final byte[] mechanismListMIC = this.mechContext.calculateMIC(ml);
        if (log.isDebugEnabled()) {
            log.debug("Out Mech list " + Arrays.toString(lm));
            log.debug("Out Mech list encoded " + Hexdump.toHexString(ml));
            log.debug("Out Mech list MIC " + Hexdump.toHexString(mechanismListMIC));
        }
        return mechanismListMIC;
    }

        byte[] data = new byte[] { 1, 2 };
        byte[] mic = new byte[] { 3 };
        // No exception means success
        doNothing().when(gssContext).verifyMIC(eq(mic), eq(0), eq(1), eq(data), eq(0), eq(2), any());

        assertDoesNotThrow(() -> ctx.verifyMIC(data, mic));
        verify(gssContext, times(1)).verifyMIC(eq(mic), eq(0), eq(1), eq(data), eq(0), eq(2), any());
    }

    @Test

            throw new CIFSException("Failed to calculate MIC", e);
        }
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.smb.SSPContext#verifyMIC(byte[], byte[])
     */
    @Override
    public void verifyMIC(byte[] data, byte[] mic) throws CIFSException {
        try {
            this.gssContext.verifyMIC(mic, 0, mic.length, data, 0, data.length, new MessageProp(false));

     */
    @Override
    public String toString() {
        String mic = null;
        if (this.getMechanismListMIC() != null) {
            mic = Hexdump.toHexString(this.getMechanismListMIC(), 0, this.getMechanismListMIC().length);
        }
        return String.format("NegTokenInit[flags=%d,mechs=%s,mic=%s]", this.getContextFlags(), Arrays.toString(this.getMechanisms()), mic);
    }

    @Override
    public byte[] toByteArray() {

            }
            byte[] expected = calculateMIC(data);
            if (mic.length != expected.length || mic[0] != expected[0]) {
                throw new CIFSException("MIC mismatch");
            }
        }

        @Override
        public boolean isMICAvailable() {
            // Available if context is established and integrity is supported
            return this.established && this.integrity;

                throw new CIFSException("Failed to decrypt MIC", e);
            }
        }

        final int expectSeq = this.verifySequence.getAndIncrement();
        if (expectSeq != seq) {
            throw new CIFSException(String.format("Invalid MIC sequence, expect %d have %d", expectSeq, seq));
        }

        final byte[] verify = new byte[8];
        System.arraycopy(mic, 4, verify, 0, 8);

        Kerb5Authenticator auth = new Kerb5Authenticator(new Subject(), "DOM", "user", "pass");
        auth.setForceFallback(true);

        // Token advertising Kerberos mech (so foundKerberos == true), but forceFallback should still route to NTLM
        byte[] init = spnegoInitWithMechs(Kerb5Context.SUPPORTED_MECHS);

    /**
     * Returns the message integrity code (MIC) for this Type-3 message.
     *
     * @return A <code>byte[]</code> containing the message integrity code.
     */
    public byte[] getMic() {
        return this.mic;
    }

    /**
     * Sets the message integrity code (MIC) for this Type-3 message.
     *
     * @param mic
     *            NTLM mic to set (16 bytes)
     */

                Set<ASN1ObjectIdentifier> mechs = new HashSet<>(Arrays.asList(tok.getMechanisms()));
                boolean foundKerberos = false;
                for (ASN1ObjectIdentifier mech : Kerb5Context.SUPPORTED_MECHS) {
                    foundKerberos |= mechs.contains(mech);
                }
                if ((!foundKerberos || this.forceFallback) && this.canFallback && tc.getConfig().isAllowNTLMFallback()) {

        // Then
        // MIC (Message Integrity Check) should be included for newer versions
        if (type3.isMICRequired()) {
            assertNotNull(type3.getMic());
            assertEquals(16, type3.getMic().length); // MIC is 16 bytes
        }
    }

    @Test
    @DisplayName("Should handle case sensitivity correctly")