byte[] client = hex("DEADBEEFCAFEBABE");

        // Act
        byte[] a = NtlmUtil.getNTLM2Response(pwdHash, server, client);
        server[7] ^= 0x01; // mutate
        byte[] b = NtlmUtil.getNTLM2Response(pwdHash, server, client);

        // Assert
        assertEquals(24, a.length);
        assertFalse(Arrays.equals(a, b), "Changing server challenge must alter the response");
    }

    @Test

     * @param clientChallenge the client challenge bytes
     * @return the calculated response
     * @throws GeneralSecurityException if a cryptographic error occurs
     */
    public static byte[] getNTLM2Response(final byte[] passwordHash, final byte[] serverChallenge, final byte[] clientChallenge)
            throws GeneralSecurityException {
        final byte[] sessionHash = new byte[8];