] responseKeyNT = NtlmPasswordAuthentication.nTOWFv1(password);
                final byte[] ntlm2Response =
                        NtlmPasswordAuthentication.getNTLM2Response(responseKeyNT, type2.getChallenge(), clientChallenge);

                setLMResponse(clientChallenge);
                setNTResponse(ntlm2Response);

     * @param serverChallenge the server challenge bytes
     * @param clientChallenge the client challenge bytes
     * @return the NTLM2 response bytes
     */
    public static byte[] getNTLM2Response(final byte[] nTOWFv1, final byte[] serverChallenge, final byte[] clientChallenge) {
        final byte[] sessionHash = new byte[8];

        try {
            MessageDigest md5;

                tc.getConfig().getRandom().nextBytes(clientChallenge);
                java.util.Arrays.fill(clientChallenge, 8, 24, (byte) 0x00);

                final byte[] ntlm2Response = NtlmUtil.getNTLM2Response(passwordHash, type2.getChallenge(), clientChallenge);

                setLMResponse(clientChallenge);
                setNTResponse(ntlm2Response);

                final byte[] sessionNonce = new byte[16];