DirectoryLeaseContext decodedContext = new DirectoryLeaseContext(new Smb2LeaseKey(), 0, DirectoryCacheScope.IMMEDIATE_CHILDREN);

        decodedContext.decode(buffer, 0, buffer.length);

        // Verify roundtrip integrity
        assertEquals(context.getLeaseState(), decodedContext.getLeaseState());
        assertEquals(context.getCacheScope(), decodedContext.getCacheScope());

        }
        if (this.gssContext.getConfState()) {
            contextFlags |= NegTokenInit.CONFIDENTIALITY;
        }
        if (this.gssContext.getIntegState()) {
            contextFlags |= NegTokenInit.INTEGRITY;
        }
        return contextFlags;
    }

    @Override
    public boolean isEstablished() {
        return this.gssContext != null && this.gssContext.isEstablished();
    }

    /**

    /** Whether to use raw NTLM authentication without SPNEGO */
    protected boolean useRawNTLM = false;
    /** Whether to disable SPNEGO integrity checking */
    protected boolean disableSpnegoIntegrity = false;
    /** Whether to enforce SPNEGO integrity checking */
    protected boolean enforceSpnegoIntegrity = true;
    /** Whether plain text passwords are disabled */

            assertEquals(encodedSize, decodedSize);
            assertArrayEquals(singleCipher, decodedContext.getCiphers());
        }

        @Test
        @DisplayName("Should maintain data integrity through encode/decode cycle")
        void testEncodeDecodeCycle() throws SMBProtocolDecodingException {
            // Arrange
            int[] hashAlgos = new int[] { 1, 2, 3, 4, 5 };

        assertNotNull(getFieldValue(netShareEnum, "maxDataCount"));
        assertTrue((int) getFieldValue(netShareEnum, "maxDataCount") > 0);
    }

    @Test
    @DisplayName("Test writeParametersWireFormat data integrity")
    void testWriteParametersWireFormatDataIntegrity() throws Exception {
        netShareEnum = new NetShareEnum(realConfig);
        byte[] dst = new byte[256];

        // Write parameters

        int expected = NegTokenInit.DELEGATION | NegTokenInit.MUTUAL_AUTHENTICATION | NegTokenInit.REPLAY_DETECTION
                | NegTokenInit.SEQUENCE_CHECKING | NegTokenInit.ANONYMITY | NegTokenInit.CONFIDENTIALITY | NegTokenInit.INTEGRITY;
        assertEquals(expected, flags);
    }

    @Test
    @DisplayName("isEstablished reflects underlying context state")
    void isEstablished_behavior() throws Exception {

            // Should handle encoding at the end of buffer correctly
            assertDoesNotThrow(() -> context.encode(smallBuffer, 4));
        }

        @Test
        @DisplayName("Should preserve data integrity through encode/decode cycle")
        void testDataIntegrity() throws SMBProtocolDecodingException {
            // Create complex test data
            int[] hashAlgos = new int[20];
            byte[] salt = new byte[64];

        }

        final Smb2NegotiateResponse nego = (Smb2NegotiateResponse) trans.getNegotiateResponse();
        if (nego.getSelectedDialect().atLeast(DialectVersion.SMB311)) {
            // have preauth integrity instead
            log.debug("Secure negotiation does not apply, is SMB3.1");
            return;
        }

        if ((mechanismListMIC == null || !this.mechContext.supportsIntegrity()) && this.requireMic
                && !this.mechContext.isPreferredMech(this.selectedMech)) {
            throw new CIFSException("SPNEGO integrity is required but not available");
        }

        // otherwise we ignore the absence of a MIC
        if (!this.mechContext.isMICAvailable() || mechanismListMIC == null) {
            return;
        }

     *
     * @return the selectedCipher
     */
    public int getSelectedCipher() {
        return this.selectedCipher;
    }

    /**
     * Gets the pre-authentication integrity hash algorithm selected for SMB 3.1.1.
     *
     * @return the selectedPreauthHash
     */
    public int getSelectedPreauthHash() {
        return this.selectedPreauthHash;
    }

    /**