assertEquals(32, key2.length, "Key 2 should have correct length");
        assertFalse(Arrays.equals(key1, key2), "Random keys should be different");
    }

    @Test
    public void testDeriveKey() throws Exception {
        byte[] baseKey = new byte[16];
        new SecureRandom().nextBytes(baseKey);

        byte[] derived1 = keyManager.deriveKey(baseKey, "label1", null, 32);