* via MD5).
 */
class HMACT64 extends MessageDigest implements Cloneable {

    private static final int BLOCK_LENGTH = 64;

    private static final byte IPAD = (byte) 0x36;

    private static final byte OPAD = (byte) 0x5c;

    private final MessageDigest md5;

    private byte[] ipad = new byte[BLOCK_LENGTH];

    private byte[] opad = new byte[BLOCK_LENGTH];

    /**

        originalPairs.add(new AvFlags(0x12345678));
        originalPairs.add(new AvTimestamp(new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 }));
        originalPairs.add(new AvTargetName("TESTNAME".getBytes()));
        originalPairs.add(new AvSingleHost(new byte[] { 0x11, 0x22, 0x33, 0x44 }));
        originalPairs.add(new AvChannelBindings(new byte[] { 0x55, 0x66 }));

        byte[] encoded = AvPairs.encode(originalPairs);

    void testWriteBytesWireFormatWithInputBuffer() {
        request = new Smb2QueryInfoRequest(mockConfig, testFileId);
        request.setInfoType((byte) 0x02);
        request.setFileInfoClass((byte) 0x08);

        Encodable mockInputBuffer = mock(Encodable.class);
        when(mockInputBuffer.encode(any(byte[].class), anyInt())).thenReturn(50);
        when(mockInputBuffer.size()).thenReturn(50);

        try {

        for (int i = 0; i < 16; i++) {
            newFileId[i] = (byte) (0xFF - i);
        }
        request.setFileId(newFileId);
        request.setInfoType((byte) 0x02);
        request.setFileInfoClass((byte) 0x08);
        request.setAdditionalInformation(0xABCDEF00);

        Encodable mockInfo = mock(Encodable.class);
        when(mockInfo.size()).thenReturn(64);

     * Context flag for sequence checking capability
     */
    public static final int SEQUENCE_CHECKING = 0x10;
    /**
     * Context flag for anonymity capability
     */
    public static final int ANONYMITY = 0x08;
    /**
     * Context flag for confidentiality (encryption) capability
     */
    public static final int CONFIDENTIALITY = 0x04;
    /**
     * Context flag for integrity (signing) capability
     */

    void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(malformed, null));

    private static final int FLAGS_CLOSE_IF_END_REACHED = 0x02;
    private static final int FLAGS_RETURN_RESUME_KEYS = 0x04;
    private static final int FLAGS_RESUME_FROM_PREVIOUS_END = 0x08;
    private static final int FLAGS_FIND_WITH_BACKUP_INTENT = 0x10;

    private static final int DEFAULT_LIST_SIZE = 65535;
    private static final int DEFAULT_LIST_COUNT = 200;

    private final int searchAttributes;

    }

    @Test
    @DisplayName("readSecurityBuffer correctly extracts data")
    void testReadSecurityBuffer() {
        byte[] buf = new byte[8 + 4];
        byte[] payload = { 0x11, 0x22, 0x33, 0x44 };
        NtlmMessage.writeSecurityBuffer(buf, 0, 8, payload);
        byte[] extracted = NtlmMessage.readSecurityBuffer(buf, 0);
        assertArrayEquals(payload, extracted, "Payload should match original");
    }

        dnsDomainInfo.domain_guid.time_hi_and_version = 0x5678;
        dnsDomainInfo.domain_guid.clock_seq_hi_and_reserved = 0x12;
        dnsDomainInfo.domain_guid.clock_seq_low = 0x34;
        dnsDomainInfo.domain_guid.node = new byte[] { 1, 2, 3, 4, 5, 6 };

        dnsDomainInfo.sid = new rpc.sid_t();
        dnsDomainInfo.sid.revision = 1;

        super(config, SMB_COM_OPEN_ANDX, fileName, andx);
        this.fileAttributes = fileAttributes;

        this.desiredAccess = access & 0x3;
        if (this.desiredAccess == 0x3) {
            this.desiredAccess = 0x2; /* Mmm, I thought 0x03 was RDWR */
        }

        // map shareAccess as far as we can