idnits 2.17.00 (12 Aug 2021)

/tmp/idnits43943/draft-ietf-lamps-header-protection-06.txt:
-(1200): Line appears to be too long, but this could be caused by non-ascii characters in UTF-8 encoding
-(1227): Line appears to be too long, but this could be caused by non-ascii characters in UTF-8 encoding

  Checking boilerplate required by RFC 5378 and the IETF Trust (see
  https://trustee.ietf.org/license-info):
  ----------------------------------------------------------------------------

     No issues found here.

  Checking nits according to https://www.ietf.org/id-info/1id-guidelines.txt:
  ----------------------------------------------------------------------------

  == There are 326 instances of lines with non-ascii characters in the
     document.


  Checking nits according to https://www.ietf.org/id-info/checklist :
  ----------------------------------------------------------------------------

  ** There are 6 instances of too long lines in the document, the longest one
     being 80 characters in excess of 72.


  Miscellaneous warnings:
  ----------------------------------------------------------------------------

  == The copyright year in the IETF Trust and authors Copyright Line does not
     match the current year

  == The document seems to use 'NOT RECOMMENDED' as an RFC 2119 keyword, but
     does not include the phrase in its RFC 2119 key words list.

  -- The document date (26 July 2021) is 299 days in the past.  Is this
     intentional?

  -- Found something which looks like a code comment -- if you have code
     sections in the document, please surround them with '<CODE BEGINS>' and
     '<CODE ENDS>' lines.


  Checking references for intended status: Proposed Standard
  ----------------------------------------------------------------------------

     (See RFCs 3967 and 4897 for information about using normative references
     to lower-maturity documents in RFCs)

  == Missing Reference: 'DKG' is mentioned on line 8020, but not defined

  == Missing Reference: 'HB' is mentioned on line 8038, but not defined

  ** Downref: Normative reference to an Informational draft:
     draft-dkg-lamps-e2e-mail-guidance (ref. 'I-D.dkg-lamps-e2e-mail-guidance')

  ** Downref: Normative reference to an Informational draft:
     draft-ietf-lamps-header-protection-requirements (ref.
     'I-D.ietf-lamps-header-protection-requirements')

  == Outdated reference: draft-ietf-lamps-samples has been published as RFC
     9216


     Summary: 3 errors (**), 0 flaws (~~), 6 warnings (==), 2 comments (--).

     Run idnits with the --verbose option for more detailed information about
     the items above.

--------------------------------------------------------------------------------


2	LAMPS Working Group                                         D.K. Gillmor
3	Internet-Draft                            American Civil Liberties Union
4	Intended status: Standards Track                            B. Hoeneisen
5	Expires: 27 January 2022                                  pEp Foundation
6	                                                             A. Melnikov
7	                                                               Isode Ltd
8	                                                            26 July 2021

10	                      Header Protection for S/MIME
11	                 draft-ietf-lamps-header-protection-06

13	Abstract

15	   S/MIME version 3.1 has introduced a feasible standardized option to
16	   accomplish Header Protection.  However, few implementations generate
17	   messages using this structure, and several legacy and non-legacy
18	   implementations have revealed rendering issues at the receiving side.
19	   Clearer specifications regarding message processing, particularly
20	   with respect to header sections, are needed in order to resolve these
21	   rendering issues.  Some mail user agents are also sending and
22	   receiving cryptographically-protected message headers using a
23	   different structure.

25	   In order to help implementers to correctly compose and render email
26	   messages with Header Protection, this document updates S/MIME Header
27	   Protection specifications with additional guidance on MIME format,
28	   sender and receiver processing.

30	Status of This Memo

32	   This Internet-Draft is submitted in full conformance with the
33	   provisions of BCP 78 and BCP 79.

35	   Internet-Drafts are working documents of the Internet Engineering
36	   Task Force (IETF).  Note that other groups may also distribute
37	   working documents as Internet-Drafts.  The list of current Internet-
38	   Drafts is at https://datatracker.ietf.org/drafts/current/.

40	   Internet-Drafts are draft documents valid for a maximum of six months
41	   and may be updated, replaced, or obsoleted by other documents at any
42	   time.  It is inappropriate to use Internet-Drafts as reference
43	   material or to cite them other than as "work in progress."

45	   This Internet-Draft will expire on 27 January 2022.

47	Copyright Notice

49	   Copyright (c) 2021 IETF Trust and the persons identified as the
50	   document authors.  All rights reserved.

52	   This document is subject to BCP 78 and the IETF Trust's Legal
53	   Provisions Relating to IETF Documents (https://trustee.ietf.org/
54	   license-info) in effect on the date of publication of this document.
55	   Please review these documents carefully, as they describe your rights
56	   and restrictions with respect to this document.  Code Components
57	   extracted from this document must include Simplified BSD License text
58	   as described in Section 4.e of the Trust Legal Provisions and are
59	   provided without warranty as described in the Simplified BSD License.

61	Table of Contents

63	   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   5
64	     1.1.  Two Schemes of Protected Headers  . . . . . . . . . . . .   5
65	     1.2.  Problems with Wrapped Messages  . . . . . . . . . . . . .   6
66	     1.3.  Problems with Injected Headers  . . . . . . . . . . . . .   6
67	     1.4.  Motivation  . . . . . . . . . . . . . . . . . . . . . . .   7
68	     1.5.  Other Protocols to Protect Email Headers  . . . . . . . .   7
69	     1.6.  Requirements Language . . . . . . . . . . . . . . . . . .   7
70	     1.7.  Terms . . . . . . . . . . . . . . . . . . . . . . . . . .   8
71	   2.  Problem Statement . . . . . . . . . . . . . . . . . . . . . .  10
72	     2.1.  Privacy . . . . . . . . . . . . . . . . . . . . . . . . .  11
73	     2.2.  Security  . . . . . . . . . . . . . . . . . . . . . . . .  11
74	     2.3.  Usability . . . . . . . . . . . . . . . . . . . . . . . .  11
75	     2.4.  Interoperability  . . . . . . . . . . . . . . . . . . . .  11
76	   3.  Use Cases . . . . . . . . . . . . . . . . . . . . . . . . . .  11
77	     3.1.  Interactions  . . . . . . . . . . . . . . . . . . . . . .  11
78	       3.1.1.  Main Use Case . . . . . . . . . . . . . . . . . . . .  12
79	       3.1.2.  Backward Compatibility Use Cases  . . . . . . . . . .  12
80	     3.2.  Protection Levels . . . . . . . . . . . . . . . . . . . .  13
81	       3.2.1.  In-Scope  . . . . . . . . . . . . . . . . . . . . . .  13
82	       3.2.2.  Out-of-Scope  . . . . . . . . . . . . . . . . . . . .  13
83	   4.  Specification . . . . . . . . . . . . . . . . . . . . . . . .  14
84	     4.1.  Main Use Case . . . . . . . . . . . . . . . . . . . . . .  14
85	       4.1.1.  MIME Format . . . . . . . . . . . . . . . . . . . . .  15
86	       4.1.2.  Sending Side  . . . . . . . . . . . . . . . . . . . .  17
87	       4.1.3.  Default Header Confidentiality Policy . . . . . . . .  22
88	       4.1.4.  Receiving Side  . . . . . . . . . . . . . . . . . . .  23
89	     4.2.  Backward Compatibility Use Cases  . . . . . . . . . . . .  31
90	       4.2.1.  Receiving Side MIME-Conformant  . . . . . . . . . . .  32
91	       4.2.2.  Receiving Side Not MIME-Conformant  . . . . . . . . .  32
92	   5.  Usability Considerations  . . . . . . . . . . . . . . . . . .  33
93	     5.1.  Mixed Protections Within a Message Are Hard To
94	           Understand  . . . . . . . . . . . . . . . . . . . . . . .  33

96	     5.2.  Users Should Not Have To Choose a Header Confidentiality
97	           Policy  . . . . . . . . . . . . . . . . . . . . . . . . .  33
98	   6.  Security Considerations . . . . . . . . . . . . . . . . . . .  33
99	   7.  Privacy Considerations  . . . . . . . . . . . . . . . . . . .  33
100	   8.  IANA Considerations . . . . . . . . . . . . . . . . . . . . .  33
101	   9.  Acknowledgments . . . . . . . . . . . . . . . . . . . . . . .  33
102	   10. References  . . . . . . . . . . . . . . . . . . . . . . . . .  33
103	     10.1.  Normative References . . . . . . . . . . . . . . . . . .  33
104	     10.2.  Informative References . . . . . . . . . . . . . . . . .  34
105	   Appendix A.  Possible Problems with some Legacy Clients . . . . .  36
106	     A.1.  Problems Reviewing signed+encrypted Messages in List
107	           View  . . . . . . . . . . . . . . . . . . . . . . . . . .  36
108	     A.2.  Problems when Rendering a signed+encrypted Message  . . .  36
109	     A.3.  Problems when Replying to a signed+encrypted Message  . .  37
110	     A.4.  Problems Reviewing signed-only Messages in List View  . .  38
111	     A.5.  Problems when Rendering a signed-only Message . . . . . .  38
112	     A.6.  Problems when Replying to a signed-only Message . . . . .  39
113	   Appendix B.  Test Vectors . . . . . . . . . . . . . . . . . . . .  39
114	     B.1.  Baseline Messages . . . . . . . . . . . . . . . . . . . .  39
115	       B.1.1.  No cryptographic protections over a simple message  .  40
116	       B.1.2.  S/MIME signed-only signedData over a simple message, No
117	               Header Protection . . . . . . . . . . . . . . . . . .  40
118	       B.1.3.  S/MIME signed-only multipart/signed over a simple
119	               message, No Header Protection . . . . . . . . . . . .  42
120	       B.1.4.  S/MIME encrypted and signed over a simple message, No
121	               Header Protection . . . . . . . . . . . . . . . . . .  44
122	       B.1.5.  No cryptographic protections over a complex
123	               message . . . . . . . . . . . . . . . . . . . . . . .  47
124	       B.1.6.  S/MIME signed-only signedData over a complex message,
125	               No Header Protection  . . . . . . . . . . . . . . . .  48
126	       B.1.7.  S/MIME signed-only multipart/signed over a complex
127	               message, No Header Protection . . . . . . . . . . . .  51
128	       B.1.8.  S/MIME encrypted and signed over a complex message, No
129	               Header Protection . . . . . . . . . . . . . . . . . .  54
130	     B.2.  Signed-only Messages  . . . . . . . . . . . . . . . . . .  57
131	       B.2.1.  S/MIME signed-only signedData over a simple message,
132	               Wrapped Message . . . . . . . . . . . . . . . . . . .  57
133	       B.2.2.  S/MIME signed-only multipart/signed over a simple
134	               message, Wrapped Message  . . . . . . . . . . . . . .  59
135	       B.2.3.  S/MIME signed-only signedData over a simple message,
136	               Injected Headers  . . . . . . . . . . . . . . . . . .  62
137	       B.2.4.  S/MIME signed-only multipart/signed over a simple
138	               message, Injected Headers . . . . . . . . . . . . . .  63
139	       B.2.5.  S/MIME signed-only signedData over a complex message,
140	               Wrapped Message . . . . . . . . . . . . . . . . . . .  66
141	       B.2.6.  S/MIME signed-only multipart/signed over a complex
142	               message, Wrapped Message  . . . . . . . . . . . . . .  68

144	       B.2.7.  S/MIME signed-only signedData over a complex message,
145	               Injected Headers  . . . . . . . . . . . . . . . . . .  71
146	       B.2.8.  S/MIME signed-only multipart/signed over a complex
147	               message, Injected Headers . . . . . . . . . . . . . .  74
148	     B.3.  Encrypted-and-signed Messages . . . . . . . . . . . . . .  77
149	       B.3.1.  S/MIME encrypted and signed over a simple message,
150	               Wrapped Message with hcp_minimal  . . . . . . . . . .  77
151	       B.3.2.  S/MIME encrypted and signed over a simple message,
152	               Injected Headers with hcp_minimal . . . . . . . . . .  80
153	       B.3.3.  S/MIME encrypted and signed over a simple message,
154	               Injected Headers with hcp_minimal (+ Legacy Display)  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .  83
155	       B.3.4.  S/MIME encrypted and signed over a simple message,
156	               Wrapped Message with hcp_strong . . . . . . . . . . .  86
157	       B.3.5.  S/MIME encrypted and signed over a simple message,
158	               Injected Headers with hcp_strong  . . . . . . . . . .  89
159	       B.3.6.  S/MIME encrypted and signed over a simple message,
160	               Injected Headers with hcp_strong (+ Legacy Display) .  92
161	       B.3.7.  S/MIME encrypted and signed reply over a simple
162	               message, Wrapped Message with hcp_minimal . . . . . .  95
163	       B.3.8.  S/MIME encrypted and signed reply over a simple
164	               message, Injected Headers with hcp_minimal  . . . . .  98
165	       B.3.9.  S/MIME encrypted and signed reply over a simple
166	               message, Injected Headers with hcp_minimal (+ Legacy
167	               Display)  . . . . . . . . . . . . . . . . . . . . . . 101
168	       B.3.10. S/MIME encrypted and signed reply over a simple
169	               message, Wrapped Message with hcp_strong  . . . . . . 105
170	       B.3.11. S/MIME encrypted and signed reply over a simple
171	               message, Injected Headers with hcp_strong . . . . . . 108
172	       B.3.12. S/MIME encrypted and signed reply over a simple
173	               message, Injected Headers with hcp_strong (+ Legacy
174	               Display)  . . . . . . . . . . . . . . . . . . . . . . 111
175	       B.3.13. S/MIME encrypted and signed over a complex message,
176	               Wrapped Message with hcp_minimal  . . . . . . . . . . 114
177	       B.3.14. S/MIME encrypted and signed over a complex message,
178	               Injected Headers with hcp_minimal . . . . . . . . . . 118
179	       B.3.15. S/MIME encrypted and signed over a complex message,
180	               Injected Headers with hcp_minimal (+ Legacy Display)  . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
181	       B.3.16. S/MIME encrypted and signed over a complex message,
182	               Wrapped Message with hcp_strong . . . . . . . . . . . 126
183	       B.3.17. S/MIME encrypted and signed over a complex message,
184	               Injected Headers with hcp_strong  . . . . . . . . . . 129
185	       B.3.18. S/MIME encrypted and signed over a complex message,
186	               Injected Headers with hcp_strong (+ Legacy Display) . 133
187	       B.3.19. S/MIME encrypted and signed reply over a complex
188	               message, Wrapped Message with hcp_minimal . . . . . . 137
189	       B.3.20. S/MIME encrypted and signed reply over a complex
190	               message, Injected Headers with hcp_minimal  . . . . . 141

192	       B.3.21. S/MIME encrypted and signed reply over a complex
193	               message, Injected Headers with hcp_minimal (+ Legacy
194	               Display)  . . . . . . . . . . . . . . . . . . . . . . 145
195	       B.3.22. S/MIME encrypted and signed reply over a complex
196	               message, Wrapped Message with hcp_strong  . . . . . . 149
197	       B.3.23. S/MIME encrypted and signed reply over a complex
198	               message, Injected Headers with hcp_strong . . . . . . 153
199	       B.3.24. S/MIME encrypted and signed reply over a complex
200	               message, Injected Headers with hcp_strong (+ Legacy
201	               Display)  . . . . . . . . . . . . . . . . . . . . . . 157
202	   Appendix C.  Additional information . . . . . . . . . . . . . . . 161
203	     C.1.  Stored Variants of Messages with Bcc  . . . . . . . . . . 161
204	   Appendix D.  Text Moved from Above  . . . . . . . . . . . . . . . 162
205	     D.1.  MIME Format . . . . . . . . . . . . . . . . . . . . . . . 162
206	       D.1.1.  S/MIME Specification  . . . . . . . . . . . . . . . . 163
207	       D.1.2.  Sending Side  . . . . . . . . . . . . . . . . . . . . 165
208	   Appendix E.  Document Considerations  . . . . . . . . . . . . . . 169
209	   Appendix F.  Document Changelog . . . . . . . . . . . . . . . . . 170
210	   Appendix G.  Open Issues  . . . . . . . . . . . . . . . . . . . . 171
211	   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . . 172

213	1.  Introduction

215	   Privacy and security issues regarding email Header Protection in S/
216	   MIME have been identified for some time.  Most current
217	   implementations of cryptographically-protected electronic mail
218	   protect only the body of the message, which leaves significant room
219	   for attacks against otherwise-protected messages.  For example, lack
220	   of header protection allows an attacker to substitute the message
221	   subject and/or author.

223	   This document describes two different structures for how message
224	   headers can be cryptographically protected, and provides guidance for
225	   implementers of MUAs that generate and interpret such messages.  It
226	   takes particular care to ensure that messages interact reasonably
227	   well with legacy MUAs.

229	1.1.  Two Schemes of Protected Headers

231	   Unfortunately, there are two different schemes for cryptographically-
232	   protected email headers that may be in use on the Internet today.
233	   This document addresses them both and provides guidance to
234	   implementers.

236	   One scheme is the form specified in S/MIME 3.1 and later, which
237	   involves wrapping a "message/rfc822" MIME object with a Cryptographic
238	   Envelope.  This document calls this scheme "Wrapped Message", and it
239	   is documented in more detail in [RFC8551].  Experience has shown that
240	   this form does not interact well with some legacy MUAs (see
241	   Section 1.2).

243	   Consequently, another form of header protection is produced and
244	   consumed by some MUAs, where the protected headers are placed
245	   directly on the Cryptographic Payload, without using an intervening
246	   "message/*" MIME object.  This document calls this scheme "Injected
247	   Headers", and it is documented in more detail in
248	   [I-D.autocrypt-lamps-protected-headers].

250	1.2.  Problems with Wrapped Messages

252	   Several legacy MUAs have revealed rendering issues when dealing with
253	   a message with headers protected by the Wrapped Message scheme.  In
254	   some cases the user sees an attachment suggesting a forwarded email
255	   message, which -- in fact -- contains the protected email message
256	   that should be rendered directly.  For these cases, the user can
257	   click on the attachment to view the protected message.  However,
258	   there have also been reports of email clients displaying garbled
259	   text, or sometimes nothing at all.  In those cases the email clients
260	   on the receiving side are (most likely) not fully MIME-capable.

262	   The following shortcomings have been identified to cause these
263	   issues:

265	   *  Broken or incomplete implementations

267	   *  Lack of a simple means to distinguish "forwarded message" and
268	      "wrapped message" (for the sake of Header Protection)

270	   *  Not enough guidance with respect to handling of Header Fields on
271	      both the sending and the receiving side

273	1.3.  Problems with Injected Headers

275	   A legacy MUA dealing with an encrypted message that has some header
276	   fields obscured using the Injected Headers scheme will not render the
277	   obscured header fields to the user at all.  A workaround "legacy
278	   display" mechanism is provided in this document, which some legacy
279	   MUAs will render to the user, albeit not in the same location that
280	   the header fields would normally be rendered.  However, some legacy
281	   MUAs also fail to render the "legacy display" part, leaving the
282	   obscured header fields hidden from users of those MUAs.

284	1.4.  Motivation

286	   Furthermore, the need (technical) Data Minimization, which includes
287	   data sparseness and hiding all technically concealable information,
288	   has grown in importance over the past several years.  In addition,
289	   backwards compatibility must be considered when it is possible to do
290	   so without compromising privacy and security.

292	   No mechanism for Header Protection has been standardized for PGP/MIME
293	   (Pretty Good Privacy) [RFC3156] yet.  PGP/MIME developers have
294	   implemented ad-hoc header-protection, and would like to see a
295	   specification that is applicable to both S/MIME and PGP/MIME.

297	   This document describes the problem statement (Section 2), generic
298	   use cases (Section 3) and the specification for Header Protection
299	   (Section 4) with guidance on MIME format, sender and receiver
300	   processing .

302	   [I-D.ietf-lamps-header-protection-requirements] defines the
303	   requirements that this specification is based on.

305	   This document is in an early draft state and contains a proposal on
306	   which to base future discussions of this topic.  In any case, the
307	   final mechanism is to be determined by the IETF LAMPS WG.

309	1.5.  Other Protocols to Protect Email Headers

311	   A range of protocols for the protection of electronic mail (email)
312	   exists, which allows one to assess the authenticity and integrity of
313	   the email headers section or selected Header Fields from the domain-
314	   level perspective, specifically DomainKeys Identified Mail (DKIM)
315	   [RFC6376], as used by Domain-based Message Authentication, Reporting,
316	   and Conformance (DMARC) [RFC7489].  These protocols provide a domain-
317	   based reputation mechanism that can be used to mitigate some forms of
318	   unsolicited email (spam).  At the same time, these protocols can
319	   provide a level of cryptographic integrity and authenticity for some
320	   headers, depending on how they are used.  However, integrity
321	   protection and proof of authenticity are both tied to the domain name
322	   of the sending e-mail address, not the sending address itself, so
323	   these protocols do not provide end-to-end protection, and are
324	   incapable of providing any form of confidentiality.

326	1.6.  Requirements Language

328	   The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT",
329	   "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this
330	   document are to be interpreted as described in [RFC2119].

332	1.7.  Terms

334	   The following terms are defined for the scope of this document:

336	   *  Man-in-the-middle (MITM) attack: cf. [RFC4949], which states: "A
337	      form of active wiretapping attack in which the attacker intercepts
338	      and selectively modifies communicated data to masquerade as one or
339	      more of the entities involved in a communication association."

341	      Note: Historically, MITM has stood for '_Man_-in-the-middle'.
342	      However, to indicate that the entity in the middle is not always a
343	      human attacker, MITM can also stand for 'Machine-in-the-middle' or
344	      'Meddler-in-the-middle'.

346	   *  S/MIME: Secure/Multipurpose Internet Mail Extensions (cf.
347	      [RFC8551])

349	   *  PGP/MIME: MIME Security with OpenPGP (cf.  [RFC3156])

351	   *  Message: An Email Message consisting of Header Fields
352	      (collectively called "the Header Section of the message")
353	      followed, optionally, by a Body; cf. [RFC5322].

355	      Note: To avoid ambiguity, this document does not use the terms
356	      "Header" or "Headers" in isolation, but instead always uses
357	      "Header Field" to refer to the individual field and "Header
358	      Section" to refer to the entire collection; cf. [RFC5322].

360	   *  Header Field (HF): cf. [RFC5322] Header Fields are lines beginning
361	      with a field name, followed by a colon (":"), followed by a field
362	      body (value), and terminated by CRLF.

364	   *  Header Section (HS): The Header Section is a sequence of lines of
365	      characters with special syntax as defined in [RFC5322].  It is the
366	      (top) section of a Message containing the Header Fields.

368	   *  Body: The Body is simply a sequence of bytes that follows the
369	      Header Section and is separated from the Header Section by an
370	      empty line (i.e., a line with nothing preceding the CRLF); cf
371	      [RFC5322].  It is the (bottom) section of Message containing the
372	      payload of a Message.  Typically, the Body consists of a (possibly
373	      multipart) MIME [RFC2045] construct.

375	   *  MIME Header Fields: Header Fields describing content of a MIME
376	      entity [RFC2045], in particular the MIME structure.  Each MIME
377	      Header Field name starts with "Content-" prefix.

379	   *  MIME Header Section (part): The collection of MIME Header Fields.
380	      "MIME Header Section" refers to a Header Sections that contains
381	      only MIME Header Fields, whereas "MIME Header Section part" refers
382	      to the MIME Header Fields of a Header Section that - in addition
383	      to MIME Header Fields - also contains non-MIME Header Fields.

385	   *  Essential Header Fields (EHF): The minimum set of Header Fields an
386	      Outer Message Header Section SHOULD contain; cf. Appendix D.1.2.5.

388	   *  Header Protection (HP): cryptographic protection of email Header
389	      Sections (or parts of it) for signatures and/or encryption

391	   *  Protection Levels (PL): The level of protection applied to a
392	      Message, e.g.  'signature and encryption' or 'signature only' (cf.
393	      Section 3.2).

395	   *  Protected: Portions of a message that have had any Protection
396	      Levels applied.

398	   *  Protected Message: A Message that has had any Protection Levels
399	      applied.

401	   *  Unprotected: Portions of a Message that has had no Protection
402	      Levels applied.

404	   *  Unprotected Message: A Message that has had no Protection Levels
405	      applied.

407	   *  Submission Entity: The entity which executes further processing of
408	      the Message (incl. transport towards the receiver), after
409	      protection measures have been applied to the Message.

411	      Note: The Submission Entity varies among implementations, mainly
412	      depending on the stage where protection measures are applied: E.g.
413	      a Message Submission Agent (MSA) [RFC6409] or another
414	      (proprietary) solution.  The latter is particularly relevant, if
415	      protection is implemented as a plugin solution.  Some
416	      implementations may determine the destination recipients by
417	      reading the To, Cc and Bcc Header Fields of the Outer Message.

419	   *  Original Message (OrigM): The Message to be protected before any
420	      protection-related processing has been applied on the sending
421	      side.  If the source is not a "message/rfc822" Message, OrigM is
422	      defined as the "virtual" Message that would be constructed for
423	      sending it as unprotected email.

425	   *  Inner Message (InnerM): The Message to be protected which has had
426	      wrapping and protection measures applied on the sending side OR
427	      the resulting Message once decryption and unwrapping on the
428	      receiving side has been performed.  Typically, the Inner Message
429	      is in clear text.  The Inner Message is a subset of (or the same
430	      as) the Original Message.  The Inner Message must be the same on
431	      the sending and the receiving side.

433	   *  Outer Message (OuterM): The Message as provided to the Submission
434	      Entity or received from the last hop respectively.  The Outer
435	      Message normally differs on the sending and the receiving side
436	      (e.g. new Header Fields are added by intermediary nodes).

438	   *  Receiving User Facing Message (RUFM): The Message used for
439	      rendering at the receiving side.  Typically this is the same as
440	      the Inner Message.

