- **Key Derivation**: SMB3 KDF implementation with dialect-specific parameters
- **Pre-Authentication Integrity**: SMB 3.1.1 PAI for preventing downgrade attacks
- **Automatic Detection**: Encryption automatically enabled when servers require it
- **Secure Key Management**: Proper key derivation and nonce generation

### Core Features

    public static final int DELEGATION = 0x80;
    /**
     * Context flag for mutual authentication requirement
     */
    public static final int MUTUAL_AUTHENTICATION = 0x40;
    /**
     * Context flag for replay detection capability
     */
    public static final int REPLAY_DETECTION = 0x20;
    /**
     * Context flag for sequence checking capability
     */
    public static final int SEQUENCE_CHECKING = 0x10;
    /**

 * The main purpose of this class is to simplify the extraction process by providing a fluent interface
 * for configuring the extraction parameters and handling the underlying complexities of content processing,
 * such as MIME type detection, extractor selection, and content length validation.
 * </p>
 *
 * <p>
 * Example usage:
 * </p>
 *
 * <pre>
 * {@code
 * try (InputStream in = new FileInputStream("example.pdf")) {

            boolean canWrite = mockResource.canWrite();

            // Then
            assertTrue(exists, "Should support SMB existence checks");
            assertTrue(isFile, "Should support SMB file type detection");
            assertTrue(canRead, "Should support SMB read permission checks");
            assertTrue(canWrite, "Should support SMB write permission checks");
        }

        @Test

        SmbSession result = transport.getSmbSession(ctx, host, domain);
        assertSame(session, result);
        verify(transport).getSmbSession(eq(ctx), eq(host), eq(domain));
    }

    // SMB2 detection: true/false and exception path
    @Test
    @DisplayName("isSMB2 returns true/false and can throw")
    void isSMB2_variants() throws Exception {
        when(transport.isSMB2()).thenReturn(true, false);

        assertTrue(cleaned >= 2);

        assertTrue(resource1.isClosed());
        assertTrue(resource2.isClosed());
    }

    @Test
    @DisplayName("Test leak detection for unclosed resources")
    @Timeout(value = 5, unit = TimeUnit.SECONDS)
    void testLeakDetection() throws InterruptedException {
        // Create resource that will be garbage collected without closing

     */
    @Test
    public void testAuthTypeGuessing() {
        // Test guest detection
        NtlmPasswordAuthenticator guestAuth = new NtlmPasswordAuthenticator("guest", "anypass");
        assertTrue(guestAuth.isGuest());
        assertFalse(guestAuth.isAnonymous());

        // Test anonymous detection
        NtlmPasswordAuthenticator anonAuth = new NtlmPasswordAuthenticator("", new char[0]);

                u = StringUtil.EMPTY;
            }
        }
        return u;
    }

    /**
     * Decodes a URL as a name using appropriate character encoding.
     * Handles encoding detection from parent URLs and configuration settings.
     *
     * @param url the URL to decode
     * @param escapePlus whether to escape plus signs before decoding

        Smb2TreeConnectResponse responseWithNull = new Smb2TreeConnectResponse(null);

        // Then
        assertNotNull(responseWithNull);
    }

    @Test
    @DisplayName("Should test encryption flag detection")
    void testEncryptionFlagDetection() throws SMBProtocolDecodingException {
        // Given - response with encryption flag set
        byte[] buffer = createValidResponseBuffer(0, 0x8000, 0, 0);

        // When

 *
 * Features:
 * - Buffer bounds checking
 * - Integer overflow prevention
 * - Size validation
 * - Protocol compliance checking
 * - Malformed response detection
 */
public class ServerResponseValidator {

    private static final Logger log = LoggerFactory.getLogger(ServerResponseValidator.class);

    // Protocol limits