- andrew-propelauth
  - svix
  - zuplo-oss
  - zuplo
  - Kong
  - speakeasy-api
  - jess-render
  - blockbee-io
  - liblaber
  - render-sponsorships
  - renderinc
  - stainless-api
  - snapit-cypher
  - coderabbitai
  - permitio
  - LambdaTest-Inc
  - dribia
  - madisonredtfeldt
  - railwayapp
  - subtotal
  - requestly

            "trustStore is",
            "Reload the trust store",
            "Reload trust certs",
            "Reloaded",
            "adding as trusted certificates",
            "Ignore disabled cipher suite",
            "Ignore unsupported cipher suite",
          ).joinToString(separator = "|"),
        )
        append(").*")
      },
    )

  private val testLogHandler =
    object : Handler() {

    if (this::cache.isInitialized) {
      cache.delete()
    }
  }

  @Test
  fun corruptedCipher() {
    val response =
      testCorruptingCache {
        corruptMetadata {
          // mess with cipher suite
          it.replace("TLS_", "SLT_")
        }
      }

    assertThat(response.body.string()).isEqualTo("ABC.1") // cached
    assertThat(cache.requestCount()).isEqualTo(2)

	testCases := []struct {
		content       string
		expectedErr   bool
		expectedValue string
	}{
		{
			"value\n",
			false,
			"value",
		},
		{
			" \t\n Hello, Gophers \n\t\r\n",
			false,
			"Hello, Gophers",
		},
	}

	for _, testCase := range testCases {
		t.Run("", func(t *testing.T) {
			tmpfile, err := os.CreateTemp(t.TempDir(), "testfile")
			if err != nil {
				t.Error(err)
			}

      ConnectionSpec
        .Builder(ConnectionSpec.MODERN_TLS)
        .cipherSuites(*arrayOf<CipherSuite>())
        .build()
    }.also { expected ->
      assertThat(expected.message)
        .isEqualTo("At least one cipher suite is required")
    }
  }

  @Test
  fun cleartextBuilder() {
    val cleartextSpec = ConnectionSpec.Builder(false).build()
    assertThat(cleartextSpec.isTls).isFalse()
  }

  @Test

    @NullAndEmptySource
    @ValueSource(strings = { "AES encryption not supported", "Missing Bouncy Castle provider", "Invalid key length for AES-128",
            "RC4 cipher not available in this JVM", "DES encryption is deprecated and not supported", "HMAC-SHA256 algorithm not found",
            "RSA key generation failed: key size not supported" })

### SMB3 Encryption Support
- **SMB2 Transform Header**: Encrypted message wrapping
- **AES-CCM/GCM Support**: Both AES-128-CCM (SMB 3.0/3.0.2) and AES-128-GCM (SMB 3.1.1) cipher suites
- **Encryption Context**: Per-session encryption state management
- **Key Derivation**: SMB3 KDF implementation with dialect-specific parameters

CR1, key_12 BLT CR1, key_10 key_14: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_12: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_10: P8_LXVB16X(R6,R0,V9) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHERLAST) XOR_STORE(V9,V0,R5,R0)...

		<property name="encryptedHeaderValue">true</property>
		<property name="cookieKey">"fessRoles"</property>
		<property name="encryptedCookieValue">true</property>
		<property name="cipher">
			<component class="org.codelibs.core.crypto.CachedCipher">
				<property name="key">"1234567890123456"</property>
			</component>
		</property>
		<property name="valueSeparator">"\\n"</property>

    private final int[] decryptKeys = new int[32];

    private final int[] tempInts = new int[2];

    /**
     * Creates a DES cipher instance without a key
     */
    public DES() {

    }

    // Constructor, byte-array key.
    /**
     * Creates a DES cipher instance with the specified key
     * @param key the DES key (7 or 8 bytes)
     */
    public DES(final byte[] key) {