442	   *  Data Minimization: Data sparseness and hiding of all technically
443	      concealable information whenever possible.

445	   *  Cryptographic Layer, Cryptographic Payload, Cryptographic
446	      Envelope, Structural Headers, and MUA are all used as defined in
447	      [I-D.dkg-lamps-e2e-mail-guidance]

449	   *  User-Facing Headers are defined in
450	      [I-D.autocrypt-lamps-protected-headers].

452	   *  Legacy MUA: a MUA that does not understand protected headers as
453	      described in this document.  A Legacy Non-Crypto MUA is incapable
454	      of doing any end-to-end cryptographic operations.  A Legacy Crypto
455	      MUA is capable of doing cryptographic operations, but does not
456	      understand or generate protected headers.

458	   *  Wrapped Message: The protected headers scheme that uses the
459	      mechanism described in [RFC8551], where the Cryptographic Payload
460	      is a "message/rfc822" or "message/global" MIME object.

462	   *  Injected Headers: The protected headers scheme that uses the
463	      mechanism described in [I-D.autocrypt-lamps-protected-headers],
464	      where the protected headers are inserted on the Cryptographic
465	      Payload directly.

467	   *  Header Confidentiality Policy: documented in Section 4.1.2.2

469	2.  Problem Statement

471	   The LAMPS charter contains the following Work Item:

473	      Update the specification for the cryptographic protection of email
474	      headers -- both for signatures and encryption -- to improve the
475	      implementation situation with respect to privacy, security,
476	      usability and interoperability in cryptographically-protected
477	      electronic mail.  Most current implementations of
478	      cryptographically-protected electronic mail protect only the body
479	      of the message, which leaves significant room for attacks against
480	      otherwise-protected messages.

482	   In the following a set of challenges to be addressed:

484	   [[ TODO: Enhance this section, add more items to the following. ]]

486	2.1.  Privacy

488	   *  (Technical) Data Minimization, which includes data sparseness and
489	      hiding all technically concealable information whenever possible

491	2.2.  Security

493	   *  Prevent MITM attacks (cf.  [RFC4949])

495	2.3.  Usability

497	   *  Improved User interaction / User experience, in particular at the
498	      receiving side

500	2.4.  Interoperability

502	   *  Interoperability with [RFC8551] implementations

504	3.  Use Cases

506	   In the following, the reader can find a list of the generic use cases
507	   that need to be addressed for Messages with Header Protection (HP).
508	   These use cases apply regardless of technology (S/MIME, PGP/MIME,
509	   etc.) used to achieve HP.

511	3.1.  Interactions

513	   The following use cases assume that at least the sending side
514	   supports Header Protection as specified in this document.  Receiving
515	   sides that support this specification are expected to be able to
516	   distinguish between Messages that use Header Protection as specified
517	   in this document, and (legacy) Mail User Agents (MUAs) which do not
518	   implement this specification.

520	   [[ TODO: Verify once solution is stable and update last sentence. ]]

522	3.1.1.  Main Use Case

524	   Both the sending and receiving side (fully) support Header Protection
525	   as specified in this document.

527	   The main use case is specified in Section 4.1.

529	3.1.2.  Backward Compatibility Use Cases

531	   Regarding backward compatibility, the main distinction is based on
532	   whether or not the receiving side conforms to MIME according to
533	   [RFC2046], ff., which in particular also includes Section 2 of
534	   [RFC2049] on "MIME Conformance".  The following excerpt is
535	   contextually relevant:

537	     A mail user agent that is MIME-conformant MUST:

539	     [...]

541	          -- Recognize and display at least the RFC822 message
542	          encapsulation (message/rfc822) in such a way as to
543	          preserve any recursive structure, that is, displaying
544	          or offering to display the encapsulated data in
545	          accordance with its media type.

547	          -- Treat any unrecognized subtypes as if they were
548	          "application/octet-stream".

550	     [...]

552	     An MUA that meets the above conditions is said to be MIME-
553	     conformant.  A MIME-conformant MUA is assumed to be "safe" to
554	     send virtually any kind of properly-marked data to users of
555	     such mail systems, because these systems are, at a minimum,
556	     capable of treating the data as undifferentiated binary, and
557	     will not simply splash it onto the screen of unsuspecting
558	     users.

560	   [[ TODO: The compatibility of legacy HP systems with this new
561	   solution, and how to handle issues surrounding future maintenance for
562	   these legacy systems, will be decided by the LAMPS WG. ]]

564	3.1.2.1.  Receiving Side MIME-Conformant

566	   The sending side (fully) supports Header Protection as specified in
567	   this document, while the receiving side does not support this
568	   specification.  However, the receiving side is MIME-conformant
569	   according to [RFC2045], ff. (cf.  Section 3.1.2).

571	   This use case is specified in Section 4.2.1.

573	   Note: This case should perform as expected if the sending side
574	   applies this specification as outlined in Section 4.1.

576	   [[ TODO: Verify once solution is stable and update last sentence. ]]

578	3.1.2.2.  Receiving Side Not MIME-Conformant

580	   The sending side (fully) supports Header Protection as specified in
581	   this document, while the receiving side does not support this
582	   specification.  Furthermore, the receiving side is *not* MIME-
583	   conformant according to [RFC2045], ff. (cf.  Section 3.1.2).

585	   This use case is specified in Section 4.2.2.

587	3.2.  Protection Levels

589	3.2.1.  In-Scope

591	   The following Protection Levels are in scope for this document:

593	   a) Signature and encryption

595	   Messages containing a cryptographic signature, which are also
596	   encrypted.

598	   b) Signature only

600	   Messages containing a cryptographic signature, but which are not
601	   encrypted.

603	3.2.2.  Out-of-Scope

605	   Legacy implementations, implementations not (fully) compliant with
606	   this document or corner-cases may lead to further Protection Levels
607	   to appear on the receiving side, such as (list not exhaustive):

609	   *  Triple wrap

611	   *  Encryption only

613	   *  Encryption before signature

615	   *  Signature and encryption, but:

617	      -  Signature fails to validate
618	      -  Signature validates but the signing certificate revoked

620	   *  Signature only, but:

622	      -  with multiple valid signatures, layered atop each other

624	   These Protection Levels, as well as any further Protection Levels not
625	   listed in Section 3.2.1 are beyond the scope of this document.

627	4.  Specification

629	   This section contains the specification for Header Protection in S/
630	   MIME to update and clarify Section 3.1 of [RFC8551] (S/MIME 4.0).

632	   Note: It is likely that PGP/MIME [RFC3156] will also incorporate this
633	   specification or parts of it.

635	   This specification applies to the Protection Levels "signature &
636	   encryption" and "signature only" (cf.  Section 3.2):

638	   Sending and receiving sides MUST implement the "signature and
639	   encryption" Protection Level, which SHOULD be used as default on the
640	   sending side.

642	   Certain implementations may decide to send "signature only" Messages,
643	   depending on the circumstances and customer requirements.  Sending
644	   sides MAY and receiving sides MUST implement "signature only"
645	   Protection Level.

647	   It generally is NOT RECOMMENDED to send a Message with any other
648	   Protection Level.  On the other hand, the receiving side must be
649	   prepared to receive Messages with other Protection Levels.

651	   [[ TODO: Further study is necessary to determine whether - and if yes
652	   to what extent - additional guidance for handling messages with other
653	   Protection Levels, e.g. "encryption only" at the receiving side
654	   should be included in this document. ]]

656	4.1.  Main Use Case

658	   This section applies to the main use case, where the sending and
659	   receiving side (fully) support Header Protection as specified herein
660	   (cf.  Section 3.1.1).

662	   Note: The sending side specification of the main use case is also
663	   applicable to the cases where the sending side (fully) supports
664	   Header Protection as specified herein, while the receiving side does
665	   not, but is MIME-conformant according to [RFC2045], ff. (cf.
666	   Section 3.1.2 and Section 3.1.2.1).

668	   Further backward compatibility cases are defined in Section 4.2.

670	4.1.1.  MIME Format

672	4.1.1.1.  Introduction

674	   As per S/MIME version 3.1 and later (cf.  [RFC8551]), the sending
675	   client MAY wrap a full MIME message in a message/RFC822 wrapper in
676	   order to apply S/MIME security services to these header fields.

678	   To help the receiving side to distinguish between a forwarded and a
679	   wrapped message, the Content-Type header field parameter "forwarded"
680	   is added as defined in [I-D.melnikov-iana-reg-forwarded].

682	   The simplified (cryptographic overhead not shown) MIME structure of
683	   such an Email Message looks as follows:

685	     <Outer Message Header Section (unprotected)>

687	     <Outer Message Body (protected)>

689	       <MIME Header Section (wrapper)>

691	         <Inner Message Header Section>

693	         <Inner Message Body>

695	   The following example demonstrates how an Original Message might be
696	   protected, i.e., the Original Message is contained as Inner Message
697	   in the Protected Body of an Outer Message.  It illustrates the first
698	   Body part (of the Outer Message) as a "multipart/signed"
699	   (application/pkcs7-signature) media type:

701	   Lines are prepended as follows:

703	   *  "O: " Outer Message Header Section

705	   *  "I: " Message Header Section

707	   *  "W: " Wrapper (MIME Header Section)
708	     O: Date: Mon, 25 Sep 2017 17:31:42 +0100 (GMT Daylight Time)
709	     O: Message-ID: <e4a483cb-1dfb-481d-903b-298c92c21f5e@m.example.net>
710	     O: Subject: Meeting at my place
711	     O: From: "Alexey Melnikov" <alexey.melnikov@example.net>
712	     O: To: somebody@example.net
713	     O: MIME-Version: 1.0
714	     O: Content-Type: multipart/signed; charset=us-ascii; micalg=sha1;
715	     O:  protocol="application/pkcs7-signature";
716	     O:  boundary=boundary-AM

718	        This is a multipart message in MIME format.
719	        --boundary-AM
720	     W: Content-Type: message/RFC822; forwarded=no
721	     W:
722	     I: Date: Mon, 25 Sep 2017 17:31:42 +0100 (GMT Daylight Time)
723	     I: From: "Alexey Melnikov" <alexey.melnikov@example.net>
724	     I: Message-ID: <e4a483cb-1dfb-481d-903b-298c92c21f5e@m.example.net>
725	     I: MIME-Version: 1.0
726	     I: MMHS-Primary-Precedence: 3
727	     I: Subject: Meeting at my place
728	     I: To: somebody@example.net
729	     I: X-Mailer: Isode Harrier Web Server
730	     I: Content-Type: text/plain; charset=us-ascii

732	        This is an important message that I don't want to be modified.

734	        --boundary-AM
735	        Content-Transfer-Encoding: base64
736	        Content-Type: application/pkcs7-signature

738	        [[base-64 encoded signature]]

740	        --boundary-AM--

742	   The Outer Message Header Section is unprotected, while the remainder
743	   (Outer Message Body) is protected.  The Outer Message Body consists
744	   of the wrapper (MIME Header Section) and the Inner Message (Header
745	   Section and Body).

747	   The wrapper is a simple MIME Header Section with media type "message/
748	   rfc822" containing a Content-Type header field parameter
749	   "forwarded=no" followed by an empty line.

751	   If the source is an Original (message/rfc822) Message, the Inner
752	   Message Header Section is typically the same as (or a subset of) the
753	   Original Message Header Section, and the Inner Message Body is
754	   typically the same as the Original Message Body.

756	   The Inner Message itself may contain any MIME structure.

758	   Note: It is still to be decided by the LAMPS WG whether or not to
759	   recommend an alternative MIME format as described in Appendix D.1.1.1
760	   (instead of the currently standardized and above defined format).

762	4.1.2.  Sending Side

764	   This section describes the process an MUA should use to apply
765	   cryptographic protection to an e-mail message with header protection.
766	   We start by describing the legacy message composition process as a
767	   baseline.

769	4.1.2.1.  Composing a Cryptographically-Protected Message Without Header
770	          Protection

772	   [I-D.dkg-lamps-e2e-mail-guidance] describes the typical process for a
773	   legacy crypto MUA to apply cryptographic protections to an e-mail
774	   message.  That guidance and terminology is replicated here for
775	   reference:

777	   *  "origbody": the traditional unprotected message body as a well-
778	      formed MIME tree (possibly just a single MIME leaf part).  As a
779	      well-formed MIME tree, "origbody" already has structural headers
780	      ("Content-*") present.

782	   *  "origheaders": the intended non-structural headers for the
783	      message, represented here as a list of "(h,v)" pairs, where "h" is
784	      a header field name and "v" is the associated value.  Note that
785	      these are header fields that the MUA intends to be visible to the
786	      recipient of the message.  In particular, if the MUA uses the
787	      "Bcc" header during composition, but plans to omit it from the
788	      message (see section 3.6.3 of [RFC5322]), it will not be in
789	      "origheaders".

791	   *  "crypto": The series of cryptographic protections to apply (for
792	      example, "sign with the secret key corresponding to X.509
793	      certificate X, then encrypt to X.509 certificates X and Y").  This
794	      is a routine that accepts a MIME tree as input (the Cryptographic
795	      Payload), wraps the input in the appropriate Cryptographic
796	      Envelope, and returns the resultant MIME tree as output.

798	   The algorithm returns a MIME object that is ready to be injected into
799	   the mail system:

801	   *  Apply "crypto" to "origbody", yielding MIME tree "output"

803	   *  For each header name and value "(h,v)" in "origheaders":

805	      -  Add header "h" of "output" with value "v"

807	   *  Return "output"

809	4.1.2.2.  Header Confidentiality Policy

811	   When composing an encrypted message with protected headers, the
812	   composing MUA needs a Header Confidentialiy Policy.  In this
813	   document, we represent that Header Confidentiality Policy as a
814	   function "hcp":

816	   *  "hcp(name, val_in) --> val_out": this function takes a header
817	      field name "name" and initial value "val_in" as arguments, and
818	      returns a replacement header value "val_out".  If "val_out" is the
819	      special value "null", it mean that the header in question should
820	      be omitted from the set of headers visible outside the
821	      Cryptographic Envelope.

823	   For example, an MUA that only obscures the "Subject" header field by
824	   replacing it with the literal string "[...]" and does not offer
825	   confidentiality to any other header fields would be represented as
826	   (in pseudocode):

828	   "hcp(name, val_in) --> val_out: if name is 'Subject': return '[...]'
829	   else: return val_in"

831	   Note that such a policy is only needed when the end-to-end
832	   protections include encryption (confidentiality).  No comparable
833	   policy is needed for other end-to-end cryptographic protections
834	   (integrity and authenticity), as they are simply uniformly applied so
835	   that all header fields known by the sender have these protections.

837	   This asymmetry is an unfortunate consequence of complexities in
838	   message delivery systems, some of which may reject, drop, or delay
839	   messages where all headers are removed from the top-level MIME
840	   object.

842	   This document does not mandate any particular Header Confidentiality
843	   Policy, though it offers guidance for MUA implementers in selecting
844	   one in Section 4.1.3.  Future documents may recommend or mandate such
845	   a policy for an MUA with specific needs.  Such a recommendation might
846	   be motivated by descriptions of metadata-derived attacks, or stem
847	   from research about message deliverability, or describe new
848	   signalling mechanisms, but these topics are out of scope for this
849	   document.

851	4.1.2.3.  Composing with "Wrapped Message" Header Protection

853	   To compose a message using "Wrapped Message" header protection, we
854	   use those inputs described in Section 4.1.2.1 plus the Header
855	   Confidentiality Policy "hcp" defined in Section 4.1.2.2.  The new
856	   algorithm is:

858	   *  For header name and value "(h,v)" in "origheaders":

860	      -  Add header "h" of "origbody" with value "v"

862	   *  If any of the header fields in "origbody", including headers in
863	      the nested internal MIME structure, contain any 8-bit UTF-8
864	      characters (see section section 3.7 of [RFC6532]):

866	      -  Let "payload" be a new MIME part with one header: "Content-
867	         Type: message/global; forwarded=no", and whose body is
868	         "origbody".

870	   *  Else:

872	      -  Let "payload" be a new MIME part with one header: "Content-
873	         Type: message/rfc822; forwarded=no", and whose body is
874	         "origbody".

876	   *  Apply "crypto" to "payload", yielding MIME tree "output"

878	   *  If "crypto" contains encryption:

880	      -  Create new empty list of header field names and values "newh"

882	      -  For header name and value "(h,v)" in "origheaders":

884	         o  Let "newval" be "hcp(h, v)"

886	         o  If "newval" is not "null":

888	            +  Append "(h,newval)" to "newh"

890	      -  Set "origheaders" to "newh"

892	   *  For header name and value "(h,v)" in "origheaders":

894	      -  Add header "h" of "output" with value "v"

896	   *  Return "output"
897	   Note that the Header Confidentiality Policy "hcp" is ignored if
898	   "crypto" does not contain encryption.  This is by design.

900	4.1.2.4.  Composing with "Injected Headers" Header Protection

902	   To compose a message using "Injected Headers" header protection, the
903	   composing MUA needs one additional input in addition to the Header
904	   Confidentiality Policy "hcp" defined in Section 4.1.2.2.

906	   *  "legacy": a boolean value, indicating whether any recipient of the
907	      message is believed to have a legacy client.  If all recipients
908	      are known to implement this draft, "legacy" should be set to
909	      "false".  (How a MUA determines the value of "legacy" is out of
910	      scope for this document; an initial implementation can simply set
911	      it to "true")

913	   The revised algorithm for applying cryptographic protection to a
914	   message is as follows:

916	   *  Create a new MIME leaf part "legacydisplay" with header "Content-
917	      Type: text/plain; protected-headers="v1"" and an empty body.

919	   *  if "crypto" contains encryption, and "legacy" is "true":

921	      -  For each header name and value "(h,v)" in "origheaders":

923	         o  If "h" is user-facing (see
924	            [I-D.autocrypt-lamps-protected-headers]):

926	            +  If "hcp(h,v)" is not "v":

928	               *  Add "h: v" to the body of "legacydisplay".  For
929	                  example, if "h" is "Subject", and "v" is "lunch
930	                  plans?", then add the line "Subject: lunch plans?" to
931	                  the body of "legacydisplay"

933	   *  If the body of "legacydisplay" is empty:

935	      -  Let "payload" be MIME part "origbody", discarding
936	         "legacydisplay"

938	   *  Else: (body of "legacydisplay" is not empty)

940	      -  Construct a new MIME part "wrapper" with "Content-Type:
941	         multipart/mixed"

943	      -  Give "wrapper" exactly two subparts: "legacydisplay" and
944	         "origbody", in that order.

946	      -  Let "payload" be MIME part "wrapper"

948	   *  For each header name and value "(h,v)" in "origheaders":

950	      -  Add header "h" of MIME part "payload" with value "v"

952	   *  Set the "protected-headers" parameter on the "Content-Type" of
953	      "payload" to "v1"

955	   *  Apply "crypto" to "payload", producing MIME tree "output"

957	   *  If "crypto" contains encryption:

959	      -  Create new empty list of header field names and values "newh"

961	      -  For header name and value "(h,v)" in "origheaders":

963	         o  Let "newval" be "hcp(h, v)"

965	         o  If "newval" is not "null":

967	            +  Add "newh[h]" to "newval"

969	      -  Set "origheaders" to "newh"

971	   *  For each header name and value "(h,v)" in "origheaders":

973	      -  Add header "h" of "output" with value "v"

975	   *  Return "output"

977	   Note that both new parameters ("hcp" and "legacy") are effectively
978	   ignored if "crypto" does not contain encryption.  This is by design,
979	   because they are irrelevant for signed-only cryptographic
980	   protections.

982	4.1.2.5.  Choosing Between Wrapped Message and Injected Headers

984	   When composing a message with end-to-end cryptographic protections,
985	   an MUA SHOULD protect the headers of that message as well as the
986	   body.

988	   An MUA MAY protect the headers of any outbound message using either
989	   the "Wrapped Message" or the "Injected Headers" style of protection.
990	   See Section 4.2 for more discussion about reasons to choose one
991	   mechanism or another.

993	   [[ TODO: this document should recommend generation of one particular
994	   scheme by default for new implementers ]]

996	4.1.3.  Default Header Confidentiality Policy

998	   An MUA SHOULD have a sensible default Header Confidentiality Policy,
999	   and SHOULD NOT require the user to select one.

1001	   The default Header Confidentiality Policy SHOULD provide
1002	   confidentiality for the "Subject" header field by replacing it with
1003	   the literal string "[...]".  Most users treat the Subject of a
1004	   message the same way that they treat the body, and they are surprised
1005	   to find that the Subject of an encrypted message is visible.

1007	   [[ TODO: select one of the two policies below the recommended default
1008	   ]]

1010	4.1.3.1.  Minimalist Header Confidentiality Policy

1012	   Accordingly, the most conservative recommended Header Confidentiality
1013	   Policy only protects the "Subject":

1015	   "hcp_minimal(name, val_in) --> val_out: if name is 'Subject': return
1016	   '[...]' else: return val_in"

1018	4.1.3.2.  Strong Header Confidentiality Policy

1020	   Alternately, a more aggressive (and therefore more privacy-
1021	   preserving) Header Confidentiality Policy only leaks a handful of
1022	   fields whose absence is known to increase rates of delivery failure,
1023	   and simultaneously obscures the "Message-ID" behind a random new one:

1025	   "hcp_strong(name, val_in) --> val_out: if name in ['From', 'To',
1026	   'Cc', 'Date']: return val_in else if name is 'Subject': return
1027	   '[...]' else if name is 'Message-ID': return
1028	   generate_new_message_id() else: return null"

1030	   The function "generate_new_message_id()" represents whatever process
1031	   the MUA typically uses to generate a "Message-ID" for a new outbound
1032	   message.

1034	4.1.3.3.  Offering Stronger Header Confidentiality

1036	   A MUA MAY offer even stronger confidentiality for headers of an
1037	   encrypted message than described in Section 4.1.3.2.  For example, it
1038	   might implement an HCP that obfuscates the "From" field, or omits the
1039	   "Cc" field, or ensures "Date" is represented in "UTC" (obscuring the
1040	   local timezone).

1042	   The authors of this document hope that implementers with deployment
1043	   experience will document their chosen Header Confidentiality Policy
1044	   and the rationale behind their choice.

1046	4.1.4.  Receiving Side

1048	   An MUA that receives a cryptographically-protected e-mail will render
1049	   it for the user.

1051	   The receiving MUA will render the message body, a selected subset of
1052	   header fields, and (as described in
1053	   [I-D.dkg-lamps-e2e-mail-guidance]) provide a summary of the
1054	   cryptographic properties of the message.

1056	   Most MUAs only render a subset of header fields by default.  For
1057	   example, few MUAs typically render "Message-Id" or "Received" header
1058	   fields for the user, but most do render "From", "To", "Cc", "Date",
1059	   and "Subject".

1061	   A MUA that knows how to handle a message with protected headers makes
1062	   the following two changes to its behavior when rendering a message:

1064	   *  If it detects that an incoming message had protected headers, it
1065	      renders header fields for the message from the protected headers,
1066	      ignoring the external (unprotected) headers.

1068	   *  It includes information in the message's cryptographic summary to
1069	      indicate the types of protection that applied to each rendered
1070	      header field (if any).

1072	   A MUA that handles protected headers does _not_ need to render any
1073	   new header fields that it did not render before.

1075	4.1.4.1.  Identifying that a Message has Protected Headers

1077	   An incoming message can be identified as having protected headers
1078	   based on one of two signals:

1080	   *  The Cryptographic Payload has "Content-Type: message/rfc822" or
1081	      "Content-Type: message/global" and the parameter "forwarded" has a
1082	      value of "no".  See Section 4.1.4.3 for rendering guidance.

1084	   *  The Cryptographic Payload has some other "Content-Type" and it has
1085	      parameter "protected-headers" set to "v1".  See Section 4.1.4.4
1086	      for rendering guidance.

1088	   Messages of both types exist in the wild, and a sensible MUA should
1089	   be able to handle them both.  They provide the same semantics and the
1090	   same meaning.

1092	4.1.4.2.  Updating the Cryptographic Summary

1094	   Regardless of whether a cryptographically-protected message has
1095	   protected headers, the cryptographic summary of the message should be
1096	   modified to indicate what protections the headers have.

1098	   Each header individually has exactly one the following protections:

1100	   *  "unprotected" (this is the case for all headers in messages that
1101	      have no protected headers)

1103	   *  "signed-only" (bound into the same validated signature as the
1104	      enclosing message, but also visible in transit)

1106	   *  "encrypted-only" (only appears within the cryptographic payload;
1107	      the corresponding external header was either omitted or
1108	      obfuscated)

1110	   *  "encrypted-and-signed" (same as encrypted, but additionally is
1111	      under a validatd signature)

1113	   Note that while the message itself may be "encrypted-and-signed",
1114	   some headers may be replicated on the outside of the message (e.g.
1115	   "Date") Those headers would be "signed-only", despite the message
1116	   itself being "encrypted-and-signed".

1118	   Rendering this information is likely to be complex and messy ---
1119	   users may not understand it.  It is beyond the scope of this document
1120	   to suggest any specific graphical affordances or user experience.
1121	   Future work should include examples of successful rendering of this
1122	   information.

1124	4.1.4.3.  Rendering a Wrapped Message

1126	   When the Cryptographic Payload has "Content-Type" of "message/rfc822"
1127	   or "message/global", and the parameter "forwarded" is set to "no",
1128	   the values of the protected headers are drawn from the headers of the
1129	   Cryptographic Payload, and the body that is rendered is the body of
1130	   the Cryptographic Payload.

