Method: Deflate,
		Mode:   0644,
	},
	{
		Name:   "setuid",
		Data:   []byte("setuid file"),
		Method: Deflate,
		Mode:   0755 | fs.ModeSetuid,
	},
	{
		Name:   "setgid",
		Data:   []byte("setgid file"),
		Method: Deflate,
		Mode:   0755 | fs.ModeSetgid,
	},
	{
		Name:   "symlink",
		Data:   []byte("../link/target"),
		Method: Deflate,
		Mode:   0755 | fs.ModeSymlink,
	},
	{

        // Given - Create a complete SMB2 message with header
        byte[] buffer = new byte[512];
        int headerStart = 0;
        int bodyStart = Smb2Constants.SMB2_HEADER_LENGTH;

        // Write SMB2 header (64 bytes)
        // Protocol ID
        System.arraycopy(new byte[] { (byte) 0xFE, 'S', 'M', 'B' }, 0, buffer, headerStart, 4);
        // Structure size (64)

        void testReadBytesWireFormatNegativeAsUnsigned() {
            // Given
            byte[] buffer = new byte[10];
            // Write -1 which will be read as 65535 unsigned
            buffer[0] = (byte) 0xFF;
            buffer[1] = (byte) 0xFF;

            // When & Then
            SMBProtocolDecodingException exception =

)

var compareTests = []struct {
	a, b []byte
	i    int
}{
	{[]byte(""), []byte(""), 0},
	{[]byte("a"), []byte(""), 1},
	{[]byte(""), []byte("a"), -1},
	{[]byte("abc"), []byte("abc"), 0},
	{[]byte("abd"), []byte("abc"), 1},
	{[]byte("abc"), []byte("abd"), -1},
	{[]byte("ab"), []byte("abc"), -1},
	{[]byte("abc"), []byte("ab"), 1},
	{[]byte("x"), []byte("ab"), 1},
	{[]byte("ab"), []byte("x"), -1},
	{[]byte("x"), []byte("a"), 1},

     *
     * @param data the data to compress
     * @param algorithm the compression algorithm to use
     * @return the compressed data
     * @throws CIFSException if compression fails
     */
    byte[] compress(byte[] data, int algorithm) throws CIFSException;

    /**
     * Compresses data using the specified algorithm with offset and length.
     *
     * @param data the data buffer

	})
	errFatal(err)

	// 1: Echo
	errFatal(local.RegisterSingleHandler(handlerTest, func(payload []byte) ([]byte, *RemoteErr) {
		t.Log("1: server payload: ", len(payload), "bytes.")
		return append([]byte{}, payload...), nil
	}))
	// 2: Return as error
	errFatal(local.RegisterSingleHandler(handlerTest2, func(payload []byte) ([]byte, *RemoteErr) {
		t.Log("2: server payload: ", len(payload), "bytes.")
		err := RemoteErr(payload)

     */
    private byte[] generateTestData(int size) {
        byte[] data = new byte[size];

        // Create data with repeating patterns
        for (int i = 0; i < size; i++) {
            if (i % 100 < 50) {
                data[i] = (byte) 'A';
            } else if (i % 100 < 75) {
                data[i] = (byte) 'B';
            } else {

    private static final SecureRandom RANDOM = new SecureRandom();

    private byte[] lmResponse;

    private byte[] ntResponse;

    private String domain;

    private String user;

    private String workstation;

    private byte[] masterKey = null;
    private byte[] sessionKey = null;

    static {
        DEFAULT_FLAGS = NTLMSSP_NEGOTIATE_NTLM

        elementVector.add(new DERTaggedObject(0, new ASN1Integer(1))); // authType
        elementVector.add(new DERTaggedObject(1, new DEROctetString(new byte[] { 0x01, 0x02 }))); // authData
        authVector.add(new DERSequence(elementVector));

        byte[] token = new DERSequence(authVector).getEncoded();
        Map<Integer, KerberosKey> keys = new HashMap<>();

        // 2. WHEN

        // Test initial encryption
        byte[] plaintext1 = "Before rotation".getBytes();
        byte[] encrypted1 = context.encryptMessage(plaintext1, 1L);
        byte[] decrypted1 = context.decryptMessage(encrypted1);
        assertArrayEquals(plaintext1, decrypted1);

        // When - Rotate keys
        byte[] newEncKey = new byte[16];
        byte[] newDecKey = new byte[16];
        new SecureRandom().nextBytes(newEncKey);