}

    @Test
    @DisplayName("readUShort correctly interprets little endian")
    void testReadUShort() {
        byte[] a = new byte[] { (byte) 0xAA, (byte) 0xBB };
        int result = NtlmMessage.readUShort(a, 0);
        assertEquals(0xBBAA, result, "UShort should be little‑endian");
    }

    @Test
    @DisplayName("readUShort throws on too short array")
    void testReadUShortOutOfBounds() {

    }

    static int readUShort(final byte[] src, final int index) {
        return src[index] & 0xff | (src[index + 1] & 0xff) << 8;
    }

    static byte[] readSecurityBuffer(final byte[] src, final int index) {
        final int length = readUShort(src, index);
        final int offset = readULong(src, index + 4);

    }

    static int readUShort(final byte[] src, final int index) {
        return src[index] & 0xff | (src[index + 1] & 0xff) << 8;
    }

    static byte[] readSecurityBuffer(final byte[] src, final int index) {
        final int length = readUShort(src, index);
        final int offset = readULong(src, index + 4);