|-----END PRIVATE KEY-----
      |
      """.trimMargin()
    try {
      decode(certificatePem)
      fail<Any>()
    } catch (expected: IllegalArgumentException) {
      assertThat(expected.message).isEqualTo("string does not include a private key")
    }
    try {
      decode(pkcs8Pem)
      fail<Any>()
    } catch (expected: IllegalArgumentException) {

    }

    @Test
    @DisplayName("Test decode with owner SID only")
    void testDecodeWithOwnerSidOnly() throws SMBProtocolDecodingException {
        // Prepare buffer with owner SID only
        prepareMinimalSecurityDescriptorBuffer(testBuffer, 0, true, false, false);

        int size = securityDescriptor.decode(testBuffer, 0, testBuffer.length);

        // decode returns 0 when no DACL is present (falls through)

            lock = new Smb2Lock(offset, length, allFlags);
            lock.encode(buffer, 0);

            assertEquals(allFlags, SMBUtil.readInt4(buffer, 16));
        }

        @Test
        @DisplayName("Should encode zero values correctly")
        void testEncodingWithZeroValues() {
            lock = new Smb2Lock(0L, 0L, 0);
            lock.encode(buffer, 0);

            assertEquals(0L, SMBUtil.readInt8(buffer, 0));

            for (int code : unknownCodes) {
                setResultField(bind, code);
                DcerpcException result = bind.getResult();

                assertNotNull(result, "Should return exception for unknown result code " + code);
                assertTrue(result.getMessage().startsWith("0x"), "Should return hex format for unknown result code " + code);
            }
        }

    assertThat(UnsignedInts.decode("0xffffffff")).isEqualTo(0xffffffff);
    assertThat(UnsignedInts.decode("01234567")).isEqualTo(01234567); // octal
    assertThat(UnsignedInts.decode("#12345678")).isEqualTo(0x12345678);
    assertThat(UnsignedInts.decode("76543210")).isEqualTo(76543210);
    assertThat(UnsignedInts.decode("0x13579135")).isEqualTo(0x13579135);
    assertThat(UnsignedInts.decode("0X13579135")).isEqualTo(0x13579135);

    assertThat(UnsignedLongs.decode("0xffffffffffffffff")).isEqualTo(0xffffffffffffffffL);
    assertThat(UnsignedLongs.decode("01234567")).isEqualTo(01234567); // octal
    assertThat(UnsignedLongs.decode("#1234567890abcdef")).isEqualTo(0x1234567890abcdefL);
    assertThat(UnsignedLongs.decode("987654321012345678")).isEqualTo(987654321012345678L);
    assertThat(UnsignedLongs.decode("0x135791357913579")).isEqualTo(0x135791357913579L);

            assertEquals(FileSystemInformation.FS_SIZE_INFO, fileFsSizeInfo.getFileSystemInformationClass());
        }
    }

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {

            assertEquals(FileSystemInformation.FS_FULL_SIZE_INFO, fileFsFullSizeInfo.getFileSystemInformationClass());
        }
    }

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {

        Arrays.fill(dst, (byte) 0x55);

        // Act
        int written = enc.encode(dst, dstIndex);

        // Assert: reported written bytes matches size() and requested len.
        assertEquals(len, enc.size(), "size() must equal provided length");
        assertEquals(len, written, "encode() must return number of bytes written");

        // Assert: copied region equals the source slice.

            byte[] buffer = new byte[EXPECTED_SIZE * 3];

            // When
            int offset1 = chunk1.encode(buffer, 0);
            int offset2 = chunk2.encode(buffer, offset1);
            int offset3 = chunk3.encode(buffer, offset1 + offset2);

            // Then
            assertEquals(EXPECTED_SIZE, offset1);
            assertEquals(EXPECTED_SIZE, offset2);