val realm: String? = challenge.realm()
    val charset: Charset = challenge.charset()
  }

  @Test @Disabled
  fun cipherSuite() {
    val cipherSuite: CipherSuite = CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
    val javaName: String = cipherSuite.javaName()
  }

  @Test @Disabled
  fun connectionSpec() {
    val connectionSpec: ConnectionSpec = ConnectionSpec.RESTRICTED_TLS

 *  Fix: Use the correct key size in the name of `TLS_AES_128_CCM_8_SHA256` which is a TLS 1.3
    cipher suite. We accidentally specified a key size of 256, preventing that cipher suite from
    being selected for any TLS handshakes. We didn't notice because this cipher suite isn't
    supported on Android, Java, or Conscrypt.

    We removed this cipher suite and `TLS_AES_128_CCM_SHA256` from the restricted, modern, and

     * Accept-Language: fr-CA
     * Accept-Charset: UTF-8
     * HTTP/1.1 200 OK
     * 3
     * Content-Type: image/png
     * Content-Length: 100
     * Cache-Control: max-age=600
     *
     * AES_256_WITH_MD5
     * 2
     * base64-encoded peerCertificate[0]
     * base64-encoded peerCertificate[1]
     * -1
     * TLSv1.2
     * ```
     *

      content-length: 3
      OkHttp-Received-Millis: ${System.currentTimeMillis()}
      X-Android-Response-Source: NETWORK 200
      OkHttp-Sent-Millis: ${System.currentTimeMillis()}

      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
      1

###  Introduced KMS v2

Introduce KMS v2alpha1 API to add performance, rotation, and observability improvements. Encrypt data at rest (ie Kubernetes `Secrets`) with DEK using AES-GCM instead of AES-CBC for kms data encryption. No user action is required. Reads with AES-GCM and AES-CBC will continue to be allowed. See the guide [Using a KMS provider for data encryption](https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/) for more information.

search_engine.http.url=http://localhost:9201
search_engine.http.ssl.certificate_authorities=
search_engine.username=
search_engine.password=
search_engine.heartbeat_interval=10000

# Cryptographer
app.cipher.algorism=aes
app.cipher.key=___change__me___
app.digest.algorism=sha256
app.encrypt.property.pattern=.*password|.*key|.*token|.*secret

app.extension.names=

app.audit.log.format=

# JVM options
jvm.crawler.options=\

encrypting transformer for storing secrets encrypted at rest ([#41939](https://github.com/kubernetes/kubernetes/pull/41939), [@smarterclayton](https://github.com/smarterclayton))

  * Add secretbox and AES-CBC encryption modes to at rest encryption. AES-CBC is considered superior to AES-GCM because it is resistant to nonce-reuse attacks, and secretbox uses Poly1305 and XSalsa20. ([#46916](https://github.com/kubernetes/kubernetes/pull/46916), [@smarterclayton](https://github.com/smarterclayton))...

		// The AdminClient will reject any version it does not know.
		if publicKey == nil {
			w.Write([]byte{1})
			w.Write(key[:])
		}

		stream, err := sio.AES_256_GCM.Stream(key[:])
		if err != nil {
			bugLogIf(ctx, err)
			return
		}
		// Zero nonce, we only use each key once, and 32 bytes is plenty.
		nonce := make([]byte, stream.NonceSize())

AAGH,GAAQsH,EAAS1D,iBACtB7D,EAAEI,GAAGH,GAAMuE,YAAc+C,EACzBvH,EAAEI,GAAGH,GAAMwE,WAAc,WAEvB,OADAzE,EAAEI,GAAGH,GAAQE,EACNoH,EAAS1D,kBAGX0D,EA9KS,CA+Kf7C,QC/KGuE,EAAc,SAACjJ,GAMnB,IAAMC,EAAqB,aAGrBE,EAAqBH,EAAEI,GAAGH,GAG1BI,EACG,qBAGHG,EACS,mCADTA,EAES,eAGTC,EACc,4BAQdwI,EA9BmB,WA+BvB,SAAAA,EAAYnI,EAASC,GACnBC,KAAKC,SAAWH,EAhCK,OAAAmI,EAAA5H,UAmCvBY,OAAA,WACEjC,EAAEgB,KAAKC,UAAU8H,QAAQvI,GAAsB4H,QAAQc,YAAYzI,GAEnE,IAAM0I,EAAenJ,EAAEK,MAAMA,GAC7BL,EAAEgB,KAAKC,UAAUa,QAAQqH,IAvCJF,EA4ChBpF,iBAAP,S...

    assumeFalse(
      System.getProperty("java.version", "unknown").matches(Regex("1\\.8\\.0_1\\d\\d")),
    )
    server.enqueue(MockResponse())
    val cipherSuite = CipherSuite.TLS_DH_anon_WITH_AES_128_GCM_SHA256
    val clientCertificates =
      HandshakeCertificates.Builder()
        .build()
    client =
      client.newBuilder()
        .sslSocketFactory(