1132	4.1.4.3.1.  Example Signed-Only Wrapped Message

1134	   Consider a message with this structure, where the MUA is able to
1135	   validate the cryptographic signature:

1137	   A └─╴application/pkcs7-mime; smime-type="signed-data"
1138	      ⇩ (unwraps to)
1139	   B  └┬╴message/rfc822 [Cryptographic Payload]
1140	   C   └┬╴multipart/alternative [Rendered Body]
1141	   D    ├─╴text/plain
1142	   E    └─╴text/html

1144	   The message body should be rendered the same way as this message:

1146	   C └┬╴multipart/alternative
1147	   D  ├─╴text/plain
1148	   E  └─╴text/html

1150	   It should render header fields taken from part "C".

1152	   Its cryptographic summary should indicates that the message was
1153	   signed and all rendered header fields were included in the signature.

1155	   The MUA SHOULD ignore header fields from part "A" for the purposes of
1156	   rendering.

1158	4.1.4.3.2.  Example Encrypted-and-Signed Wrapped Message

1160	   Consider a message with this structure, where the MUA is able to
1161	   validate the cryptographic signature:

1163	   F └─╴application/pkcs7-mime; smime-type="enveloped-data"
1164	      ↧ (decrypts to)
1165	   G  └─╴application/pkcs7-mime; smime-type="signed-data"
1166	       ⇩ (unwraps to)
1167	   H   └┬╴message/rfc822 [Cryptographic Payload]
1168	   I    └┬╴multipart/alternative [Rendered Body]
1169	   J     ├─╴text/plain
1170	   K     └─╴text/html

1172	   The message body should be rendered the same way as this message:

1174	   I └┬╴multipart/alternative
1175	   J  ├─╴text/plain
1176	   K  └─╴text/html

1178	   It should render headers taken from part "I".

1180	   Its cryptographic summary should indicates that the message was
1181	   signed and encrypted.  Each rendered header field found in "I" should
1182	   be compared against the header field of the same name from "F".  If
1183	   the value found in "F" matches the value found in "I", the header
1184	   field should be marked as "signed-only".  If no matching header field
1185	   was found in "F", or the value found did not match the value from
1186	   "I", the header field should be marked as "signed-and-encrypted".

1188	4.1.4.4.  Rendering a Message with Injected Headers

1190	   When the Cryptographic Payload does not have a "Content-Type" of
1191	   "message/rfc822" or "message/global", and the parameter "protected-
1192	   headers" is set to "v1", the values of the protected headers are
1193	   drawn from the headers of the Cryptographic Payload, and the body
1194	   that is rendered is the Cryptographic Payload itself.

1196	4.1.4.4.1.  Example Signed-only Message with Injected Headers

1198	   L └─╴application/pkcs7-mime; smime-type="signed-data"
1199	      ⇩ (unwraps to)
1200	   M  └┬╴multipart/alternative [Cryptographic Payload + Rendered Body]
1201	   N   ├─╴text/plain
1202	   O   └─╴text/html

1204	   The message body should be rendered the same way as this message:

1206	   M └┬╴multipart/alternative
1207	   N  ├─╴text/plain
1208	   O  └─╴text/html

1210	   It should render header fieldss taken from part "M".

1212	   Its cryptographic summary should indicates that the message was
1213	   signed and all rendered header fields were included in the signature.

1215	   The MUA SHOULD ignore header fields from part "L" for the purposes of
1216	   rendering.

1218	4.1.4.4.2.  Example Signed-and-Encrypted Message with Injected Headers

1220	   Consider a message with this structure, where the MUA is able to
1221	   validate the cryptographic signature:

1223	   P └─╴application/pkcs7-mime; smime-type="enveloped-data"
1224	      ↧ (decrypts to)
1225	   Q  └─╴application/pkcs7-mime; smime-type="signed-data"
1226	       ⇩ (unwraps to)
1227	   R   └┬╴multipart/alternative [Cryptographic Payload + Rendered Body]
1228	   S    ├─╴text/plain
1229	   T    └─╴text/html

1231	   The message body should be rendered the same way as this message:

1233	   R └┬╴multipart/alternative
1234	   S  ├─╴text/plain
1235	   T  └─╴text/html

1237	   It should render headers taken from part "R".

1239	   Its cryptographic summary should indicates that the message was
1240	   signed and encrypted.  As in Section 4.1.4.3.2, each rendered header
1241	   field found in "R" should be compared against the header field of the
1242	   same name from "P".  If the value found in "P" matches the value
1243	   found in "R", the header field should be marked as "signed-only".  If
1244	   no matching header field was found in "P", or the value found did not
1245	   match the value from "R", the header field should be marked as
1246	   "signed-and-encrypted".

1248	4.1.4.4.3.  Do Not Render Legacy Display Part

1250	   As described [I-D.autocrypt-lamps-protected-headers], a message with
1251	   cryptographic confidentiality protection MAY include a "Legacy
1252	   Display" part for backward-compatibility with legacy MUAs

1254	   The receiving MUA SHOULD avoid rendering the Legacy Display part to
1255	   the user at all, since it is aware of and can render the actual
1256	   Protected Headers.

1258	   If a Legacy Display part is detected, it and its enclosing
1259	   "multipart/mixed" wrapper should be discarded before rendering.

1261	4.1.4.4.3.1.  Legacy Display Detection Algorithm

1263	   A receiving MUA acting on a message SHOULD detect the presence of a
1264	   Legacy Display part and the corresponding "original body" with the
1265	   following simple algorithm:

1267	   *  Check that all of the following are true for the message:

1269	   *  The Cryptographic Envelope must contain an encrypting
1270	      Cryptographic Layer

1272	   *  The Cryptographic Payload must have a "Content-Type" of
1273	      "multipart/mixed"

1275	   *  The Cryptographic Payload must have exactly two subparts

1277	   *  The first subpart of the Cryptographic Payload must have a
1278	      "Content-Type" of "text/plain" or "text/rfc822-headers"

1280	   *  The first subpart of the Cryptographic Payload's "Content-Type"
1281	      must contain a property of "protected-headers", and its value must
1282	      be "v1".

1284	   *  If all of the above are true, then the first subpart is the Legacy
1285	      Display part, and the second subpart is the "original body".
1286	      Otherwise, the message does not have a Legacy Display part.

1288	4.1.4.4.3.2.  Legacy Display Example

1290	   Consider a message with this structure, where the MUA is able to
1291	   validate the cryptographic signature:

1293	   U └─╴application/pkcs7-mime; smime-type="enveloped-data"
1294	      ↧ (decrypts to)
1295	   V  └─╴application/pkcs7-mime; smime-type="signed-data"
1296	       ⇩ (unwraps to)
1297	   W   └┬╴multipart/mixed [Cryptographic Payload]
1298	   X    ├─╴text/plain [Legacy Display]
1299	   Y    └┬╴multipart/alternative [Rendered Body]
1300	   Z     ├─╴text/plain
1301	   A'    └─╴text/html

1303	   The message body should be rendered the same way as this message,
1304	   effectively hiding the Legacy Display part ("X") and its wrapper:

1306	   Y └┬╴multipart/alternative
1307	   Z  ├─╴text/plain
1308	   A' └─╴text/html

1310	   It should render headers taken from part "W", following the same
1311	   guidance as in Section 4.1.4.4.2 and Section 4.1.4.3.2 about the
1312	   cryptographic status of each rendered header field.

1314	4.1.4.5.  Affordances for Debugging and Troubleshooting

1316	   Note that advanced users of an MUA may need access to the original
1317	   message, for example to troubleshoot problems with the MUA itself, or
1318	   problems with the SMTP transport path taken by the message.

1320	   A MUA that applies these rendering guidelines SHOULD ensure that the
1321	   full original source of the message as it was received remains
1322	   available to such a user for debugging and troubleshooting.

1324	4.1.4.6.  Composing a Reply to an Encrypted Message with Protected
1325	          Headers

1327	   When composing a reply to an encrypted message with protected
1328	   headers, the MUA is acting both as a receiving MUA and as a sending
1329	   MUA.  Special guidance applies here, as things can go wrong in at
1330	   least two ways: leaking previously-confidential information, and
1331	   replying to the wrong party.

1333	4.1.4.6.1.  Avoid Leaking Encrypted Headers in Reply

1335	   As noted in [I-D.dkg-lamps-e2e-mail-guidance], an MUA in this
1336	   position MUST NOT leak previously-encrypted content in the clear in a
1337	   followup message.  The same is true for protected headers.

1339	   Values from any header field that was identified as either
1340	   "encrypted" or "signed-and-encrypted" based on the steps outlined
1341	   above MUST NOT be placed in cleartext output when generating a
1342	   message.

1344	   In particular, if "Subject" was encrypted, and it is copied into the
1345	   draft encrypted reply, the replying MUA MUST obfuscate the "Subject"
1346	   field in the cleartext header as described above.

1348	   [[ TODO: formally describe how a replying MUA should generate a
1349	   message-specific Header Protection policy based on the cryptographic
1350	   status of the headers of the incoming message ]]

1352	4.1.4.6.2.  Avoid Misdirected Replies to Encrypted Messages with
1353	            Protected Headers

1355	   When replying to a message, the Composing MUA typically decides who
1356	   to send the reply to based on:

1358	   *  the "Reply-To", "Mail-Followup-To", or "From" headers

1360	   *  optionally, the other "To" or "Cc" headers (if the user chose to
1361	      "reply all")

1363	   When a message has protected headers, the replying MUA MUST populate
1364	   the destination fields of the draft message using the protected
1365	   headers, and ignore any unprotected headers.

1367	   This mitigates against an attack where Mallory gets a copy of an
1368	   encrypted message from Alice to Bob, and then replays the message to
1369	   Bob with an additional "Cc" to Mallory's own e-mail address in the
1370	   message's outer header.

1372	   If Bob knows Mallory's certificate already, and he replies to such a
1373	   message without following the guidance in this section, it's likely
1374	   that his MUA will encrypt the cleartext of the message directly to
1375	   Mallory.

1377	4.1.4.7.  Implicitly-rendered Header Fields

1379	   While "From" and "To" and "Cc" and "Subject" and "Date" are often
1380	   explicitly rendered to the user, some header fields do affect message
1381	   display, without being explicitly rendered.

1383	   For example, "Message-Id", "References", and "In-Reply-To" header
1384	   fields may collectively be used to place a message in a "thread" or
1385	   series of messages.

1387	   In another example, Section 4.1.4.6.2 observes that the value of the
1388	   "Reply-To" field can influence the draft reply message.  So while the
1389	   user may never see the "Reply-To" header directly, it is implicitly
1390	   "rendered" when the user interacts with the message by replying to
1391	   it.

1393	   An MUA that depends on any implicitly-rendered header field in a
1394	   message with protected headers SHOULD use the value from the
1395	   protected header, and SHOULD NOT use any value found outside the
1396	   cryptographic protection.

1398	4.1.4.8.  Unprotected Headers Added in Transit

1400	   Some headers are legitimately added in transit, and could not have
1401	   been known to the sender at message composition time.

1403	   The most common of these headers are "Received" and "DKIM-Signature",
1404	   neither of which are typically rendered, either explicitly or
1405	   implicitly.

1407	   If a receiving MUA has specific knowledge about a given header field,
1408	   including that:

1410	   *  the header field would not have been known to the original sender,
1411	      and

1413	   *  the header field might be rendered explicitly or implicitly,
1414	   then the MUA MAY decide to operate on the value of that header field
1415	   from the unprotected header section, even though the message has
1416	   protected headers.

1418	   The MUA MAY prefer to verify that the headers in question have
1419	   additional transit-derived cryptographic protections (e.g., to test
1420	   whether they are covered by a valid "DKIM-Signature") before
1421	   rendering or acting on them.

1423	   Specific examples appear below.

1425	4.1.4.8.1.  Mailing list headers: List-* and Archived-At

1427	   If the message arrives through a mailing list, the list manager
1428	   itself may inject headers (most of which start with "List-") in the
1429	   message:

1431	   *  "List-Archive"

1433	   *  "List-Subscribe"

1435	   *  "List-Unsubscribe"

1437	   *  "List-Id"

1439	   *  "List-Help"

1441	   *  "List-Post"

1443	   *  "Archived-At"

1445	   For some MUAs, these headers are implicitly rendered, by providing
1446	   buttons for actions like "Subscribe", "View Archived Version", "Reply
1447	   List", "List Info", etc.

1449	   An MUA that receives a message with protected headers that contains
1450	   these header fields in the unprotected section, and that has reason
1451	   to believe the message is coming through a mailing list MAY decide to
1452	   render them to the user (explicitly or implicitly) even though they
1453	   are not protected.

1455	   FIXME: other examples of unprotected transit headers?

1457	4.2.  Backward Compatibility Use Cases
1458	4.2.1.  Receiving Side MIME-Conformant

1460	   This section applies to the case where the sending side (fully)
1461	   supports Header Protection as specified in this document, while the
1462	   receiving side does not support this specification, but is MIME-
1463	   conformant according to [RFC2045], ff. (cf.  Section 3.1.2 and
1464	   Section 3.1.2.1)

1466	   The sending side specification of the main use case (cf.
1467	   Section 4.1) MUST ensure that receiving sides can still recognize and
1468	   display or offer to display the encapsulated data in accordance with
1469	   its media type (cf.  [RFC2049], Section 2).  In particular, receiving
1470	   sides that do not support this specification, but are MIME-conformant
1471	   according to [RFC2045], ff. can still recognize and display the
1472	   Message intended for the user.

1474	   [[ TODO: Verify once solution is stable and update last sentence. ]]

1476	4.2.2.  Receiving Side Not MIME-Conformant

1478	   This section applies to cases where the sending side (fully) supports
1479	   Header Protection as specified in this document, while the receiving
1480	   side neither supports this specification *nor* is MIME-conformant
1481	   according to [RFC2045], ff. (cf.  Section 3.1.2 and Section 3.1.2.2).

1483	   [I-D.autocrypt-lamps-protected-headers] describes a possible way to
1484	   achieve backward compatibility with existing S/MIME (and PGP/MIME)
1485	   implementations that predate this specification and are not MIME-
1486	   conformant (Legacy Display) either.  It mainly focuses on email
1487	   clients that do not render emails which utilize header protection in
1488	   a user friendly manner, which may confuse the user.  While this has
1489	   been observed occasionally in PGP/MIME (cf.  [RFC3156]), the extent
1490	   of this problem with S/MIME implementations is still unclear.  (Note:
1491	   At this time, none of the samples in
1492	   [I-D.autocrypt-lamps-protected-headers] apply header protection as
1493	   specified in Section 3.1 of [RFC8551], which is wrapping as Media
1494	   Type "message/RFC822".)

1496	   Should serious backward compatibility issues with rendering at the
1497	   receiving side be discovered, the Legacy Display format described in
1498	   [I-D.autocrypt-lamps-protected-headers] may serve as a basis to
1499	   mitigate those issues (cf.  Section 4.2).

1501	   Another variant of backward compatibility has been implemented by pEp
1502	   [I-D.pep-email], i.e. pEp Email Format 1.0.  At this time pEp has
1503	   implemented this for PGP/MIME, but not yet S/MIME.

1505	5.  Usability Considerations

1507	   This section describes concerns for MUAs that are interested in easy
1508	   adoption of header protection by normal users.

1510	   While they are not protocol-level artifacts, these concerns motivate
1511	   the protocol features described in this document.

1513	   See also the Usability section in [I-D.dkg-lamps-e2e-mail-guidance].

1515	5.1.  Mixed Protections Within a Message Are Hard To Understand

1517	   [[ TODO ]]

1519	5.2.  Users Should Not Have To Choose a Header Confidentiality Policy

1521	   [[ TODO ]]

1523	6.  Security Considerations

1525	   [[ TODO ]]

1527	7.  Privacy Considerations

1529	   [[ TODO ]]

1531	8.  IANA Considerations

1533	   This document requests no action from IANA.

1535	   [[ RFC Editor: This section may be removed before publication. ]]

1537	9.  Acknowledgments

1539	   The authors would like to thank the following people who have
1540	   provided helpful comments and suggestions for this document: Berna
1541	   Alp, Bernhard E.  Reiter, Claudio Luck, David Wilson, Hernani
1542	   Marques, juga, Krista Bennett, Kelly Bristol, Lars Rohwedder, Robert
1543	   Williams, Russ Housley, Sofia Balicka, Steve Kille, Volker Birk, and
1544	   Wei Chuang.

1546	10.  References

1548	10.1.  Normative References

1550	   [I-D.dkg-lamps-e2e-mail-guidance]
1551	              Gillmor, D. K., "Guidance on End-to-End E-mail Security",
1552	              Work in Progress, Internet-Draft, draft-dkg-lamps-e2e-
1553	              mail-guidance-01, 22 February 2021,
1554	              <https://www.ietf.org/archive/id/draft-dkg-lamps-e2e-mail-
1555	              guidance-01.txt>.

1557	   [I-D.ietf-lamps-header-protection-requirements]
1558	              Melnikov, A. and B. Hoeneisen, "Problem Statement and
1559	              Requirements for Header Protection", Work in Progress,
1560	              Internet-Draft, draft-ietf-lamps-header-protection-
1561	              requirements-01, 29 October 2019,
1562	              <https://www.ietf.org/archive/id/draft-ietf-lamps-header-
1563	              protection-requirements-01.txt>.

1565	   [RFC2045]  Freed, N. and N. Borenstein, "Multipurpose Internet Mail
1566	              Extensions (MIME) Part One: Format of Internet Message
1567	              Bodies", RFC 2045, DOI 10.17487/RFC2045, November 1996,
1568	              <https://www.rfc-editor.org/info/rfc2045>.

1570	   [RFC2046]  Freed, N. and N. Borenstein, "Multipurpose Internet Mail
1571	              Extensions (MIME) Part Two: Media Types", RFC 2046,
1572	              DOI 10.17487/RFC2046, November 1996,
1573	              <https://www.rfc-editor.org/info/rfc2046>.

1575	   [RFC2049]  Freed, N. and N. Borenstein, "Multipurpose Internet Mail
1576	              Extensions (MIME) Part Five: Conformance Criteria and
1577	              Examples", RFC 2049, DOI 10.17487/RFC2049, November 1996,
1578	              <https://www.rfc-editor.org/info/rfc2049>.

1580	   [RFC2119]  Bradner, S., "Key words for use in RFCs to Indicate
1581	              Requirement Levels", BCP 14, RFC 2119,
1582	              DOI 10.17487/RFC2119, March 1997,
1583	              <https://www.rfc-editor.org/info/rfc2119>.

1585	   [RFC5322]  Resnick, P., Ed., "Internet Message Format", RFC 5322,
1586	              DOI 10.17487/RFC5322, October 2008,
1587	              <https://www.rfc-editor.org/info/rfc5322>.

1589	   [RFC8551]  Schaad, J., Ramsdell, B., and S. Turner, "Secure/
1590	              Multipurpose Internet Mail Extensions (S/MIME) Version 4.0
1591	              Message Specification", RFC 8551, DOI 10.17487/RFC8551,
1592	              April 2019, <https://www.rfc-editor.org/info/rfc8551>.

1594	10.2.  Informative References

1596	   [I-D.autocrypt-lamps-protected-headers]
1597	              Einarsson, B. R., juga, and D. K. Gillmor, "Protected
1598	              Headers for Cryptographic E-mail", Work in Progress,
1599	              Internet-Draft, draft-autocrypt-lamps-protected-headers-
1600	              02, 20 December 2019, <https://www.ietf.org/archive/id/
1601	              draft-autocrypt-lamps-protected-headers-02.txt>.

1603	   [I-D.ietf-lamps-samples]
1604	              Gillmor, D. K., "S/MIME Example Keys and Certificates",
1605	              Work in Progress, Internet-Draft, draft-ietf-lamps-
1606	              samples-04, 18 May 2021, <https://www.ietf.org/archive/id/
1607	              draft-ietf-lamps-samples-04.txt>.

1609	   [I-D.melnikov-iana-reg-forwarded]
1610	              Melnikov, A. and B. Hoeneisen, "IANA Registration of
1611	              Content-Type Header Field Parameter 'forwarded'", Work in
1612	              Progress, Internet-Draft, draft-melnikov-iana-reg-
1613	              forwarded-00, 4 November 2019,
1614	              <https://www.ietf.org/archive/id/draft-melnikov-iana-reg-
1615	              forwarded-00.txt>.

1617	   [I-D.pep-email]
1618	              Marques, H., "pretty Easy privacy (pEp): Email Formats and
1619	              Protocols", Work in Progress, Internet-Draft, draft-pep-
1620	              email-01, 2 November 2020,
1621	              <https://www.ietf.org/archive/id/draft-pep-email-01.txt>.

1623	   [pEp.mixnet]
1624	              pEp Foundation, "Mixnet", June 2020,
1625	              <https://dev.pep.foundation/Mixnet>.

1627	   [RFC3156]  Elkins, M., Del Torto, D., Levien, R., and T. Roessler,
1628	              "MIME Security with OpenPGP", RFC 3156,
1629	              DOI 10.17487/RFC3156, August 2001,
1630	              <https://www.rfc-editor.org/info/rfc3156>.

1632	   [RFC4949]  Shirey, R., "Internet Security Glossary, Version 2",
1633	              FYI 36, RFC 4949, DOI 10.17487/RFC4949, August 2007,
1634	              <https://www.rfc-editor.org/info/rfc4949>.

1636	   [RFC6376]  Crocker, D., Ed., Hansen, T., Ed., and M. Kucherawy, Ed.,
1637	              "DomainKeys Identified Mail (DKIM) Signatures", STD 76,
1638	              RFC 6376, DOI 10.17487/RFC6376, September 2011,
1639	              <https://www.rfc-editor.org/info/rfc6376>.

1641	   [RFC6409]  Gellens, R. and J. Klensin, "Message Submission for Mail",
1642	              STD 72, RFC 6409, DOI 10.17487/RFC6409, November 2011,
1643	              <https://www.rfc-editor.org/info/rfc6409>.

1645	   [RFC6532]  Yang, A., Steele, S., and N. Freed, "Internationalized
1646	              Email Headers", RFC 6532, DOI 10.17487/RFC6532, February
1647	              2012, <https://www.rfc-editor.org/info/rfc6532>.

1649	   [RFC7489]  Kucherawy, M., Ed. and E. Zwicky, Ed., "Domain-based
1650	              Message Authentication, Reporting, and Conformance
1651	              (DMARC)", RFC 7489, DOI 10.17487/RFC7489, March 2015,
1652	              <https://www.rfc-editor.org/info/rfc7489>.

1654	Appendix A.  Possible Problems with some Legacy Clients

1656	   When an e-mail message with end-to-end cryptographic protection is
1657	   received by a mail user agent, the user might experience many
1658	   different possible problematic interactions.  A message with header
1659	   protection may introduce new forms of user experience failure.

1661	   In this section, the authors enumerate different kinds of failures we
1662	   have observed when reviewing, rendering, and replying to messages
1663	   with different forms of header protection in different legacy MUAs.
1664	   Different legacy MUAs demonstrate different subsets of these
1665	   problems.

1667	   Hopefully, a non-legacy MUA would not exhibit any of these problems.
1668	   An implementer updating their legacy MUA to be compliant with this
1669	   specification should consider these concerns and try to avoid them.

1671	A.1.  Problems Reviewing signed+encrypted Messages in List View

1673	   *  Unprotected Subject, Date, From, To are visible

1675	   *  Threading is not visible

1677	A.2.  Problems when Rendering a signed+encrypted Message

1679	   *  Unprotected Subject is visible

1681	   *  Protected subject (on its own) is visible in the body

1683	   *  Protected subject, date, from, to visible in the body

1685	   *  User interaction needed to view whole message

1687	   *  User interaction needed to view message body

1689	   *  User interaction needed to view protected subject

1691	   *  Impossible to view protected subject
1692	   *  Nuisance alarms during user interaction

1694	   *  Impossible to view message body

1696	   *  Appears as a forwarded message

1698	   *  Appears as an attachment

1700	   *  Security indicators not visible

1702	   *  User has multiple different methods to Reply: (e.g. reply to
1703	      outer, reply to inner)

1705	   *  User sees english "Subject:" in body despite message itself being
1706	      in non-english

1708	   *  Security indicators do not identify protection status of header
1709	      fields

1711	   *  Headers in body render with local header fields (e.g. showing
1712	      "Betreff" instead of "Subject") and dates (TZ, locale)

1714	A.3.  Problems when Replying to a signed+encrypted Message

1716	   Note that the use case here is:

1718	   *  User views message, to the point where they can read it.

1720	   *  User then replies to message, and they are shown a message
1721	      composition window, which has some UI elements

1723	   *  If the MUA has multiple different methods to Reply: to a message,
1724	      each way may need to be evaluated separately

1726	   This section also uses the shorthand UI:x to mean "the UI element
1727	   that the user can edit that they think of as x."

1729	   *  protected subject is in UI:subject (and will leak)

1731	   *  protected subject is quoted in UI:body

1733	   *  protected subject is not anywhere in UI

1735	   *  message body is _not_ visible/quoted in UI:body

1737	   *  user cannot reply while viewing protected message
1738	   *  reply is not encrypted by default (but is for normal S/MIME
1739	      sign+enc messages)

1741	   *  unprotected From: is in UI:To

1743	   *  User's locale (lang, TZ) leaks in quoted body

1745	   *  Headers not protected (and in particular, Subject is not obscured)
1746	      by default

1748	A.4.  Problems Reviewing signed-only Messages in List View

1750	   *  Unprotected Subject, Date, From, To are visible

1752	   *  Threading is not visible

1754	A.5.  Problems when Rendering a signed-only Message

1756	   *  Unprotected Subject is visible

1758	   *  Protected subject (on its own) is visible in the body

1760	   *  Protected subject, date, from, to visible in the body

1762	   *  User interaction needed to view whole message

1764	   *  User interaction needed to view message body

1766	   *  User interaction needed to view protected subject

1768	   *  Impossible to view protected subject

1770	   *  Nuisance alarms during user interaction

1772	   *  Impossible to view message body

1774	   *  Appears as a forwarded message

1776	   *  Appears as an attachment

1778	   *  Security indicators not visible

1780	   *  Security indicators do not identify protection status of headers

1782	   *  User has multiple different methods to Reply: (e.g. reply to
1783	      outer, reply to inner)

1785	   *  Headers in body render with local header fields (e.g. showing
1786	      "Betreff" instead of "Subject") and dates (TZ, locale)

1788	A.6.  Problems when Replying to a signed-only Message

1790	   This uses the same use case(s) and shorthand as Appendix A.3.

1792	   *  Unprotected Subject: is in UI:subject

1794	   *  Protected Subject: is quoted in UI:body

1796	   *  Protected Subject: is not anywhere in UI

1798	   *  Message body is not visible/quoted in UI:body

1800	   *  User cannot reply while viewing protected message

1802	   *  Unprotected From: is in UI:To

1804	   *  User's locale (lang, TZ) leaks in quoted body

1806	Appendix B.  Test Vectors

1808	   This section contains sample messages using the different schemes
1809	   described in this document.  Each sample contains a MIME object, a
1810	   textual and diagrammatic view of its structure, and examples of how
1811	   an MUA might render it.

