// MECH_OID_LEN (2 bytes big-endian)
        buf[i++] = (byte) ((oidLen >>> 8) & 0xFF);
        buf[i++] = (byte) (oidLen & 0xFF);
        // MECH_OID
        System.arraycopy(oidDer, 0, buf, i, oidLen);
        i += oidLen;
        // NAME_LEN (4 bytes big-endian)
        buf[i++] = (byte) ((nameLen >>> 24) & 0xFF);
        buf[i++] = (byte) ((nameLen >>> 16) & 0xFF);
        buf[i++] = (byte) ((nameLen >>> 8) & 0xFF);

    private Pac pac;

    /**
     * Constructs KerberosPacAuthData from token bytes.
     *
     * @param token the PAC token bytes
     * @param keys map of Kerberos keys indexed by key type
     * @throws PACDecodingException if PAC decoding fails
     */
    public KerberosPacAuthData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        this.pac = new Pac(token, keys);
    }

     */
    static Stream<Arguments> decodeProvider() {
        return Stream.of(Arguments.of("", new byte[0]), Arguments.of("QQ==", new byte[] { (byte) 0x41 }), // "A"
                Arguments.of("QUI=", new byte[] { (byte) 0x41, (byte) 0x42 }), // "AB"
                Arguments.of("TWFu", "Man".getBytes()), Arguments.of("AAAA", new byte[] { (byte) 0x00, (byte) 0x00, (byte) 0x00 }), // all zeros

  }

  // Serialization helpers

  /** The size of byte array representation in bytes. */
  static final int BYTES = (Long.SIZE + Double.SIZE * 4) / Byte.SIZE;

  /**
   * Gets a byte array representation of this instance.
   *
   * <p><b>Note:</b> No guarantees are made regarding stability of the representation between
   * versions.
   */
  public byte[] toByteArray() {

      throws IOException {
    byte[] bytes = decoded.getBytes(UTF_8);
    try (InputStream decodingStream = encoding.decodingStream(new StringReader(encoded))) {
      for (int i = 0; i < bytes.length; i++) {
        assertThat(decodingStream.read()).isEqualTo(bytes[i] & 0xFF);
      }
      assertThat(decodingStream.read()).isEqualTo(-1);
    }
  }

 * limitations under the License.
 */
package okhttp3.tls.internal.der

/**
 * The first two bytes of each value is a header that includes its tag (field ID) and length.
 */
internal data class DerHeader(
  /**
   * Namespace of the tag.
   *
   * This value is encoded in bits 7 and 8 of the first byte of each value.
   *
   * ```
   * 0b00xxxxxx Universal
   * 0b01xxxxxx Application

in gcm_*.s. //go:noescape func gcmAesInit(productTable *[256]byte, ks []uint32) //go:noescape func gcmAesData(productTable *[256]byte, data []byte, T *[16]byte) //go:noescape func gcmAesEnc(productTable *[256]byte, dst, src []byte, ctr, T *[16]byte, ks []uint32) //go:noescape func gcmAesDec(productTable *[256]byte, dst, src []byte, ctr, T *[16]byte, ks []uint32) //go:noescape func gcmAesFinish(productTable *[256]byte, tagMask, T *[16]byte, pLen, dLen uint64) // Keep in sync with crypto/tls.hasAESGCMHardwareSup....

        setField(cmd, "typeOfLock", (byte) type);
        setField(cmd, "newOpLockLevel", (byte) 0);
        setField(cmd, "timeout", 0L);
        setField(cmd, "locks", new LockingAndXRange[0]);
        setField(cmd, "unlocks", new LockingAndXRange[0]);
        setField(cmd, "largeFile", false);
        byte[] buf = new byte[12]; // Buffer needs to be at least 12 bytes for the parameter words

            // Arrange: revision=1, count=2, identAuth zeros except last byte, subauth 10, 20
            byte[] ident = new byte[] { 0, 0, 0, 0, 0, 5 };
            rpc.sid_t st = buildSidT((byte) 1, ident, 10, 20);

            byte[] bytes = SID.toByteArray(st);

            // Act: construct from bytes and re-encode
            SID sid = new SID(bytes, 0);
            byte[] roundTrip = sid.toByteArray();

            // Assert

        assertEquals(16, guid2.toBytes().length);
    }

    @Test
    public void testHandleGuidRoundTrip() {
        HandleGuid original = new HandleGuid();
        byte[] bytes = original.toBytes();
        HandleGuid reconstructed = new HandleGuid(bytes);

        assertEquals(original, reconstructed);
        assertEquals(original.toString(), reconstructed.toString());