* @throws GeneralSecurityException if cryptographic operations fail
     */
    public static byte[] deriveKeyAES(KerberosKey key, byte[] constant) throws GeneralSecurityException {
        byte[] keybytes = key.getEncoded();
        Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
        cipher.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(keybytes, "AES"), new IvParameterSpec(ZERO_IV, 0, ZERO_IV.length));

    SecretKey customKey =
        new SecretKey() {
          @Override
          public String getAlgorithm() {
            return "HmacMD5";
          }

          @Override
          public byte[] getEncoded() {
            return new byte[8];
          }

          @Override
          public String getFormat() {
            return "RAW";
          }
        };
    assertEquals(

        KeySpec keySpec = new PBEKeySpec(password, salt, PBKDF2_ITERATIONS, KEY_SIZE);
        SecretKey tempKey = keyFactory.generateSecret(keySpec);
        return new SecretKeySpec(tempKey.getEncoded(), KEY_ALGORITHM);
    }

    /**
     * Convert char array to byte array (UTF-8)
     */
    private byte[] charsToBytes(char[] chars) {
        if (chars == null) {
            return null;

        if (EXT_GSS_CONTEXT_CLASS.isAssignableFrom(this.gssContext.getClass())) {
            try {
                Key k = (Key) INQUIRE_SEC_CONTEXT.invoke(this.gssContext, INQUIRE_TYPE_SESSION_KEY);
                return k.getEncoded();
            } catch (IllegalAccessException | IllegalArgumentException | InvocationTargetException ex) {
                throw new SmbException("Failed to query Kerberos session key from ExtendedGSSContext", ex);

        SecretKey retrieved = keyManager.getSessionKey(sessionId);
        assertNotNull(retrieved, "Should retrieve stored key");
        assertArrayEquals(testKey, retrieved.getEncoded(), "Retrieved key should match");
    }

    @Test
    public void testGetRawKey() {
        String sessionId = "test-session-2";
        keyManager.storeSessionKey(sessionId, testKey, "AES");

        }

        // Try to get from SecretKey if available
        SecretKey secretKey = getSessionKey(sessionId);
        if (secretKey != null) {
            return secretKey.getEncoded();
        }

        return null;
    }

    /**
     * Remove and securely wipe a session key
     *
     * @param sessionId unique session identifier
     */

        final Type1Message type1Message = new Type1Message(cifsContext, TYPE_1_FLAGS, domain, workstation);
        return Base64.getEncoder().encodeToString(type1Message.toByteArray());
    }

    /**
     * Generates a Type 3 NTLM message.
     *
     * @param username the username
     * @param password the password
     * @param domain the domain

     */
    public static String encode(final byte[] inData) {
        if (ArrayUtil.isEmpty(inData)) {
            return "";
        }
        return Base64.getEncoder().encodeToString(inData);
    }

    /**
     * Decodes data encoded in Base64.
     * <p>
     * This method uses {@link java.util.Base64.Decoder} for decoding.
     * </p>
     *
     * @param inData

        assertNotNull(id);
        assertEquals(Base64.getEncoder().encodeToString(text.getBytes(CoreLibConstants.CHARSET_UTF_8)), id);

        // Test empty text
        String emptyText = "";
        String emptyId = SuggestUtil.createSuggestTextId(emptyText);
        assertNotNull(emptyId);
        assertEquals(Base64.getEncoder().encodeToString(emptyText.getBytes(CoreLibConstants.CHARSET_UTF_8)), emptyId);

        if (StringUtil.isNotBlank(username) && StringUtil.isNotBlank(password)) {
            final String value = username + ":" + password;
            final String basicAuth = "Basic " + java.util.Base64.getEncoder().encodeToString(value.getBytes(StandardCharsets.UTF_8));
            request.header("Authorization", basicAuth);
        }
        if (sslSocketFactory != null) {
            request.sslSocketFactory(sslSocketFactory);