1813	   The cryptographic protections used in this document use the S/MIME
1814	   standard, and keying material and certificates come from
1815	   [I-D.ietf-lamps-samples].

1817	   These messages should be accessible to any IMAP client at
1818	   "imap://bob@header-protection.cmrg.net/" (any password should
1819	   authenticate to this read-only IMAP mailbox).

1821	   You can also download copies of these test vectors separately at
1822	   "https://header-protection.cmrg.net".

1824	   If any of the messages downloaded differ from those offered here,
1825	   this document is the canonical source.

1827	B.1.  Baseline Messages

1829	   These messages offer no header protection at all, and can be used as
1830	   a baseline.  They are provided in this document as a counterexample.
1831	   An MUA implementer can use these messages to verify that the reported
1832	   cryptographic summary of the message indicates no header protection.

1834	B.1.1.  No cryptographic protections over a simple message

1836	   This message uses no cryptographic protection at all.  Its body is a
1837	   text/plain message.

1839	   It has the following structure:

1841	   └─╴text/plain 152 bytes

1843	   Its contents are:

1845	   MIME-Version: 1.0
1846	   Content-Type: text/plain; charset="utf-8"
1847	   Content-Transfer-Encoding: 7bit
1848	   Subject: no-crypto
1849	   Message-ID: <no-crypto@lhp.example>
1850	   From: Alice <alice@smime.example>
1851	   To: Bob <bob@smime.example>
1852	   Date: Sat, 20 Feb 2021 10:00:02 -0500

1854	   This is the no-crypto message.

1856	   This message uses no cryptographic protection at all.  Its body is a
1857	   text/plain message.

1859	   --
1860	   Alice
1861	   alice@smime.example

1863	B.1.2.  S/MIME signed-only signedData over a simple message, No Header
1864	        Protection

1866	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
1867	   payload is a text/plain message.  It uses no header protection.

1869	   It has the following structure:

1871	   └─╴application/pkcs7-mime [smime.p7m] 3852 bytes
1872	    ⇩ (unwraps to)
1873	    └─╴text/plain 204 bytes

1875	   Its contents are:

1877	   Content-Transfer-Encoding: base64
1878	   Content-Type: application/pkcs7-mime; name="smime.p7m";
1879	    smime-type="signed-data"
1880	   Subject: smime-one-part
1881	   Message-ID: <smime-one-part@lhp.example>
1882	   From: Alice <alice@smime.example>
1883	   To: Bob <bob@smime.example>
1884	   Date: Sat, 20 Feb 2021 10:01:02 -0500

1886	   MIILFwYJKoZIhvcNAQcCoIILCDCCCwQCAQExDTALBglghkgBZQMEAgEwggFABgkq
1887	   hkiG9w0BBwGgggExBIIBLU1JTUUtVmVyc2lvbjogMS4wDQpDb250ZW50LVR5cGU6
1888	   IHRleHQvcGxhaW47IGNoYXJzZXQ9InV0Zi04Ig0KQ29udGVudC1UcmFuc2Zlci1F
1889	   bmNvZGluZzogN2JpdA0KDQpUaGlzIGlzIHRoZSBzbWltZS1vbmUtcGFydCBtZXNz
1890	   YWdlLg0KDQpUaGlzIGlzIGEgc2lnbmVkLW9ubHkgUy9NSU1FIG1lc3NhZ2Ugdmlh
1891	   IFBLQ1MjNyBzaWduZWREYXRhLiAgVGhlDQpwYXlsb2FkIGlzIGEgdGV4dC9wbGFp
1892	   biBtZXNzYWdlLiBJdCB1c2VzIG5vIGhlYWRlciBwcm90ZWN0aW9uLg0KDQotLSAN
1893	   CkFsaWNlDQphbGljZUBzbWltZS5leGFtcGxlDQqgggemMIIDzzCCAregAwIBAgIT
1894	   Dy0lvRE5l0rOQlSHoe49NAaKtDANBgkqhkiG9w0BAQ0FADBVMQ0wCwYDVQQKEwRJ
1895	   RVRGMREwDwYDVQQLEwhMQU1QUyBXRzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJT
1896	   QSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAgFw0xOTExMjAwNjU0MThaGA8yMDUy
1897	   MDkyNzA2NTQxOFowOzENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
1898	   FzAVBgNVBAMTDkFsaWNlIExvdmVsYWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
1899	   MIIBCgKCAQEAmpUp+ovBouOP6AFQJ+RpwpODxxzY60n1lJ53pTeNSiJlWkwtw/cx
1900	   Qq0t4uD2vWYB8gOUH/CVt2Zp1c+auzPKJ2Zu5mY6kHm+hVB+IthjLeI7Htg6rNeu
1901	   Xq50/TuTSxX5R1I1EXGt8p6hAQVeA5oZ2afHg4b97enV8gozR0/Nkug4AkXmbk7T
1902	   HNc8vvjMUJanZ/VmS4TgDqXjWShplcI3lcvvBZMswt41/0HJvmSwqpS6oQcAx3We
1903	   ag0yCNj1V9V9yu/3DjcYbwW2lJf5NbMHbM1LY4X5chWfNEbkN6hQury/zxnlsukg
1904	   n+fHbqvwDhJLAgFpW/jA/EB/WI+whUpqtQIDAQABo4GvMIGsMAwGA1UdEwEB/wQC
1905	   MAAwFwYDVR0gBBAwDjAMBgpghkgBZQMCATABMB4GA1UdEQQXMBWBE2FsaWNlQHNt
1906	   aW1lLmV4YW1wbGUwEwYDVR0lBAwwCgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgUg
1907	   MB0GA1UdDgQWBBSiU0HVRDyAKRV8ASPw546vzfN3DzAfBgNVHSMEGDAWgBSRMI58
1908	   BxcMp/EJKGU2GmccaHb0WTANBgkqhkiG9w0BAQ0FAAOCAQEAgUl4oJyxMpwWpAyl
1909	   OvK6NEbMl1gD5H14EC4Muxq1u0q2XgXOSBHI6DfX/4LDsfx7fSIus8gWVY3WqMeu
1910	   OA7IizkBD+GDEu8uKveERRXZncxGwy2MfbH1Ib3U8QzTjqB8+dz2AwYeMxODWq9o
1911	   pwtA/lTOkRg8uuivZfg/m5fFo/QshlHNaaTDVEXsU4Ps98Hm/3gznbvhdjFbZbi4
1912	   oZ3tAadRlE5K9JiQaJYOnUmGpfB8PPwDR6chMZeegSQAW++OIKqHrg/WEh4yiuPf
1913	   qmAvX2hZkPpivNJYdTPUXTSO7K459CyqbqG+sNOo2kc1nTXl85RHNrVKQK+L0YWY
1914	   1Q+hWDCCA88wggK3oAMCAQICEzdBBXntdX9CqaJcOvT4as6aqdcwDQYJKoZIhvcN
1915	   AQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNV
1916	   BAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwIBcN
1917	   MTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoTBElFVEYx
1918	   ETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFjZTCCASIw
1919	   DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALT0iehYOBY+TZp/T5K2KNI05Hwr
1920	   +E3wP6XTvyi6WWyTgBK9LCOwI2juwdRrjFBSXkk7pWpjXwsA3A5GOtz0FpfgyC7O
1921	   xsVcF7q4WHWZWleYXFKlQHJD73nQwXP968+A/3rBX7PhO0DBbZnfitOLPgPEwjTt
1922	   dg0VQQ6Wz+CRQ/YbHPKaw7aRphZO63dKvIKp4cQVtkWQHi6syTjGsgkLcLNau5LZ
1923	   DQUdsGV+SAo3nBdWCRYV+I65x8Kf4hCxqqmjV3d/2NKRu0BXnDe/N+iDz3X0zEoj
1924	   0fqXgq4SWcC0nsG1lyyXt1TL270I6ATKRGJWiQVCCpDtc0NT6vdJ45bCSzsCAwEA
1925	   AaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUDAgEwATAe
1926	   BgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoGCCsGAQUF
1927	   BwMEMA4GA1UdDwEB/wQEAwIGwDAdBgNVHQ4EFgQUu/bMsi0dBhIcl64papAQ0yBm
1928	   ZnMwHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZIhvcNAQEN
1929	   BQADggEBAHOJojanzqmgaSN3/gqSQ4cbbmdj/R40BEPr+gXT+xiidfZ2iLNwYyTn
1930	   euK6AChwKfnNvOFb8lV1iffRTF/KtmVEDMR/sYeqAH83KM5p3el2lVh4OHhyI0qN
1931	   uz5oShNaACSioQ23WxHGVy9vsdVfnbhsplrWg9NQ2WbpCmK+2oMh2oYl0Z/wvXMt
1932	   9cG6jbMvcdH4z0IOvg6mrYkKTM/RCGnumghxwYToj1OyD5Gs4D2IJCw+fX5ODxh5
1933	   2MbNRYXTus2ZPRPM8JXNQC4GWv4km3M4rKnJDd6hnoQ9rNeozIcBVyybQYjfrgg4
1934	   DRvw9Ksk22OH4ConlB8f7R7s1LM2cSYxggIAMIIB/AIBATBsMFUxDTALBgNVBAoT
1935	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMg
1936	   UlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhM3QQV57XV/QqmiXDr0+GrOmqnX
1937	   MAsGCWCGSAFlAwQCAaBpMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZI
1938	   hvcNAQkFMQ8XDTIxMDIyMDE1MDEwMlowLwYJKoZIhvcNAQkEMSIEIESMi+9/LUlD
1939	   fGjj+6U50VNLFxbzvyVJ0wzwnTS114DyMA0GCSqGSIb3DQEBAQUABIIBACJHeayB
1940	   UllC4GdcgdojTUjoeIy6UIbrSg/aKZgAkCB8Dwq0hdU10qiun6WKI/TxM5izpRvL
1941	   UsNBGmqknPBMFhvwX6KCrwFk0p0j5Y5DZqX30deiQiGTUv3NiwZGTrKJ3JkyymFO
1942	   HGbe5Thrq3inRLVfilEuIZewaJsnJhKfnEq9fS09icTJ5olPDAH6mZbW6hpYmU3F
1943	   KBk2qJNqJX6bo60rCogu3wXDj0wxnqEXmeNDH5/+L9UVZur+EWzviUc8Ldd/kP3L
1944	   DOO7ivs10bAWe8Tbw7NjuP8ZlVvzcvj3nXWzZzxh2ymDIOvyJA+t0LHQvsN/fbdW
1945	   fC6Pm51fEkabbmw=

1947	B.1.3.  S/MIME signed-only multipart/signed over a simple message, No
1948	        Header Protection

1950	   This is a signed-only S/MIME message via PKCS#7 detached signature
1951	   (multipart/signed).  The payload is a text/plain message.  It uses no
1952	   header protection.

1954	   It has the following structure:

1956	   └┬╴multipart/signed 4156 bytes
1957	    ├─╴text/plain 224 bytes
1958	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

1960	   Its contents are:

1962	   MIME-Version: 1.0
1963	   Content-Type: multipart/signed;
1964	    protocol="application/pkcs7-signature"; boundary="76c";
1965	    micalg="sha-256"
1966	   Subject: smime-multipart
1967	   Message-ID: <smime-multipart@lhp.example>
1968	   From: Alice <alice@smime.example>
1969	   To: Bob <bob@smime.example>
1970	   Date: Sat, 20 Feb 2021 10:02:02 -0500

1972	   --76c
1973	   MIME-Version: 1.0
1974	   Content-Type: text/plain; charset="utf-8"
1975	   Content-Transfer-Encoding: 7bit

1977	   This is the smime-multipart message.

1979	   This is a signed-only S/MIME message via PKCS#7 detached signature
1980	   (multipart/signed).  The payload is a text/plain message. It uses no
1981	   header protection.

1983	   --
1984	   Alice
1985	   alice@smime.example

1987	   --76c
1988	   Content-Transfer-Encoding: base64
1989	   Content-Type: application/pkcs7-signature; name="smime.p7s"

1991	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
1992	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
1993	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
1994	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
1995	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
1996	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
1997	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
1998	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
1999	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
2000	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
2001	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
2002	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
2003	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
2004	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
2005	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
2006	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
2007	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
2008	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
2009	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
2010	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
2011	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
2012	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
2013	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
2014	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
2015	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
2016	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
2017	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
2018	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
2019	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
2020	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
2021	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
2022	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
2023	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
2024	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
2025	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
2026	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
2027	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
2028	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
2029	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
2030	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
2031	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
2032	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
2033	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
2034	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
2035	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
2036	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNTAyMDJa
2037	   MC8GCSqGSIb3DQEJBDEiBCBBQlio2vX/u19qayJ1Cm1QL6VZY0fBeGz9o7nEzCRO
2038	   +zANBgkqhkiG9w0BAQEFAASCAQARvwKQYbbPuADZ7KqyO9LuESdEfBxOF80sHKNz
2039	   UXrHZo8JdKaKxr/cTAuzBvoTxsmqvzP3ItCBm+javqX22+tHTpqisz5jkoiWyNVS
2040	   e+F++YX8mXokgQpY26mZ+15Mv8pYYhptn6zdkRU1+QOwwlDCc6ykkCZeXyc+Hf7c
2041	   xqM6SqPMQ+G7wIF6P2jHCId8Xyl7sdbL0i6PjotesHU+7nQsCjgI/iVR/ubWUdFX
2042	   CTg8HVy4p683V3Y9DoRNP4MlUdmon8JasHDvA0240JcXxhJn1zEYa4gOnwgu3kh9
2043	   3Y+NeucYCT0bXCBq2RLVQSpdNZfScXKL9QvZ3FtB0r6Bmtky

2045	   --76c--

2047	B.1.4.  S/MIME encrypted and signed over a simple message, No Header
2048	        Protection

2050	   This is a encrypted and signed S/MIME message using PKCS#7
2051	   envelopedData around signedData.  The payload is a text/plain
2052	   message.  It uses no header protection.

2054	   It has the following structure:

2056	   └─╴application/pkcs7-mime [smime.p7m] 6720 bytes
2057	    ↧ (decrypts to)
2058	    └─╴application/pkcs7-mime [smime.p7m] 3960 bytes
2059	     ⇩ (unwraps to)
2060	     └─╴text/plain 239 bytes

2062	   Its contents are:

2064	   Content-Transfer-Encoding: base64
2065	   Content-Type: application/pkcs7-mime; name="smime.p7m";
2066	    smime-type="enveloped-data"
2067	   Subject: smime-enc-signed
2068	   Message-ID: <smime-enc-signed@lhp.example>
2069	   From: Alice <alice@smime.example>
2070	   To: Bob <bob@smime.example>
2071	   Date: Sat, 20 Feb 2021 10:03:02 -0500

2073	   MIITXAYJKoZIhvcNAQcDoIITTTCCE0kCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
2074	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
2075	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
2076	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAE1K2Qo2Ln5O6L9qgFnOdvuAuXnh2dLiYWIt
2077	   x7B9W2VMQCtrxTipZfUe+Y4oV/Rxifp4gChJ2lCgt6A4hHyApD1yNqmR1pCT+ky6
2078	   jOJlr907Jzy9nIADEjaeKTIHePPWEWPiF3Otlrvg25NobNAE/dzcSgaS+SHsfPgu
2079	   vW6gA+lfzdoOKIWNVl1AJfbDRw8DeDi5n8ZPLkb/gYteBpY5mC2Iu8TebZ5qstQH
2080	   i8G01K4xb6E7eMdXKx+gyDxox1P79E4q3dCKwYPK/C6B3AaY52WW55js9mb79OH5
2081	   6/XvIEez58lV4a9d0iY7g+aoARyTPE9Z79miRYT0aagyYhblb14wggGEAgEAMGww
2082	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
2083	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
2084	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAWANrcGMnwYd7bg/TA9Wagm3q
2085	   dbiZLg3NxHQZRLRySCFHt5wGkq1XcD7bWYwF0hSKiI4AJxJapfGUDEpDk1FYBU4r
2086	   9zS/elrwCnhwpO9sLfbJPRVvMTgTZuCOaY25ovZWvWtkS9MRDH+WoM5SNTf4vHHu
2087	   kjcSx5hafbhyiC5pPLLTRyIjObYgKraIMBXix7XKtSR/G7uD+HSIzhYUXqY0q2uQ
2088	   w7XiijbRd4bq9zqBbXriYyhFdo/JsBnYckjmmKcTLp6DfYTEzILKBJOepEiY5X4J
2089	   0JPeFyGxs7WSKDp1JZLZtjbMwvtEuUAwZ+iXDr1x/rQhq7mZIWqIbG6QpxYX6zCC
2090	   EC4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEBDwXZa6LrdPCgLubNCkd3qAghAA
2091	   kaaty8gkFo4+y5iWeOqsbZ9paegmFbiGsTQxrta64sj8znKQfQKz6/g055IcDixI
2092	   STqxPMV+w01jv6+Azoy9qJP29UTL0mXAP0LDionSBTn/4VAwBMSUDRus6jkq045K
2093	   UXxmIpcO3SeOnpCLksyij6QlnAO24SbKsBex7R5EXYXU7W1G/PCoz9SWlYrQuXJ9
2094	   cU5ONWldvYE4/WeD1m3pjv3XKLNEWiaUIVolKFRhR4v+FUedn6dlVYDgfJrH8xDC
2095	   kW9gQvI1ZBbnBOr/zkoDhMMKtTgTvmzLIauDEi2RWKzlvwCattvIkkrjt+SwWpvr
2096	   oc6i58XfCx/d0YHPp5AIU8pslawDtQXe5ecACY9J/K0OgX1G51HI+O2XMC9S9QYn
2097	   YPxA+CsRxmhKHzQv9au48aQwmLBkhkXZq7FCve8GTnCLdU5AmtP6ff59lga7+hfb
2098	   VSz+jSodBL1WnlIKw/lrBvXFem/A4mtY/W9y9EVhGyRFuhoZDCiGRo/bPsyDNZBS
2099	   WAsjHLI3NJeUgHFFcEn5xOwDmhmJOehzs712pqrzMd0VrT4hALvvhSGB7nybL5dR
2100	   pabbxtpBgqzlwu6eoX1jSh5bF8/RsAJ81dxvn8AWcFc8q81YfYOzjqf7ZnuumT10
2101	   18/rdepv/nfyiYCRhr2Eekj0F3bXjlTG1oeCNTuUPcNHVX6+hQ7FY2CJm9JCqNhL
2102	   7whKhq+kKJuPugHb1e5d2rJFkNHrMIJAga8QqKy9eqKct4gW5FFT70wyB15YToJb
2103	   qVxb3BEZ6u1shpZ9IGVzS0Jmvke+Ptze86it00fQIJWfrFqoag83GcCuQEyYEcIc
2104	   HXWFsZIbQ1UD2+YSWBOzRBUUuJ3U66w3J5oDAYfYnieFNPuP0dhaAMsu7QQfLSZa
2105	   T/GbSibQoFXcDx6MaZ5fbZ1iduvoZZfERNMe5vN+q/w9Lx5e8hf1EZmTNMuoRn9O
2106	   wfT/wuM06Cc8FR2Ft7QLu80jqePQ6tAYwvA5QOvpBN9A82DUWz0I9eRDl9+S8Z+I
2107	   QgjbPcZ0ACFqLCfbT6uzrKp2vGSrA+IcS89+qBB+sKbtWPgTrK7QlJgc7NpHGyhZ
2108	   BltAVXv4fPngqn+gSqGuerD/xmvszHMIIHq6Q4ADxbxDE4R0yoV2afXUVyAMo85Q
2109	   eNG5WJ83Z12msJqx1+1EUzzoQXxvrZHm0bMziCjV/P1cu/ChtmuemopRxkplLbJv
2110	   /mChRaKv9TotDy2Dwzf5N5Xy58gb/0ktMXMdGpYts9awYc742TCscrTqutBAXtNM
2111	   dXA0OyelkVHBBCRcoUEWWhUGQKYmK0NQIpxduJYcLLhkMI+2QfyfdkODplEtXbX9
2112	   LaZhPRi9osmmF0fnSkmt2mtD+W8uxBF7espDkUsidb8NiUtzBrSqTADQUIuAw5xG
2113	   322wFZ0DtpFM6nHpbYBfIGlIR4LyqTzyaSRJtMkMiDFgnMWrNF6pMsToo+4GbARO
2114	   MWM9mq4XSMrKAinqu7T8UGWOt9bMfMJrTrpfETgQCL4vur9nI1CbgcPWW14U2oBW
2115	   2lT1duS0o2eRpeGA93U6zF7BbCmlEqPK45Qmm78NwMcI9i4GgHSG2ssEn8URmv0L
2116	   qp9+UmkhvLT26dZtkB0wPMEVOIWx3e+F34eVzno5jAbiJxuUIdDPDwQg7xtrcLif
2117	   lRsaiGx7MtWsP6paqGBrYdHcXNt8P8k2ywNqRicTSThG0P09CNDWFwNaKa+9Ia7a
2118	   EnWoFmNoNm/IUH+wbRQUnT7oh0qU2mxdgMnygDhEELe1+4tGCTAPTbxSU3gxQyv0
2119	   w686bzZP9uGLoRfivmXKm73Wu0HtUefT1rNdPsJDfqEfo8mEY4EDMh+Fa50S9Yj6
2120	   SGe8X9jDaTEJLd+yL7xEvdEQ7FxHbqo7twj/g4Im0OeG2ngEchWlYcuOrlgog4bv
2121	   kWwcMhOCcQ/9242sgCTG/ATAV1ix0Z16/WCzzY60Zxk1eAlP3Ar9NiQHGuVClR0o
2122	   QxhlP/1KvyVMAQTtuEposNLUdXMydq8lVErFuopYej3NJOPE7eA4BeIXNyrhxqfX
2123	   j23tfb3/C4uHEmgjnfW1LZIjwWrOjoEZa2+lG+Si7YQWLLJWFNqEEH2rpxQMnwvx
2124	   282dIYpyY14PDLLN5nMltY8MeMaNp6Q8rOwTDozmmZ9RONzbKJL3FxSVENKgdJTf
2125	   v+gpLOvXou6qDdidAqxErGM0j68g8Rnsdw7Lj3FQH7JjLZiR3EQgGxRKDwTsV1rW
2126	   ODtsNyKBtHDBOn/zOFTmgTVpYol2x/kV22C1Wn9ZArHFgZDxDyDjjJqxJwHlgVdE
2127	   J+bUZ1C5DatXxvjpFhrTpUz1dvsTsq48cmepEiEnqYO/33uU7KIqjBxY527dagnR
2128	   q01ntVycY4wiLKjuJHHHy/b25ORyxS/x6nVYJsoRNXsvYCZ1zqHC7uh9eQStAyj6
2129	   zotbPet++u2REXKSwzhI+6mTCrFkfeHxt3BqTPAxHPxsZAmquayksNs8e94G5LnD
2130	   VLAbdtwuIdeuz3rDWObafnaOVXD8vzjoMpiZcYKubb9pdFQIdxpYXPyqwz2f+c8g
2131	   9VnLXajpwqByOPtLT5knKWMbsXJ5Gc8sNIGl1blYnj5ao+z6JNV2qqWA8dukpM5Q
2132	   /KwmBvR9/RijeIEPGoqRcwUi92fuvVJV7oZf2ZCCGMLw8W4pSrzfs/xdOJslrTgN
2133	   trDrAOKlraCKJQ5zHwZyg+c65KUe+5voj4WTu27g/vWTmPjF70htA+UIYcsNVYU9
2134	   yGuznj6x/2EV7rLsUTpMqMFN0s4dQl4Hhfr4gaoDROb7bOdkVtWAvwP4c18wlJA9
2135	   08X9kQNPqID0M0NOruz8JO8gyTIxyAmopnEDREvMT7JCGuwPM9YRE64pVPOZ1AZm
2136	   STC7LY11zMhZL+RvhwbWqjkKeKN3hQM4/45BHGFVgg6k5iobcv78lZHWO28SWila
2137	   dEgJLSobB9ieOTfrWqBrBBHjpaDwuyjS+QwjsF8SFLdRD5TY1IugUvW5Swnucikh
2138	   X1rK/FaRRQJGzUesrkN06LlpFiiRyW9nuDjdpaKV4P9pkEjHmtN3KF95LjJnXs+Z
2139	   07cF0sX2K7FY4GCfFxGPSsqbcR/6zAFHVPjgPGDH51yOTe05RWLhgGEWqt7mIeSD
2140	   ppJdnY1LDFK0AFbXAFnjxhNwlfJiLB4vdsFqxGSYXfAjns8vZR62PgSExxUMxrO6
2141	   P7oIAYisiU+9XuG40ok8RFCZgN2Qdy5oNDbYow8x3XR4BQu8+2sT9nLvJosjYNhT
2142	   8yHMhhAbJl5VWK1EaB2gMxmAISiCCkQQ4YlStMc/LUkl8XOdQmf9SF0L1puuGEpM
2143	   V3BhxNxCReiXA8ulMtnytw++lhl3qapALVu5OsJBQ2sqrhc7VhZTfiRQHr5s/i97
2144	   OrBb1ZHv48NblW+tsS0Vl+jW/7AMUvQO+j7wYDI8Q2GplujJ08iHxZw/YDjR+up4
2145	   bmQjK3xySaCi9Ef58KYOj0Y8ITvS61GMn0bCkL23UGNwISo2gPEcStdOksZtlvGX
2146	   X37skWsFPD3M85DqQeckjv3PFzGQL7ZZLUQmmYqwG43DKrDJSZld7VYHmTY0rrMj
2147	   gNo6iqzI+6Ygi81y14ZWTVeOFIH9tOKvjtuJz+90Qi9vEbDqF43+hiyWVg/aOke8
2148	   4TGy7BZp5j/+SCr78/LvTko/5gafEymhaQmmsR7hskt3AhjfTyUfq/cAtuIm39U2
2149	   MmXRwPdrzWASGy/lF0QnrgB0T85+ID58J9VaP78mI/BtKO20wWMTjbabR7J3Rn+8
2150	   KW4H6eewVWBqghCnsJQuqibbZeFDjFgJ9kIaTvGD0TBehpp9TidmppXM4Dl4J+V/
2151	   u7dSL257DzlKkk42gK4Cs0P1dZwe888KIABF38AZ8dnWtD492eYxA9We6NB2ru1o
2152	   K59oloZdn+slcF3DLfvVpyfkZ8o3EVgAPVXiDfHWuVp1gL8Cv5ahVlk9BJSD1CgC
2153	   Vwsm01V1E7QeNh3gNdQI88tu4wh5SVFk4U2cYI+dDMFUVDMzrUI3tKvWXNZOzn4V
2154	   Ce6Eu2JPIcCOYUwDHpsq5aj9BPKBguhQQybDpAAkgSZLwhzAD7rEvo8TU8gzZ2KZ
2155	   zH506GoFtU4oNinnrvyHX96/bG/VlizOE9YtQNyEfxxSOBsZD9jgd1pG4j/FDF1Z
2156	   Ib+KUUo8Y7GKlOu+l+/WIVcp0nIsyIC4zGdM6DThCT6nGrhKboduTgF5NRH/Hf03
2157	   Vrbj/ZarK0t1gzbzPgxotZiUfCVEuav9AVqxA2Zq5afs6bRfohqyFqwKHiYV19C4
2158	   m00v4HisEFDGG3f5+Zj/x6tnX9QxR81DOomUooh8aYs/iAz0nrKyux6GMHSlj8db
2159	   UbvQ+1VvNE3Fj0xu46HkKzGtFqpgXxzDLkE9e7NJ+Hw4tbOLfINQ0qS7iTcjMbwg
2160	   snexBuL6rf8NF28EdlqQzCPLZVhnOd1+KKJS7V/M8u/R/y22+IXzFSA2TlxhId09
2161	   IduZ3ByCz2HFJfVj7SameC3KANbRnBkdud1hclIBDS5Hhpqk4M8i3zmZRZWgLyjR
2162	   edtSaHuJAlHiKgAtQVeIzlL6Ilw3jVoHL0vOdISoQpoWWhejB9f47KRmUbdb5Pxb
2163	   Ot2ylXJKYFfoCQUs1xkNAyynSJAJ97yEAZm7aDmE4bjs33pz4L3nYxO/KUY6EB/E
2164	   eGgPk3Cdvt2JYY5BuFoxXYRKQgZ06c9mXzavJJXXWQUUB5k2QG0uyKPmwNr2sdJQ
2165	   A8ehhmgGws+7qXwZQEcNC3W0vmiGOBDYP3JVJPiNLFVQN9k8ClE7+0emFn2UcNyG
2166	   294hO1G0uBPAbCdhAyDnNpVj5RS0EgY647agQHyp/gjSt4XeoaCIKaalb4iGpT+C
2167	   4r2BqRcVUCdE3MRQFqiT6ccm+8h8eA7xtMB8c9OgUTEIKk/WSc0DUsCJB62Plgtj
2168	   KJ4xXQXTzzUCDMnACFp6mBTd3g2ZbnfHKSyJdAvPigVbA+Qhy2eWUTYpi6yjTIyT
2169	   eaQ2qafGppn85oLFkdgdmE3Ty1UxOpAsqLyNlNAa6YT3D/0Jl3VnfhFKlmywWIG6
2170	   Z2SLd0r07xoBUuAKHkFUuRauGYbVbU/Frmdylv6I9DhCqV/XEDa/tHOa/LWugvb+
2171	   x5A+g+kZiTiWRRLZYHungyjquAf/zeJsPYRoQEi4KHAQ30xCDk/dhWdhDBnUXT8P
2172	   hzMj8VN3yjQA1vMNA5uefj2/+MIkLkz6+XPl/lJNLFHYi+EERgxJ2mFm/s02h9NF
2173	   NhyWBsBtsEwi+rVbfcRRBpVjR5MwUohNHMGxwgj7rzvUkDe47ueXDP74j+JclO68
2174	   r4jQ3sob123uSYryDHBZxZSbwjFU2ufE8W+XL/NGwTw04alHZfKsH4x4ZbGqwunf
2175	   U4lkcOY/ijmuhL5mn2YYUE6w4oywZuLx5WCv2oAvQawMmNP9AeI1jcV9JiKa+8y0
2176	   sAa1LzD78Dg4FKO8t3d13Q==

