void setGetMechanismListMIC() {
        TestSpnegoToken t = new TestSpnegoToken();
        byte[] mic = new byte[] { 7, 8, 9, 10 };
        t.setMechanismListMIC(mic);
        assertArrayEquals(mic, t.getMechanismListMIC(), "mechanismListMIC should round-trip");

        // Document current behavior: no defensive copy (reference exposed)
        mic[1] = 42;

        // Tag [3]
        byte[] tokenTag3 = buildInitToken(new ASN1ObjectIdentifier[] { OID_KRB }, null, null, mic, false, null, null, null);
        NegTokenInit p3 = new NegTokenInit(tokenTag3);
        assertArrayEquals(mic, p3.getMechanismListMIC(), "MIC should be parsed from tag [3]");
    }

    @Test

            }
            byte[] expected = calculateMIC(data);
            if (mic.length != expected.length || mic[0] != expected[0]) {
                throw new CIFSException("MIC mismatch");
            }
        }

        @Override
        public boolean isMICAvailable() {
            // Available if context is established and integrity is supported
            return this.established && this.integrity;

    /**
     * Calculates a Message Integrity Code (MIC) for the given data.
     * @param data the data to calculate MIC for
     * @return MIC
     * @throws CIFSException if an error occurs calculating the MIC
     */
    byte[] calculateMIC(byte[] data) throws CIFSException;

    /**
     * Verifies a Message Integrity Code (MIC) for the given data.
     * @param data the data to verify

        byte[] data = new byte[] { 1, 2 };
        byte[] mic = new byte[] { 3 };
        // No exception means success
        doNothing().when(gssContext).verifyMIC(eq(mic), eq(0), eq(1), eq(data), eq(0), eq(2), any());

        assertDoesNotThrow(() -> ctx.verifyMIC(data, mic));
        verify(gssContext, times(1)).verifyMIC(eq(mic), eq(0), eq(1), eq(data), eq(0), eq(2), any());
    }

    @Test

        ASN1ObjectIdentifier mech = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2");
        byte[] tokenArray = new byte[] { 1, 2, 3 };
        byte[] mic = new byte[] { 9, 9, 9 };
        NegTokenTarg original = new NegTokenTarg(NegTokenTarg.ACCEPT_COMPLETED, mech, tokenArray, mic);

        // Act – serialise and parse back
        byte[] bytes = original.toByteArray();
        NegTokenTarg roundTrip = new NegTokenTarg(bytes);

    }

    /**
     * Gets the mechanism list MIC (Message Integrity Code) for integrity protection
     * @return the mechanism list MIC bytes
     */
    public byte[] getMechanismListMIC() {
        return this.mechanismListMIC;
    }

    /**
     * Sets the mechanism list MIC (Message Integrity Code) for integrity protection
     * @param mechanismListMIC the mechanism list MIC bytes
     */

                throw new CIFSException("Failed to decrypt MIC", e);
            }
        }

        final int expectSeq = this.verifySequence.getAndIncrement();
        if (expectSeq != seq) {
            throw new CIFSException(String.format("Invalid MIC sequence, expect %d have %d", expectSeq, seq));
        }

        final byte[] verify = new byte[8];
        System.arraycopy(mic, 4, verify, 0, 8);

    /**
     * Returns the message integrity code (MIC) for this Type-3 message.
     *
     * @return A <code>byte[]</code> containing the message integrity code.
     */
    public byte[] getMic() {
        return this.mic;
    }

    /**
     * Sets the message integrity code (MIC) for this Type-3 message.
     *
     * @param mic
     *            NTLM mic to set (16 bytes)
     */

     */
    @Override
    public String toString() {
        String mic = null;
        if (this.getMechanismListMIC() != null) {
            mic = Hexdump.toHexString(this.getMechanismListMIC(), 0, this.getMechanismListMIC().length);
        }
        return String.format("NegTokenInit[flags=%d,mechs=%s,mic=%s]", this.getContextFlags(), Arrays.toString(this.getMechanisms()), mic);
    }

    @Override
    public byte[] toByteArray() {