private static final int DEFAULT_HASH_ALGORITHM = HASH_ALGO_SHA512;
    private static final int SALT_SIZE = 32; // 32 bytes as per SMB 3.1.1 spec
    private static final int HASH_SIZE_SHA512 = 64; // SHA-512 produces 64-byte hashes

    // Session-specific preauth integrity contexts
    private final ConcurrentMap<String, PreauthIntegrityContext> sessionContexts = new ConcurrentHashMap<>();

    // Security configuration

    // [x509_extensions]
    // subjectAltName=DNS:localhost.localdomain,DNS:localhost,IP:127.0.0.1
    //
    // $ openssl req -x509 -nodes -days 36500 -subj '/CN=localhost' -config ./cert.cnf \
    //     -newkey rsa:512 -out cert.pem
    val certificate =
      certificate(
        """
        -----BEGIN CERTIFICATE-----
        MIIBWDCCAQKgAwIBAgIJANS1EtICX2AZMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV

    /**
     * Number of bytes processed so far mod. 2 power of 64.
     */
    private long count;

    /**
     * 512 bits input buffer = 16 x 32-bit words holds until reaches 512 bits.
     */
    private byte[] buffer = new byte[BLOCK_LENGTH];

    /**
     * 512 bits work buffer = 16 x 32-bit words
     */
    private final int[] X = new int[16];

    // Constructors

                    FileSystemInformation.FS_FULL_SIZE_INFO, (byte) 0, (byte) 1, (byte) 127, (byte) -128 };

            for (byte fsClass : classes) {
                TestAllocInfo allocInfo = new TestAllocInfo(1024L, 512L, fsClass);
                assertEquals(fsClass, allocInfo.getFileSystemInformationClass());
            }
        }
    }

    @Nested
    @DisplayName("Edge Cases and Boundary Tests")

    }

    @Test
    void testWriteParametersWireFormat() {
        trans2QueryPathInfo = new Trans2QueryPathInformation(config, TEST_FILENAME, TEST_INFO_LEVEL);

        byte[] buffer = new byte[512];
        int written = trans2QueryPathInfo.writeParametersWireFormat(buffer, 0);

        // Check information level (first 2 bytes)
        int actualInfoLevel = SMBUtil.readInt2(buffer, 0);

        // idFileSystem (4 bytes, skipped)
        writeInt4(100, buffer, 4); // sectPerAlloc
        writeInt4(1000, buffer, 8); // alloc
        writeInt4(500, buffer, 12); // free
        writeInt2(512, buffer, 16); // bytesPerSect

        int bytesRead = response.readDataWireFormat(buffer, 0, buffer.length);

        assertEquals(20, bytesRead, "Should read 20 bytes");

        // Setup SMB3.1.1 negotiation
        when(negotiateResponse.getSelectedDialect()).thenReturn(DialectVersion.SMB311);
        when(negotiateResponse.getSelectedPreauthHash()).thenReturn(1); // SHA-512
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        int threadCount = 10;
        CountDownLatch startLatch = new CountDownLatch(1);

reached the end of their useful life.

Valid values: 

```
******@****.***
hmac-sha2-512******@****.***
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha1-96
```

### Certificate-based authentication

`--sftp=trusted-user-ca-key=...` specifies a file containing public key of certificate authority that is trusted

pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND = 2048
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION = 512
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH = 1024
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH ideal-int

        when(mockConfig.getMinimumVersion()).thenReturn(DialectVersion.SMB210);
        request = new Smb2NegotiateRequest(mockConfig, Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED);

        byte[] buffer = new byte[512];

        // When
        int bytesWritten = request.writeBytesWireFormat(buffer, 0);

        // Then
        assertTrue(bytesWritten > 0);

        // Verify structure size