Signed-and-Enveloped data
Construction:
- generate at random a content-encryption key
- encrypt the key with the recipient public key
- compute message digest
- encrypt the digest with the signer’s private key
- encrypt the result with the content-encryption key
- encrypt the content with the content-encryption key
- add digest algorithm info