2178	B.1.5.  No cryptographic protections over a complex message

2180	   This message uses no cryptographic protection at all.  Its body is a
2181	   multipart/alternative message with an inline image/png attachment.

2183	   It has the following structure:

2185	   └┬╴multipart/mixed 1357 bytes
2186	    ├┬╴multipart/alternative 780 bytes
2187	    │├─╴text/plain 206 bytes
2188	    │└─╴text/html 290 bytes
2189	    └─╴image/png inline 232 bytes

2191	   Its contents are:

2193	   MIME-Version: 1.0
2194	   Content-Type: multipart/mixed; boundary="0f4"
2195	   Subject: no-crypto-complex
2196	   Message-ID: <no-crypto-complex@lhp.example>
2197	   From: Alice <alice@smime.example>
2198	   To: Bob <bob@smime.example>
2199	   Date: Sat, 20 Feb 2021 12:00:02 -0500

2201	   --0f4
2202	   MIME-Version: 1.0
2203	   Content-Type: multipart/alternative; boundary="384"

2205	   --384
2206	   Content-Type: text/plain; charset="us-ascii"
2207	   MIME-Version: 1.0
2208	   Content-Transfer-Encoding: 7bit

2210	   This is the no-crypto-complex message.

2212	   This message uses no cryptographic protection at all.  Its body is a
2213	   multipart/alternative message with an inline image/png attachment.

2215	   --
2216	   Alice
2217	   alice@smime.example
2218	   --384
2219	   Content-Type: text/html; charset="us-ascii"
2220	   MIME-Version: 1.0
2221	   Content-Transfer-Encoding: 7bit

2223	   <html><head><title></title></head><body>
2224	   <p>This is the <b>no-crypto-complex</b> message.</p>
2225	   <p>This message uses no cryptographic protection at all.  Its body is a
2226	   multipart/alternative message with an inline image/png attachment.</p>
2227	   <p><tt>-- <br/>Alice<br/>alice@smime.example</tt></p>
2228	   --384--

2230	   --0f4
2231	   Content-Type: image/png
2232	   Content-Transfer-Encoding: base64
2233	   Content-Disposition: inline

2235	   iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAAcElEQVR42uVTOxbA
2236	   MAgS739nO3TpRw20dqpbfARQEjOywiwYnCtkDKnbcLk66sqlT+zt9cidkE+6KwkZ
2237	   sgrzfcqVMpL2jo0447gYDpeArk+OnJHkIhAfTPRicihAf5YJrw7vjv0ZWRWM/uli
2238	   vdPf1QZ2kDD9xppd8wAAAABJRU5ErkJggg==

2240	   --0f4--

2242	B.1.6.  S/MIME signed-only signedData over a complex message, No Header
2243	        Protection

2245	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
2246	   payload is a multipart/alternative message with an inline image/png
2247	   attachment.  It uses no header protection.

2249	   It has the following structure:

2251	   └─╴application/pkcs7-mime [smime.p7m] 5229 bytes
2252	    ⇩ (unwraps to)
2253	    └┬╴multipart/mixed 1274 bytes
2254	     ├┬╴multipart/alternative 868 bytes
2255	     │├─╴text/plain 258 bytes
2256	     │└─╴text/html 339 bytes
2257	     └─╴image/png inline 236 bytes

2259	   Its contents are:

2261	   Content-Transfer-Encoding: base64
2262	   Content-Type: application/pkcs7-mime; name="smime.p7m";
2263	    smime-type="signed-data"
2264	   Subject: smime-one-part-complex
2265	   Message-ID: <smime-one-part-complex@lhp.example>
2266	   From: Alice <alice@smime.example>
2267	   To: Bob <bob@smime.example>
2268	   Date: Sat, 20 Feb 2021 12:01:02 -0500

2270	   MIIPEQYJKoZIhvcNAQcCoIIPAjCCDv4CAQExDTALBglghkgBZQMEAgEwggU6Bgkq
2271	   hkiG9w0BBwGgggUrBIIFJ01JTUUtVmVyc2lvbjogMS4wDQpDb250ZW50LVR5cGU6
2272	   IG11bHRpcGFydC9taXhlZDsgYm91bmRhcnk9ImM4YiINCg0KLS1jOGINCk1JTUUt
2273	   VmVyc2lvbjogMS4wDQpDb250ZW50LVR5cGU6IG11bHRpcGFydC9hbHRlcm5hdGl2
2274	   ZTsgYm91bmRhcnk9ImM4MSINCg0KLS1jODENCkNvbnRlbnQtVHlwZTogdGV4dC9w
2275	   bGFpbjsgY2hhcnNldD0idXMtYXNjaWkiDQpNSU1FLVZlcnNpb246IDEuMA0KQ29u
2276	   dGVudC1UcmFuc2Zlci1FbmNvZGluZzogN2JpdA0KDQpUaGlzIGlzIHRoZSBzbWlt
2277	   ZS1vbmUtcGFydC1jb21wbGV4IG1lc3NhZ2UuDQoNClRoaXMgaXMgYSBzaWduZWQt
2278	   b25seSBTL01JTUUgbWVzc2FnZSB2aWEgUEtDUyM3IHNpZ25lZERhdGEuICBUaGUN
2279	   CnBheWxvYWQgaXMgYSBtdWx0aXBhcnQvYWx0ZXJuYXRpdmUgbWVzc2FnZSB3aXRo
2280	   IGFuIGlubGluZSBpbWFnZS9wbmcNCmF0dGFjaG1lbnQuIEl0IHVzZXMgbm8gaGVh
2281	   ZGVyIHByb3RlY3Rpb24uDQoNCi0tIA0KQWxpY2UNCmFsaWNlQHNtaW1lLmV4YW1w
2282	   bGUNCi0tYzgxDQpDb250ZW50LVR5cGU6IHRleHQvaHRtbDsgY2hhcnNldD0idXMt
2283	   YXNjaWkiDQpNSU1FLVZlcnNpb246IDEuMA0KQ29udGVudC1UcmFuc2Zlci1FbmNv
2284	   ZGluZzogN2JpdA0KDQo8aHRtbD48aGVhZD48dGl0bGU+PC90aXRsZT48L2hlYWQ+
2285	   PGJvZHk+DQo8cD5UaGlzIGlzIHRoZSA8Yj5zbWltZS1vbmUtcGFydC1jb21wbGV4
2286	   PC9iPiBtZXNzYWdlLjwvcD4NCjxwPlRoaXMgaXMgYSBzaWduZWQtb25seSBTL01J
2287	   TUUgbWVzc2FnZSB2aWEgUEtDUyM3IHNpZ25lZERhdGEuICBUaGUNCnBheWxvYWQg
2288	   aXMgYSBtdWx0aXBhcnQvYWx0ZXJuYXRpdmUgbWVzc2FnZSB3aXRoIGFuIGlubGlu
2289	   ZSBpbWFnZS9wbmcNCmF0dGFjaG1lbnQuIEl0IHVzZXMgbm8gaGVhZGVyIHByb3Rl
2290	   Y3Rpb24uPC9wPg0KPHA+PHR0Pi0tIDxici8+QWxpY2U8YnIvPmFsaWNlQHNtaW1l
2291	   LmV4YW1wbGU8L3R0PjwvcD4NCi0tYzgxLS0NCg0KLS1jOGINCkNvbnRlbnQtVHlw
2292	   ZTogaW1hZ2UvcG5nDQpDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiBiYXNlNjQN
2293	   CkNvbnRlbnQtRGlzcG9zaXRpb246IGlubGluZQ0KDQppVkJPUncwS0dnb0FBQUFO
2294	   U1VoRVVnQUFBQlFBQUFBVUNBWUFBQUNOaVIwTkFBQUFjRWxFUVZSNDJ1VlRPeGJB
2295	   DQpNQWdTNzM5bk8zVHBSdzIwZHFwYmZBUlFFak95d2l3WW5DdGtES25iY0xrNjZz
2296	   cWxUK3p0OWNpZGtFKzZLd2taDQpzZ3J6ZmNxVk1wTDJqbzA0NDdnWURwZUFyaytP
2297	   bkpIa0loQWZUUFJpY2loQWY1WUpydzd2anYwWldSV00vdWxpDQp2ZFBmMVFaMmtE
2298	   RDl4cHBkOHdBQUFBQkpSVTVFcmtKZ2dnPT0NCg0KLS1jOGItLQ0KoIIHpjCCA88w
2299	   ggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJKoZIhvcNAQENBQAwVTEN
2300	   MAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNhbXBs
2301	   ZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwIBcNMTkxMTIwMDY1
2302	   NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoTBElFVEYxETAPBgNVBAsT
2303	   CExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFjZTCCASIwDQYJKoZIhvcN
2304	   AQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfkacKTg8cc2OtJ9ZSed6U3
2305	   jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrszyidmbuZmOpB5voVQfiLY
2306	   Yy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOaGdmnx4OG/e3p1fIKM0dP
2307	   zZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXCN5XL7wWTLMLeNf9Byb5k
2308	   sKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWzB2zNS2OF+XIVnzRG5Deo
2309	   ULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVKarUCAwEAAaOBrzCBrDAM
2310	   BgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUDAgEwATAeBgNVHREEFzAV
2311	   gRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoGCCsGAQUFBwMEMA4GA1Ud
2312	   DwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj8OeOr83zdw8wHwYDVR0j
2313	   BBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZIhvcNAQENBQADggEBAIFJ
2314	   eKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4FzkgRyOg31/+Cw7H8e30i
2315	   LrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMtjH2x9SG91PEM046gfPnc
2316	   9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZRzWmkw1RF7FOD7PfB5v94
2317	   M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8A0enITGXnoEkAFvvjiCq
2318	   h64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQsqm6hvrDTqNpHNZ015fOU
2319	   Rza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV57XV/QqmiXDr0+GrOmqnX
2320	   MA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYxETAPBgNVBAsTCExBTVBT
2321	   IFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENlcnRpZmljYXRpb24gQXV0
2322	   aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3MDY1NDE4WjA7MQ0wCwYD
2323	   VQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUGA1UEAxMOQWxpY2UgTG92
2324	   ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09InoWDgWPk2a
2325	   f0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHUa4xQUl5JO6VqY18LANwO
2326	   Rjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz/evPgP96wV+z4TtAwW2Z
2327	   34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3SryCqeHEFbZFkB4urMk4
2328	   xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQsaqpo1d3f9jSkbtAV5w3
2329	   vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgEykRiVokFQgqQ7XNDU+r3
2330	   SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAXBgNVHSAEEDAOMAwGCmCG
2331	   SAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUuZXhhbXBsZTATBgNVHSUE
2332	   DDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYDVR0OBBYEFLv2zLItHQYS
2333	   HJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn8QkoZTYaZxxodvRZMA0G
2334	   CSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOHG25nY/0eNARD6/oF0/sY
2335	   onX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZlRAzEf7GHqgB/NyjOad3p
2336	   dpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524bKZa1oPTUNlm6QpivtqD
2337	   IdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp7poIccGE6I9Tsg+RrOA9
2338	   iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtzOKypyQ3eoZ6EPazXqMyH
2339	   AVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEmMYICADCCAfwCAQEwbDBV
2340	   MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzExMC8GA1UEAxMoU2Ft
2341	   cGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQITN0EFee11f0Kp
2342	   olw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcN
2343	   AQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNzAxMDJaMC8GCSqGSIb3DQEJBDEi
2344	   BCCBo3TZITs9IUGlq1clkkamrYq1pC+qAOmbM6mBrJaWJDANBgkqhkiG9w0BAQEF
2345	   AASCAQARpMjNRbLD+Z682oraEKCbEbDsym9Mrdu6nkcZ+ivEj+AHTU9rt+LBdvTb
2346	   gHEKrWW8/HJ8C9eybTU4XJlVzbvGLRFhLPrLNz23qygzUH9AJ3nONY9eGAHLRagc
2347	   Ij3L+IAoRjfC3KO00s0/rLfb/l4EmMLCUDJlShrsqCrFfXQxKi9dWWvVZUzEsGqG
2348	   lhkY58o+No6WN/0SsWTHNNXrg1RKql5PyaHfWtySsMZjUOCJrlQDMeKBSE7dpTjX
2349	   wA5N/m9eBDASJyzlxdLOHGfJ1uWn/VR0Lm4xbscAdVJEm5gaH9o4QKf7jXAl7O9n
2350	   yuP+ZEhRpnjHfJ3XjFKuHiZ36Yon

2352	B.1.7.  S/MIME signed-only multipart/signed over a complex message, No
2353	        Header Protection

2355	   This is a signed-only S/MIME message via PKCS#7 detached signature
2356	   (multipart/signed).  The payload is a multipart/alternative message
2357	   with an inline image/png attachment.  It uses no header protection.

2359	   It has the following structure:

2361	   └┬╴multipart/signed 5185 bytes
2362	    ├┬╴multipart/mixed 1330 bytes
2363	    │├┬╴multipart/alternative 924 bytes
2364	    ││├─╴text/plain 278 bytes
2365	    ││└─╴text/html 362 bytes
2366	    │└─╴image/png inline 232 bytes
2367	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

2369	   Its contents are:

2371	   MIME-Version: 1.0
2372	   Content-Type: multipart/signed;
2373	    protocol="application/pkcs7-signature"; boundary="d66";
2374	    micalg="sha-256"
2375	   Subject: smime-multipart-complex
2376	   Message-ID: <smime-multipart-complex@lhp.example>
2377	   From: Alice <alice@smime.example>
2378	   To: Bob <bob@smime.example>
2379	   Date: Sat, 20 Feb 2021 12:02:02 -0500

2381	   --d66
2382	   MIME-Version: 1.0
2383	   Content-Type: multipart/mixed; boundary="7fe"

2385	   --7fe
2386	   MIME-Version: 1.0
2387	   Content-Type: multipart/alternative; boundary="848"

2389	   --848
2390	   Content-Type: text/plain; charset="us-ascii"
2391	   MIME-Version: 1.0
2392	   Content-Transfer-Encoding: 7bit

2394	   This is the smime-multipart-complex message.

2396	   This is a signed-only S/MIME message via PKCS#7 detached signature
2397	   (multipart/signed).  The payload is a multipart/alternative message
2398	   with an inline image/png attachment. It uses no header protection.

2400	   --
2401	   Alice
2402	   alice@smime.example
2403	   --848
2404	   Content-Type: text/html; charset="us-ascii"
2405	   MIME-Version: 1.0
2406	   Content-Transfer-Encoding: 7bit

2408	   <html><head><title></title></head><body>
2409	   <p>This is the <b>smime-multipart-complex</b> message.</p>
2410	   <p>This is a signed-only S/MIME message via PKCS#7 detached signature
2411	   (multipart/signed).  The payload is a multipart/alternative message
2412	   with an inline image/png attachment. It uses no header protection.</p>
2413	   <p><tt>-- <br/>Alice<br/>alice@smime.example</tt></p>
2414	   --848--

2416	   --7fe
2417	   Content-Type: image/png
2418	   Content-Transfer-Encoding: base64
2419	   Content-Disposition: inline

2421	   iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAAcElEQVR42uVTOxbA
2422	   MAgS739nO3TpRw20dqpbfARQEjOywiwYnCtkDKnbcLk66sqlT+zt9cidkE+6KwkZ
2423	   sgrzfcqVMpL2jo0447gYDpeArk+OnJHkIhAfTPRicihAf5YJrw7vjv0ZWRWM/uli
2424	   vdPf1QZ2kDD9xppd8wAAAABJRU5ErkJggg==

2426	   --7fe--

2428	   --d66
2429	   Content-Transfer-Encoding: base64
2430	   Content-Type: application/pkcs7-signature; name="smime.p7s"

2432	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
2433	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
2434	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
2435	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
2436	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
2437	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
2438	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
2439	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
2440	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
2441	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
2442	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
2443	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
2444	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
2445	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
2446	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
2447	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
2448	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
2449	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
2450	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
2451	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
2452	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
2453	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
2454	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
2455	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
2456	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
2457	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
2458	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
2459	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
2460	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
2461	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
2462	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
2463	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
2464	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
2465	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
2466	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
2467	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
2468	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
2469	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
2470	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
2471	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
2472	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
2473	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
2474	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
2475	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
2476	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
2477	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNzAyMDJa
2478	   MC8GCSqGSIb3DQEJBDEiBCCpaVCRppoO9Sw65TWLCDTpvw7N8HHyZsFXr4qP43kV
2479	   mjANBgkqhkiG9w0BAQEFAASCAQCW76eXVAXnm6vEII1CD4QNEh2kpQeBr4/NyspF
2480	   5VopKxNrBRfQs000ewQ0y2n07BUJtVyZrZOdrP5cG6K9KByxVGgpRY2Uyllz6hUA
2481	   K12zvtU3hU5oKTKVgNtDMh8qCMVqYdJzFSZ+exTGLIaN88bMNErzw9Id1F5TpJYF
2482	   ISUP1mXY1+GpjuXo5WEM8c7cfFH2/uDw3PSFILmuXowedbBptFH7ccGhNg6huY2c
2483	   AxIADVfW6YVG3SWVAaTHUM0QmvG9AyV4d0dce+p4aoZfhUfjAF6nWIRLcrfu18z5
2484	   FBxL02+VfWaYOg0d3TgScxQgE2vjAgdz+TqDbQpPriQXf/h7

2486	   --d66--

2488	B.1.8.  S/MIME encrypted and signed over a complex message, No Header
2489	        Protection

2491	   This is a encrypted and signed S/MIME message using PKCS#7
2492	   envelopedData around signedData.  The payload is a multipart/
2493	   alternative message with an inline image/png attachment.  It uses no
2494	   header protection.

