*/
    private static byte[] decryptRC4(byte[] data, Key key) throws GeneralSecurityException, NoSuchAlgorithmException,
            NoSuchPaddingException, InvalidKeyException, IllegalBlockSizeException, BadPaddingException {
        Cipher cipher;
        byte[] decrypt;
        byte[] code = new byte[4];
        Encdec.enc_uint32le(2, code, 0);
        byte[] codeHmac = getHmac(code, key.getEncoded());

        // so readBytesWireFormat() is invoked and must delegate back to readErrorResponse() when it sees size=9.
        byte[] header = buildHeader(NtStatus.NT_STATUS_INVALID_PARAMETER);
        byte[] body = buildErrorBody(2, 3, new byte[] { (byte) 0xAA, (byte) 0xBB, (byte) 0xCC });
        byte[] packet = new byte[header.length + body.length];
        System.arraycopy(header, 0, packet, 0, header.length);

        assertEquals(0, emptyRead);
        assertEquals(0, fullRead);
    }

    /**
     * Create a test byte array with specified size and pattern
     */
    private byte[] createTestData(int size) {
        byte[] data = new byte[size];
        for (int i = 0; i < size; i++) {
            data[i] = (byte) (i % 256);
        }
        return data;
    }

     * @param remaining the number of bytes remaining to be written
     * @param b the data buffer containing bytes to write
     * @param off the offset in the buffer where data starts
     * @param len the number of bytes to write
     */
    public final void setParam(final int fid, final long offset, final int remaining, final byte[] b, final int off, final int len) {
        this.fid = fid;

        byte[] buffer = new byte[50];
        int bufferIndex = 0;

        // SMB3 capabilities
        int testCapabilities = 0x0000002F; // DFS, LEASING, LARGE_MTU, MULTI_CHANNEL, PERSISTENT_HANDLES, DIRECTORY_LEASING

        // Random but realistic GUID
        byte[] testGuid = { (byte) 0x01, (byte) 0x23, (byte) 0x45, (byte) 0x67, (byte) 0x89, (byte) 0xAB, (byte) 0xCD, (byte) 0xEF,

        serverData.capabilities = 0; // No extended security
        serverData.encryptionKeyLength = 8;
        response.byteCount = 15; // 8 bytes key + 6 bytes "DOMAIN" + 1 null terminator

        // Prepare byte array
        byte[] encryptionKey = "12345678".getBytes();
        byte[] domainNameBytes = "DOMAIN".getBytes(ServerMessageBlock.OEM_ENCODING);
        ByteBuffer buffer = ByteBuffer.allocate(response.byteCount);

     */
    @Test
    void testConstructorWithEmptyToken() {
        byte[] emptyToken = new byte[0];
        assertThrows(PACDecodingException.class, () -> new KerberosToken(emptyToken));
    }

    /**
     * Test constructor with a malformed token (not ASN.1).
     */
    @Test
    void testConstructorWithMalformedToken() {
        byte[] malformedToken = "This is not a valid token".getBytes();

        // Session ID (8 bytes) - little-endian
        buffer[index++] = (byte) (testSessionId & 0xFF);
        buffer[index++] = (byte) ((testSessionId >> 8) & 0xFF);
        buffer[index++] = (byte) ((testSessionId >> 16) & 0xFF);
        buffer[index++] = (byte) ((testSessionId >> 24) & 0xFF);
        buffer[index++] = (byte) ((testSessionId >> 32) & 0xFF);

     */
    @Test
    public void testInvalidBufferSizeRejection() {
        // Given - Buffers with various invalid sizes
        byte[] tooSmall = new byte[1024];
        byte[] tooLarge = new byte[SmbComTransaction.TRANSACTION_BUF_SIZE + 1];
        byte[] empty = new byte[0];

        // When - Try to release invalid buffers
        assertDoesNotThrow(() -> {
            BufferCache.releaseBuffer(tooSmall);

        // First decode to set internal state
        byte[] sourceBuffer = new byte[8];
        long expectedIndexNumber = 0x0123456789ABCDEFL;
        SMBUtil.writeInt8(expectedIndexNumber, sourceBuffer, 0);
        fileInternalInfo.decode(sourceBuffer, 0, sourceBuffer.length);

        // Now test encode
        byte[] destinationBuffer = new byte[8];
        int bytesEncoded = fileInternalInfo.encode(destinationBuffer, 0);