// Assert: HMAC(16) only
        assertEquals(16, resp.length);
    }

    @Test
    @DisplayName("getNTLMResponse: overloads produce equal 24-byte response")
    void testGetNTLMResponse_overloads() throws GeneralSecurityException {
        // Arrange
        String password = "password";
        byte[] challenge = hex("1122334455667788");

        // Act