}

    @Test
    @DisplayName("Test constructor with buffer decodes correctly")
    void testConstructorWithBuffer() throws IOException {
        // Create test buffer with notification data
        byte[] buffer = createValidNotificationBuffer("testfile.txt", FileNotifyInformation.FILE_ACTION_ADDED);

        FileNotifyInformationImpl info = new FileNotifyInformationImpl(buffer, 0, buffer.length);

     * techniques like "../../../etc/passwd".
     * </p>
     * <p>
     * Example usage:
     * </p>
     * <pre>
     * Path baseDir = Paths.get("/var/app/data");
     * Path userPath = Paths.get(userInput);
     * if (!FileUtil.isPathSafe(userPath, baseDir)) {
     *     throw new SecurityException("Path traversal attempt detected");
     * }
     * </pre>
     *

        int ctxOffset = 144;

        // Preauth integrity context
        SMBUtil.writeInt2(PreauthIntegrityNegotiateContext.NEGO_CTX_PREAUTH_TYPE, buffer, ctxOffset);
        SMBUtil.writeInt2(38, buffer, ctxOffset + 2); // Data length
        ctxOffset += 8; // Skip reserved

        // Hash algorithm count and salt length
        SMBUtil.writeInt2(1, buffer, ctxOffset);
        SMBUtil.writeInt2(32, buffer, ctxOffset + 2);

- Update change notification handling

---

### Phase 5: RDMA (SMB Direct) Support
**Priority: LOW** | **Estimated Effort: 8-10 weeks**

RDMA provides high-speed, low-latency data transfer for supported network adapters.

#### 5.1 Core RDMA Infrastructure
```
Package: jcifs.internal.smb2.rdma
├── RdmaTransport.java           - RDMA transport implementation

            // Read the response
            int bytesRead = echoResponse.readBytesWireFormat(buffer, bufferIndex);
            assertEquals(0, bytesRead);

            // Write response (echo responses don't write data)
            int bytesWritten = echoResponse.writeBytesWireFormat(buffer, 0);
            assertEquals(0, bytesWritten);

            // Mark as received
            echoResponse.received();

        // toString() implementation may vary, just check it's not null and not empty
        assertFalse(stringRep.isEmpty());
    }

    @Test
    @DisplayName("Should generate correct associated data for AEAD")
    void testGetAssociatedData() {
        // Given
        transformHeader.setNonce(testNonce);
        transformHeader.setOriginalMessageSize(1024);
        transformHeader.setFlags(0x0001);

        src[srcIndex + 7] = 0x00;
        src[srcIndex + 8] = 0x00;
        src[srcIndex + 9] = 0x00;
        // rDataLength (2 bytes)
        src[srcIndex + 10] = 0x00;
        src[srcIndex + 11] = 0x06; // 6 bytes of data

        // Initialize questionName to avoid NPE
        Field questionNameField = NameServicePacket.class.getDeclaredField("questionName");
        questionNameField.setAccessible(true);

			 <!--
			 "node.name":"search_engine",
			 "discovery.seed_hosts":"search_engine",
			 "cluster.initial_cluster_manager_nodes":"search_engine",
			 "node.roles":"cluster_manager,data,ingest,ml",
			 -->
			 "indices.breaker.total.limit":"100%",
			 "action.auto_create_index":"-*"}
		</property>
		<!-- Dictionaries -->
		<postConstruct name="addConfigFile">
			<arg>"fess"</arg>

    void serverEncryptionKey() {
        // No negotiation yet -> null
        assertNull(transport.getServerEncryptionKey());

        // SMB1 negotiation with server data
        SmbComNegotiateResponse smb1 = new SmbComNegotiateResponse(ctx);
        ServerData sd = smb1.getServerData();
        sd.encryptionKey = new byte[] { 1, 2, 3 };
        setField(transport, "negotiated", smb1);

 * using AES-GCM encryption with PBKDF2 key derivation.
 *
 * Features:
 * - Encrypts credentials at rest using AES-256-GCM
 * - Uses PBKDF2 for key derivation from master password
 * - Secure wiping of sensitive data
 * - Thread-safe operations
 * - Protection against timing attacks
 */
public class SecureCredentialStorage implements AutoCloseable, Destroyable {