private static final Logger log = LoggerFactory.getLogger(SecureCredentialStorage.class);

    private static final String ENCRYPTION_ALGORITHM = "AES/GCM/NoPadding";
    private static final String KEY_ALGORITHM = "AES";
    private static final String KEY_DERIVATION_ALGORITHM = "PBKDF2WithHmacSHA256";
    private static final int KEY_SIZE = 256;
    private static final int GCM_TAG_SIZE = 128;

     * @return the encrypted data
     */
    public byte[] encrypt(final byte[] data) {
        final Cipher cipher = pollEncryptoCipher();
        byte[] encrypted;
        try {
            encrypted = cipher.doFinal(data);
        } catch (final IllegalBlockSizeException e) {
            throw new IllegalBlockSizeRuntimeException(e);
        } catch (final BadPaddingException e) {
            throw new BadPaddingRuntimeException(e);

    private static final Logger log = LoggerFactory.getLogger(Smb2SigningDigest.class);

    /**
     *
     */
    private static final int SIGNATURE_OFFSET = 48;
    private static final int SIGNATURE_LENGTH = 16;
    private final Mac digest;
    private final ReentrantLock signingLock = new ReentrantLock();
    private byte[] signingKey;
    private final String algorithmName;

    enum Nullability {
        NON_NULL, NULLABLE, UNMARKED,
    }

    private static final List<String> NULLABLE_ANNOTATIONS = [
        javax.annotation.Nullable,
        org.jetbrains.annotations.Nullable,
        org.jspecify.annotations.Nullable,
    ].collect { it.name }

    private static final String NULL_UNMARKED_ANNOTATION = org.jspecify.annotations.NullUnmarked.class.name

     * @param preauthHash
     *            preauth integrity hash for SMB 3.1.1 (optional)
     */
    public Smb2EncryptionContext(final int cipherId, final DialectVersion dialect, final byte[] encryptionKey, final byte[] decryptionKey,
            final SecureKeyManager keyManager, final byte[] sessionKey, final byte[] preauthHash) {
        this.cipherId = cipherId;
        this.dialect = dialect;
        this.keyManager = keyManager;

        }
    }

    private final NtlmPasswordAuthenticator auth;
    private int ntlmsspFlags;
    private final String workstation;
    private boolean isEstablished = false;
    private byte[] serverChallenge = null;
    private byte[] masterKey = null;
    private final String netbiosName = null;

    private final boolean requireKeyExchange;
    private final AtomicInteger signSequence = new AtomicInteger(0);

  private static final class Dummies {

    @Keep
    public static final class InMemoryPrintStream extends PrintStream {
      @Keep
      public InMemoryPrintStream() {
        super(new ByteArrayOutputStream());
      }
    }

    @Keep
    public static final class InMemoryPrintWriter extends PrintWriter {
      @Keep

  private static final class Dummies {

    @Keep
    public static final class InMemoryPrintStream extends PrintStream {
      @Keep
      public InMemoryPrintStream() {
        super(new ByteArrayOutputStream());
      }
    }

    @Keep
    public static final class InMemoryPrintWriter extends PrintWriter {
      @Keep

    private static final long serialVersionUID = 1L;

    /** The key of the message: Realm */
    public static final String LABELS_AUTH_REALM = "{labels.authRealm}";

    /** The key of the message: Status */
    public static final String LABELS_AVAILABLE = "{labels.available}";

    /** The key of the message: Created By */
    public static final String LABELS_CREATED_BY = "{labels.createdBy}";

    }

    @Override
    public SuggestItem parseSearchWords(final String[] words, final String[][] readings, final String[] fields, final String[] tags,
            final String[] roles, final long score, final ReadingConverter readingConverter, final Normalizer normalizer,
            final SuggestAnalyzer analyzer, final String[] langs) {
        try {
            final List<String> wordsList = new ArrayList<>(words.length);