void testEncryptionCapabilitySmb3() {
        // Given
        when(mockConfig.isEncryptionEnabled()).thenReturn(true);
        when(mockConfig.getMaximumVersion()).thenReturn(DialectVersion.SMB300);

        // When
        request = new Smb2NegotiateRequest(mockConfig, 0);

        // Then
        assertTrue((request.getCapabilities() & Smb2Constants.SMB2_GLOBAL_CAP_ENCRYPTION) != 0);
    }

    /**
     * SMB 2.1 - Windows 7/Server 2008R2
     */
    SMB210(Smb2Constants.SMB2_DIALECT_0210),

    /**
     * SMB 3.0 - Windows 8/Server 2012
     */
    SMB300(Smb2Constants.SMB2_DIALECT_0300),

    /**
     * SMB 3.0.2 - Windows 8.1/Server 2012R2
     */
    SMB302(Smb2Constants.SMB2_DIALECT_0302),

    /**
     * SMB 3.1.1 - Windows 10/Server 2016
     */

            this.capabilities |= Smb2Constants.SMB2_GLOBAL_CAP_DFS;
        }

        if (config.isEncryptionEnabled() && config.getMaximumVersion() != null
                && config.getMaximumVersion().atLeast(DialectVersion.SMB300)) {
            this.capabilities |= Smb2Constants.SMB2_GLOBAL_CAP_ENCRYPTION;
        }

        final Set<DialectVersion> dvs =

    void testAllDialectVersions() {
        // Test each dialect version
        DialectVersion[] dialects = { DialectVersion.SMB1, DialectVersion.SMB202, DialectVersion.SMB210, DialectVersion.SMB300,
                DialectVersion.SMB302, DialectVersion.SMB311 };

        for (DialectVersion dialect : dialects) {
            when(negotiationResponse.getSelectedDialect()).thenReturn(dialect);

        return Stream.of(Arguments.of(0x0202, DialectVersion.SMB202, true), Arguments.of(0x0210, DialectVersion.SMB210, true),
                Arguments.of(0x0300, DialectVersion.SMB300, true), Arguments.of(0x0302, DialectVersion.SMB302, true),
                Arguments.of(0x0311, DialectVersion.SMB311, true), Arguments.of(0xFFFF, null, false), // SMB2_DIALECT_ANY

                // Default to AES-128-GCM for SMB 3.1.1 if no cipher negotiated
                cipherId = EncryptionNegotiateContext.CIPHER_AES128_GCM;
            }
        } else if (dialect.atLeast(DialectVersion.SMB300)) {
            // SMB 3.0/3.0.2 only supports AES-128-CCM
            cipherId = EncryptionNegotiateContext.CIPHER_AES128_CCM;
        } else {