2496	   It has the following structure:

2498	   └─╴application/pkcs7-mime [smime.p7m] 8670 bytes
2499	    ↧ (decrypts to)
2500	    └─╴application/pkcs7-mime [smime.p7m] 5408 bytes
2501	     ⇩ (unwraps to)
2502	     └┬╴multipart/mixed 1342 bytes
2503	      ├┬╴multipart/alternative 936 bytes
2504	      │├─╴text/plain 293 bytes
2505	      │└─╴text/html 374 bytes
2506	      └─╴image/png inline 236 bytes

2508	   Its contents are:

2510	   Content-Transfer-Encoding: base64
2511	   Content-Type: application/pkcs7-mime; name="smime.p7m";
2512	    smime-type="enveloped-data"
2513	   Subject: smime-enc-signed-complex
2514	   Message-ID: <smime-enc-signed-complex@lhp.example>
2515	   From: Alice <alice@smime.example>
2516	   To: Bob <bob@smime.example>
2517	   Date: Sat, 20 Feb 2021 12:03:02 -0500

2519	   MIIY/AYJKoZIhvcNAQcDoIIY7TCCGOkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
2520	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
2521	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
2522	   Boq0MA0GCSqGSIb3DQEBAQUABIIBABKoUk6G/5pRCkn0XsCial0oDti/uEUw6E3T
2523	   PAqN2WP4KjYkf10gKJZNaJYEGhOmHfu1r53FsuW3jq2IS3A16AkpZHY7ROluKpAV
2524	   3qkTBDqBnsC16f3q5uQxCWZ3DOJDvf9X48iASbXArXOjGk14lgjW8GeC5stnK9s9
2525	   4O5KpkCQges3lVWngSPYxGkDgyp1xjvftn7M/EnXAKf6F2ujLp7is9EgEjdK52zV
2526	   GE6Pqqeq8hy7Cyqlz5pWn76MTbgjg7OxXFzDCTePXiDPUCrOoCxwHpj6yo/bfbrE
2527	   HDq5rZXDY4ZWyHGpTQbVLA8zMMJqoVXiFz8NqNeDwY7ApaODpU4wggGEAgEAMGww
2528	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
2529	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
2530	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAhI15RwR9LLMR9+cR4l8VmlBW
2531	   PuYAz1vENb+Il48IFNmnN2xqAU7ATw+HvD2noH+6yqf9N0fXz9/ARD0GtsGrG+wS
2532	   s0gYC34/x1zwZ0DWIvrVq5yPsly4Qd5KkFEo8ACtFJFfInL3KaHg7SMHYObg6OcT
2533	   izGKSOp6wBNnVlvknSoIGjdg7IMFO2dVeqUXCkpf7N944kqvfxJXKPcOgleAG0Qw
2534	   n2v/gJtM0hsB6lQhh+vc5RUYIfmX4N5hNW7Polz3NnYrPPB0QFBGyAiCuFFEoWa/
2535	   nj+DWJbH+cYYyWXBMVcqasx05FCNkuX+RcemRzDHyrMQEs1TFj7NxSYjvjCaXjCC
2536	   Fc4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEED8PrzsI9SpFxgbjoB0E0g2AghWg
2537	   gsBBxGC3GwCWWfnJH4kpa67Ta1NLifl03nBkTKakYEGsNRk6BvffDHiQzB1dJg25
2538	   NKp4YLNTAWPLW2OP77KAvc2NQooQgP2bSaaNSuEf7OPnfhb/p2rLvLeMD5o6aSbp
2539	   WGFcMaIhjqmNAtp1BPBANEyDgiTdIFP8mMDklvqRIFh2lJNRN3bCQqfYxH9dCfaP
2540	   RLAmqGnkaG4i4BROgn+kHCprDoHvlWy+4l/iIi8DIaKSwDIvsbtk5yVhUNpbfxZE
2541	   wuKvVdMDRMf9BPMY9QgoK0BfpmovhMuqDClzn9503Rdv/Um1NErlPj9fNgtEZg17
2542	   bxKvsBRAX6k2J6r5chEjdiMsoCB+niFL8pOIH5sj0G556MnPWFfNi4bRehRzq5+o
2543	   91iYlHfNEHTQDNjPSc8zWfH/KqcfymxoRY1cUdXyuE0N4E1FSdlS2kqLkJYXcIvJ
2544	   9ReXT7eyUUrV8YGgsFxAXmjQ0Ky48+TCohDsf2BzgMaKULGjiHwNQPrd5ojhWZiR
2545	   RzVbN+I7AVeu6pDbs35pEyIypgGXTMlNPLzKuHcF+XVuQ8bDJzOTCoEaYTc6sXwA
2546	   c5LxLa3N+p2q5J3PO9hNWY6kt7inpommoAr4X9JmUvCk5Z7rQWf2WWkwkA6GGt5/
2547	   Wtpkne+vk5L2fFKK+DfBNv3f/fjhp6SIgkShF1h69iNzgN+SA/SMQ7c6eXB9WMZv
2548	   dSLKt6dWztY2Xd4DvjiTaQAT6mK2MjpvCxoBbEphmYqtfBVibLBzxVr/v/rBI5j7
2549	   sR4dVHyN0/TMCktR7qZfMdfpDyY5d9uabxzUI0sGKJOxB+fQ7iTnPCpQBGPZCUeJ
2550	   41CiiNif5ybqgjhzl16Pv4UXQfdwBnR0qf8r4z1rMjXO33LM8Vo4H3I3YwFlFiUV
2551	   FwFiDFXccPW7zQnUwcRA8cFkb0xI9oLFyWQ4M1+yhJ2j+x/cLesukAWJ3lDSX9nd
2552	   obBObwCRjPNgYwhbG0DnSK0dSU8oAm2FA65T4y+rkwaT2NnsFJsyISHHZG7LHlPU
2553	   lFwRQ+FND1LO8XUs+ZYj17XndZ5tndZx3wQwHmoweejvJZdgx+ThS2I47YBw/5kx
2554	   Zd+mJQ0E0Uc4FWhtGqSw0l95727xWbF84HEYnC066DaGFGFXsF4bF2+ocq57kKWa
2555	   GSFFm+San0QoMWj7brKmfRccX+MDhOHFfFvVsJ4i4VbVvSNTnazKZLndeZcUwMAk
2556	   TWcVLXwEnPdQpQCwHmfxbuYj7WlmhS3YfISS8Yu915+/U1zPlska+jGJi4W3YN69
2557	   FjGjcoRMn3fyGgvwaITiPcSF/r7QATQOfOiI3vy6KZTHBU5VNXuKYV5yeC2Mf0SW
2558	   pgwH2vaSlBBgBQDnG44BL6JDRXIC/0JfOaS7ouutPWRWn6i5z/d1NA89f2g1HUbh
2559	   gFBJhM6ayBU6nAAiYDLcN1yGpPykDTCF3QgJsw7hqcdZuA48maulywP4CR43XiS4
2560	   ouRui/DpJk1TdwI2oBY52y0dNb2RI30bYJHCmbxpTJ8yVjdQjjldSGTBs+7ScV/m
2561	   axNqcLxf4ciE5BGr7TVMCCEl/s6yFbL4BrEZKgpaf28LiOQdc/3sWA9jpQCSR10o
2562	   xlVurEK7fTNQhMCTwd0wxqrOZhPm0HL2GcKyIGpAJh6UkkvOAp5V8pDJyzMxmKpH
2563	   K20PQqWU5xVeMFF1Aa6HUOuFYCMb0fKRaWBo65KsEepQCNHcQszQT6PywIFt20Ny
2564	   y5jbiKzcXZ3xpJgGRWeCHrM+w8/bkA+yrzAQaFXM9OVxg9pU7ov4YTxn+DbzA+I9
2565	   bu4ob7lehti/z0AfmowF1db8B9ccBq2KJPoL/r6iAunDoppE8p8P0n+KKX7Ns59f
2566	   MA9cA0ujcnWX2rptYxrJXub8gqIfiPo/6HUCG+Y63iy+MsFXJ6n4KdPbcBQXgsZU
2567	   XsOkuIYpdjAZMsy0trlgftS71fwY+6z3Pirfzq8I7SsKO7IBOqbuOGRxw2o6En14
2568	   i4huYm7fizX5oWIqQb3+nZpgX/mnxyPDSrrblgsCl9IW2NYbIh6FibjG9gOXzSFk
2569	   AvVjY5oPYct2eorxyKdYl8pZq0/mSQfbHSVp5iCOxRJr7F1l364F+KsunF4Qg6Qg
2570	   4qye+wSXYiBDnOIzWRGNR9BPbvwHWv5p0mv0eDObVm8n6kDvdLa7IJnVN7VJkjGr
2571	   8+RB/uWTX33h3N52sRbEs51sstdXkg/4H4PwtxiIRviWWM8bDcXmMjclwot3xvej
2572	   xgJ7iHbgLsLYc4GshIk/lxxaUbZdRJWKqrVRJtUP50AKALjldfUGuKh++Z2SWSI2
2573	   knZOJRjvaWECd0soQMOvwP6oCq5xgKtovIr6JPNe48t4DAAlIb+vvbzHPBVAm1eQ
2574	   gqaZ+DzpYiPR/+A9j9u7q4CtNAXbIep6MbV36W51oix0W4La8aINl4uXxvM/ahHt
2575	   nVvKHs4MQfUwT6CoriHcyPGr4n6DudlLzlKHt2pvotyR8LFUSdfrWaXoZK7gHn6t
2576	   IoKAfNwE7Kqse/JLcVDBkdQhodLwyLWnVWCmabwjUtBr6zMApjpLJGsB27DV7IOn
2577	   VqaBMqMOmurYA2/+zgznnxQeK/rFutc7hckG6I+MO7T47JRgmWECNYp8zbBVsEkL
2578	   A4TDTarRoLLz2z4GaLmFKG1YPR/70urvWINp1YbyhCwZm+WvroLRmF5dYpiVdbXj
2579	   9DUzI1ucxoGKEAWXTxXq9RUmHwNuDN6SvILzaSvFzUigygZgMjCM8CvRK3Nf/rAF
2580	   sHp80koNZ3cfK8Z+LPMHDEdMXuep0ahEhOTBlpVbeq/Idq6rpOkjXpvcowlyj1Jm
2581	   L8ADlcyStEdVViv4/VLyzDSeDLOIqBz9RTBLfXb4Ek2h2nFJ7MpH/BJZi253VYxB
2582	   xXc9NuJ9M1odj9uJJNS3n8U4gLHFm1fjGvGAOExd5M5qmN8b/ASoeA6oHaSg39Ur
2583	   27N4/a2HpnRWck9H6aAOB7PQyh3L497/sWs3yoFa93Mlwe7vO4uYbW8X34ewXTNs
2584	   oX7gH4lRuj+XbbVM6DCH6KzNOkWyazhCNMGBTeO+txUZgoZD01OgAQQE2JPF2f7B
2585	   OT1ZeYkxSDLJH3nkGzfzvhvJ1b8eRUT1f9JrDdm+qd1/fGt+uyTIMp7GqovjiPJL
2586	   q/NbbXq5CrtUZf2rBq6pK2NM5l2l/43h37gH/xMJH76u/VdAbcXRkq5HnfEuG77q
2587	   VXKeoZDsXgwdhQRP3VGVKjCvqLpHs/rXco8v2xGDvqAnOT19mXxFh1jFl82KFbQq
2588	   XDQCJnyMsG4Jvc6Zv1mFyFba5GaMwxWq61thCVEqWA5AwnMsSnTnsyG+CpBctyWZ
2589	   dAOkrjb5/NAgSAsta6S51Nk/7oo+CyEt/yOs+A19kPFdtBjtEot8r2YXCLg9gqbh
2590	   exX1kgYR13wh5x4LpVY5cfMeLkjKWmvUfTPSmVLdjBYuG21F+Sp6T3Z2znQqqYEF
2591	   7qXMocZHhLSLWQOj0bk0DVL9AF+hIvuAlB/urwWuIBKdQyf1tjsS61u7VNQOLqqm
2592	   HB7vNkzdkihIyNU7f56a8D8k75GLF6q9cvZHfTmNWYDOxsU9Po0CbX8OtffpxmAQ
2593	   ikAi+40f0elM5AMV1Au11tYuA6ckSvT/PqHZPsU4bFk365LIZRm/wQ+Lffi8CZOw
2594	   S0L52RfwSKIP4kjjwYHE03XoNXVM3iDgBesI1HMVJQYeP+kLUPrzAtwxtQ7Lccv3
2595	   oLVtVDK0a2VR5DqW6oluyNPddsa/RV4Ld+8GVZVLA+iuSziaW+bmD23OtLw0ycEn
2596	   4pB5heZNxVSvQ5NzE6mY6AYLolSN+trTT9hihc+Z10hN+S2z06w2M4zKYVCd0Qzo
2597	   UnMbJNHbPgaGRDSaLl/dBmezCL0NuHFUklZUCCKD5ut5fTFCY/zEpe7Xky/2WFS+
2598	   Tk+9f9A6Eha5zVx59yTwriWgiBhyu5zOq6vJoeiYoKluDkganEVKyco7Cy1ejEU6
2599	   C8Z/FzC2iuoXf0hH7/D+jSmMhKkCu3bFz4sR4A4+ItamCFgA1DoeljCMrZwLwZBz
2600	   fEwajERkr1tVW0YvyzBB8Qff48MpjCmrGcpi9WRRob9tXzf7DtIURwgXUDAEtL4X
2601	   ApSmswV9ZG0UrSytwzGfFz2v/SIXIcZCcgWzGx1QhpnjyS9Sz6AFz3Ba/SvcUk6Q
2602	   r+Hx6HWqdN4MEVeUnhFwCK7XwzNEA110g4twEYO+M38F2LDXzvPAQkmKkQ2BwItc
2603	   3wpK9Cl3d0Td+TS+bxdKV89YoQNIWw37/Bzg2uSerSsEmrmo+ZGcrcZtGlZX5TQK
2604	   OHgkPM/CUztbjKFcv1mCBF5DH4sXYVNP4G/OticVMLiL9QBIeXAZcjdb0CuSkt/8
2605	   gZyhCDNzVN5me/fhtN+tuTjTETaQFcF7ErTOEHokvns//NdpSFgrUvFe5jhc+nMZ
2606	   VryVxxW/iDk76C+H1HxF8LWAlXeeVi0PPfeYX+TwWvaKPX2wBv5qOy4KlX/NvJGL
2607	   XyrDB8NJe/csuU21wsKs+k4qlsoDIz7U8lU8JiZ2oxwYFkffqUJBlncHnjX7jN95
2608	   bBKMolpwSd2Rvnin/X2L97QceFPoMYxWA2YWbVHyfXRdQoNpFHGvDWREBqZGl2K7
2609	   UTqWptWWsOQD7MGC5bmGDFj4sq0/D4F1HoAwHDjZ/t/BSYXv8JsahPT1L6ymNJ2J
2610	   QpYkqkUTFoAcPGGdRY7V3LDFnprFHQf329krDizoHx8zXkSWX1RPW/SB8jcxkbKT
2611	   5nN06+GIJI+CmO+YJbT1OQ8a5bLDAE8rrS5K6d8LAS2b1zX1tnYSqFWIyb84iEG5
2612	   sy6NM1VU14rWIzEVnr0iJmAn3PLDGxVtVKJMlzp5m4EZBESadPFUwdLKvQXQUFeK
2613	   bmUo1BAcLxaemP0S8LJ7AS7mfQSHTRQGI1UCAU0LTuEQg75kQtEPdic71NjorMEZ
2614	   a3oBk72PFLq0AMF3KZOSih8PQisdlUJckiUqlppbgoxTJBbHWd7Cb5GykRb1Sy3X
2615	   hLCfuvxZ4ima8SCulHGfDF4StdJMdpqtfdn0ttKbcRkMsIVHrNhwwdIwLKR+JXUW
2616	   UotEh3clhvEkuMvzBtkJLG2eEbmCQ7tSOkZB6+fqCJ8rwjFYrlLxzsrJZMmN6+Wk
2617	   uIFRnM5GAwdr/y3cNcUA0lHliXhYjZ+aux5QqM3hnqiXwRyjtdBqjZIAZdfphdYf
2618	   6kIuJIsmfvT2vV8IWKzoWeNswd+n+u6qqVWGSvIG2u1+F1WhKS+35kVcppVawtA0
2619	   BG4wMhkqEBJg0CIL3RE3AMEMvswp6i6xwuk+hIOlfk2hhenTed8T2Y8vnAZiTxk6
2620	   rmArxR9BCXWBi10JryL4Yr9eHc6e/eOhhxk+QrKC2nJs+QTcArXdLJvbsYXdVNuM
2621	   Cf8xLegWrkMRsK/FbarFPHzESH2Chy7Q1DbY5ICyfluSvFFlFh91FGycMRGgd3rr
2622	   ITLV57i2OS9blJVGZNoF3bmRjejxCCHgl5A+Qz5Jxszsi6HIEeg07IrhE/CCtike
2623	   BfqlJvR3rm8XSZYX6Neo0aqbXOFAMp9YrevJrZ1hIPT5BfBvElbyaJYGX/jWeqx9
2624	   7nJ2Mh5MxNTnzz//xTdqCrU9gCk5bBe2ZvDwnZ7nCwXRbcNd97+x30EAdHirss/5
2625	   kZyJwrWwuDGUFVinUYf1i1Wo2a2dEHlfYymNr8Uwe31wRMJKqqy0bUhB/Rez2I2t
2626	   7U05g0svEnAz/SPbgGk1TUvqcxMqC2GmpPq6Tfk27sDfUCqYKgrDfE44Q9IszBpR
2627	   fAdMTIQLtUWmLCq7ZM2yFkl2mx+ymmEaqKA+3SzC2A32nZ4IKqebD3vIYA6c8aFn
2628	   V8OHuub1VAvFsGjviVitZmXL9wTvTLCFzYlRoZJWqmgH+oZZJ36o1tYaEobaTvCU
2629	   MfpKuuqQO1ifjFtdnO5wJtd4Usw9OngspR3V2EoTiUC4+oGJYQ1ux8ACWjNJ9vEB
2630	   pH7DBVIIGyiAXSuqL+W77PRi2I6xnhA5eWR+jUXRnr0v4DGjdsQ8LWeyS1APmCHh
2631	   Wbf5p/Z6k3mcMF+vJz3DkWq5BI/horJK0/lLGGgi2j4klnus2H52OOh+f+4Vn7Ky
2632	   vYby8jm5Oo6RXgAgc/rFoUinUo3//syk/+xExYZYt37hL6PlewkeG8vhXoFvuJAJ
2633	   gi0d7rnqWYuse+UrzUrbp5z/UpJQp/PyY6rdDlScWQp3WJYSNgEe62EmnMShGf+q
2634	   TboTsuXy8MfKltJsV9ybuJGZdtA6yIrlKwj8YYfbPX2neXmZrdnDMGkOSfdGi3lU
2635	   /yXCBPWOnMCR+MVWVXUpf3wfXlHO4nZfNtyVb/v7e4lRCylyayXo7g2rkmR+LrH3
2636	   dEnczDF/LZLbDnkizNpzlgLU5BAlk9rDW6uwyMywrLIYlttVnRrHwjAol6US+mjF
2637	   sZib126lo8EIeHyccGZIqfyTHld03m32IzMnDnl6dVeX5TAuBmDuNGbXHP4h2OSG
2638	   m6tUHSFI9fMxO2pBT1Tts1kjYBU+jMenqI8GxpP6DD/Y8PUbxBNoPoP8aVR3rkBk
2639	   GONb4ksn6zWoRxT4XyaPvmImvFX5nkHHnvkThvL0DaWcwuIOrjtqOJwmPBTOywjA
2640	   KYPPCK7qVCwVAssJxx7adE1W+F15UoTyyyjpe6pVtgO90lGRcprYQnBasw03kATd
2641	   k8GFN7Ej37OiXIvrmsJ1toHzlhungW5uYedaTMBNmw8iU63r36sMhj46i9nML2jP
2642	   mUjfxMeMvQGMIMmjDBN0j10+5tANXtQY8CdC3pSJLe0lmIIHMB7gTlf4QuyU2LP9
2643	   5NRz07fwamd09k3N3dIeAB0I+YJyeElO69772qnqpiGnx10uq5lnhEyvtJCyH1tS
2644	   vWUvX0tyAFfuIBkdyCKMFP6zhHVxZCCa+r3W/qrfON6GH/tJ3aLdilvjwC2zQy29
2645	   iuNYYJoyAS3PCjC7CL41U0kAOBNJPka6Vqn6PwxpnxGaZZyFCSU2fpAvNyT2auOh
2646	   CmLz/P0tNE7z7l1JXqao62CoPa1dOQJ27NbEjsoR3GobhcGQQkYb3Zsss/y1QZaa
2647	   9lkTdk02ZDXfPPyaIUY46+VA3VcHlmWxChZiiFpqOdV21aAt+f4PJLtspE2/OTEG
2648	   GqHngtafmMV75z+MO8ExXvy5YrI5N+S2eArIteQxBjNs5DjXnsPjE3CGwb7GPx8T
2649	   XMsEmWDQ7TDtqFSUzHAIb8EieTziP0LL2LOd9dpE8xDH1X0gDC82whSxUrZOa15Z
2650	   iJ1sZkS1VRI/iq9/5zc8BX+218FfdN+rbHWZZAM02ge1IMyOsLF9qaaiR1K9ZQPJ
2651	   lYDLcCmnS6Q1oKA2JvDOiB8sbrpKLsLk31lcqCrVJ9eOIqnA4yAijsCNiUjI1DSC
2652	   TefQo1PVS8qAGhfkcA/4nw==

2654	B.2.  Signed-only Messages

2656	   These messages are signed-only, using different schemes of header
2657	   protection and different S/MIME structure.  The use no Header
2658	   Confidentiality Policy because the hcp is only relevant when a
2659	   message is encrypted.

2661	B.2.1.  S/MIME signed-only signedData over a simple message, Wrapped
2662	        Message

2664	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
2665	   payload is a text/plain message.  It uses the Wrapped Message header
2666	   protection scheme.

2668	   It has the following structure:

2670	   └─╴application/pkcs7-mime [smime.p7m] 4213 bytes
2671	    ⇩ (unwraps to)
2672	    └┬╴message/rfc822 566 bytes
2673	     └─╴text/plain 228 bytes

2675	   Its contents are:

2677	   Content-Transfer-Encoding: base64
2678	   Content-Type: application/pkcs7-mime; name="smime.p7m";
2679	    smime-type="signed-data"
2680	   Subject: smime-one-part-wrapped
2681	   Message-ID: <smime-one-part-wrapped@lhp.example>
2682	   From: Alice <alice@smime.example>
2683	   To: Bob <bob@smime.example>
2684	   Date: Sat, 20 Feb 2021 10:04:02 -0500

2686	   MIIMIwYJKoZIhvcNAQcCoIIMFDCCDBACAQExDTALBglghkgBZQMEAgEwggJMBgkq
2687	   hkiG9w0BBwGgggI9BIICOU1JTUUtVmVyc2lvbjogMS4wDQpDb250ZW50LVR5cGU6
2688	   IG1lc3NhZ2UvcmZjODIyOyBmb3J3YXJkZWQ9Im5vIg0KDQpNSU1FLVZlcnNpb246
2689	   IDEuMApDb250ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJzZXQ9InV0Zi04IgpD
2690	   b250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0ClN1YmplY3Q6IHNtaW1lLW9u
2691	   ZS1wYXJ0LXdyYXBwZWQKTWVzc2FnZS1JRDogPHNtaW1lLW9uZS1wYXJ0LXdyYXBw
2692	   ZWRAbGhwLmV4YW1wbGU+CkZyb206IEFsaWNlIDxhbGljZUBzbWltZS5leGFtcGxl
2693	   PgpUbzogQm9iIDxib2JAc21pbWUuZXhhbXBsZT4KRGF0ZTogU2F0LCAyMCBGZWIg
2694	   MjAyMSAxMDowNDowMiAtMDUwMAoKVGhpcyBpcyB0aGUgc21pbWUtb25lLXBhcnQt
2695	   d3JhcHBlZCBtZXNzYWdlLgoKVGhpcyBpcyBhIHNpZ25lZC1vbmx5IFMvTUlNRSBt
2696	   ZXNzYWdlIHZpYSBQS0NTIzcgc2lnbmVkRGF0YS4gIFRoZQpwYXlsb2FkIGlzIGEg
2697	   dGV4dC9wbGFpbiBtZXNzYWdlLiBJdCB1c2VzIHRoZSBXcmFwcGVkIE1lc3NhZ2Ug
2698	   aGVhZGVyCnByb3RlY3Rpb24gc2NoZW1lLgoKLS0gCkFsaWNlCmFsaWNlQHNtaW1l
2699	   LmV4YW1wbGUKoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQw
2700	   DQYJKoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMg
2701	   V0cxMTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRo
2702	   b3JpdHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNV
2703	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3Zl
2704	   bGFjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gB
2705	   UCfkacKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXP
2706	   mrszyidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEF
2707	   XgOaGdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41ko
2708	   aZXCN5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX
2709	   +TWzB2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iP
2710	   sIVKarUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZI
2711	   AWUDAgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQM
2712	   MAoGCCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkV
2713	   fAEj8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJ
2714	   KoZIhvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtK
2715	   tl4FzkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3M
2716	   RsMtjH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0
2717	   LIZRzWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXw
2718	   fDz8A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyu
2719	   OfQsqm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3
2720	   QQV57XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElF
2721	   VEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNB
2722	   IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIw
2723	   OTI3MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEX
2724	   MBUGA1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
2725	   ggEKAoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo
2726	   7sHUa4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+95
2727	   0MFz/evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYW
2728	   Tut3SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfC
2729	   n+IQsaqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9
2730	   COgEykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIw
2731	   ADAXBgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21p
2732	   bWUuZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAw
2733	   HQYDVR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwH
2734	   Fwyn8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4K
2735	   kkOHG25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30Uxf
2736	   yrZlRAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HV
2737	   X524bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP
2738	   0Qhp7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+
2739	   JJtzOKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSz
2740	   NnEmMYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1Q
2741	   UyBXRzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1
2742	   dGhvcml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkq
2743	   hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNTA0
2744	   MDJaMC8GCSqGSIb3DQEJBDEiBCCt+Ik56mZTd2mpSgOXM38dS7jM5alU2FDX9/58
2745	   cga1szANBgkqhkiG9w0BAQEFAASCAQCxKLkx5li14OIOcH2tcWqcsQilPLgQ30ck
2746	   qhJL2X9/Cl22ibOGNwL8w3qSEBeG1a+WtHw3bSqJx1ciRYcLs16ms23no5QoZ0pU
2747	   fRLmQuTEgObCf+syiTGnWLj8e+2aRVP1L9yEIbin6+hFyp4s393zYhdMOPAP2ruI
2748	   lg+BxoWXUjXso+8lPgqLawA+9KMI6tQZMnwI9LpGJmZfoSXdHWqWtjdotzZpqsKm
2749	   Ihr8DBKtUetqgZ2zqDO3zo3W2L6EmNM05BJUmqwAt/cN+X9kws5dAqtHDQhPNTa1
2750	   WUX0oTTkMzn1RAlOxfowEStSnfDOOzIqg+L7LgiMw9jhIgP4/uB2

2752	B.2.2.  S/MIME signed-only multipart/signed over a simple message,
2753	        Wrapped Message

2755	   This is a signed-only S/MIME message via PKCS#7 detached signature
2756	   (multipart/signed).  The payload is a text/plain message.  It uses
2757	   the Wrapped Message header protection scheme.

