- Add encryption.rs with Smb3Encryption struct - Implement AES-128-CTR + HMAC-SHA256 (simplified approach) - Add TransformHeader struct for SMB2 TRANSFORM_HEADER - 3 unit tests pass (encrypt/decrypt roundtrip + signature verification) - Total: ~180 lines of code