void testEncryptionCapabilitySmb3() {
        // Given
        when(mockConfig.isEncryptionEnabled()).thenReturn(true);
        when(mockConfig.getMaximumVersion()).thenReturn(DialectVersion.SMB300);

        // When
        request = new Smb2NegotiateRequest(mockConfig, 0);

        // Then
        assertTrue((request.getCapabilities() & Smb2Constants.SMB2_GLOBAL_CAP_ENCRYPTION) != 0);
    }

        assertTrue(DialectVersion.SMB202.compareTo(DialectVersion.SMB210) < 0);
        assertTrue(DialectVersion.SMB210.compareTo(DialectVersion.SMB300) < 0);
        assertTrue(DialectVersion.SMB300.compareTo(DialectVersion.SMB302) < 0);
        assertTrue(DialectVersion.SMB302.compareTo(DialectVersion.SMB311) < 0);
    }

    @Test
    @DisplayName("Should identify SMB1 vs SMB2+ versions")

            // SMB 3.0 -> AES-128-CCM
            setField(transport, "smb2", true);
            Smb2NegotiateResponse smb300 = new Smb2NegotiateResponse(cfg);
            setField(smb300, "selectedDialect", DialectVersion.SMB300);
            setField(transport, "negotiated", smb300);
            Smb2EncryptionContext ccm = transport.createEncryptionContext(sessionKey, preauth);

    void testInitProtocolVersionsWithDialectVersions() {
        config.initProtocolVersions(DialectVersion.SMB210, DialectVersion.SMB300);

        assertEquals(DialectVersion.SMB210, config.getMinimumVersion());
        assertEquals(DialectVersion.SMB300, config.getMaximumVersion());
    }

    @Test
    @DisplayName("Test initProtocolVersions with null DialectVersions")

            return transport.isSMB2() && transport.getNegotiateResponse().getSelectedDialect().atLeast(jcifs.DialectVersion.SMB300);
        } catch (final SmbException e) {
            log.debug("Failed to connect for determining SMB3 support", e);
            return false;
        }
    }

    /**

    void testSMB300Dialect() {
        // When
        Smb2EncryptionContext context = new Smb2EncryptionContext(1, DialectVersion.SMB300, testEncryptionKey, testDecryptionKey);

        // Then
        assertEquals(DialectVersion.SMB300, context.getDialect(), "Should support SMB 3.0 dialect");
    }

    @Test
    @DisplayName("Should securely wipe encryption keys")
    void testSecureWipeKeys() {

    /**
     * SMB 2.1 - Windows 7/Server 2008R2
     */
    SMB210(Smb2Constants.SMB2_DIALECT_0210),

    /**
     * SMB 3.0 - Windows 8/Server 2012
     */
    SMB300(Smb2Constants.SMB2_DIALECT_0300),

    /**
     * SMB 3.0.2 - Windows 8.1/Server 2012R2
     */
    SMB302(Smb2Constants.SMB2_DIALECT_0302),

    /**
     * SMB 3.1.1 - Windows 10/Server 2016
     */

            this.capabilities |= Smb2Constants.SMB2_GLOBAL_CAP_DFS;
        }

        if (config.isEncryptionEnabled() && config.getMaximumVersion() != null
                && config.getMaximumVersion().atLeast(DialectVersion.SMB300)) {
            this.capabilities |= Smb2Constants.SMB2_GLOBAL_CAP_ENCRYPTION;
        }

        final Set<DialectVersion> dvs =

    @DisplayName("Pre-auth integrity should fail with non-SMB3.1.1")
    void testPreauthWithNonSmb311() throws Exception {
        // Setup SMB3.0
        when(negotiateResponse.getSelectedDialect()).thenReturn(DialectVersion.SMB300);
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        // Calculate hash should fail

    void testAllDialectVersions() {
        // Test each dialect version
        DialectVersion[] dialects = { DialectVersion.SMB1, DialectVersion.SMB202, DialectVersion.SMB210, DialectVersion.SMB300,
                DialectVersion.SMB302, DialectVersion.SMB311 };

        for (DialectVersion dialect : dialects) {
            when(negotiationResponse.getSelectedDialect()).thenReturn(dialect);