// Securely wipe temporary key references - guaranteed by try-finally
                if (encKey != null) {
                    SecureKeyManager.secureWipe(encKey);
                }
                if (decKey != null) {
                    SecureKeyManager.secureWipe(decKey);
                }
            }
        } catch (Exception e) {
            log.error("Error validating key lengths", e);

import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;

/**
 * Test class for SecureKeyManager
 */
public class SecureKeyManagerTest {

    private SecureKeyManager keyManager;
    private byte[] testKey;

    @BeforeEach
    public void setUp() {
        keyManager = new SecureKeyManager();
        testKey = new byte[16];
        new SecureRandom().nextBytes(testKey);
    }

    @AfterEach

    }

    @Test
    @DisplayName("Should integrate with SecureKeyManager")
    void testSecureKeyManagerIntegration() throws Exception {
        // Given
        SecureKeyManager keyManager = new SecureKeyManager();
        byte[] testKey = new byte[16];
        new SecureRandom().nextBytes(testKey);

        // When - Create context with SecureKeyManager using same key for both operations

     */
    private static final long serialVersionUID = -4090263879887877186L;

    private static final Logger log = LoggerFactory.getLogger(NtlmPasswordAuthenticator.class);
    private static final SecureKeyManager keyManager = new SecureKeyManager();
    private static final SecurityAuditLogger auditLogger = SecurityAuditLogger.getInstance();

    /**
     * Performs constant-time comparison of two char arrays to prevent timing attacks.

            return result;

        } finally {
            // Securely wipe plaintext bytes - guaranteed by try-finally
            if (plaintextBytes != null) {
                SecureKeyManager.secureWipe(plaintextBytes);
            }
        }
    }

    public char[] decryptCredentials(byte[] ciphertext) throws GeneralSecurityException {
        checkNotDestroyed();