final byte[] salt = new byte[32];
            config.getRandom().nextBytes(salt);
            negoContexts.add(
                    new PreauthIntegrityNegotiateContext(config, new int[] { PreauthIntegrityNegotiateContext.HASH_ALGO_SHA512 }, salt));
            this.preauthSalt = salt;

            if (config.isEncryptionEnabled()) {

        String sessionId = "test-session-1";
        byte[] salt = preauthService.generatePreauthSalt();

        PreauthIntegrityContext context = preauthService.initializeSession(sessionId, salt, PreauthIntegrityService.HASH_ALGO_SHA512);

        assertNotNull(context);
        assertEquals(PreauthIntegrityService.HASH_ALGO_SHA512, context.getHashAlgorithm());
        assertArrayEquals(salt, context.getSalt());
        assertTrue(context.isValid());

        this.hashAlgos = hashAlgos;
        this.salt = salt;
    }

    /**
     * Default constructor for deserialization.
     */
    public PreauthIntegrityNegotiateContext() {
    }

    /**
     * Gets the salt value used for preauth integrity.
     *
     * @return the salt
     */
    public byte[] getSalt() {
        return this.salt;
    }

    /**

        }
        if (salt == null || salt.length != SALT_SIZE) {
            throw new IllegalArgumentException("Invalid salt");
        }

        this.salt = salt.clone();
        this.masterKey = deriveKey(masterPassword, this.salt);

        // Clear the master password after use
        Arrays.fill(masterPassword, '\0');
    }

            byte[] buffer = new byte[] { 0x02, 0x00, // 2 hash algos
                    0x04, 0x00, // 4 bytes salt
                    0x01, 0x00, // SHA512
                    0x02, 0x00, // Another hash algo
                    0x0A, 0x0B, 0x0C, 0x0D // Salt
            };

            // Act
            int decodedSize = context.decode(buffer, 0, buffer.length);

            // Assert

                },
                {"name": "Holy Buddies"},
            ],
        },
        {
            "name": "System of an Up",
            "items": [
                {
                    "name": "Salt",
                    "description": "The kombucha mushroom people's favorite",
                },
                {"name": "Pad Thai"},
                {
                    "name": "Lonely Night",

        when(mockConfig.getMachineId()).thenReturn(testMachineId);
        when(mockConfig.getRandom()).thenReturn(mockRandom);
        when(mockContext.getConfig()).thenReturn(mockConfig);

        // Mock random for predictable salt generation
        doAnswer(invocation -> {
            byte[] buffer = invocation.getArgument(0);
            System.arraycopy(testSalt, 0, buffer, 0, Math.min(buffer.length, testSalt.length));
            return null;

        ctxOffset += 8; // Skip reserved

        // Hash algorithm count and salt length
        SMBUtil.writeInt2(1, buffer, ctxOffset);
        SMBUtil.writeInt2(32, buffer, ctxOffset + 2);
        SMBUtil.writeInt2(PreauthIntegrityNegotiateContext.HASH_ALGO_SHA512, buffer, ctxOffset + 4);
        ctxOffset += 6;

        // Salt (32 bytes)
        for (int i = 0; i < 32; i++) {
            buffer[ctxOffset + i] = (byte) i;

        }

        @Test
        @DisplayName("Should return salt correctly")
        void testGetSalt() {
            int[] hashAlgos = { 0x01 };
            byte[] salt = { 0x01, 0x02, 0x03, 0x04 };
            PreauthIntegrityNegotiateContext context = new PreauthIntegrityNegotiateContext(mockConfig, hashAlgos, salt);

            assertArrayEquals(salt, context.getSalt());

* GCI: Add two GCI specific metadata pairs ([#25105](https://github.com/kubernetes/kubernetes/pull/25105), [@andyzheng0831](https://github.com/andyzheng0831))
* Add an entry to the salt config to allow Debian jessie on GCE. ([#25123](https://github.com/kubernetes/kubernetes/pull/25123), [@jlewi](https://github.com/jlewi))