return Stream.of(Arguments.of(0x0202, DialectVersion.SMB202, true), Arguments.of(0x0210, DialectVersion.SMB210, true),
                Arguments.of(0x0300, DialectVersion.SMB300, true), Arguments.of(0x0302, DialectVersion.SMB302, true),
                Arguments.of(0x0311, DialectVersion.SMB311, true), Arguments.of(0xFFFF, null, false), // SMB2_DIALECT_ANY

                        // - there seem to be server implementations (known: EMC Isilon) that do not sign the final
                        // response
                        if (negoResp.getSelectedDialect().atLeast(DialectVersion.SMB300) || response.isSigned()) {
                            response.setDigest(dgst);
                            byte[] payload = response.getRawPayload();

                // Default to AES-128-GCM for SMB 3.1.1 if no cipher negotiated
                cipherId = EncryptionNegotiateContext.CIPHER_AES128_GCM;
            }
        } else if (dialect.atLeast(DialectVersion.SMB300)) {
            // SMB 3.0/3.0.2 only supports AES-128-CCM
            cipherId = EncryptionNegotiateContext.CIPHER_AES128_CCM;
        } else {