assertArrayEquals(plaintext, decrypted, "CCM decryption should recover original plaintext");
    }

    @Test
    @DisplayName("Should integrate with SecureKeyManager")
    void testSecureKeyManagerIntegration() throws Exception {
        // Given
        SecureKeyManager keyManager = new SecureKeyManager();
        byte[] testKey = new byte[16];
        new SecureRandom().nextBytes(testKey);