buffer.putShort(2, (short) content.length); // MaxLength (not used by readSecurityBuffer, but typically same as length)
        buffer.putInt(4, 8); // Offset

        System.arraycopy(content, 0, data, 8, content.length); // Place content at offset 8

        byte[] result = NtlmMessage.readSecurityBuffer(data, 0);
        assertArrayEquals(content, result, "Should read security buffer content correctly.");

    }

    @Test
    @DisplayName("readSecurityBuffer correctly extracts data")
    void testReadSecurityBuffer() {
        byte[] buf = new byte[8 + 4];
        byte[] payload = { 0x11, 0x22, 0x33, 0x44 };
        NtlmMessage.writeSecurityBuffer(buf, 0, 8, payload);
        byte[] extracted = NtlmMessage.readSecurityBuffer(buf, 0);

            final byte[] domain = readSecurityBuffer(material, 16);
            suppliedDomain = new String(domain, getOEMEncoding());
        }
        String suppliedWorkstation = null;
        if ((flags & NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED) != 0) {
            final byte[] workstation = readSecurityBuffer(material, 24);

        }
        final byte[] lmResponse = readSecurityBuffer(material, 12);
        final int lmResponseOffset = readULong(material, 16);
        final byte[] ntResponse = readSecurityBuffer(material, 20);
        final int ntResponseOffset = readULong(material, 24);
        final byte[] domain = readSecurityBuffer(material, 28);
        final int domainOffset = readULong(material, 32);

            throw new IOException("Not a Type 2 message.");
        }
        pos += 4;

        final int flags = readULong(input, pos + 8);
        setFlags(flags);

        final byte[] targetName = readSecurityBuffer(input, pos);
        final int targetNameOff = readULong(input, pos + 4);
        if (targetName.length != 0) {

        pos += 8;

        final byte[] domainBytes = readSecurityBuffer(material, pos);
        final int domainOffset = readULong(material, pos + 4);
        pos += 8;

        final byte[] userBytes = readSecurityBuffer(material, pos);
        final int userOffset = readULong(material, pos + 4);
        pos += 8;

        final byte[] workstationBytes = readSecurityBuffer(material, pos);

            final byte[] domain = readSecurityBuffer(material, pos);
            setSuppliedDomain(new String(domain, getOEMEncoding()));
        }
        pos += 8;

        if ((flags & NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED) != 0) {
            final byte[] workstation = readSecurityBuffer(material, pos);
            setSuppliedWorkstation(new String(workstation, getOEMEncoding()));

    }

    static int readUShort(final byte[] src, final int index) {
        return src[index] & 0xff | (src[index + 1] & 0xff) << 8;
    }

    static byte[] readSecurityBuffer(final byte[] src, final int index) {
        final int length = readUShort(src, index);
        final int offset = readULong(src, index + 4);
        final byte[] buffer = new byte[length];

            throw new IOException("Not a Type 2 message.");
        }
        final int flags = readULong(material, 20);
        setFlags(flags);
        String target = null;
        byte[] bytes = readSecurityBuffer(material, 12);
        if (bytes.length != 0) {
            target = new String(bytes, (flags & NTLMSSP_NEGOTIATE_UNICODE) != 0 ? UNI_ENCODING : getOEMEncoding());
        }
        setTarget(target);

    }

    static int readUShort(final byte[] src, final int index) {
        return src[index] & 0xff | (src[index + 1] & 0xff) << 8;
    }

    static byte[] readSecurityBuffer(final byte[] src, final int index) {
        final int length = readUShort(src, index);
        final int offset = readULong(src, index + 4);
        final byte[] buffer = new byte[length];