* Test validation of excessive negotiate context count.
     */
    @Test
    public void testExcessiveNegotiateContextCount() {
        byte[] buffer = createBasicNegotiateResponseBuffer();
        // Set SMB 3.1.1 dialect
        SMBUtil.writeInt2(0x0311, buffer, 4);
        // Set excessive negotiate context count (should be limited to 100)
        SMBUtil.writeInt2(1000, buffer, 6);
        // Set negotiate context offset to valid value

        // Then
        assertTrue(testConfig.isUseUnicode());
        assertFalse(testConfig.isDisablePlainTextPasswords());
    }

    @Test
    @DisplayName("Should handle dialect version properties")
    void testDialectVersionProperties() throws CIFSException {
        // Given
        Properties props = new Properties();
        props.setProperty("jcifs.smb.client.minVersion", "SMB1");

        try (SmbSessionImpl session = this.treeConnection.getSession(); SmbTransportImpl transport = session.getTransport()) {
            jcifs.DialectVersion dialect = transport.getNegotiateResponse().getSelectedDialect();
            return transport.isSMB2() && dialect.atLeast(jcifs.DialectVersion.SMB300) && !dialect.atLeast(jcifs.DialectVersion.SMB311);
        } catch (final SmbException e) {

        }

        if (selected == null) {
            log.debug("Server returned an unknown dialect");
            return false;
        }

        if (!selected.atLeast(getConfig().getMinimumVersion()) || !selected.atMost(getConfig().getMaximumVersion())) {
            log.debug("Server selected an disallowed dialect version {} (min: {} max: {})", selected, getConfig().getMinimumVersion(),

- **Encryption Context**: Per-session encryption state management
- **Key Derivation**: SMB3 KDF implementation with dialect-specific parameters
- **Pre-Authentication Integrity**: SMB 3.1.1 PAI for preventing downgrade attacks
- **Automatic Detection**: Encryption automatically enabled when servers require it
- **Secure Key Management**: Proper key derivation and nonce generation

        @DisplayName("Should throw exception for invalid dialects")
        void testConstructorInvalidDialects(int dialect) {
            IllegalArgumentException exception =
                    assertThrows(IllegalArgumentException.class, () -> new Smb2SigningDigest(sessionKey, dialect, null));
            assertEquals("Unknown dialect", exception.getMessage());
        }
    }

    @Nested

        }

        final Smb2NegotiateResponse resp = (Smb2NegotiateResponse) this.negotiated;
        final DialectVersion dialect = resp.getSelectedDialect();
        int cipherId = -1;

        if (dialect.atLeast(DialectVersion.SMB311)) {
            cipherId = resp.getSelectedCipher();
            if (cipherId == -1) {

    @Override
    public boolean canReuse(final CIFSContext tc, final boolean forceSigning) {
        return this.getConfig().equals(tc.getConfig());
    }

    /**
     * Returns the index of the selected SMB dialect from the negotiation.
     *
     * @return the dialectIndex
     */
    public int getDialectIndex() {
        return this.dialectIndex;
    }

    /**

            this.nativeOs = value;
        }

        value = props.getProperty("jcifs.smb.client.nativeLanMan");
        if (value != null) {
            this.nativeLanMan = value;
        }

        // Dialect version properties - these should throw exceptions for invalid values
        String minVersion = props.getProperty("jcifs.smb.client.minVersion");
        String maxVersion = props.getProperty("jcifs.smb.client.maxVersion");

    /** Set of commands that should not be used in compound requests */
    protected Set<String> disallowCompound;
    /** Minimum SMB dialect version to negotiate */
    protected DialectVersion minVersion;
    /** Maximum SMB dialect version to negotiate */
    protected DialectVersion maxVersion;
    /** Whether to require secure negotiate validation */
    protected boolean requireSecureNegotiate = true;