2759	   It has the following structure:

2761	   └┬╴multipart/signed 4451 bytes
2762	    ├┬╴message/rfc822 596 bytes
2763	    │└─╴text/plain 256 bytes
2764	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

2766	   Its contents are:

2768	   MIME-Version: 1.0
2769	   Content-Type: multipart/signed;
2770	    protocol="application/pkcs7-signature"; boundary="20c";
2771	    micalg="sha-256"
2772	   Subject: smime-multipart-wrapped
2773	   Message-ID: <smime-multipart-wrapped@lhp.example>
2774	   From: Alice <alice@smime.example>
2775	   To: Bob <bob@smime.example>
2776	   Date: Sat, 20 Feb 2021 10:05:02 -0500

2778	   --20c
2779	   MIME-Version: 1.0
2780	   Content-Type: message/rfc822; forwarded="no"

2782	   MIME-Version: 1.0
2783	   Content-Type: text/plain; charset="utf-8"
2784	   Content-Transfer-Encoding: 7bit
2785	   Subject: smime-multipart-wrapped
2786	   Message-ID: <smime-multipart-wrapped@lhp.example>
2787	   From: Alice <alice@smime.example>
2788	   To: Bob <bob@smime.example>
2789	   Date: Sat, 20 Feb 2021 10:05:02 -0500

2791	   This is the smime-multipart-wrapped message.

2793	   This is a signed-only S/MIME message via PKCS#7 detached signature
2794	   (multipart/signed).  The payload is a text/plain message. It uses the
2795	   Wrapped Message header protection scheme.

2797	   --
2798	   Alice
2799	   alice@smime.example

2801	   --20c
2802	   Content-Transfer-Encoding: base64
2803	   Content-Type: application/pkcs7-signature; name="smime.p7s"

2805	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
2806	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
2807	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
2808	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
2809	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
2810	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
2811	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
2812	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
2813	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
2814	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
2815	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
2816	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
2817	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
2818	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
2819	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
2820	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
2821	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
2822	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
2823	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
2824	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
2825	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
2826	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
2827	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
2828	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
2829	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
2830	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
2831	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
2832	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
2833	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
2834	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
2835	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
2836	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
2837	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
2838	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
2839	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
2840	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
2841	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
2842	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
2843	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
2844	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
2845	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
2846	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
2847	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
2848	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
2849	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
2850	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNTA1MDJa
2851	   MC8GCSqGSIb3DQEJBDEiBCCcDIxr7wd3VCCz1VBG9nySvUJ/Fhzo26f78El/UUbj
2852	   jTANBgkqhkiG9w0BAQEFAASCAQBUmMGL40IZQmt3Nad/ymEUOLu3Dgfd/nYKuj6P
2853	   fjKYJFb9UhwtufZK9/WyVtytLsFJMYHZgUSWU3VbHk1L/cO0469Rbqo6CqlLRJPK
2854	   uN2Eul2UCa+3ovMIQ8g0NBflXrdfR0OVRqvfO91hLFkTxLfCDUG8ziRWOLWucgZg
2855	   zkVXqEzvFyOtsSbr3GAY817wWgl1+PTFchO4XF+rg7cNysKqGLtjxP9lN3PcURYv
2856	   TmooTPY46kheab7ZAzKqQI6go7somKmMqD7UsctMLSVZo+EX5/N9vq5znv7bfpoE
2857	   Rgd+NZNQD+VYDIOU1FI5ZjyjHpRmcFpywjvHNbTBGlYhv3q4

2859	   --20c--

2861	B.2.3.  S/MIME signed-only signedData over a simple message, Injected
2862	        Headers

2864	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
2865	   payload is a text/plain message.  It uses the Injected Headers header
2866	   protection scheme.

2868	   It has the following structure:

2870	   └─╴application/pkcs7-mime [smime.p7m] 4185 bytes
2871	    ⇩ (unwraps to)
2872	    └─╴text/plain 239 bytes

2874	   Its contents are:

2876	   Content-Transfer-Encoding: base64
2877	   Content-Type: application/pkcs7-mime; name="smime.p7m";
2878	    smime-type="signed-data"
2879	   Subject: smime-one-part-injected
2880	   Message-ID: <smime-one-part-injected@lhp.example>
2881	   From: Alice <alice@smime.example>
2882	   To: Bob <bob@smime.example>
2883	   Date: Sat, 20 Feb 2021 10:06:02 -0500

2885	   MIIMDgYJKoZIhvcNAQcCoIIL/zCCC/sCAQExDTALBglghkgBZQMEAgEwggI3Bgkq
2886	   hkiG9w0BBwGgggIoBIICJE1JTUUtVmVyc2lvbjogMS4wDQpDb250ZW50LVRyYW5z
2887	   ZmVyLUVuY29kaW5nOiA3Yml0DQpTdWJqZWN0OiBzbWltZS1vbmUtcGFydC1pbmpl
2888	   Y3RlZA0KTWVzc2FnZS1JRDogPHNtaW1lLW9uZS1wYXJ0LWluamVjdGVkQGxocC5l
2889	   eGFtcGxlPg0KRnJvbTogQWxpY2UgPGFsaWNlQHNtaW1lLmV4YW1wbGU+DQpUbzog
2890	   Qm9iIDxib2JAc21pbWUuZXhhbXBsZT4NCkRhdGU6IFNhdCwgMjAgRmViIDIwMjEg
2891	   MTA6MDY6MDIgLTA1MDANCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNl
2892	   dD0idXRmLTgiOyBwcm90ZWN0ZWQtaGVhZGVycz0idjEiDQoNClRoaXMgaXMgdGhl
2893	   IHNtaW1lLW9uZS1wYXJ0LWluamVjdGVkIG1lc3NhZ2UuDQoNClRoaXMgaXMgYSBz
2894	   aWduZWQtb25seSBTL01JTUUgbWVzc2FnZSB2aWEgUEtDUyM3IHNpZ25lZERhdGEu
2895	   ICBUaGUNCnBheWxvYWQgaXMgYSB0ZXh0L3BsYWluIG1lc3NhZ2UuIEl0IHVzZXMg
2896	   dGhlIEluamVjdGVkIEhlYWRlcnMgaGVhZGVyDQpwcm90ZWN0aW9uIHNjaGVtZS4N
2897	   Cg0KLS0gDQpBbGljZQ0KYWxpY2VAc21pbWUuZXhhbXBsZQ0KoIIHpjCCA88wggK3
2898	   oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJKoZIhvcNAQENBQAwVTENMAsG
2899	   A1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNhbXBsZSBM
2900	   QU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwIBcNMTkxMTIwMDY1NDE4
2901	   WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoTBElFVEYxETAPBgNVBAsTCExB
2902	   TVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFjZTCCASIwDQYJKoZIhvcNAQEB
2903	   BQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfkacKTg8cc2OtJ9ZSed6U3jUoi
2904	   ZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrszyidmbuZmOpB5voVQfiLYYy3i
2905	   Ox7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOaGdmnx4OG/e3p1fIKM0dPzZLo
2906	   OAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXCN5XL7wWTLMLeNf9Byb5ksKqU
2907	   uqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWzB2zNS2OF+XIVnzRG5DeoULq8
2908	   v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVKarUCAwEAAaOBrzCBrDAMBgNV
2909	   HRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUDAgEwATAeBgNVHREEFzAVgRNh
2910	   bGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoGCCsGAQUFBwMEMA4GA1UdDwEB
2911	   /wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj8OeOr83zdw8wHwYDVR0jBBgw
2912	   FoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZIhvcNAQENBQADggEBAIFJeKCc
2913	   sTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4FzkgRyOg31/+Cw7H8e30iLrPI
2914	   FlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMtjH2x9SG91PEM046gfPnc9gMG
2915	   HjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZRzWmkw1RF7FOD7PfB5v94M527
2916	   4XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8A0enITGXnoEkAFvvjiCqh64P
2917	   1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQsqm6hvrDTqNpHNZ015fOURza1
2918	   SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV57XV/QqmiXDr0+GrOmqnXMA0G
2919	   CSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdH
2920	   MTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9y
2921	   aXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3MDY1NDE4WjA7MQ0wCwYDVQQK
2922	   EwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUGA1UEAxMOQWxpY2UgTG92ZWxh
2923	   Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09InoWDgWPk2af0+S
2924	   tijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHUa4xQUl5JO6VqY18LANwORjrc
2925	   9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz/evPgP96wV+z4TtAwW2Z34rT
2926	   iz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3SryCqeHEFbZFkB4urMk4xrIJ
2927	   C3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQsaqpo1d3f9jSkbtAV5w3vzfo
2928	   g8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgEykRiVokFQgqQ7XNDU+r3SeOW
2929	   wks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAXBgNVHSAEEDAOMAwGCmCGSAFl
2930	   AwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUuZXhhbXBsZTATBgNVHSUEDDAK
2931	   BggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYDVR0OBBYEFLv2zLItHQYSHJeu
2932	   KWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn8QkoZTYaZxxodvRZMA0GCSqG
2933	   SIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOHG25nY/0eNARD6/oF0/sYonX2
2934	   doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZlRAzEf7GHqgB/NyjOad3pdpVY
2935	   eDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524bKZa1oPTUNlm6QpivtqDIdqG
2936	   JdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp7poIccGE6I9Tsg+RrOA9iCQs
2937	   Pn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtzOKypyQ3eoZ6EPazXqMyHAVcs
2938	   m0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEmMYICADCCAfwCAQEwbDBVMQ0w
2939	   CwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzExMC8GA1UEAxMoU2FtcGxl
2940	   IExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQITN0EFee11f0Kpolw6
2941	   9Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB
2942	   MBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNTA2MDJaMC8GCSqGSIb3DQEJBDEiBCA7
2943	   4grfze+Y7DQEGFAYHyyvRpNkuuZFR0V+RvSTvu4FGDANBgkqhkiG9w0BAQEFAASC
2944	   AQB1KYVvQNZpe3EKeM0XhJrlJNxneVmZWFCEl5YFeRsO8FeIwJkV65YtFJKjOVVy
2945	   qYuZBGz4MsKaddXxAOXI/Q7cJ+70d9iOc1mL3PD2/U6DOwwhNfJoNSK7miYfMASV
2946	   42TMJWTt0T1ORJnvBitjkTuZDus1tp3xwxbrZTa4pyGaXEhBW/Fc4z6L+z8hpQv/
2947	   +6dw3+ORgfc67VTHVnsVVfb0UPrWvdxFdL5xYdqXxlhDsLMEms2ttHHzvjC003Kq
2948	   As0xMHEmMpfdL5M69MAjvroOUv0SXETfQaxca7IKd+9xUNNRretZ9xz2kn2uD+k7
2949	   unTEyVGeHrWmQMw/8MdvEac/

2951	B.2.4.  S/MIME signed-only multipart/signed over a simple message,
2952	        Injected Headers

2954	   This is a signed-only S/MIME message via PKCS#7 detached signature
2955	   (multipart/signed).  The payload is a text/plain message.  It uses
2956	   the Injected Headers header protection scheme.

2958	   It has the following structure:

2960	   └┬╴multipart/signed 4417 bytes
2961	    ├─╴text/plain 258 bytes
2962	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

2964	   Its contents are:

2966	   MIME-Version: 1.0
2967	   Content-Type: multipart/signed;
2968	    protocol="application/pkcs7-signature"; boundary="12b";
2969	    micalg="sha-256"
2970	   Subject: smime-multipart-injected
2971	   Message-ID: <smime-multipart-injected@lhp.example>
2972	   From: Alice <alice@smime.example>
2973	   To: Bob <bob@smime.example>
2974	   Date: Sat, 20 Feb 2021 10:07:02 -0500

2976	   --12b
2977	   MIME-Version: 1.0
2978	   Content-Transfer-Encoding: 7bit
2979	   Subject: smime-multipart-injected
2980	   Message-ID: <smime-multipart-injected@lhp.example>
2981	   From: Alice <alice@smime.example>
2982	   To: Bob <bob@smime.example>
2983	   Date: Sat, 20 Feb 2021 10:07:02 -0500
2984	   Content-Type: text/plain; charset="utf-8"; protected-headers="v1"

2986	   This is the smime-multipart-injected message.

2988	   This is a signed-only S/MIME message via PKCS#7 detached signature
2989	   (multipart/signed).  The payload is a text/plain message. It uses the
2990	   Injected Headers header protection scheme.

2992	   --
2993	   Alice
2994	   alice@smime.example

2996	   --12b
2997	   Content-Transfer-Encoding: base64
2998	   Content-Type: application/pkcs7-signature; name="smime.p7s"

3000	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
3001	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
3002	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
3003	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
3004	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
3005	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
3006	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
3007	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
3008	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
3009	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
3010	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
3011	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
3012	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
3013	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
3014	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
3015	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
3016	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
3017	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
3018	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
3019	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
3020	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
3021	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
3022	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
3023	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
3024	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
3025	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
3026	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
3027	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
3028	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
3029	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
3030	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
3031	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
3032	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
3033	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
3034	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
3035	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
3036	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
3037	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
3038	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
3039	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
3040	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
3041	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
3042	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
3043	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
3044	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
3045	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNTA3MDJa
3046	   MC8GCSqGSIb3DQEJBDEiBCCXRoUdgR7J+TnI6kw8MpGtWVJPCnoAB+XfkDf78dWi
3047	   cTANBgkqhkiG9w0BAQEFAASCAQCitU3JsEMd9FhqUu87UxYScDI1pDfZnX1vjges
3048	   xBmmSy5lq5vvs+axKK/hTOR7YLSuLJLNwxJgDCPEmHi1hV5Tpj5mLH8qEXu4c+kK
3049	   s9is53v0NvibhIvDEpnqNvL/kMVDAk2gTqYHCE2Ij7qcWWNhnGdweMJZsBvLy/Xi
3050	   BLaD2t4qHY9lPaeMugDrxThNWEhjoDIoI5f7NpBPYvJgB7b1cJhXqil5weYrJiGr
3051	   hyTr56lff+Xjs8qjgrrzdJ8HHeUsxDJulrX8auo+pIKudcu41U8Ben2M9nCiVbEG
3052	   aqbbPK7xip5c/YZEaZWYAs8w+dif68J8Eo7QO/kkr45Tt5pf
3053	   --12b--

3055	B.2.5.  S/MIME signed-only signedData over a complex message, Wrapped
3056	        Message

3058	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
3059	   payload is a multipart/alternative message with an inline image/png
3060	   attachment.  It uses the Wrapped Message header protection scheme.

3062	   It has the following structure:

3064	   └─╴application/pkcs7-mime [smime.p7m] 5615 bytes
3065	    ⇩ (unwraps to)
3066	    └┬╴message/rfc822 1599 bytes
3067	     └┬╴multipart/mixed 1535 bytes
3068	      ├┬╴multipart/alternative 932 bytes
3069	      │├─╴text/plain 282 bytes
3070	      │└─╴text/html 366 bytes
3071	      └─╴image/png inline 232 bytes

3073	   Its contents are:

3075	   Content-Transfer-Encoding: base64
3076	   Content-Type: application/pkcs7-mime; name="smime.p7m";
3077	    smime-type="signed-data"
3078	   Subject: smime-one-part-complex-wrapped
3079	   Message-ID: <smime-one-part-complex-wrapped@lhp.example>
3080	   From: Alice <alice@smime.example>
3081	   To: Bob <bob@smime.example>
3082	   Date: Sat, 20 Feb 2021 12:04:02 -0500

3084	   MIIQLAYJKoZIhvcNAQcCoIIQHTCCEBkCAQExDTALBglghkgBZQMEAgEwggZVBgkq
3085	   hkiG9w0BBwGgggZGBIIGQk1JTUUtVmVyc2lvbjogMS4wDQpDb250ZW50LVR5cGU6
3086	   IG1lc3NhZ2UvcmZjODIyOyBmb3J3YXJkZWQ9Im5vIg0KDQpNSU1FLVZlcnNpb246
3087	   IDEuMApDb250ZW50LVR5cGU6IG11bHRpcGFydC9taXhlZDsgYm91bmRhcnk9IjNm
3088	   YyIKU3ViamVjdDogc21pbWUtb25lLXBhcnQtY29tcGxleC13cmFwcGVkCk1lc3Nh
3089	   Z2UtSUQ6IDxzbWltZS1vbmUtcGFydC1jb21wbGV4LXdyYXBwZWRAbGhwLmV4YW1w
3090	   bGU+CkZyb206IEFsaWNlIDxhbGljZUBzbWltZS5leGFtcGxlPgpUbzogQm9iIDxi
3091	   b2JAc21pbWUuZXhhbXBsZT4KRGF0ZTogU2F0LCAyMCBGZWIgMjAyMSAxMjowNDow
3092	   MiAtMDUwMAoKLS0zZmMKTUlNRS1WZXJzaW9uOiAxLjAKQ29udGVudC1UeXBlOiBt
3093	   dWx0aXBhcnQvYWx0ZXJuYXRpdmU7IGJvdW5kYXJ5PSJjMGUiCgotLWMwZQpDb250
3094	   ZW50LVR5cGU6IHRleHQvcGxhaW47IGNoYXJzZXQ9InVzLWFzY2lpIgpNSU1FLVZl
3095	   cnNpb246IDEuMApDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0CgpUaGlz
3096	   IGlzIHRoZSBzbWltZS1vbmUtcGFydC1jb21wbGV4LXdyYXBwZWQgbWVzc2FnZS4K
3097	   ClRoaXMgaXMgYSBzaWduZWQtb25seSBTL01JTUUgbWVzc2FnZSB2aWEgUEtDUyM3
3098	   IHNpZ25lZERhdGEuICBUaGUKcGF5bG9hZCBpcyBhIG11bHRpcGFydC9hbHRlcm5h
3099	   dGl2ZSBtZXNzYWdlIHdpdGggYW4gaW5saW5lIGltYWdlL3BuZwphdHRhY2htZW50
3100	   LiBJdCB1c2VzIHRoZSBXcmFwcGVkIE1lc3NhZ2UgaGVhZGVyIHByb3RlY3Rpb24g
3101	   c2NoZW1lLgoKLS0gCkFsaWNlCmFsaWNlQHNtaW1lLmV4YW1wbGUKLS1jMGUKQ29u
3102	   dGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9InVzLWFzY2lpIgpNSU1FLVZl
3103	   cnNpb246IDEuMApDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA3Yml0Cgo8aHRt
3104	   bD48aGVhZD48dGl0bGU+PC90aXRsZT48L2hlYWQ+PGJvZHk+CjxwPlRoaXMgaXMg
3105	   dGhlIDxiPnNtaW1lLW9uZS1wYXJ0LWNvbXBsZXgtd3JhcHBlZDwvYj4gbWVzc2Fn
3106	   ZS48L3A+CjxwPlRoaXMgaXMgYSBzaWduZWQtb25seSBTL01JTUUgbWVzc2FnZSB2
3107	   aWEgUEtDUyM3IHNpZ25lZERhdGEuICBUaGUKcGF5bG9hZCBpcyBhIG11bHRpcGFy
3108	   dC9hbHRlcm5hdGl2ZSBtZXNzYWdlIHdpdGggYW4gaW5saW5lIGltYWdlL3BuZwph
3109	   dHRhY2htZW50LiBJdCB1c2VzIHRoZSBXcmFwcGVkIE1lc3NhZ2UgaGVhZGVyIHBy
3110	   b3RlY3Rpb24gc2NoZW1lLjwvcD4KPHA+PHR0Pi0tIDxici8+QWxpY2U8YnIvPmFs
3111	   aWNlQHNtaW1lLmV4YW1wbGU8L3R0PjwvcD4KLS1jMGUtLQoKLS0zZmMKQ29udGVu
3112	   dC1UeXBlOiBpbWFnZS9wbmcKQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogYmFz
3113	   ZTY0CkNvbnRlbnQtRGlzcG9zaXRpb246IGlubGluZQoKaVZCT1J3MEtHZ29BQUFB
3114	   TlNVaEVVZ0FBQUJRQUFBQVVDQVlBQUFDTmlSME5BQUFBY0VsRVFWUjQydVZUT3hi
3115	   QQpNQWdTNzM5bk8zVHBSdzIwZHFwYmZBUlFFak95d2l3WW5DdGtES25iY0xrNjZz
3116	   cWxUK3p0OWNpZGtFKzZLd2taCnNncnpmY3FWTXBMMmpvMDQ0N2dZRHBlQXJrK09u
3117	   SkhrSWhBZlRQUmljaWhBZjVZSnJ3N3ZqdjBaV1JXTS91bGkKdmRQZjFRWjJrREQ5
3118	   eHBwZDh3QUFBQUJKUlU1RXJrSmdnZz09CgotLTNmYy0tCqCCB6YwggPPMIICt6AD
3119	   AgECAhMPLSW9ETmXSs5CVIeh7j00Boq0MA0GCSqGSIb3DQEBDQUAMFUxDTALBgNV
3120	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
3121	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoY
3122	   DzIwNTIwOTI3MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1Q
3123	   UyBXRzEXMBUGA1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUA
3124	   A4IBDwAwggEKAoIBAQCalSn6i8Gi44/oAVAn5GnCk4PHHNjrSfWUnnelN41KImVa
3125	   TC3D9zFCrS3i4Pa9ZgHyA5Qf8JW3ZmnVz5q7M8onZm7mZjqQeb6FUH4i2GMt4jse
3126	   2Dqs165ernT9O5NLFflHUjURca3ynqEBBV4DmhnZp8eDhv3t6dXyCjNHT82S6DgC
3127	   ReZuTtMc1zy++MxQlqdn9WZLhOAOpeNZKGmVwjeVy+8FkyzC3jX/Qcm+ZLCqlLqh
3128	   BwDHdZ5qDTII2PVX1X3K7/cONxhvBbaUl/k1swdszUtjhflyFZ80RuQ3qFC6vL/P
3129	   GeWy6SCf58duq/AOEksCAWlb+MD8QH9Yj7CFSmq1AgMBAAGjga8wgawwDAYDVR0T
3130	   AQH/BAIwADAXBgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxp
3131	   Y2VAc21pbWUuZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8E
3132	   BAMCBSAwHQYDVR0OBBYEFKJTQdVEPIApFXwBI/Dnjq/N83cPMB8GA1UdIwQYMBaA
3133	   FJEwjnwHFwyn8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQCBSXignLEy
3134	   nBakDKU68ro0RsyXWAPkfXgQLgy7GrW7SrZeBc5IEcjoN9f/gsOx/Ht9Ii6zyBZV
3135	   jdaox644DsiLOQEP4YMS7y4q94RFFdmdzEbDLYx9sfUhvdTxDNOOoHz53PYDBh4z
3136	   E4Nar2inC0D+VM6RGDy66K9l+D+bl8Wj9CyGUc1ppMNURexTg+z3web/eDOdu+F2
3137	   MVtluLihne0Bp1GUTkr0mJBolg6dSYal8Hw8/ANHpyExl56BJABb744gqoeuD9YS
3138	   HjKK49+qYC9faFmQ+mK80lh1M9RdNI7srjn0LKpuob6w06jaRzWdNeXzlEc2tUpA
3139	   r4vRhZjVD6FYMIIDzzCCAregAwIBAgITN0EFee11f0Kpolw69Phqzpqp1zANBgkq
3140	   hkiG9w0BAQ0FADBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEx
3141	   MC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0
3142	   eTAgFw0xOTExMjAwNjU0MThaGA8yMDUyMDkyNzA2NTQxOFowOzENMAsGA1UEChME
3143	   SUVURjERMA8GA1UECxMITEFNUFMgV0cxFzAVBgNVBAMTDkFsaWNlIExvdmVsYWNl
3144	   MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPSJ6Fg4Fj5Nmn9PkrYo
3145	   0jTkfCv4TfA/pdO/KLpZbJOAEr0sI7AjaO7B1GuMUFJeSTulamNfCwDcDkY63PQW
3146	   l+DILs7GxVwXurhYdZlaV5hcUqVAckPvedDBc/3rz4D/esFfs+E7QMFtmd+K04s+
3147	   A8TCNO12DRVBDpbP4JFD9hsc8prDtpGmFk7rd0q8gqnhxBW2RZAeLqzJOMayCQtw
3148	   s1q7ktkNBR2wZX5ICjecF1YJFhX4jrnHwp/iELGqqaNXd3/Y0pG7QFecN7836IPP
3149	   dfTMSiPR+peCrhJZwLSewbWXLJe3VMvbvQjoBMpEYlaJBUIKkO1zQ1Pq90njlsJL
3150	   OwIDAQABo4GvMIGsMAwGA1UdEwEB/wQCMAAwFwYDVR0gBBAwDjAMBgpghkgBZQMC
3151	   ATABMB4GA1UdEQQXMBWBE2FsaWNlQHNtaW1lLmV4YW1wbGUwEwYDVR0lBAwwCgYI
3152	   KwYBBQUHAwQwDgYDVR0PAQH/BAQDAgbAMB0GA1UdDgQWBBS79syyLR0GEhyXrilq
3153	   kBDTIGZmczAfBgNVHSMEGDAWgBSRMI58BxcMp/EJKGU2GmccaHb0WTANBgkqhkiG
3154	   9w0BAQ0FAAOCAQEAc4miNqfOqaBpI3f+CpJDhxtuZ2P9HjQEQ+v6BdP7GKJ19naI
3155	   s3BjJOd64roAKHAp+c284VvyVXWJ99FMX8q2ZUQMxH+xh6oAfzcozmnd6XaVWHg4
3156	   eHIjSo27PmhKE1oAJKKhDbdbEcZXL2+x1V+duGymWtaD01DZZukKYr7agyHahiXR
3157	   n/C9cy31wbqNsy9x0fjPQg6+DqatiQpMz9EIae6aCHHBhOiPU7IPkazgPYgkLD59
3158	   fk4PGHnYxs1FhdO6zZk9E8zwlc1ALgZa/iSbczisqckN3qGehD2s16jMhwFXLJtB
3159	   iN+uCDgNG/D0qyTbY4fgKieUHx/tHuzUszZxJjGCAgAwggH8AgEBMGwwVTENMAsG
3160	   A1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNhbXBsZSBM
3161	   QU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzdBBXntdX9CqaJcOvT4
3162	   as6aqdcwCwYJYIZIAWUDBAIBoGkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAc
3163	   BgkqhkiG9w0BCQUxDxcNMjEwMjIwMTcwNDAyWjAvBgkqhkiG9w0BCQQxIgQgGiss
3164	   3bBs4a2FSojj2NVcmGx+Y2J2N13x7iIWxuaypk0wDQYJKoZIhvcNAQEBBQAEggEA
3165	   huOPBptjY2fcRzq9DPryHFCFCPa75LnQl2zLijpFMW7qyswoyR6BguvTEzV4kBPV
3166	   D2Sbh86FibwmvNdgzzXc2PJzcj6jtYE0R58tdO/ks7qOeIbtZUgpZT3W/wlEpnmd
3167	   Pr7Df4oVEV9qS+vJh0iNASJspYwccPwIf5fKCPJf5H+xhQlSJ1rLIhw6Cu2ogkWB
3168	   bQDijNyjP5jM1X7Xo3mP4ReuauS4e0DnnRMH3pDGUaKAN5dnEVqdXG1C76+yOBwr
3169	   /foPN5vjE8RMtte3DtOKqGeWwsoEcjinU77z6d0kIWQqNYUNmqDHJ7O/yla0xG14
3170	   IPJnl/JphEWKl3FjI6iL4A==

3172	B.2.6.  S/MIME signed-only multipart/signed over a complex message,
3173	        Wrapped Message

3175	   This is a signed-only S/MIME message via PKCS#7 detached signature
3176	   (multipart/signed).  The payload is a multipart/alternative message
3177	   with an inline image/png attachment.  It uses the Wrapped Message
3178	   header protection scheme.

