encryptionContext = new Smb2EncryptionContext(1, DialectVersion.SMB311, testEncryptionKey, testDecryptionKey);
    }

    @Test
    @DisplayName("Should create encryption context with valid parameters")
    void testConstructor() {
        // When
        Smb2EncryptionContext context = new Smb2EncryptionContext(1, DialectVersion.SMB311, testEncryptionKey, testDecryptionKey);

        // Then

        assertEquals(DialectVersion.SMB311, config.getMaximumVersion());
    }

    @Test
    @DisplayName("Test initProtocolVersions with min >= max")
    void testInitProtocolVersionsWithMinGreaterThanMax() {
        config.initProtocolVersions("SMB311", "SMB202");

        assertEquals(DialectVersion.SMB311, config.getMinimumVersion());
        assertEquals(DialectVersion.SMB311, config.getMaximumVersion());
    }

    void testPreauthHashThreadSafety() throws Exception {
        // Setup SMB3.1.1 negotiation
        when(negotiateResponse.getSelectedDialect()).thenReturn(DialectVersion.SMB311);
        when(negotiateResponse.getSelectedPreauthHash()).thenReturn(1); // SHA-512
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        assertEquals("LM compatibility should default to 3", 3, config.getLanManCompatibility());

        // Verify maximum version supports latest SMB 3.1.1
        assertEquals("Maximum version should be SMB 3.1.1", DialectVersion.SMB311, config.getMaximumVersion());
    }

    /**
     * Test that SMB1 is disabled by default
     */
    @Test
    public void testSMB1Disabled() throws CIFSException {

# Authentication
jcifs.smb.client.domain=WORKGROUP
jcifs.smb.client.username=guest
jcifs.smb.client.password=

# Protocol versions (SMB1 to SMB 3.1.1)
jcifs.smb.client.minVersion=SMB1
jcifs.smb.client.maxVersion=SMB311

# Security
jcifs.smb.client.signingPreferred=false
jcifs.smb.client.signingEnforced=false
jcifs.smb.client.encryptionEnforced=false
jcifs.smb.client.disablePlainTextPasswords=true

# Performance

            final int reqLen = negotiateWrite(smb2neg, first != null);
            final boolean doPreauth = getContext().getConfig().getMaximumVersion().atLeast(DialectVersion.SMB311);
            if (doPreauth) {
                negoReqBuffer = new byte[reqLen];
                System.arraycopy(this.sbuf, 4, negoReqBuffer, 0, reqLen);
            }

            negotiatePeek();

            jcifs.DialectVersion dialect = transport.getNegotiateResponse().getSelectedDialect();
            return transport.isSMB2() && dialect.atLeast(jcifs.DialectVersion.SMB300) && !dialect.atLeast(jcifs.DialectVersion.SMB311);
        } catch (final SmbException e) {
            log.debug("Failed to connect for determining SMB 3.0 support", e);
            return false;
        }
    }

        }

        final List<NegotiateContextRequest> negoContexts = new LinkedList<>();
        if (config.getMaximumVersion() != null && config.getMaximumVersion().atLeast(DialectVersion.SMB311)) {
            final byte[] salt = new byte[32];
            config.getRandom().nextBytes(salt);
            negoContexts.add(

            return;
        }

        final Smb2NegotiateResponse nego = (Smb2NegotiateResponse) trans.getNegotiateResponse();
        if (nego.getSelectedDialect().atLeast(DialectVersion.SMB311)) {
            // have preauth integrity instead
            log.debug("Secure negotiation does not apply, is SMB3.1");
            return;
        }

            this.supportsEncryption = tc.getConfig().isEncryptionEnabled();
        }

        if (this.selectedDialect.atLeast(DialectVersion.SMB311) && !checkNegotiateContexts(r, this.commonCapabilities)) {
            return false;
        }

        final int maxBufferSize = tc.getConfig().getTransactionBufferSize();
        this.maxReadSize =