// Then
        assertFalse(Arrays.equals(decKey300, decKey311), "Decryption keys should be different for different dialects");
    }

    @Test
    @DisplayName("Should derive different keys for different purposes with same dialect")
    void testDeriveKeys_DifferentPurposes() {
        // Given
        int dialect = Smb2Constants.SMB2_DIALECT_0311;

        byte[] encrypted2 = storage.encryptCredentials(plaintext.clone());

        // Should produce different ciphertexts due to random IV
        assertFalse(Arrays.equals(encrypted1, encrypted2), "Different encryptions should produce different ciphertexts");

        // But both should decrypt to same plaintext
        char[] decrypted1 = storage.decryptCredentials(encrypted1);

        // Results should be different
        boolean different = false;
        for (int i = 0; i < result1.length; i++) {
            if (result1[i] != result2[i]) {
                different = true;
                break;
            }
        }
        assertEquals(true, different, "Different keys should produce different HMAC values");
    }

    @Test

        assertEquals(32, derived3.length, "Derived key should have correct length");

        assertFalse(Arrays.equals(derived1, derived2), "Different labels should produce different keys");
        assertFalse(Arrays.equals(derived1, derived3), "Different contexts should produce different keys");
    }

    @Test
    public void testStoreNullKey() {

        }
    }

    @Nested
    @DisplayName("Cross-Implementation Tests")
    class CrossImplementationTests {

        @Test
        @DisplayName("Should have different context types for different implementations")
        void testDifferentContextTypes() {
            PreauthIntegrityNegotiateContext preauth = new PreauthIntegrityNegotiateContext();

## Origin { #origin }

An origin is the combination of protocol (`http`, `https`), domain (`myapp.com`, `localhost`, `localhost.tiangolo.com`), and port (`80`, `443`, `8080`).

So, all these are different origins:

* `http://localhost`
* `https://localhost`
* `http://localhost:8080`

        // Assert
        assertArrayEquals(expected, actual, "NT hash must match known test vector");
    }

    @Test
    @DisplayName("getNTHash: verify different passwords produce different hashes")
    void testGetNTHash_differentPasswords() {
        // Arrange
        String password1 = "password";
        String password2 = "Password";

        // Act

        try {
            // Time comparison between different length passwords
            long timeDiffLength = measureEqualsTime(auth1, auth2, TIMING_ITERATIONS);

            // Create same length passwords for comparison
            char[] password3 = "short".toCharArray();
            char[] password4 = "shore".toCharArray(); // Same length, different content

        assertTrue(fileInfo.matches(1024L, 1000L, 0x20));

        // Should not match with different size
        assertFalse(fileInfo.matches(2048L, 1000L, 0x20));

        // Should not match with different last modified
        assertFalse(fileInfo.matches(1024L, 2000L, 0x20));

        // Should not match with different attributes
        assertFalse(fileInfo.matches(1024L, 1000L, 0x10));
    }

    @Test

///

### What is "Mounting" { #what-is-mounting }

"Mounting" means adding a complete "independent" application in a specific path, that then takes care of handling all the sub-paths.

This is different from using an `APIRouter` as a mounted application is completely independent. The OpenAPI and docs from your main application won't include anything from the mounted application, etc.