* @return stream response containing the log file content
     */
    // GET /api/admin/log/file/{id}
    @Execute
    public StreamResponse get$file(final String id) {
        final String filename = new String(Base64.getDecoder().decode(id), StandardCharsets.UTF_8).replace("..", "").replaceAll("\\s", "");
        final String logFilePath = systemHelper.getLogFilePath();
        if (StringUtil.isNotBlank(logFilePath) && isLogFilename(filename)) {

     * @throws GeneralSecurityException if cryptographic operations fail
     */
    public static byte[] deriveKeyAES(KerberosKey key, byte[] constant) throws GeneralSecurityException {
        byte[] keybytes = key.getEncoded();
        Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
        cipher.init(Cipher.ENCRYPT_MODE, new SecretKeySpec(keybytes, "AES"), new IvParameterSpec(ZERO_IV, 0, ZERO_IV.length));

    SecretKey customKey =
        new SecretKey() {
          @Override
          public String getAlgorithm() {
            return "HmacMD5";
          }

          @Override
          public byte[] getEncoded() {
            return new byte[8];
          }

          @Override
          public String getFormat() {
            return "RAW";
          }
        };
    assertEquals(

        if (EXT_GSS_CONTEXT_CLASS.isAssignableFrom(this.gssContext.getClass())) {
            try {
                Key k = (Key) INQUIRE_SEC_CONTEXT.invoke(this.gssContext, INQUIRE_TYPE_SESSION_KEY);
                return k.getEncoded();
            } catch (IllegalAccessException | IllegalArgumentException | InvocationTargetException ex) {
                throw new SmbException("Failed to query Kerberos session key from ExtendedGSSContext", ex);

        SecretKey retrieved = keyManager.getSessionKey(sessionId);
        assertNotNull(retrieved, "Should retrieve stored key");
        assertArrayEquals(testKey, retrieved.getEncoded(), "Retrieved key should match");
    }

    @Test
    public void testGetRawKey() {
        String sessionId = "test-session-2";
        keyManager.storeSessionKey(sessionId, testKey, "AES");

        }

        // Try to get from SecretKey if available
        SecretKey secretKey = getSessionKey(sessionId);
        if (secretKey != null) {
            return secretKey.getEncoded();
        }

        return null;
    }

    /**
     * Remove and securely wipe a session key
     *
     * @param sessionId unique session identifier
     */