if (isGCMCipher()) {
            // SMB 3.1.1 GCM: 96-bit random/fixed + 32-bit counter for guaranteed uniqueness
            // Fill first 12 bytes with random data
            secureRandom.nextBytes(nonce);

            // Last 4 bytes: incrementing counter for guaranteed uniqueness
            final long counter = this.nonceCounter.incrementAndGet();
            final ByteBuffer buffer = ByteBuffer.wrap(nonce, 12, 4);

        case 3:
        case 4:
        case 5:
            if (clientChallenge == null) {
                clientChallenge = new byte[8];
                RANDOM.nextBytes(clientChallenge);
            }
            return getLMv2Response(domain, username, password, challenge, clientChallenge);
        default:
            return getPreNTLMResponse(password, challenge);
        }

    assertFailsWith<IndexOutOfBoundsException> {
      operator.write(0, buffer, 4L)
    }
  }

  private fun randomByteString(byteCount: Int): ByteString {
    val bytes = ByteArray(byteCount)
    Random(0).nextBytes(bytes)
    return ByteString.of(*bytes)
  }

  private fun snapshot(): ByteString {
    randomAccessFile!!.getChannel().force(false)
    val source = file!!.source().buffer()
    return source.readByteString()

            byte[] buffer = invocation.getArgument(0);
            System.arraycopy(testSalt, 0, buffer, 0, Math.min(buffer.length, testSalt.length));
            return null;
        }).when(mockRandom).nextBytes(any(byte[].class));
    }

    @Test
    @DisplayName("Should create request with default settings")
    void testConstructorWithDefaults() {
        // When

        if (config.getMaximumVersion() != null && config.getMaximumVersion().atLeast(DialectVersion.SMB311)) {
            final byte[] salt = new byte[32];
            config.getRandom().nextBytes(salt);
            negoContexts.add(
                    new PreauthIntegrityNegotiateContext(config, new int[] { PreauthIntegrityNegotiateContext.HASH_ALGO_SHA512 }, salt));
            this.preauthSalt = salt;

  }

  public void testAgainstSimplerImplementation() {
    Random r = new Random(1234567);
    for (int length = 0; length < 1000; length++) {
      byte[] bytes = new byte[length];
      r.nextBytes(bytes);
      assertCrc(referenceCrc(bytes), bytes);
    }
  }

  private static int referenceCrc(byte[] bytes) {
    int crc = ~0;
    for (byte b : bytes) {

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
        when(mockContext.getConfig()).thenReturn(mockConfig);

        testFileId = new byte[16];
        new SecureRandom().nextBytes(testFileId);

        testLocks = new Smb2Lock[] { new Smb2Lock(0L, 100L, Smb2Lock.SMB2_LOCKFLAG_EXCLUSIVE_LOCK) };

        request = new Smb2LockRequest(mockConfig, testFileId, testLocks);
    }

    @Nested

  }

  public void testString() {
    Random random = new Random();
    for (int i = 0; i < 100; i++) {
      byte[] bytes = new byte[64];
      random.nextBytes(bytes);
      String s = new String(bytes, UTF_16LE); // so all random strings are valid
      assertEquals(
          new Sink(4).putUnencodedChars(s).hash(),
          new Sink(4).putBytes(s.getBytes(UTF_16LE)).hash());

            int[] originalHashAlgos = { 0x01, 0x02, 0x03, 0x04, 0x05 };
            byte[] originalSalt = new byte[32];
            new Random(42).nextBytes(originalSalt);
            PreauthIntegrityNegotiateContext originalContext =
                    new PreauthIntegrityNegotiateContext(mockConfig, originalHashAlgos, originalSalt);

     *
     * @return a cryptographically secure random salt
     */
    public byte[] generatePreauthSalt() {
        byte[] salt = new byte[SALT_SIZE];
        secureRandom.nextBytes(salt);
        log.debug("Generated new preauth salt of {} bytes", salt.length);
        return salt;
    }

    /**
     * Initializes preauth integrity context for a new session.
     *