hash.Write(msg)
			sum = hash.Sum(sum[:0])
			msg = append(msg, sum...)
			hash.Reset()
		}
		if !bytes.Equal(sum, checksum) {
			logger.Fatal(errSelfTestFailure, fmt.Sprintf("bitrot: %v selftest checksum mismatch: got %x - want %x", algorithm, sum, checksum))
		}
	}

     * @param limit the maximum length limit
     * @param in the ASN.1 input stream
     * @return coded bytes of the tagged object
     * @throws IOException if reading fails or tag mismatch
     */
    public static byte[] readUnparsedTagged(final int expectTag, final int limit, final ASN1InputStream in) throws IOException {
        final int ftag = in.read();
        final int tag = readTagNumber(in, ftag);

			accessKey:          credentials.AccessKey,
			secretKey:          credentials.SecretKey,
			expectedRespStatus: http.StatusNotFound,
		},
		// Test case - 3.
		// Test case to induce a signature mismatch.
		// Using invalid accessID.
		{
			bucketName:         bucketName,
			objectName:         objectName,
			accessKey:          "Invalid-AccessID",
			secretKey:          credentials.SecretKey,

	sobj.Close()
	tobj.Close()

	if !sourceFailed && !targetFailed {
		ssum := srcSha256.Sum(nil)
		tsum := tgtSha256.Sum(nil)
		allgood = bytes.Equal(ssum, tsum)
		if !allgood {
			fmt.Printf("sha256 sum mismatch: %s -> Expected(%x), Found(%x)\n", srcCtnt.Key, ssum, tsum)
		}
	}

	return allgood

        assertEquals(1, od.getChunksWritten());
        assertEquals(2, od.getChunkBytesWritten());
        assertEquals(3, od.getTotalBytesWritten());

        // Type mismatch should raise SmbException
        assertThrows(SmbException.class, () -> resp.getOutputData(SrvRequestResumeKeyResponse.class));
    }

    @Test
    void decodesPipePeekOnBufferOverflowStatus() throws Exception {

        byte[] actualData = response.getData();
        assertEquals(16, actualData.length);
        for (int i = 0; i < 16; i++) {
            assertEquals(expectedData[i], actualData[i], "Data mismatch at index " + i);
        }
    }

            int result = testRequest.encode(buffer, 0);

            assertEquals(64, result);
        }

        @Test
        @DisplayName("encode should throw exception when size mismatch")
        void testEncodeSizeMismatch() {
            byte[] buffer = new byte[1024];
            testRequest.setTestSize(64);
            testRequest.setTestLength(128);

        assertTrue(ex.getMessage().contains("Malformed Kerberos Ticket"));
    }

    @Test
    @DisplayName("byte[] ctor: top-level non-SEQUENCE triggers PACDecodingException (type mismatch)")
    void byteArrayConstructor_topLevelNotSequence_throws() throws Exception {
        // Arrange: Encoded INTEGER instead of SEQUENCE
        byte[] notASequence = new ASN1Integer(42).getEncoded();

            // Validate key length matches expected cipher requirements
            if (keyCopy.length != keyLength) {
                throw new IllegalArgumentException("Key length mismatch: expected " + keyLength + ", got " + keyCopy.length);
            }

            // Create cipher with the copy - algorithm is just "AES" for SecretKeySpec

	if err != nil {
		t.Fatalf("tr.Next: %v", err)
	}
	if !reflect.DeepEqual(rHdr, hdr) {
		t.Errorf("Header mismatch.\n got %+v\nwant %+v", rHdr, hdr)
	}
	rData, err := io.ReadAll(tr)
	if err != nil {
		t.Fatalf("Read: %v", err)
	}
	if !bytes.Equal(rData, data) {
		t.Errorf("Data mismatch.\n got %q\nwant %q", rData, data)
	}
}

type headerRoundTripTest struct {
	h  *Header
	fm fs.FileMode
}