// Arrange
            context = new EncryptionNegotiateContext();
            byte[] buffer = new byte[] { 0x03, 0x00, // 3 ciphers
                    0x01, 0x00, // AES128_CCM
                    0x02, 0x00, // AES128_GCM
                    0x03, 0x00 // Custom cipher
            };

            // Act
            int decodedSize = context.decode(buffer, 0, buffer.length);

        // Verify protocol ID (first 4 bytes) - 0xFD534D42 in little-endian
        assertEquals((byte) 0x42, buffer[0]);
        assertEquals((byte) 0x4D, buffer[1]);
        assertEquals((byte) 0x53, buffer[2]);
        assertEquals((byte) 0xFD, buffer[3]);
    }

    @Test
    @DisplayName("Should decode transform header from byte buffer")
    void testDecodeFromBuffer() {
        // Given

        // Test successful reading of 6 bytes from the input stream.
        // The content of these bytes is not critical for this test, only that 6 bytes are read.
        byte[] data = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06 }; // Sample 6 bytes
        ByteArrayInputStream bais = new ByteArrayInputStream(data);
        SessionRetargetResponsePacket packet = new SessionRetargetResponsePacket();

	// map header, size 3
	// string "AccessKey"
	o = append(o, 0x83, 0xa9, 0x41, 0x63, 0x63, 0x65, 0x73, 0x73, 0x4b, 0x65, 0x79)
	o = msgp.AppendString(o, z.AccessKey)
	// string "SecretKey"
	o = append(o, 0xa9, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x4b, 0x65, 0x79)
	o = msgp.AppendString(o, z.SecretKey)
	// string "SessionToken"
	o = append(o, 0xac, 0x53, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x6f, 0x6b, 0x65, 0x6e)

    /** Called name not present */
    public static final int CALLED_NOT_PRESENT = 0x82;
    /** Insufficient resources to establish session */
    public static final int NO_RESOURCES = 0x83;
    /** Unspecified session service error */
    public static final int UNSPECIFIED = 0x8F;

    /** The NetBIOS error class */
    public int errorClass;
    /** The NetBIOS error code */
    public int errorCode;

        super(andx);
        this.path = fileName;
        command = SMB_COM_OPEN_ANDX;

        desiredAccess = access & 0x3;
        if (desiredAccess == 0x3) {
            desiredAccess = 0x2; /* Mmm, I thought 0x03 was RDWR */
        }
        desiredAccess |= SHARING_DENY_NONE;
        desiredAccess &= ~0x1; // Win98 doesn't like GENERIC_READ ?! -- get Access Denied.

        @Test
        @DisplayName("toString with valid data produces expected format")
        void testToStringWithValidData() {
            byte[] challenge = new byte[] { (byte) 0x01, (byte) 0x02, (byte) 0x03, (byte) 0xFF };
            UniAddress dc = mock(UniAddress.class);
            when(dc.toString()).thenReturn("SERVER123");

            NtlmChallenge nc = new NtlmChallenge(challenge, dc);

        byte[] buffer = new byte[1024];
        buffer[0] = 0x42;
        buffer[1] = 0x43;

        response.setBuffer(buffer);

        byte[] released = response.releaseBuffer();
        assertSame(buffer, released);
        assertEquals(0x42, released[0]);
        assertEquals(0x43, released[1]);

        // After release, getting buffer again should return null

        // Encode "TEST" (0x54 0x45 0x53 0x54)
        // T=0x54: upper nibble 0x5->F(0x46), lower nibble 0x4->E(0x45)
        src[1] = 'F';
        src[2] = 'E'; // T
        // E=0x45: upper nibble 0x4->E(0x45), lower nibble 0x5->F(0x46)
        src[3] = 'E';
        src[4] = 'F'; // E
        // S=0x53: upper nibble 0x5->F(0x46), lower nibble 0x3->D(0x44)
        src[5] = 'F';
        src[6] = 'D'; // S

    }

    @Test
    @DisplayName("parsing malformed token throws IOException")
    void testMalformedToken() {
        byte[] bad = new byte[] { 0x01, 0x02, 0x03 }; // not a valid ASN.1 tagged object
        assertThrows(IOException.class, () -> new NegTokenTarg(bad), "Malformed byte[] should cause IOException");
    }

    @Test