* the encrypted version used for key exchange.
     *
     * @return A <code>byte[]</code> containing the session key.
     */
    public byte[] getMasterKey() {
        return masterKey;
    }

    /**
     * Returns the session key.
     *
     * @return A <code>byte[]</code> containing the session key.
     */
    public byte[] getSessionKey() {
        return sessionKey;

     *            7 or 8 byte DES key
     * @return DES cipher in encryption mode
     */
    public static Cipher getDES ( byte[] key ) {
        if ( key.length == 7 ) {
            return getDES(des7to8(key));
        }

        try {
            Cipher c = Cipher.getInstance("DES/ECB/NoPadding");
            c.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(key, "DES"));
            return c;
        }

    static final int FLAGS2_STATUS32 = 0x4000;
    static final int FLAGS2_UNICODE = 0x8000;

    static final int CAP_NONE = 0x0000;
    static final int CAP_RAW_MODE = 0x0001;
    static final int CAP_MPX_MODE = 0x0002;
    static final int CAP_UNICODE = 0x0004;
    static final int CAP_LARGE_FILES = 0x0008;
    static final int CAP_NT_SMBS = 0x0010;
    static final int CAP_RPC_REMOTE_APIS = 0x0020;

						</li>
					</c:if>
					<c:if test="${developmentMode}">
						<li class="nav-item" data-toggle="tooltip" data-placement="left"
							title="<la:message key="labels.development_mode_warning" />"
						><a class="nav-link active" href="${installationLink}" target="_olh"><em
								class="fa fa-exclamation-triangle text-warning"
							></a></li>
					</c:if>
					<c:choose>

						</li>
					</c:if>
					<c:if test="${developmentMode}">
						<li class="nav-item" data-toggle="tooltip" data-placement="left"
							title="<la:message key="labels.development_mode_warning" />"
						><a class="nav-link active" href="${installationLink}" target="_olh"><em
								class="fa fa-exclamation-triangle text-warning"
							></a></li>
					</c:if>
					<c:choose>

        this.object_attributes.length = 24;
        lsarpc.LsarQosInfo qos = new lsarpc.LsarQosInfo();
        qos.length = 12;
        qos.impersonation_level = 2;
        qos.context_mode = 1;
        qos.effective_only = 0;
        this.object_attributes.security_quality_of_service = qos;
        this.ptype = 0;
        this.flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

import org.bouncycastle.crypto.generators.KDFCounterBytesGenerator;
import org.bouncycastle.crypto.macs.HMac;
import org.bouncycastle.crypto.params.KDFCounterParameters;


/**
 * SMB3 SP800-108 Counter Mode Key Derivation
 * 
 * @author mbechler
 *
 */
final class Smb3KeyDerivation {

    private static final byte[] SIGNCONTEXT_300 = toCBytes("SmbSign");

    private static final int FLAGS_RETURN_ADDITIONAL_INFO = 0x01;
    private static final int FLAGS_REQUEST_OPLOCK         = 0x02;
    private static final int FLAGS_REQUEST_BATCH_OPLOCK   = 0x04;

    // Access Mode Encoding for desiredAccess
    private static final int SHARING_COMPATIBILITY           = 0x00;
    private static final int SHARING_DENY_READ_WRITE_EXECUTE = 0x10;
    private static final int SHARING_DENY_WRITE              = 0x20;

errors.invalid_query_unsupported_sort_order=The given sort order ({0}) is not supported.
errors.invalid_query_cannot_process=The given query could not be processed.

errors.crud_invalid_mode=Invalid mode(expected value is {0}, but it's {1}).
errors.crud_failed_to_create_instance=Failed to create a new data.
errors.crud_failed_to_create_crud_table=Failed to create a new data. ({0})

[
	uuid(12345778-1234-abcd-ef00-0123456789ab),
	version(0.0)
]
interface lsarpc
{
	import "../rpc.idl";

	typedef struct {
		uint32_t length;
		uint16_t impersonation_level;
		uint8_t context_mode;
		uint8_t effective_only;
	} LsarQosInfo;

	typedef struct {
		uint32_t length;
		uint8_t *root_directory;
		unicode_string *object_name;
		uint32_t attributes;
		uint32_t security_descriptor;