PacDataInputStream pdis = createInputStream(data);
        assertThrows(PACDecodingException.class, () -> pdis.readUnicodeString());
    }

    @Test
    public void testReadString() throws IOException, PACDecodingException {
        // total=4, unused=1, used=2, string="AB"
        byte[] data = new byte[] { 0x04, 0x00, 0x00, 0x00, // total

     * @throws PACDecodingException if the string structure is malformed
     */
    public PacUnicodeString readUnicodeString() throws IOException, PACDecodingException {
        final short length = readShort();
        final short maxLength = readShort();
        final int pointer = readInt();

        if (maxLength < length) {
            throw new PACDecodingException("Malformed string in PAC");
        }

import org.bouncycastle.asn1.DERTaggedObject;
import org.junit.jupiter.api.Test;

import jcifs.pac.PACDecodingException;

/**
 * Tests for KerberosEncData.
 */
class KerberosEncDataTest {

    /**
     * Test constructor with a valid token.
     *
     * @throws IOException if an I/O error occurs
     * @throws PACDecodingException if a PAC decoding error occurs
     * @throws UnknownHostException if the IP address is not found

    }

    /**
     * Test method for
     * {@link jcifs.pac.PacMac#calculateMac(int, java.util.Map, byte[])}.
     *
     * @throws PACDecodingException
     */
    @Test
    void testCalculateMac() throws PACDecodingException {
        Map<Integer, KerberosKey> keys = new HashMap<>();
        KerberosKey hmacKey = new KerberosKey(TEST_PRINCIPAL, new byte[16], PacSignature.ETYPE_ARCFOUR_HMAC, 0);

     *
     * @param token the authorization data token
     * @param keys map of Kerberos keys indexed by key type
     * @throws PACDecodingException if decoding fails
     */
    public KerberosRelevantAuthData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        ASN1Sequence authSequence;
        try {
            try (ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token))) {

     *
     * @param string the string to validate
     * @return the validated string
     * @throws PACDecodingException if validation fails
     */
    public String check(final String string) throws PACDecodingException {
        if (this.pointer == 0 && string != null) {
            throw new PACDecodingException("Non-empty string");
        }

        final int expected = this.length / 2;

     *
     * @param token the encrypted Kerberos token
     * @param keys map of encryption keys indexed by key type
     * @throws PACDecodingException if decoding fails
     */
    public KerberosEncData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token));
        ASN1TaggedObject derToken;
        try {

     * @param data the raw credential type data
     * @throws PACDecodingException if the credential type data is invalid
     */
    public PacCredentialType(final byte[] data) throws PACDecodingException {
        this.credentialType = data;
        if (!isCredentialTypeCorrect()) {
            throw new PACDecodingException("Invalid PAC credential type");
        }
    }

    /**

     * @param keys the Kerberos keys for decryption
     * @return a list of parsed authorization data
     * @throws PACDecodingException if the data cannot be decoded
     */
    public static List<KerberosAuthData> parse(int authType, byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {

        List<KerberosAuthData> authorizations = new ArrayList<>();

        switch (authType) {

    }

    @Test
    @DisplayName("Test parsing with invalid data size")
    void testInvalidDataSize() {
        byte[] tooSmall = new byte[10];

        PACDecodingException exception = assertThrows(PACDecodingException.class, () -> new PacLogonInfo(tooSmall));

        assertEquals("Malformed PAC", exception.getMessage());
    }

    @Test
    @DisplayName("Test getters return expected values using mocks")