values = parseOsRelease(osReleaseLines);
            } catch (IOException e) {
                throw new GradleException("Failed to read /etc/os-release", e);
            }

            final String id = deriveId(values);
            final boolean excluded = getLinuxExclusionList().contains(id);

            if (excluded) {

        byte[] derived1 = keyManager.deriveKey(baseKey, "label1", null, 32);
        byte[] derived2 = keyManager.deriveKey(baseKey, "label2", null, 32);
        byte[] derived3 = keyManager.deriveKey(baseKey, "label1", new byte[] { 1, 2, 3 }, 32);

        assertEquals(32, derived1.length, "Derived key should have correct length");
        assertEquals(32, derived2.length, "Derived key should have correct length");

        // Then
        assertFalse(Arrays.equals(signingKey1, signingKey2), "Different session keys should produce different derived keys");
    }

    @Test
    @DisplayName("Should derive unique keys for different preauth values")
    void testDeriveKeys_UniquePreauthValues() {
        // Given
        byte[] preauth1 = new byte[64];

        assertEquals(10, ndrBuffer.getLength());

        ndrBuffer.setLength(20);
        assertEquals(20, ndrBuffer.getLength());

        // Test with derived buffer
        NdrBuffer derived = ndrBuffer.derive(0);
        derived.setLength(5);
        assertEquals(5, derived.getLength());
        assertEquals(5, ndrBuffer.getLength()); // Should affect original's deferred length
    }

    @Test
    void testAdvance() {

        this.start = index = start;
        length = 0;
        deferred = this;
    }

    /**
     * Creates a derived NdrBuffer at the specified index position.
     *
     * @param idx the index position for the derived buffer
     * @return the derived NdrBuffer
     */
    public NdrBuffer derive(final int idx) {
        final NdrBuffer nb = new NdrBuffer(buf, start);
        nb.index = idx;
        nb.deferred = deferred;

            byte[] hash = md.digest(input);
            System.arraycopy(hash, 0, derived, 0, Math.min(length, hash.length));

            // If we need more bytes, hash again with counter
            int counter = 1;
            while (derived.length > hash.length * counter) {
                md.update(input);
                md.update((byte) counter);

1a) Send encrypted data key and master key ID to KMS.
1b) Receive decrypted data key.
2)  Decrypt encrypted object key with the KEK derived from the data key.
3a) Receive new plain data key from the KMS using the master key ID of the server config.
3b) Receive encrypted form of the data key from the KMS.
4)  Derive a new KEK from the new data key and re-encrypt the OEK with it.

        this.length = 0;
        this.deferred = this;
    }

    /**
     * Creates a derived NdrBuffer at the specified index position.
     *
     * @param idx the index position for the derived buffer
     * @return the derived NdrBuffer
     */
    public NdrBuffer derive(final int idx) {
        final NdrBuffer nb = new NdrBuffer(this.buf, this.start);
        nb.index = idx;

        labelType1.setName("Test Label 1");
        labelType1.setValue("test1");
        labelType1.setPermissions(new String[0]);
        labelType1.setVirtualHost("");
        // Locale is derived from value, not set directly
        labelType1.setIncludedPaths("/test.*");
        labelType1.setExcludedPaths("/exclude.*");
        labelTypeList.add(labelType1);

        LabelType labelType2 = new LabelType();

import java.util.Map.Entry;
import java.util.Set;
import java.util.SortedMap;
import java.util.SortedSet;
import org.jspecify.annotations.NullMarked;
import org.jspecify.annotations.Nullable;

/**
 * Derived suite generators, split out of the suite builders so that they are available to GWT.
 *
 * @author George van den Driessche
 */
@GwtCompatible
@NullMarked
public final class DerivedCollectionGenerators {