}

      val isCorrettoInstalled: Boolean =
        isCorrettoSupported &&
          Security
            .getProviders()
            .first()
            .name == AmazonCorrettoCryptoProvider.PROVIDER_NAME
    }

    private static final int SIGNATURE_LENGTH = 16;

    @BeforeAll
    static void setupClass() {
        // Ensure BouncyCastle provider is available for AES-CMAC
        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {
            Security.addProvider(new BouncyCastleProvider());
        }
    }

    @BeforeEach
    void setup() {
        sessionKey = new byte[16];
        Arrays.fill(sessionKey, (byte) 0xAA);