assertFalse(echoResponse.isVerifyFailed());
            verify(mockDigest).verify(buffer, 0, 100, 0, echoResponse);
        }

        @Test
        @DisplayName("Should fail signature verification when digest verification fails")
        void testVerifySignatureFailed() throws Exception {
            byte[] buffer = new byte[1024];
            echoResponse.setDigest(mockDigest);

            // Use constant-time comparison to prevent timing attacks
            if (!MessageDigest.isEqual(sig, cmp)) {
                return false; // Signature verification failed
            }
            return true; // Signature verification succeeded
        } finally {
            this.signingLock.unlock();
        }
    }

    /**
     * Securely wipe signing key from memory
     */

            assertTrue(result);
            assertFalse(response.isVerifyFailed());
        }

        @Test
        @DisplayName("Should handle signature verification failure")
        void testVerifySignatureFailure() {
            byte[] buffer = new byte[100];
            response.setDigest(mockDigest);

        assertFalse(
                wagon.getTransferEventSupport().hasTransferListener(transferListener),
                "Transfer listener still registered after putArtifact");
    }

    /**
     * Checks the verification of checksums.
     */
    @Disabled
    @Test
    void testChecksumVerification() throws Exception {
        ArtifactRepositoryPolicy policy = new ArtifactRepositoryPolicy(

        @DisplayName("Should correctly verify signatures - regression test for inverted logic bug")
        void testVerifySignatureLogicRegression() throws Exception {
            // This test ensures the signature verification logic is not inverted
            // Previously there was a bug where verify returned true for invalid signatures

            // Set signed flag

     *
     * @param macSigningKey
     *            The MAC signing key used for generating signatures
     * @param bypass
     *            Whether to bypass signature verification
     */
    public SMB1SigningDigest(final byte[] macSigningKey, final boolean bypass) {
        this(macSigningKey, bypass, 0);
    }

    /**

    @Test
    @DisplayName("Test decode with signature verification failure")
    void testDecodeWithSignatureVerificationFailure() {
        testBlock = new TestAndXServerMessageBlock(mockConfig, (byte) 0x25) {
            @Override
            public boolean verifySignature(byte[] data, int offset, int length) {
                return false; // Simulate signature verification failure
            }

            @Override

            if (tc == null) {
                throw new NullPointerException("tc");
            }
            // Exercise interaction with dependency for verification purposes
            // These methods do not throw and allow interaction checks.
            tc.getConfig();
            tc.getCredentials();

            // Minimal behavior: return a mock SSPContext with lenient stubbing

            assertEquals(0x9ABC, testBlock.getUid());
            assertEquals(0xDEF0, testBlock.getMid());
        }

        @Test
        @DisplayName("Test decode with signature verification failure")
        void testDecodeWithSignatureFailure() {
            testBlock = new TestServerMessageBlock(mockConfig) {
                @Override

    // interpreted in little-endian order.
    int verification = Integer.reverseBytes(Ints.fromByteArray(result));

    if (expected != verification) {
      throw new AssertionError(
          "Expected: "
              + Integer.toHexString(expected)
              + " got: "
              + Integer.toHexString(verification));
    }
  }

  static final Funnel<Object> BAD_FUNNEL =