* @param sessionKey the base session key
     * @param preauthIntegrity the pre-authentication integrity hash (for SMB 3.1.1) or null
     * @return derived encryption key
     */
    public static byte[] deriveEncryptionKey(final int dialect, final byte[] sessionKey, final byte[] preauthIntegrity) {
        return derive(sessionKey, dialect == Smb2Constants.SMB2_DIALECT_0311 ? ENCLABEL_311 : ENCLABEL_300,

    void testDeriveEncryptionKey_DifferentDialects() {
        // When
        byte[] encKey300 = Smb3KeyDerivation.deriveEncryptionKey(Smb2Constants.SMB2_DIALECT_0300, sessionKey, preauthIntegrity);
        byte[] encKey311 = Smb3KeyDerivation.deriveEncryptionKey(Smb2Constants.SMB2_DIALECT_0311, sessionKey, preauthIntegrity);

        // Then

        // Derive new keys using SMB3 KDF with rotation-specific input
        final int dialectInt = dialect.getDialect();
        final byte[] newEncryptionKey = Smb3KeyDerivation.deriveEncryptionKey(dialectInt, modifiedSessionKey, preauthIntegrityHash);
        final byte[] newDecryptionKey = Smb3KeyDerivation.deriveDecryptionKey(dialectInt, modifiedSessionKey, preauthIntegrityHash);

        new SecureRandom().nextBytes(preauthHash);

        // Derive initial keys
        int dialectInt = DialectVersion.SMB311.getDialect();
        byte[] encKey = Smb3KeyDerivation.deriveEncryptionKey(dialectInt, sessionKey, preauthHash);
        byte[] decKey = Smb3KeyDerivation.deriveDecryptionKey(dialectInt, sessionKey, preauthHash);

        // Create context with session key for auto-rotation

        }

        try {
            // Derive encryption and decryption keys using SMB3 KDF
            final int dialectInt = dialect.getDialect();
            final byte[] encryptionKey = Smb3KeyDerivation.deriveEncryptionKey(dialectInt, sessionKey, preauthHash);
            final byte[] decryptionKey = Smb3KeyDerivation.deriveDecryptionKey(dialectInt, sessionKey, preauthHash);