void release_invokedOnce() throws Exception {
        // Arrange: no setup needed; we verify interaction only

        // Act: call release
        handle.release();

        // Assert: verify one invocation and no more
        verify(handle, times(1)).release();
        verifyNoMoreInteractions(handle);
    }

    @Test
    @DisplayName("ensureDFSResolved(): no exception when underlying call succeeds")

        void testConstructorWithParameters() {
            // Act
            context = new PreauthIntegrityNegotiateContext(mockConfig, testHashAlgos, testSalt);

            // Assert
            assertEquals(PreauthIntegrityNegotiateContext.NEGO_CTX_PREAUTH_TYPE, context.getContextType());
            assertArrayEquals(testHashAlgos, context.getHashAlgos());

            rpcUuid.clock_seq_low = CLOCK_SEQ_LOW;
            rpcUuid.node = NODE;

            // Act
            UUID uuid = new UUID(rpcUuid);

            // Assert
            assertEquals(TIME_LOW, uuid.time_low, "time_low should match");
            assertEquals(TIME_MID, uuid.time_mid, "time_mid should match");

        // Arrange
        int offset = 0;
        int length = testData.length;

        // Act
        signingDigest.sign(testData, offset, length, request, response);

        // Assert
        verify(signingDigest, times(1)).sign(testData, offset, length, request, response);
    }

    @Test
    @DisplayName("Test sign method with different offsets")
    void testSignWithDifferentOffsets() {

        byte[] expected = hex("8846F7EAEE8FB117AD06BDD830B7586C");

        // Act
        byte[] actual = NtlmUtil.getNTHash(password);

        // Assert
        assertArrayEquals(expected, actual, "NT hash must match known test vector");
    }

    @Test
    @DisplayName("getNTHash: verify different passwords produce different hashes")

    void toString_rendersHex(byte[] input, String expected) {
        // Arrange
        SecurityBlob blob = new SecurityBlob(input);

        // Act
        String actual = blob.toString();

        // Assert
        assertEquals(expected, actual, "Hex string should match expected format");
    }

    // Ensures a default-constructed blob starts empty and stable across APIs
    @Test

    @DisplayName("Edge: null is not an instance of the interface")
    void testNullIsNotInstance() {
        // Assert
        assertFalse(SessionSetupHandler.class.isInstance(null));
    }

    @Test
    @DisplayName("Invalid: looking up constructor on interface fails")
    void testNoConstructorLookup() {
        // Act & Assert: interfaces have no constructors

            // Arrange
            SmbFile parent = new SmbFile(url);

            // Act + Assert
            SmbException ex = assertThrows(SmbException.class, () -> SmbEnumerationUtil.doShareEnum(parent, "*", 0, null, null));

            // Assert message indicates which validation failed
            if (expectDirSlashMsg) {

    @DisplayName("byte[] ctor: empty token throws PACDecodingException with clear message")
    void byteArrayConstructor_emptyToken_throws() {
        // Arrange
        byte[] empty = new byte[0];

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(empty, new KerberosKey[0]));
        assertTrue(ex.getMessage().contains("Empty kerberos ApReq"));
    }

    @Test

    void defaultConstructor_hasNullMessageAndCause_andDefaultStatus() {
        // Arrange & Act
        SMBSignatureValidationException ex = new SMBSignatureValidationException();

        // Assert
        assertNull(ex.getMessage(), "Default ctor should not set a message");
        assertNull(ex.getCause(), "Default ctor should not set a cause");