// Given
        byte[] sessionKey1 = new byte[16];
        byte[] sessionKey2 = new byte[16];
        new SecureRandom().nextBytes(sessionKey1);
        new SecureRandom().nextBytes(sessionKey2);
        int dialect = Smb2Constants.SMB2_DIALECT_0311;

        // When
        byte[] signingKey1 = Smb3KeyDerivation.deriveSigningKey(dialect, sessionKey1, preauthIntegrity);

     *
     * @param dialect the SMB dialect version
     * @param sessionKey the base session key
     * @param preauthIntegrity the pre-authentication integrity hash (for SMB 3.1.1) or null
     * @return derived signing key
     */
    public static byte[] deriveSigningKey(final int dialect, final byte[] sessionKey, final byte[] preauthIntegrity) {
        return derive(sessionKey, dialect == Smb2Constants.SMB2_DIALECT_0311 ? SIGNLABEL_311 : SIGNLABEL_300,

        void testDifferentSessionKeys() throws GeneralSecurityException {
            byte[] sessionKey1 = new byte[16];
            Arrays.fill(sessionKey1, (byte) 0x11);

            byte[] sessionKey2 = new byte[16];
            Arrays.fill(sessionKey2, (byte) 0x22);

            Smb2SigningDigest digest1 = new Smb2SigningDigest(sessionKey1, Smb2Constants.SMB2_DIALECT_0202, null);

        super(andx);
        command = SMB_COM_SESSION_SETUP_ANDX;
        this.session = session;
        this.cred = cred;

        sessionKey = session.transport.sessionKey;
        capabilities = session.transport.capabilities;

        if (session.transport.server.security == SECURITY_USER) {
            if (cred instanceof final NtlmPasswordAuthentication auth) {

        this.cipherId = cipherId;
        this.dialect = dialect;
        this.keyManager = keyManager;
        this.sessionKey = sessionKey != null ? sessionKey.clone() : null;
        this.preauthIntegrityHash = preauthHash != null ? preauthHash.clone() : null;

        // Generate unique session ID for key management

     */
    public byte[] getSessionKey() {
        return sessionKey;
    }

    /**
     * Sets the session key.
     *
     * @param sessionKey The session key.
     */
    public void setSessionKey(final byte[] sessionKey) {
        this.sessionKey = sessionKey;
    }

    @Override
    public byte[] toByteArray() {
        try {

        void testSessionKeyRetrieval() throws CIFSException {
            // When: Getting session key
            byte[] sessionKey = handle.getSessionKey();

            // Then: Should return expected session key
            assertNotNull(sessionKey);
            assertArrayEquals(new byte[] { 1, 2, 3, 4 }, sessionKey);
        }

        @Test
        @DisplayName("Should handle max values configuration")

    private int negotiatedFlags2;
    private int maxMpxCount;
    private int snd_buf_size;
    private int recv_buf_size;
    private int tx_buf_size;

    private int capabilities;
    private final int sessionKey = 0x00000000;
    private boolean useUnicode;

    /**
     * Creates a new SMB1 negotiate response.
     *
     * @param ctx the CIFS context
     */
    public SmbComNegotiateResponse(final CIFSContext ctx) {

        ByteArrayOutputStream baos = new ByteArrayOutputStream();

        try {
            // Combine session key with channel-specific data
            byte[] sessionKey = getSessionKey();
            if (sessionKey != null) {
                baos.write(sessionKey);
            }
            baos.write(channel.getLocalInterface().getAddress().getAddress());
            baos.write(channel.getRemoteInterface().getAddress().getAddress());

        }

        @Test
        @DisplayName("createEncryptionContext selects AES-CCM for SMB 3.0 and AES-GCM for SMB 3.1.1")
        void createEncryptionContext_happyDialects() throws Exception {
            byte[] sessionKey = new byte[16];
            byte[] preauth = new byte[16];

            // SMB 3.0 -> AES-128-CCM
            setField(transport, "smb2", true);