// Build a group SID with domain name and RID 512
            SID group = new SID(buildSidT((byte) 1, ident, 10, 20, 512), jcifs.SID.SID_TYPE_DOM_GRP, "DOM", "Domain Admins", false);

            jcifs.SID member = new SID("S-1-5-21-1000");
            jcifs.SID[] expected = new jcifs.SID[] { member };
            when(mockResolver.getGroupMemberSids(eq(mockCtx), eq("srv"), any(jcifs.SID.class), eq(512), eq(123))).thenReturn(expected);

    /**
     * Context type
     */
    public static final int NEGO_CTX_PREAUTH_TYPE = 0x1;

    /**
     * SHA-512
     */
    public static final int HASH_ALGO_SHA512 = 0x1;

    private int[] hashAlgos;
    private byte[] salt;

    /**
     * Constructs a preauth integrity negotiate context with the specified parameters.

	VPGATHERQQ X0, 512(SP)(X1*1), X2        // c4e2f991940c00020000
	VPGATHERQQ X0, (R12)(X1*1), X2          // c4c2f991140c
	VPGATHERQQ X0, 16(R12)(X1*1), X2        // c4c2f991540c10
	VPGATHERQQ X0, 512(R12)(X1*1), X2       // c4c2f991940c00020000
	VPGATHERQQ X0, (BP)(X1*1), X2           // c4e2f991540d00
	VPGATHERQQ X0, 16(BP)(X1*1), X2         // c4e2f991540d10
	VPGATHERQQ X0, 512(BP)(X1*1), X2        // c4e2f991940d00020000

var KafkaSHA256 scram.HashGeneratorFcn = sha256.New

// KafkaSHA512 is a function that returns a crypto/sha512 hasher and should be used
// to create Client objects configured for SHA-512 hashing.
var KafkaSHA512 scram.HashGeneratorFcn = sha512.New

// XDGSCRAMClient implements the client-side of an authentication
// conversation with a server.  A new conversation must be created for

  fun decodeRsa512() {
    // The certificate + private key below was generated with OpenSSL. Never generate certificates
    // with MD5 or 512-bit RSA; that's insecure!
    //
    // openssl req \
    //   -x509 \
    //   -md5 \
    //   -nodes \
    //   -days 1 \
    //   -newkey rsa:512 \
    //   -keyout privateKey.key \
    //   -out certificate.crt
    val certificatePem =
      """

            assertEquals(0, SMBUtil.readInt4(buffer, 30));
        }

        @Test
        @DisplayName("Should encode with all lock flags")
        void testEncodingWithAllFlags() {
            long offset = 512L;
            long length = 1024L;
            int allFlags = Smb2Lock.SMB2_LOCKFLAG_SHARED_LOCK | Smb2Lock.SMB2_LOCKFLAG_EXCLUSIVE_LOCK | Smb2Lock.SMB2_LOCKFLAG_UNLOCK
                    | Smb2Lock.SMB2_LOCKFLAG_FAIL_IMMEDIATELY;

        SMBUtil.writeInt8(1024L, buffer, 40); // endOfFile
        SMBUtil.writeInt8(2048L, buffer, 48); // allocationSize
        SMBUtil.writeInt4(0x20, buffer, 56); // extFileAttributes
        SMBUtil.writeInt4(512, buffer, 64); // eaSize

        // Decode
        fileBothDirectoryInfo.decode(buffer, 0, buffer.length);

        // Get toString result
        String result = fileBothDirectoryInfo.toString();

pkg os (darwin-amd64-cgo), const O_EXCL = 2048
pkg os (darwin-amd64-cgo), const O_SYNC = 128
pkg os (darwin-amd64-cgo), const O_TRUNC = 1024
pkg os (darwin-amd64-cgo), const PathListSeparator = 58
pkg os (darwin-amd64-cgo), const PathSeparator = 47
pkg os (freebsd-386), const DevNull = "/dev/null"
pkg os (freebsd-386), const O_APPEND = 8
pkg os (freebsd-386), const O_CREATE = 512
pkg os (freebsd-386), const O_EXCL = 2048

            Field endOfFileField = Smb2CloseResponse.class.getDeclaredField("endOfFile");
            endOfFileField.setAccessible(true);
            assertEquals(512L, endOfFileField.get(response));

            Field fileAttributesField = Smb2CloseResponse.class.getDeclaredField("fileAttributes");
            fileAttributesField.setAccessible(true);

// https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.22.0:ssh/common.go;l=85
var supportedMACs = []string{
	"******@****.***", "hmac-sha2-512******@****.***", "hmac-sha2-256", "hmac-sha2-512", "hmac-sha1", "hmac-sha1-96",
}

func sshPubKeyAuth(c ssh.ConnMetadata, key ssh.PublicKey) (*ssh.Permissions, error) {
	return authenticateSSHConnection(c, key, nil)
}