DirectoryLeaseContext decodedContext = new DirectoryLeaseContext(new Smb2LeaseKey(), 0, DirectoryCacheScope.IMMEDIATE_CHILDREN);

        decodedContext.decode(buffer, 0, buffer.length);

        // Verify roundtrip integrity
        assertEquals(context.getLeaseState(), decodedContext.getLeaseState());
        assertEquals(context.getCacheScope(), decodedContext.getCacheScope());

    Configuration config;

    @Mock
    SSPContext mechContext;

    private ASN1ObjectIdentifier[] mechs;

    @BeforeEach
    void setup() {
        // Default: do not enforce or disable SPNEGO integrity
        when(this.config.isEnforceSpnegoIntegrity()).thenReturn(false);
        when(this.config.isDisableSpnegoIntegrity()).thenReturn(false);
        this.mechs = new ASN1ObjectIdentifier[] { new ASN1ObjectIdentifier("1.2.3.4") };

     * @param decryptionKey
     *            key for server->client decryption
     * @param sessionKey
     *            base session key for key rotation
     * @param preauthHash
     *            preauth integrity hash for SMB 3.1.1
     */
    public Smb2EncryptionContext(final int cipherId, final DialectVersion dialect, final byte[] encryptionKey, final byte[] decryptionKey,

        assertNotNull(request.getClientGuid());
        assertNotNull(request.getNegotiateContexts());
        assertNotNull(request.getPreauthSalt());

        // Verify data integrity
        assertEquals(16, request.getClientGuid().length);
        assertEquals(32, request.getPreauthSalt().length);
        assertTrue(request.getDialects().length > 0);

        assertNotNull(getFieldValue(netShareEnum, "maxDataCount"));
        assertTrue((int) getFieldValue(netShareEnum, "maxDataCount") > 0);
    }

    @Test
    @DisplayName("Test writeParametersWireFormat data integrity")
    void testWriteParametersWireFormatDataIntegrity() throws Exception {
        netShareEnum = new NetShareEnum(realConfig);
        byte[] dst = new byte[256];

        // Write parameters

            assertEquals(encodedSize, decodedSize);
            assertArrayEquals(singleCipher, decodedContext.getCiphers());
        }

        @Test
        @DisplayName("Should maintain data integrity through encode/decode cycle")
        void testEncodeDecodeCycle() throws SMBProtocolDecodingException {
            // Arrange
            int[] hashAlgos = new int[] { 1, 2, 3, 4, 5 };

    /** Whether to use raw NTLM authentication without SPNEGO */
    protected boolean useRawNTLM = false;
    /** Whether to disable SPNEGO integrity checking */
    protected boolean disableSpnegoIntegrity = false;
    /** Whether to enforce SPNEGO integrity checking */
    protected boolean enforceSpnegoIntegrity = true;
    /** Whether plain text passwords are disabled */

            // Should handle encoding at the end of buffer correctly
            assertDoesNotThrow(() -> context.encode(smallBuffer, 4));
        }

        @Test
        @DisplayName("Should preserve data integrity through encode/decode cycle")
        void testDataIntegrity() throws SMBProtocolDecodingException {
            // Create complex test data
            int[] hashAlgos = new int[20];
            byte[] salt = new byte[64];

##### Figure 1 - Secure Channel construction

        if ((mechanismListMIC == null || !this.mechContext.supportsIntegrity()) && this.requireMic
                && !this.mechContext.isPreferredMech(this.selectedMech)) {
            throw new CIFSException("SPNEGO integrity is required but not available");
        }

        // otherwise we ignore the absence of a MIC
        if (!this.mechContext.isMICAvailable() || mechanismListMIC == null) {
            return;
        }