public char[] decryptFromString(String encryptedString) throws GeneralSecurityException {
        if (encryptedString == null) {
            return null;
        }
        byte[] encrypted = Base64.getDecoder().decode(encryptedString);
        return decryptCredentials(encrypted);
    }

    /**
     * Get the salt used for key derivation
     *
     * @return salt bytes
     */
    public byte[] getSalt() {

     *            NT password hash, hex encoded
     */
    public NtlmNtHashAuthenticator(final String domain, final String username, final String passwordHashHex) {
        this(domain, username, Hex.decode(passwordHashHex));
    }

    private NtlmNtHashAuthenticator(final byte[] passwordHash) {
        this.ntHash = passwordHash;
    }

    /**
     * {@inheritDoc}
     *

            if (path != null && !path.isEmpty()) {
                final String pathWithoutLeadingSlash = path.startsWith("/") ? path.substring(1) : path;
                // Decode URL-encoded characters (e.g., %20 -> space)
                objectName = URLDecoder.decode(pathWithoutLeadingSlash, StandardCharsets.UTF_8);
            } else {
                objectName = StringUtil.EMPTY;
            }
        }

        /**

            if (path != null && !path.isEmpty()) {
                final String pathWithoutLeadingSlash = path.startsWith("/") ? path.substring(1) : path;
                // Decode URL-encoded characters (e.g., %20 -> space)
                objectName = URLDecoder.decode(pathWithoutLeadingSlash, StandardCharsets.UTF_8);
            } else {
                objectName = StringUtil.EMPTY;
            }
        }

        /**

        }

        return new PacUnicodeString(length, maxLength, pointer);
    }

    /**
     * Reads a string with length prefix from the stream.
     * @return the decoded string
     * @throws IOException if an I/O error occurs
     * @throws PACDecodingException if the string structure is malformed
     */
    public String readString() throws IOException, PACDecodingException {

     *
     * @return the expandedNames
     */
    public final String[] getExpandedNames() {
        return this.expandedNames;
    }

    @Override
    public int decode(final byte[] buffer, int bufferIndex, final int len) {
        final int start = bufferIndex;

        this.version = SMBUtil.readInt2(buffer, bufferIndex);
        if (this.version != 3 && this.version != 1) {

    void testEncode() {
        byte[] buffer = new byte[1024];
        int length = response.encode(buffer, 0);
        assertTrue(length >= 0);
    }

    @Test
    @DisplayName("Test decode operation")
    void testDecode() {
        byte[] buffer = new byte[1024];
        // Fill with basic SMB header structure
        System.arraycopy(new byte[] { (byte) 0xFF, 'S', 'M', 'B' }, 0, buffer, 0, 4);

        @Override
        public Integer getOverrideTimeout() {
            return null;
        }

        // Methods from CommonServerMessageBlock interface
        @Override
        public int decode(byte[] buffer, int bufferIndex) throws SMBProtocolDecodingException {
            return 0;
        }

        @Override
        public int encode(byte[] dst, int dstIndex) {
            return 0;
        }

            if (path != null && !path.isEmpty()) {
                final String pathWithoutLeadingSlash = path.startsWith("/") ? path.substring(1) : path;
                // Decode URL-encoded characters (e.g., %20 -> space)
                objectName = URLDecoder.decode(pathWithoutLeadingSlash, StandardCharsets.UTF_8);
            } else {
                objectName = StringUtil.EMPTY;
            }
        }

        /**

            final byte[] challenge) throws IOException, ServletException {
        String msg = req.getHeader("Authorization");
        if (msg != null && msg.startsWith("NTLM ")) {
            final byte[] src = Base64.decode(msg.substring(5));
            if (src[8] == 1) {
                final Type1Message type1 = new Type1Message(src);
                final Type2Message type2 = new Type2Message(type1, challenge, null);