*
     * @return the negotiateContexts
     */
    public NegotiateContextRequest[] getNegotiateContexts() {
        return this.negotiateContexts;
    }

    /**
     * Gets the pre-authentication integrity salt for SMB 3.1.1.
     *
     * @return the preauthSalt
     */
    public byte[] getPreauthSalt() {
        return this.preauthSalt;
    }

    /**
     * {@inheritDoc}
     *

     * @param decryptionKey
     *            key for server->client decryption
     * @param sessionKey
     *            base session key for key rotation
     * @param preauthHash
     *            preauth integrity hash for SMB 3.1.1
     */
    public Smb2EncryptionContext(final int cipherId, final DialectVersion dialect, final byte[] encryptionKey, final byte[] decryptionKey,

    Configuration config;

    @Mock
    SSPContext mechContext;

    private ASN1ObjectIdentifier[] mechs;

    @BeforeEach
    void setup() {
        // Default: do not enforce or disable SPNEGO integrity
        when(this.config.isEnforceSpnegoIntegrity()).thenReturn(false);
        when(this.config.isDisableSpnegoIntegrity()).thenReturn(false);
        this.mechs = new ASN1ObjectIdentifier[] { new ASN1ObjectIdentifier("1.2.3.4") };

        }
        if (this.gssContext.getConfState()) {
            contextFlags |= NegTokenInit.CONFIDENTIALITY;
        }
        if (this.gssContext.getIntegState()) {
            contextFlags |= NegTokenInit.INTEGRITY;
        }
        return contextFlags;
    }

    @Override
    public boolean isEstablished() {
        return this.gssContext != null && this.gssContext.isEstablished();
    }

    /**

        assertNotNull(request.getClientGuid());
        assertNotNull(request.getNegotiateContexts());
        assertNotNull(request.getPreauthSalt());

        // Verify data integrity
        assertEquals(16, request.getClientGuid().length);
        assertEquals(32, request.getPreauthSalt().length);
        assertTrue(request.getDialects().length > 0);

        DirectoryLeaseContext decodedContext = new DirectoryLeaseContext(new Smb2LeaseKey(), 0, DirectoryCacheScope.IMMEDIATE_CHILDREN);

        decodedContext.decode(buffer, 0, buffer.length);

        // Verify roundtrip integrity
        assertEquals(context.getLeaseState(), decodedContext.getLeaseState());
        assertEquals(context.getCacheScope(), decodedContext.getCacheScope());

    /** Whether to use raw NTLM authentication without SPNEGO */
    protected boolean useRawNTLM = false;
    /** Whether to disable SPNEGO integrity checking */
    protected boolean disableSpnegoIntegrity = false;
    /** Whether to enforce SPNEGO integrity checking */
    protected boolean enforceSpnegoIntegrity = true;
    /** Whether plain text passwords are disabled */

            // Should handle encoding at the end of buffer correctly
            assertDoesNotThrow(() -> context.encode(smallBuffer, 4));
        }

        @Test
        @DisplayName("Should preserve data integrity through encode/decode cycle")
        void testDataIntegrity() throws SMBProtocolDecodingException {
            // Create complex test data
            int[] hashAlgos = new int[20];
            byte[] salt = new byte[64];

        int expected = NegTokenInit.DELEGATION | NegTokenInit.MUTUAL_AUTHENTICATION | NegTokenInit.REPLAY_DETECTION
                | NegTokenInit.SEQUENCE_CHECKING | NegTokenInit.ANONYMITY | NegTokenInit.CONFIDENTIALITY | NegTokenInit.INTEGRITY;
        assertEquals(expected, flags);
    }

    @Test
    @DisplayName("isEstablished reflects underlying context state")
    void isEstablished_behavior() throws Exception {

            assertEquals(encodedSize, decodedSize);
            assertArrayEquals(singleCipher, decodedContext.getCiphers());
        }

        @Test
        @DisplayName("Should maintain data integrity through encode/decode cycle")
        void testEncodeDecodeCycle() throws SMBProtocolDecodingException {
            // Arrange
            int[] hashAlgos = new int[] { 1, 2, 3, 4, 5 };