ciphers.add(EncryptionNegotiateContext.CIPHER_AES256_GCM);
                    ciphers.add(EncryptionNegotiateContext.CIPHER_AES256_CCM);
                }

                // Always include AES-128 for compatibility
                ciphers.add(EncryptionNegotiateContext.CIPHER_AES128_GCM);
                ciphers.add(EncryptionNegotiateContext.CIPHER_AES128_CCM);

    }

    @Test
    @DisplayName("Test log encryption")
    void testLogEncryption() {
        logger.logEncryption(true, "AES-128-GCM", "SMB3.1.1");

        Map<EventType, Long> stats = logger.getStatistics();
        assertEquals(Long.valueOf(1), stats.get(EventType.ENCRYPTION_ENABLED), "Should have 1 encryption event");
    }

    @Test

    - [Client Binaries](#client-binaries-1)
    - [Server Binaries](#server-binaries-1)
    - [Node Binaries](#node-binaries-1)
  - [Changelog since v1.12.8](#changelog-since-v1128)
    - [Other notable changes](#other-notable-changes-1)
- [v1.12.8](#v1128)
  - [Downloads for v1.12.8](#downloads-for-v1128)
    - [Client Binaries](#client-binaries-2)
    - [Server Binaries](#server-binaries-2)
    - [Node Binaries](#node-binaries-2)

        // Multi-byte tag (e.g., 80)
        InputStream s = new ByteArrayInputStream(new byte[] { (byte) 0x81, 0x00 });
        int tagNo = ASN1Util.readTagNumber(s, 0x1F);
        assertEquals(128, tagNo);
    }

    @Test
    void testReadTagNumber_CorruptedHighTag() {
        // High tag < 31
        InputStream s = new ByteArrayInputStream(new byte[] { 0x1E });

        // + 1 byte 0x00
        // + context
        System.arraycopy(context, 0, suffix, label.length + 1, context.length);
        // + 4 byte (== r bits) big endian encoding of L
        suffix[suffix.length - 1] = (byte) 128;

        final DerivationParameters param = new KDFCounterParameters(sessionKey, null /* prefix */, suffix /* suffix */, r /* r */);
        gen.init(param);

        final byte[] derived = new byte[16];

            'r', 's', 't', 'u', 'v', 'w', 'x', 'y', 'z', '0', '1', '2', '3', '4', '5', '6', '7', '8', '9', '+', '/' };

    private static final char PAD = '=';

    private static final byte[] DECODE_TABLE = new byte[128];
    static {
        for (int i = 0; i < DECODE_TABLE.length; i++) {
            DECODE_TABLE[i] = Byte.MAX_VALUE;
        }
        for (int i = 0; i < ENCODE_TABLE.length; i++) {

     */
    private rpc() {
        // Utility class
    }

    /**
     * UUID (Universally Unique Identifier) structure for DCE/RPC.
     * Represents a 128-bit UUID as defined by DCE/RPC specification.
     */
    public static class uuid_t extends NdrObject {

        /**
         * Default constructor for uuid_t.
         */
        public uuid_t() {

    @Test
    @DisplayName("Invalid structure size should throw during decode")
    void testInvalidStructureSizeThrows() {
        Smb2SessionSetupResponse resp = newResponse();

        byte[] buf = new byte[128];
        int headerStart = 0;
        buildHeader(buf, headerStart, NtStatus.NT_STATUS_SUCCESS, 0x0001, 0x0L);

        int bodyStart = headerStart + Smb2Constants.SMB2_HEADER_LENGTH;

    assertMinSize(difference(setSize(2), setSize(3)), 0);
    assertMinSize(difference(setSize(3), setSize(2)), 1);
    assertMinSize(difference(setSizeRange(10, 20), setSizeRange(1, 2)), 8);
    assertMinSize(difference(setSizeRange(1, 2), setSizeRange(10, 20)), 0);
    assertMinSize(difference(setSizeRange(10, 20), setSizeRange(11, 12)), 0);

                }

                if (!msg2.getFlag(NtlmFlags.NTLMSSP_NEGOTIATE_128)) {
                    throw new SmbUnsupportedOperationException("Server does not support 128-bit keys");
                }
            }

            this.ntlmsspFlags &= msg2.getFlags();
            final Type3Message msg3 = createType3Message(msg2);
            msg3.setupMIC(this.type1Bytes, token);