DialectVersion.SMB1.getDialect();
        });

        // SMB2+ versions should have valid dialect codes
        assertTrue(DialectVersion.SMB202.getDialect() > 0);
        assertTrue(DialectVersion.SMB210.getDialect() > 0);
        assertTrue(DialectVersion.SMB300.getDialect() > 0);
        assertTrue(DialectVersion.SMB302.getDialect() > 0);
        assertTrue(DialectVersion.SMB311.getDialect() > 0);

        return this.securityMode;
    }

    /**
     * Gets the negotiated SMB dialect
     *
     * @return the SMB dialect negotiated with the server
     */
    public int getDialect() {
        return this.dialect;
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Decodable#decode(byte[], int, int)
     */
    @Override

     */
    public final boolean isSMB2() {
        return this.smb2;
    }

    /**
     * Get the SMB2 dialect identifier
     *
     * @return the dialect
     */
    public final int getDialect() {
        if (!this.smb2) {
            throw new UnsupportedOperationException();
        }
        return this.dialect;
    }

    /**
     * Check if this dialect version is at least the specified version

        // Then
        assertNotNull(context, "Encryption context should be created");
        assertEquals(1, context.getCipherId(), "Cipher ID should match");
        assertEquals(DialectVersion.SMB311, context.getDialect(), "Dialect should match");
    }

    @Test
    @DisplayName("Should return correct cipher ID")
    void testGetCipherId() {
        // When
        int cipherId = encryptionContext.getCipherId();

        assertArrayEquals(testGuid, response.getServerGuid(), "Server GUID should match");
        assertEquals(testSecurityMode, response.getSecurityMode(), "Security mode should match");
        assertEquals(testDialect, response.getDialect(), "Dialect should match");
    }

    @Test
    @DisplayName("Test decode with different buffer offset")
    void testDecodeWithDifferentOffset() throws SMBProtocolDecodingException {

            assertEquals(EncryptionNegotiateContext.CIPHER_AES128_CCM, ccm.getCipherId());
            assertEquals(DialectVersion.SMB300, ccm.getDialect());

            // SMB 3.1.1 -> default AES-128-GCM when server did not choose
            Smb2NegotiateResponse smb311 = new Smb2NegotiateResponse(cfg);

        this.dialects = new int[dvs.size()];
        int i = 0;
        for (final DialectVersion ver : dvs) {
            this.dialects[i] = ver.getDialect();
            i++;
        }

        if (config.getMaximumVersion().atLeast(DialectVersion.SMB210)) {
            System.arraycopy(config.getMachineId(), 0, this.clientGuid, 0, this.clientGuid.length);
        }

        DialectVersion selected = null;
        for (final DialectVersion dv : DialectVersion.values()) {
            if (!dv.isSMB2()) {
                continue;
            }
            if (dv.getDialect() == getDialectRevision()) {
                selected = dv;
            }
        }

        if (selected == null) {
            log.debug("Server returned an unknown dialect");
            return false;

        }

        try {
            // Derive encryption and decryption keys using SMB3 KDF
            final int dialectInt = dialect.getDialect();
            final byte[] encryptionKey = Smb3KeyDerivation.deriveEncryptionKey(dialectInt, sessionKey, preauthHash);