*/
    public static final int KERB_CHECKSUM_HMAC_MD5 = 0xFFFFFF76;
    /**
     * Kerberos checksum type for HMAC-SHA1-96 with AES-128.
     */
    public static final int HMAC_SHA1_96_AES128 = 0x0000000F;
    /**
     * Kerberos checksum type for HMAC-SHA1-96 with AES-256.
     */
    public static final int HMAC_SHA1_96_AES256 = 0x00000010;

    /**

		{"Cost Benefit Analysis (2009-2010).pptx", 59},
		{"117Gn8rfHL2ACARPAhaFd0AGzic9pUbIA/5OCn5A", 35},
		{"SHØRT", 49},
		{"There are far too many object names, and far too few bucket names!", 8},
		{"a/b/c/", 159},
		{"/a/b/c", 96},
		{string([]byte{0xff, 0xfe, 0xfd}), 147},
	}

	// Tests hashing order to be consistent.
	for i, testCase := range testCases {

  }

  @Test
  @Throws(Exception::class)
  fun parseIgnoreCacheControlExtensions() {
    // Example from http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.9.6
    val header = "private, community=\"UCI\""
    val cacheControl =
      parse(
        Headers
          .Builder()
          .set("Cache-Control", header)
          .build(),
      )

    private static final String USER_PRINCIPAL_NAME = "******@****.***";
    private static final String USER_REALM = "EXAMPLE.COM";
    private static final int ENCRYPTION_TYPE = 23; // aes128-cts-hmac-sha1-96
    private static final byte[] ENCRYPTED_DATA = "encrypted-data".getBytes();

    @BeforeEach
    void setUp() {
        keys = new KerberosKey[] { kerberosKey };
    }

    /**

        SMBUtil.writeInt4(208, buffer, bufferIndex + 4);

        response = spy(response);
        when(response.getHeaderStart()).thenReturn(0);

        // Note: Due to bug in line 96 (commented out bufferIndex = bufferOffset),
        // the decode starts at bufferIndex=8 instead of dataOffset=80
        // So we need to write data at bufferIndex=8

reached the end of their useful life.

Valid values: 

```
******@****.***
******@****.***
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha1-96
```

### Certificate-based authentication

`--sftp=trusted-user-ca-key=...` specifies a file containing public key of certificate authority that is trusted
to sign user certificates for authentication.

    assertThat(formEncode(92)).isEqualTo("%5C")
    assertThat(formEncode(93)).isEqualTo("%5D")
    assertThat(formEncode(94)).isEqualTo("%5E")
    assertThat(formEncode(95)).isEqualTo("_")
    assertThat(formEncode(96)).isEqualTo("%60")
    assertThat(formEncode(97)).isEqualTo("a")
    assertThat(formEncode(122)).isEqualTo("z")
    assertThat(formEncode(123)).isEqualTo("%7B")
    assertThat(formEncode(124)).isEqualTo("%7C")

	_ = x[ErrMissingSignHeadersTag-91]
	_ = x[ErrMalformedDate-92]
	_ = x[ErrMalformedPresignedDate-93]
	_ = x[ErrMalformedCredentialDate-94]
	_ = x[ErrMalformedExpires-95]
	_ = x[ErrNegativeExpires-96]
	_ = x[ErrAuthHeaderEmpty-97]
	_ = x[ErrExpiredPresignRequest-98]
	_ = x[ErrRequestNotReadyYet-99]
	_ = x[ErrUnsignedHeaders-100]
	_ = x[ErrMissingDateHeader-101]
	_ = x[ErrInvalidQuerySignatureAlgo-102]

        // Verify file ID
        byte[] actualFileId = new byte[16];
        System.arraycopy(buffer, 80, actualFileId, 0, 16);
        assertArrayEquals(newFileId, actualFileId);

        assertEquals(96, bytesWritten); // 32 bytes header + 64 bytes info
    }

    // Helper interface for testing
    private interface TestFileInformation extends FileInformation, Encodable {
    }

The *Secure Channel* splits the object content into chunks of a fixed size of `65536` bytes. The last chunk may be smaller to avoid adding additional overhead and is treated specially to prevent truncation attacks. The nonce value is 96 bits long and generated randomly per object / multi-part part. The *Secure Channel* supports plaintexts up to `65536 * 2^32 = 256 TiB`.

#### Randomness