return this.pointer;
    }


    public String check ( String string ) throws PACDecodingException {
        if ( this.pointer == 0 && string != null )
            throw new PACDecodingException("Non-empty string");

        int expected = this.length / 2;
        if ( string.length() != expected ) {
            throw new PACDecodingException("Invalid string length, expected " + expected + ", have " + string.length());
        }

    @Test
    public void testRC4Checksum1 () throws PACDecodingException, GeneralSecurityException {
        String data = "fifteen sixteen";
        String key = "F7D3A155AF5E238A0B7A871A96BA2AB2";
        String expect = "6F65117E732E724D60FC2A9744CEAE43";
        testRC4HMac(5, data, key, expect);
    }


    @Test
    public void testRC4Checksum2 () throws PACDecodingException, GeneralSecurityException {

    private static final int MINIMAL_BUFFER_SIZE = 32;

    private byte[] credentialType;


    public PacCredentialType ( byte[] data ) throws PACDecodingException {
        this.credentialType = data;
        if ( !isCredentialTypeCorrect() ) {
            throw new PACDecodingException("Invalid PAC credential type");
        }
    }


    public boolean isCredentialTypeCorrect () {

        ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token));
        ASN1TaggedObject derToken;
        try {
            derToken = ASN1Util.as(ASN1TaggedObject.class, stream);
            if ( derToken.getTagClass() != BERTags.APPLICATION )
                throw new PACDecodingException("Malformed kerberos ticket");
            stream.close();

    private SID[] groupSids;
    private SID[] resourceGroupSids;
    private SID[] extraSids;
    private int userAccountControl;
    private int userFlags;


    public PacLogonInfo ( byte[] data ) throws PACDecodingException {
        try {
            PacDataInputStream pacStream = new PacDataInputStream(new DataInputStream(new ByteArrayInputStream(data)));

            // Skip firsts
            pacStream.skipBytes(20);

import java.util.Map;

import javax.security.auth.kerberos.KerberosKey;

import jcifs.pac.PACDecodingException;


@SuppressWarnings ( "javadoc" )
public abstract class KerberosAuthData {

    public static List<KerberosAuthData> parse ( int authType, byte[] token, Map<Integer, KerberosKey> keys ) throws PACDecodingException {

        List<KerberosAuthData> authorizations = new ArrayList<>();

        switch ( authType ) {

    public static final int ETYPE_AES256_CTS_HMAC_SHA1_96 = 18;

    private int type;
    private byte[] checksum;


    public PacSignature ( byte[] data ) throws PACDecodingException {
        try {
            PacDataInputStream bufferStream = new PacDataInputStream(new DataInputStream(new ByteArrayInputStream(data)));
            this.type = bufferStream.readInt();
            switch ( this.type ) {