public void testHandleGuidInvalidBytes() {
        assertThrows(IllegalArgumentException.class, () -> {
            new HandleGuid(new byte[8]); // Wrong length
        });

        assertThrows(IllegalArgumentException.class, () -> {
            new HandleGuid(new byte[20]); // Wrong length
        });
    }

    @Test
    public void testHandleGuidEqualsAndHashCode() {
        UUID uuid = UUID.randomUUID();

        assertThrows(IllegalArgumentException.class, () -> {
            new DurableHandleReconnect(new byte[8]); // Wrong length
        });

        assertThrows(IllegalArgumentException.class, () -> {
            new DurableHandleReconnect(new byte[20]); // Wrong length
        });
    }

    @Test
    public void testHandleType() {
        assertEquals(0, HandleType.NONE.getValue());

     *
     * @throws IOException if an I/O error occurs
     */
    @Test
    void testConstructorWithMissingApplicationTag() throws IOException {
        // Create inner content with OID and magic bytes but wrong tag after
        ByteArrayOutputStream innerContent = new ByteArrayOutputStream();
        ASN1ObjectIdentifier kerberosOid = new ASN1ObjectIdentifier(KerberosConstants.KERBEROS_OID);

        byte[] wrongSizeBuffer = new byte[100]; // Wrong size
        byte[] correctBuffer = new byte[SmbComTransaction.TRANSACTION_BUF_SIZE];

        // When/Then - Should handle invalid buffers gracefully
        assertDoesNotThrow(() -> {
            BufferCache.releaseBuffer(nullBuffer); // Should ignore null
            BufferCache.releaseBuffer(wrongSizeBuffer); // Should ignore wrong size

import javax.crypto.IllegalBlockSizeException;

/**
 * Signals that this exception has been thrown when a block cipher is supplied with input data whose length is not a multiple of the cipher's block size, or that has been padded to the wrong length.
 * @author shinsuke
 */
public class IllegalBlockSizeRuntimeException extends ClRuntimeException {

    private static final long serialVersionUID = 1L;

    /**

    @Test
    @DisplayName("Should reject null key")
    void testNullKey() {
        assertThrows(IllegalArgumentException.class, () -> new Smb2LeaseKey(null));
    }

    @Test
    @DisplayName("Should reject wrong size key")
    void testWrongSizeKey() {
        assertThrows(IllegalArgumentException.class, () -> new Smb2LeaseKey(new byte[15]));
        assertThrows(IllegalArgumentException.class, () -> new Smb2LeaseKey(new byte[17]));

                // Too short for TOK_ID + MECH_OID_LEN
                Arguments.of("too short header", new byte[] { 0x04, 0x01, 0x00 }, IllegalArgumentException.class),

                // Wrong TOK_ID
                Arguments.of("wrong TOK_ID", new byte[] { 0x00, 0x02, 0x00, 0x01 }, IllegalArgumentException.class),

                // OID length claims more than available

        // Any PACDecodingException is acceptable for this test
        assertNotNull(e.getMessage());
    }

    @Test
    void testInvalidVersion() throws IOException {
        // Create minimal PAC structure with wrong version
        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        writeLittleEndianInt(baos, 0); // buffer count = 0
        writeLittleEndianInt(baos, 99); // invalid version

        int headerStart = 0;
        buildHeader(buf, headerStart, NtStatus.NT_STATUS_SUCCESS, 0x0001, 0x0L);

        int bodyStart = headerStart + Smb2Constants.SMB2_HEADER_LENGTH;
        // Wrong structure size (should be 9)
        SMBUtil.writeInt2(8, buf, bodyStart);
        SMBUtil.writeInt2(0, buf, bodyStart + 2);
        SMBUtil.writeInt2(Smb2Constants.SMB2_HEADER_LENGTH + 8, buf, bodyStart + 4);

     */
    @Override
    public boolean verifySignature(final byte[] buffer, final int i, final int size) {
        // observed too that signatures on error responses are sometimes wrong??
        // Looks like the failure case also is just reflecting back the signature we sent

        // with SMB3's negotiation validation it's no longer possible to ignore this (on the validation response)