*/
    protected DcerpcHandle() {
        // Default constructor
    }

    /* Bindings are in the form:
     * proto:\\server[key1=val1,key2=val2]
     * or
     * proto:server[key1=val1,key2=val2]
     * or
     * proto:[key1=val1,key2=val2]
     *
     * If a key is absent it is assumed to be 'endpoint'. Thus the
     * following are equivalent:
     * proto:\\ts0.win.net[endpoint=\pipe\srvsvc]

        data.addMetaData("key1", "value1");
        data.addMetaData("key2", 123);
        data.addMetaData("key3", true);

        Map<String, Object> metaDataMap = data.getMetaDataMap();
        assertNotNull(metaDataMap);
        assertEquals(3, metaDataMap.size());

        assertEquals("value1", metaDataMap.get("key1"));
        assertEquals(123, metaDataMap.get("key2"));

        Smb2LeaseKey key1 = directoryLeaseManager.requestDirectoryLease(dir1, DirectoryLeaseState.DIRECTORY_READ_HANDLE,
                DirectoryCacheScope.IMMEDIATE_CHILDREN);

        Smb2LeaseKey key2 =
                directoryLeaseManager.requestDirectoryLease(dir2, DirectoryLeaseState.DIRECTORY_FULL, DirectoryCacheScope.RECURSIVE_TREE);

        assertNotNull(key1);
        assertNotNull(key2);

        Smb2LeaseKey key1 = new Smb2LeaseKey();
        Smb2LeaseKey key2 = new Smb2LeaseKey();
        Smb2LeaseKey key3 = new Smb2LeaseKey();

        when(baseLeaseManager.requestLease(dir1, DirectoryLeaseState.DIRECTORY_READ_HANDLE)).thenReturn(key1);
        when(baseLeaseManager.requestLease(dir2, DirectoryLeaseState.DIRECTORY_READ_HANDLE)).thenReturn(key2);

 */
public abstract class DcerpcHandle implements DcerpcConstants, AutoCloseable {

    /*
     * Bindings are in the form:
     * proto:\\server[key1=val1,key2=val2]
     * or
     * proto:server[key1=val1,key2=val2]
     * or
     * proto:[key1=val1,key2=val2]
     *
     * If a key is absent it is assumed to be 'endpoint'. Thus the
     * following are equivalent:
     * proto:\\ts0.win.net[endpoint=\pipe\srvsvc]

        // Then
        assertNotNull(signingKey, "Signing key should not be null");
        assertEquals(16, signingKey.length, "Signing key should be 16 bytes");
        assertFalse(Arrays.equals(sessionKey, signingKey), "Signing key should be different from session key");
    }

    @Test
    @DisplayName("Should derive different signing keys for different dialects")
    void testDeriveSigningKey_DifferentDialects() {

    }

    /**
     * Generate a random key
     *
     * @param length key length in bytes
     * @return random key bytes
     */
    public byte[] generateRandomKey(int length) {
        checkNotClosed();

        byte[] key = new byte[length];
        secureRandom.nextBytes(key);
        return key;
    }

    /**
     * Clear all stored keys
     */
    public void clearAllKeys() {

        assertArrayEquals(viaHash, viaPassword, "Both overloads must compute same NTLMv2 key");

        // Changing domain should change the key (domain is part of MAC input)
        byte[] differentDomain = NtlmUtil.nTOWFv2("DOMAIN", user, password);
        assertFalse(Arrays.equals(viaPassword, differentDomain), "Different domain should produce a different key");
    }

    @Test

        }

        byte[] key = null;
        byte[] keyCopy = null;

        try {
            // Get the key and create a defensive copy for SecretKeySpec
            key = encrypt ? getEncryptionKey() : getDecryptionKey();
            keyCopy = Arrays.copyOf(key, key.length);

            // Validate key length matches expected cipher requirements

     *
     * @param key the base Kerberos key
     * @param constant the key derivation constant
     * @return the derived key bytes
     * @throws GeneralSecurityException if cryptographic operations fail
     */
    public static byte[] deriveKeyAES(KerberosKey key, byte[] constant) throws GeneralSecurityException {
        byte[] keybytes = key.getEncoded();