// Wrong TOK_ID
                Arguments.of("wrong TOK_ID", new byte[] { 0x00, 0x02, 0x00, 0x01 }, IllegalArgumentException.class),

                // OID length claims more than available
                Arguments.of("oid length exceeds buffer", new byte[] { 0x04, 0x01, 0x00, 0x10, 0x06 }, IllegalArgumentException.class),

            context = new PreauthIntegrityNegotiateContext();
            byte[] buffer = new byte[] { (byte) 0xFF, (byte) 0xFF, (byte) 0xFF, // Padding
                    0x01, 0x00, // 1 hash algo
                    0x02, 0x00, // 2 bytes salt
                    0x01, 0x00, // SHA512
                    (byte) 0xAA, (byte) 0xBB // Salt
            };

            // Act

        buffer.position(20);
        buffer.put((byte) 0x01); // Revision
        buffer.put((byte) 0x01); // SubAuthorityCount
        buffer.put(new byte[] { 0, 0, 0, 0, 0, 1 }); // IdentifierAuthority
        buffer.putInt(0); // SubAuthority

        // Group SID at offset 40
        buffer.position(40);
        buffer.put((byte) 0x01); // Revision
        buffer.put((byte) 0x01); // SubAuthorityCount

        // Random but realistic GUID
        byte[] testGuid = { (byte) 0x01, (byte) 0x23, (byte) 0x45, (byte) 0x67, (byte) 0x89, (byte) 0xAB, (byte) 0xCD, (byte) 0xEF,
                (byte) 0xFE, (byte) 0xDC, (byte) 0xBA, (byte) 0x98, (byte) 0x76, (byte) 0x54, (byte) 0x32, (byte) 0x10 };

        // Security mode with signing required

    }

    @Test
    @DisplayName("Should correctly initialize MsrpcSamrOpenAlias with provided parameters")
    void testConstructorInitialization() {
        // Given
        int access = 0x01; // Example access value
        int rid = 123; // Example RID value

        // When
        MsrpcSamrOpenAlias msrpcSamrOpenAlias = new MsrpcSamrOpenAlias(mockDomainHandle, access, rid, mockAliasHandle);

        // Then

    /**
     * No lease caching
     */
    public static final int SMB2_LEASE_NONE = 0x00;

    /**
     * Read caching lease (R)
     */
    public static final int SMB2_LEASE_READ_CACHING = 0x01;

    /**
     * Handle caching lease (H)
     */
    public static final int SMB2_LEASE_HANDLE_CACHING = 0x02;

    /**
     * Write caching lease (W)
     */

        // State 1: Generate Type 1 message
        context.initSecContext(new byte[0], 0, 0);

        // Create a mock Type 2 message (server challenge)
        byte[] serverChallenge = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 };
        int type2Flags = NtlmFlags.NTLMSSP_NEGOTIATE_NTLM | NtlmFlags.NTLMSSP_REQUEST_TARGET | NtlmFlags.NTLMSSP_NEGOTIATE_KEY_EXCH
                | NtlmFlags.NTLMSSP_NEGOTIATE_SIGN;

        ASN1ObjectIdentifier kerberosOid = new ASN1ObjectIdentifier(KerberosConstants.KERBEROS_OID);
        innerContent.write(kerberosOid.getEncoded());
        innerContent.write(0x01); // magic byte 1
        innerContent.write(0x00); // magic byte 2

        // Add a sequence instead of APPLICATION tagged object
        DERSequence wrongTag = new DERSequence(new ASN1Encodable[] { new ASN1Integer(5) });

class AvChannelBindingsTest {

    /**
     * Test that the constructor correctly initializes with a valid channel binding hash.
     */
    @Test
    void testConstructorWithValidHash() {
        byte[] testHash = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 };
        AvChannelBindings avChannelBindings = new AvChannelBindings(testHash);

        assertEquals(0x0, AvPair.MsvAvEOL, "MsvAvEOL constant should be 0x0.");
        assertEquals(0x6, AvPair.MsvAvFlags, "MsvAvFlags constant should be 0x6.");
        assertEquals(0x7, AvPair.MsvAvTimestamp, "MsvAvTimestamp constant should be 0x7.");
        assertEquals(0x08, AvPair.MsvAvSingleHost, "MsvAvSingleHost constant should be 0x08.");
        assertEquals(0x09, AvPair.MsvAvTargetName, "MsvAvTargetName constant should be 0x09.");