log.trace(Hexdump.toHexString(token));
            }

            this.masterKey = msg3.getMasterKey();

            if (this.masterKey != null && (this.ntlmsspFlags & NtlmFlags.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY) != 0) {
                initSessionSecurity(msg3.getMasterKey());
            }

            this.isEstablished = true;
            this.state++;
            return out;

        // Then
        // Master key should always be generated with extended session security or NTLMv2
        assertNotNull(type3.getMasterKey());
        assertEquals(16, type3.getMasterKey().length);
    }

    @Test
    @DisplayName("Should handle extended session security")
    void testExtendedSessionSecurity() throws Exception {
        // Given

                    }
                }

                if ((ntlmsspFlags & NtlmFlags.NTLMSSP_NEGOTIATE_SIGN) != 0) {
                    signingKey = msg3.getMasterKey();
                }

                isEstablished = true;
                state++;
                break;
            } catch (final Exception e) {

     * @return A <code>byte[]</code> containing the session key.
     */
    public byte[] getMasterKey() {
        return this.masterKey;
    }

    /**
     * Returns the session key.
     *
     * This is the encrypted session key included in the message,
     * if the actual session key is desired use {@link #getMasterKey()} instead.
     *
     * @return A <code>byte[]</code> containing the encrypted session key.

     * The real session key if the regular session key is actually
     * the encrypted version used for key exchange.
     *
     * @return A <code>byte[]</code> containing the session key.
     */
    public byte[] getMasterKey() {
        return masterKey;
    }

    /**
     * Returns the session key.
     *
     * @return A <code>byte[]</code> containing the session key.
     */
    public byte[] getSessionKey() {