@Test(expected = IllegalArgumentException.class)
public void finishSignature_compromisedDevice() throws Exception {

    SignRequest signRequest = SignRequest.builder()
        .challenge(SERVER_CHALLENGE_SIGN_BASE64)
        .appId(APP_ID_SIGN)
        .keyHandle(KEY_HANDLE_BASE64)
        .build();
    SignResponse tokenResponse = new SignResponse(CLIENT_DATA_SIGN_BASE64,
            SIGN_RESPONSE_DATA_BASE64, KEY_HANDLE_BASE64);
    DeviceRegistration deviceRegistration = new DeviceRegistration(KEY_HANDLE_BASE64, USER_PUBLIC_KEY_SIGN_HEX, ATTESTATION_CERTIFICATE, 0);
    deviceRegistration.markCompromised();
    u2f.finishSignature(signRequest, tokenResponse, deviceRegistration, allowedOrigins);
}