0x38, 0x3a, 0x30, 0x30, 0xa1, 0x76, 0x0, 0xc4, 0x24, 0x95, 0xc4, 0x10, 0xdb, 0xaf, 0x9a, 0xe8, 0xda, 0xe0, 0x40, 0xa6, 0x80, 0xf2, 0x1c, 0x39, 0xe8, 0x7, 0x38, 0x2c, 0xd3, 0x16, 0xb2, 0x7f, 0xfe, 0x45, 0x1c, 0xf, 0x98, 0xc4, 0x4, 0xea, 0x49, 0x78, 0x27, 0x1, 0x6, 0xc5, 0x1, 0x4b, 0x82, 0xa4, 0x54, 0x79, 0x70, 0x65, 0x1, 0xa5, 0x56, 0x32, 0x4f, 0x62, 0x6a, 0xde, 0x0, 0x11, 0xa2, 0x49, 0x44, 0xc4, 0x10, 0xdb, 0xaf, 0x9a, 0xe8, 0xda, 0xe0, 0x40, 0xa6, 0x80, 0xf2, 0x1c, 0x39, 0xe8, 0x7, 0x38, 0x2c, 0xa4,...

        }
    }

    @Test
    void testGetResult() {
        ResultMsg m = new ResultMsg();
        assertNull(m.getResult());
        m.setResult(0xDEAD);
        DcerpcException e = m.getResult();
        assertEquals(0xDEAD, e.getErrorCode());
    }

    @Test
    void testEncodeHeaderAndDecodeHeader() throws Exception {
        TestMessage m = new TestMessage();
        m.ptype = 0; // request

    @DisplayName("readUShort correctly interprets little endian")
    void testReadUShort() {
        byte[] a = new byte[] { (byte) 0xAA, (byte) 0xBB };
        int result = NtlmMessage.readUShort(a, 0);
        assertEquals(0xBBAA, result, "UShort should be little‑endian");
    }

    @Test
    @DisplayName("readUShort throws on too short array")
    void testReadUShortOutOfBounds() {
        byte[] a = new byte[] { 0x02 };

            DummySSPContext ctx =
                    new DummySSPContext(new byte[] { 1, 2, 3 }, true, "NBHOST", new ASN1ObjectIdentifier[] { mech1, mech2 }, 0xA5, true);

            // Act & Assert
            assertArrayEquals(new byte[] { 1, 2, 3 }, ctx.getSigningKey(), "signing key");
            assertTrue(ctx.isEstablished(), "should be established");

        // Random but realistic GUID
        byte[] testGuid = { (byte) 0x01, (byte) 0x23, (byte) 0x45, (byte) 0x67, (byte) 0x89, (byte) 0xAB, (byte) 0xCD, (byte) 0xEF,
                (byte) 0xFE, (byte) 0xDC, (byte) 0xBA, (byte) 0x98, (byte) 0x76, (byte) 0x54, (byte) 0x32, (byte) 0x10 };

        // Security mode with signing required
        int testSecurityMode = 0x0003; // SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED

        ASN1EncodableVector fields = new ASN1EncodableVector();
        // Add a dummy [3] BIT STRING which should be ignored by implementation
        fields.add(new DERTaggedObject(true, 3, new DERBitString(0xA5)));

        ASN1EncodableVector ev = new ASN1EncodableVector();
        ev.add(new ASN1ObjectIdentifier(SPNEGO_OID_STR));
        ev.add(new DERTaggedObject(true, 0, new DERSequence(fields)));

            // Test 2: Invalid signature should return false
            byte[] invalidSig = new byte[SIGNATURE_LENGTH];
            Arrays.fill(invalidSig, (byte) 0xBA);
            System.arraycopy(invalidSig, 0, data, SIGNATURE_OFFSET, SIGNATURE_LENGTH);

            boolean invalidResult = digest.verify(data, 0, data.length, 0, msg);