3180	   It has the following structure:

3182	   └┬╴multipart/signed 5528 bytes
3183	    ├┬╴message/rfc822 1657 bytes
3184	    │└┬╴multipart/mixed 1593 bytes
3185	    │ ├┬╴multipart/alternative 988 bytes
3186	    │ │├─╴text/plain 310 bytes
3187	    │ │└─╴text/html 394 bytes
3188	    │ └─╴image/png inline 232 bytes
3189	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

3191	   Its contents are:

3193	   MIME-Version: 1.0
3194	   Content-Type: multipart/signed;
3195	    protocol="application/pkcs7-signature"; boundary="932";
3196	    micalg="sha-256"
3197	   Subject: smime-multipart-complex-wrapped
3198	   Message-ID: <smime-multipart-complex-wrapped@lhp.example>
3199	   From: Alice <alice@smime.example>
3200	   To: Bob <bob@smime.example>
3201	   Date: Sat, 20 Feb 2021 12:05:02 -0500

3203	   --932
3204	   MIME-Version: 1.0
3205	   Content-Type: message/rfc822; forwarded="no"

3207	   MIME-Version: 1.0
3208	   Content-Type: multipart/mixed; boundary="c35"
3209	   Subject: smime-multipart-complex-wrapped
3210	   Message-ID: <smime-multipart-complex-wrapped@lhp.example>
3211	   From: Alice <alice@smime.example>
3212	   To: Bob <bob@smime.example>
3213	   Date: Sat, 20 Feb 2021 12:05:02 -0500

3215	   --c35
3216	   MIME-Version: 1.0
3217	   Content-Type: multipart/alternative; boundary="645"

3219	   --645
3220	   Content-Type: text/plain; charset="us-ascii"
3221	   MIME-Version: 1.0
3222	   Content-Transfer-Encoding: 7bit

3224	   This is the smime-multipart-complex-wrapped message.

3226	   This is a signed-only S/MIME message via PKCS#7 detached signature
3227	   (multipart/signed).  The payload is a multipart/alternative message
3228	   with an inline image/png attachment. It uses the Wrapped Message
3229	   header protection scheme.

3231	   --
3232	   Alice
3233	   alice@smime.example
3234	   --645
3235	   Content-Type: text/html; charset="us-ascii"
3236	   MIME-Version: 1.0
3237	   Content-Transfer-Encoding: 7bit

3239	   <html><head><title></title></head><body>
3240	   <p>This is the <b>smime-multipart-complex-wrapped</b> message.</p>
3241	   <p>This is a signed-only S/MIME message via PKCS#7 detached signature
3242	   (multipart/signed).  The payload is a multipart/alternative message
3243	   with an inline image/png attachment. It uses the Wrapped Message
3244	   header protection scheme.</p>
3245	   <p><tt>-- <br/>Alice<br/>alice@smime.example</tt></p>
3246	   --645--

3248	   --c35
3249	   Content-Type: image/png
3250	   Content-Transfer-Encoding: base64
3251	   Content-Disposition: inline

3253	   iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAAcElEQVR42uVTOxbA
3254	   MAgS739nO3TpRw20dqpbfARQEjOywiwYnCtkDKnbcLk66sqlT+zt9cidkE+6KwkZ
3255	   sgrzfcqVMpL2jo0447gYDpeArk+OnJHkIhAfTPRicihAf5YJrw7vjv0ZWRWM/uli
3256	   vdPf1QZ2kDD9xppd8wAAAABJRU5ErkJggg==

3258	   --c35--

3260	   --932
3261	   Content-Transfer-Encoding: base64
3262	   Content-Type: application/pkcs7-signature; name="smime.p7s"

3264	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
3265	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
3266	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
3267	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
3268	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
3269	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
3270	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
3271	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
3272	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
3273	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
3274	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
3275	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
3276	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
3277	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
3278	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
3279	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
3280	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
3281	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
3282	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
3283	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
3284	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
3285	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
3286	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
3287	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
3288	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
3289	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
3290	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
3291	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
3292	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
3293	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
3294	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
3295	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
3296	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
3297	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
3298	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
3299	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
3300	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
3301	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
3302	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
3303	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
3304	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
3305	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
3306	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
3307	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
3308	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
3309	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNzA1MDJa
3310	   MC8GCSqGSIb3DQEJBDEiBCAqHXFyYQoKOPnaQ8OYqY4ornV0eciFU8bWD8ky9iEo
3311	   CjANBgkqhkiG9w0BAQEFAASCAQAPH0Gm13RZy3gpCgSpM94kN7gG0Qz7gYXsP10Y
3312	   +A4JB3xAPM1deb6TWBBbmoX8KktiMIIQQz+im/6ab96G5VlvSXpaAsHjTg8pkvMS
3313	   K220ePIQLYGMgbf/h/CDO6kXr4D74QPwhaRzo/DKErgwlvY+osiwrC/srFXyv6M8
3314	   673VBGD5XXq8d8LSYQjiSpAQjyGu6Ddo4hZdRNzDQU6a6HRD6qYmaYszb9z6HMHL
3315	   AR28J5t4YynW2Hr8/4HSZ5YMt+sXjm1nsGGqLsOdxo6VmgKSiC2nhx7QbJhqevQL
3316	   CJWufMVWkvIX74TyfK6W0hl1x/pw0YfHnZMimppl69rRSEsF

3318	   --932--

3320	B.2.7.  S/MIME signed-only signedData over a complex message, Injected
3321	        Headers

3323	   This is a signed-only S/MIME message via PKCS#7 signedData.  The
3324	   payload is a multipart/alternative message with an inline image/png
3325	   attachment.  It uses the Injected Headers header protection scheme.

3327	   It has the following structure:

3329	   └─╴application/pkcs7-mime [smime.p7m] 5631 bytes
3330	    ⇩ (unwraps to)
3331	    └┬╴multipart/mixed 1565 bytes
3332	     ├┬╴multipart/alternative 936 bytes
3333	     │├─╴text/plain 292 bytes
3334	     │└─╴text/html 373 bytes
3335	     └─╴image/png inline 236 bytes

3337	   Its contents are:

3339	   Content-Transfer-Encoding: base64
3340	   Content-Type: application/pkcs7-mime; name="smime.p7m";
3341	    smime-type="signed-data"
3342	   Subject: smime-one-part-complex-injected
3343	   Message-ID: <smime-one-part-complex-injected@lhp.example>
3344	   From: Alice <alice@smime.example>
3345	   To: Bob <bob@smime.example>
3346	   Date: Sat, 20 Feb 2021 12:06:02 -0500

3348	   MIIQOQYJKoZIhvcNAQcCoIIQKjCCECYCAQExDTALBglghkgBZQMEAgEwggZiBgkq
3349	   hkiG9w0BBwGgggZTBIIGT01JTUUtVmVyc2lvbjogMS4wDQpTdWJqZWN0OiBzbWlt
3350	   ZS1vbmUtcGFydC1jb21wbGV4LWluamVjdGVkDQpNZXNzYWdlLUlEOiA8c21pbWUt
3351	   b25lLXBhcnQtY29tcGxleC1pbmplY3RlZEBsaHAuZXhhbXBsZT4NCkZyb206IEFs
3352	   aWNlIDxhbGljZUBzbWltZS5leGFtcGxlPg0KVG86IEJvYiA8Ym9iQHNtaW1lLmV4
3353	   YW1wbGU+DQpEYXRlOiBTYXQsIDIwIEZlYiAyMDIxIDEyOjA2OjAyIC0wNTAwDQpD
3354	   b250ZW50LVR5cGU6IG11bHRpcGFydC9taXhlZDsgYm91bmRhcnk9ImNmZiI7IHBy
3355	   b3RlY3RlZC1oZWFkZXJzPSJ2MSINCg0KLS1jZmYNCk1JTUUtVmVyc2lvbjogMS4w
3356	   DQpDb250ZW50LVR5cGU6IG11bHRpcGFydC9hbHRlcm5hdGl2ZTsgYm91bmRhcnk9
3357	   IjdiZSINCg0KLS03YmUNCkNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNl
3358	   dD0idXMtYXNjaWkiDQpNSU1FLVZlcnNpb246IDEuMA0KQ29udGVudC1UcmFuc2Zl
3359	   ci1FbmNvZGluZzogN2JpdA0KDQpUaGlzIGlzIHRoZSBzbWltZS1vbmUtcGFydC1j
3360	   b21wbGV4LWluamVjdGVkIG1lc3NhZ2UuDQoNClRoaXMgaXMgYSBzaWduZWQtb25s
3361	   eSBTL01JTUUgbWVzc2FnZSB2aWEgUEtDUyM3IHNpZ25lZERhdGEuICBUaGUNCnBh
3362	   eWxvYWQgaXMgYSBtdWx0aXBhcnQvYWx0ZXJuYXRpdmUgbWVzc2FnZSB3aXRoIGFu
3363	   IGlubGluZSBpbWFnZS9wbmcNCmF0dGFjaG1lbnQuIEl0IHVzZXMgdGhlIEluamVj
3364	   dGVkIEhlYWRlcnMgaGVhZGVyIHByb3RlY3Rpb24gc2NoZW1lLg0KDQotLSANCkFs
3365	   aWNlDQphbGljZUBzbWltZS5leGFtcGxlDQotLTdiZQ0KQ29udGVudC1UeXBlOiB0
3366	   ZXh0L2h0bWw7IGNoYXJzZXQ9InVzLWFzY2lpIg0KTUlNRS1WZXJzaW9uOiAxLjAN
3367	   CkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IDdiaXQNCg0KPGh0bWw+PGhlYWQ+
3368	   PHRpdGxlPjwvdGl0bGU+PC9oZWFkPjxib2R5Pg0KPHA+VGhpcyBpcyB0aGUgPGI+
3369	   c21pbWUtb25lLXBhcnQtY29tcGxleC1pbmplY3RlZDwvYj4gbWVzc2FnZS48L3A+
3370	   DQo8cD5UaGlzIGlzIGEgc2lnbmVkLW9ubHkgUy9NSU1FIG1lc3NhZ2UgdmlhIFBL
3371	   Q1MjNyBzaWduZWREYXRhLiAgVGhlDQpwYXlsb2FkIGlzIGEgbXVsdGlwYXJ0L2Fs
3372	   dGVybmF0aXZlIG1lc3NhZ2Ugd2l0aCBhbiBpbmxpbmUgaW1hZ2UvcG5nDQphdHRh
3373	   Y2htZW50LiBJdCB1c2VzIHRoZSBJbmplY3RlZCBIZWFkZXJzIGhlYWRlciBwcm90
3374	   ZWN0aW9uIHNjaGVtZS48L3A+DQo8cD48dHQ+LS0gPGJyLz5BbGljZTxici8+YWxp
3375	   Y2VAc21pbWUuZXhhbXBsZTwvdHQ+PC9wPg0KLS03YmUtLQ0KDQotLWNmZg0KQ29u
3376	   dGVudC1UeXBlOiBpbWFnZS9wbmcNCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6
3377	   IGJhc2U2NA0KQ29udGVudC1EaXNwb3NpdGlvbjogaW5saW5lDQoNCmlWQk9SdzBL
3378	   R2dvQUFBQU5TVWhFVWdBQUFCUUFBQUFVQ0FZQUFBQ05pUjBOQUFBQWNFbEVRVlI0
3379	   MnVWVE94YkENCk1BZ1M3MzluTzNUcFJ3MjBkcXBiZkFSUUVqT3l3aXdZbkN0a0RL
3380	   bmJjTGs2NnNxbFQrenQ5Y2lka0UrNkt3a1oNCnNncnpmY3FWTXBMMmpvMDQ0N2dZ
3381	   RHBlQXJrK09uSkhrSWhBZlRQUmljaWhBZjVZSnJ3N3ZqdjBaV1JXTS91bGkNCnZk
3382	   UGYxUVoya0REOXhwcGQ4d0FBQUFCSlJVNUVya0pnZ2c9PQ0KDQotLWNmZi0tDQqg
3383	   ggemMIIDzzCCAregAwIBAgITDy0lvRE5l0rOQlSHoe49NAaKtDANBgkqhkiG9w0B
3384	   AQ0FADBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzExMC8GA1UE
3385	   AxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAgFw0x
3386	   OTExMjAwNjU0MThaGA8yMDUyMDkyNzA2NTQxOFowOzENMAsGA1UEChMESUVURjER
3387	   MA8GA1UECxMITEFNUFMgV0cxFzAVBgNVBAMTDkFsaWNlIExvdmVsYWNlMIIBIjAN
3388	   BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpUp+ovBouOP6AFQJ+RpwpODxxzY
3389	   60n1lJ53pTeNSiJlWkwtw/cxQq0t4uD2vWYB8gOUH/CVt2Zp1c+auzPKJ2Zu5mY6
3390	   kHm+hVB+IthjLeI7Htg6rNeuXq50/TuTSxX5R1I1EXGt8p6hAQVeA5oZ2afHg4b9
3391	   7enV8gozR0/Nkug4AkXmbk7THNc8vvjMUJanZ/VmS4TgDqXjWShplcI3lcvvBZMs
3392	   wt41/0HJvmSwqpS6oQcAx3Weag0yCNj1V9V9yu/3DjcYbwW2lJf5NbMHbM1LY4X5
3393	   chWfNEbkN6hQury/zxnlsukgn+fHbqvwDhJLAgFpW/jA/EB/WI+whUpqtQIDAQAB
3394	   o4GvMIGsMAwGA1UdEwEB/wQCMAAwFwYDVR0gBBAwDjAMBgpghkgBZQMCATABMB4G
3395	   A1UdEQQXMBWBE2FsaWNlQHNtaW1lLmV4YW1wbGUwEwYDVR0lBAwwCgYIKwYBBQUH
3396	   AwQwDgYDVR0PAQH/BAQDAgUgMB0GA1UdDgQWBBSiU0HVRDyAKRV8ASPw546vzfN3
3397	   DzAfBgNVHSMEGDAWgBSRMI58BxcMp/EJKGU2GmccaHb0WTANBgkqhkiG9w0BAQ0F
3398	   AAOCAQEAgUl4oJyxMpwWpAylOvK6NEbMl1gD5H14EC4Muxq1u0q2XgXOSBHI6DfX
3399	   /4LDsfx7fSIus8gWVY3WqMeuOA7IizkBD+GDEu8uKveERRXZncxGwy2MfbH1Ib3U
3400	   8QzTjqB8+dz2AwYeMxODWq9opwtA/lTOkRg8uuivZfg/m5fFo/QshlHNaaTDVEXs
3401	   U4Ps98Hm/3gznbvhdjFbZbi4oZ3tAadRlE5K9JiQaJYOnUmGpfB8PPwDR6chMZee
3402	   gSQAW++OIKqHrg/WEh4yiuPfqmAvX2hZkPpivNJYdTPUXTSO7K459CyqbqG+sNOo
3403	   2kc1nTXl85RHNrVKQK+L0YWY1Q+hWDCCA88wggK3oAMCAQICEzdBBXntdX9CqaJc
3404	   OvT4as6aqdcwDQYJKoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UE
3405	   CxMITEFNUFMgV0cxMTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNh
3406	   dGlvbiBBdXRob3JpdHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MTha
3407	   MDsxDTALBgNVBAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5B
3408	   bGljZSBMb3ZlbGFjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALT0
3409	   iehYOBY+TZp/T5K2KNI05Hwr+E3wP6XTvyi6WWyTgBK9LCOwI2juwdRrjFBSXkk7
3410	   pWpjXwsA3A5GOtz0FpfgyC7OxsVcF7q4WHWZWleYXFKlQHJD73nQwXP968+A/3rB
3411	   X7PhO0DBbZnfitOLPgPEwjTtdg0VQQ6Wz+CRQ/YbHPKaw7aRphZO63dKvIKp4cQV
3412	   tkWQHi6syTjGsgkLcLNau5LZDQUdsGV+SAo3nBdWCRYV+I65x8Kf4hCxqqmjV3d/
3413	   2NKRu0BXnDe/N+iDz3X0zEoj0fqXgq4SWcC0nsG1lyyXt1TL270I6ATKRGJWiQVC
3414	   CpDtc0NT6vdJ45bCSzsCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQ
3415	   MA4wDAYKYIZIAWUDAgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxl
3416	   MBMGA1UdJQQMMAoGCCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIGwDAdBgNVHQ4EFgQU
3417	   u/bMsi0dBhIcl64papAQ0yBmZnMwHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpn
3418	   HGh29FkwDQYJKoZIhvcNAQENBQADggEBAHOJojanzqmgaSN3/gqSQ4cbbmdj/R40
3419	   BEPr+gXT+xiidfZ2iLNwYyTneuK6AChwKfnNvOFb8lV1iffRTF/KtmVEDMR/sYeq
3420	   AH83KM5p3el2lVh4OHhyI0qNuz5oShNaACSioQ23WxHGVy9vsdVfnbhsplrWg9NQ
3421	   2WbpCmK+2oMh2oYl0Z/wvXMt9cG6jbMvcdH4z0IOvg6mrYkKTM/RCGnumghxwYTo
3422	   j1OyD5Gs4D2IJCw+fX5ODxh52MbNRYXTus2ZPRPM8JXNQC4GWv4km3M4rKnJDd6h
3423	   noQ9rNeozIcBVyybQYjfrgg4DRvw9Ksk22OH4ConlB8f7R7s1LM2cSYxggIAMIIB
3424	   /AIBATBsMFUxDTALBgNVBAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYD
3425	   VQQDEyhTYW1wbGUgTEFNUFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhM3
3426	   QQV57XV/QqmiXDr0+GrOmqnXMAsGCWCGSAFlAwQCAaBpMBgGCSqGSIb3DQEJAzEL
3427	   BgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIxMDIyMDE3MDYwMlowLwYJKoZI
3428	   hvcNAQkEMSIEIEZJTcpCQRTwXEI88+nlLqN3b7JQ6wZ3y/JlosQRxxY4MA0GCSqG
3429	   SIb3DQEBAQUABIIBAEj1f7sJy7g9/S/3wXfUqyyg/3Sr/4H7n/Wyxg+FP74Bi0Km
3430	   Z01zoauH8fpjsOg0fS/ll14j69FCkaFUqHYotT6kojdodBRM36IGMIHEPPYH6pAL
3431	   4K4CPk62J9PWRwlX+6HYPr+WDfSjzGAL5mDTzYVAuu2aUn46SmTUVNDv3UBaxQCS
3432	   sghtVe1snSHpJYz3LciIWyKrE+Kpw+g6cb9hVY/a4p9jHu11x7MfCQddVg2qjZsO
3433	   9TH1X9hfSzxV6bmFRZ39+MU/mOV2pxVYXyDnk6BX48PVx7C5tFWDtr+hB5dEQ93i
3434	   sQt3VRgv6NwEiyxqfxyQhHgpJY2+DqhoFgwbhkI=

3436	B.2.8.  S/MIME signed-only multipart/signed over a complex message,
3437	        Injected Headers

3439	   This is a signed-only S/MIME message via PKCS#7 detached signature
3440	   (multipart/signed).  The payload is a multipart/alternative message
3441	   with an inline image/png attachment.  It uses the Injected Headers
3442	   header protection scheme.

3444	   It has the following structure:

3446	   └┬╴multipart/signed 5496 bytes
3447	    ├┬╴multipart/mixed 1623 bytes
3448	    │├┬╴multipart/alternative 992 bytes
3449	    ││├─╴text/plain 312 bytes
3450	    ││└─╴text/html 396 bytes
3451	    │└─╴image/png inline 232 bytes
3452	    └─╴application/pkcs7-signature [smime.p7s] 3429 bytes

3454	   Its contents are:

3456	   MIME-Version: 1.0
3457	   Content-Type: multipart/signed;
3458	    protocol="application/pkcs7-signature"; boundary="a23";
3459	    micalg="sha-256"
3460	   Subject: smime-multipart-complex-injected
3461	   Message-ID: <smime-multipart-complex-injected@lhp.example>
3462	   From: Alice <alice@smime.example>
3463	   To: Bob <bob@smime.example>
3464	   Date: Sat, 20 Feb 2021 12:07:02 -0500

3466	   --a23
3467	   MIME-Version: 1.0
3468	   Subject: smime-multipart-complex-injected
3469	   Message-ID: <smime-multipart-complex-injected@lhp.example>
3470	   From: Alice <alice@smime.example>
3471	   To: Bob <bob@smime.example>
3472	   Date: Sat, 20 Feb 2021 12:07:02 -0500
3473	   Content-Type: multipart/mixed; boundary="d03"; protected-headers="v1"

3475	   --d03
3476	   MIME-Version: 1.0
3477	   Content-Type: multipart/alternative; boundary="8d8"

3479	   --8d8
3480	   Content-Type: text/plain; charset="us-ascii"
3481	   MIME-Version: 1.0
3482	   Content-Transfer-Encoding: 7bit

3484	   This is the smime-multipart-complex-injected message.

3486	   This is a signed-only S/MIME message via PKCS#7 detached signature
3487	   (multipart/signed).  The payload is a multipart/alternative message
3488	   with an inline image/png attachment. It uses the Injected Headers
3489	   header protection scheme.

3491	   --
3492	   Alice
3493	   alice@smime.example
3494	   --8d8
3495	   Content-Type: text/html; charset="us-ascii"
3496	   MIME-Version: 1.0
3497	   Content-Transfer-Encoding: 7bit

3499	   <html><head><title></title></head><body>
3500	   <p>This is the <b>smime-multipart-complex-injected</b> message.</p>
3501	   <p>This is a signed-only S/MIME message via PKCS#7 detached signature
3502	   (multipart/signed).  The payload is a multipart/alternative message
3503	   with an inline image/png attachment. It uses the Injected Headers
3504	   header protection scheme.</p>
3505	   <p><tt>-- <br/>Alice<br/>alice@smime.example</tt></p>
3506	   --8d8--

3508	   --d03
3509	   Content-Type: image/png
3510	   Content-Transfer-Encoding: base64
3511	   Content-Disposition: inline

3513	   iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAAcElEQVR42uVTOxbA
3514	   MAgS739nO3TpRw20dqpbfARQEjOywiwYnCtkDKnbcLk66sqlT+zt9cidkE+6KwkZ
3515	   sgrzfcqVMpL2jo0447gYDpeArk+OnJHkIhAfTPRicihAf5YJrw7vjv0ZWRWM/uli
3516	   vdPf1QZ2kDD9xppd8wAAAABJRU5ErkJggg==

3518	   --d03--

3520	   --a23
3521	   Content-Transfer-Encoding: base64
3522	   Content-Type: application/pkcs7-signature; name="smime.p7s"

3524	   MIIJ4AYJKoZIhvcNAQcCoIIJ0TCCCc0CAQExDTALBglghkgBZQMEAgEwCwYJKoZI
3525	   hvcNAQcBoIIHpjCCA88wggK3oAMCAQICEw8tJb0ROZdKzkJUh6HuPTQGirQwDQYJ
3526	   KoZIhvcNAQENBQAwVTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cx
3527	   MTAvBgNVBAMTKFNhbXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
3528	   dHkwIBcNMTkxMTIwMDY1NDE4WhgPMjA1MjA5MjcwNjU0MThaMDsxDTALBgNVBAoT
3529	   BElFVEYxETAPBgNVBAsTCExBTVBTIFdHMRcwFQYDVQQDEw5BbGljZSBMb3ZlbGFj
3530	   ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJqVKfqLwaLjj+gBUCfk
3531	   acKTg8cc2OtJ9ZSed6U3jUoiZVpMLcP3MUKtLeLg9r1mAfIDlB/wlbdmadXPmrsz
3532	   yidmbuZmOpB5voVQfiLYYy3iOx7YOqzXrl6udP07k0sV+UdSNRFxrfKeoQEFXgOa
3533	   Gdmnx4OG/e3p1fIKM0dPzZLoOAJF5m5O0xzXPL74zFCWp2f1ZkuE4A6l41koaZXC
3534	   N5XL7wWTLMLeNf9Byb5ksKqUuqEHAMd1nmoNMgjY9VfVfcrv9w43GG8FtpSX+TWz
3535	   B2zNS2OF+XIVnzRG5DeoULq8v88Z5bLpIJ/nx26r8A4SSwIBaVv4wPxAf1iPsIVK
3536	   arUCAwEAAaOBrzCBrDAMBgNVHRMBAf8EAjAAMBcGA1UdIAQQMA4wDAYKYIZIAWUD
3537	   AgEwATAeBgNVHREEFzAVgRNhbGljZUBzbWltZS5leGFtcGxlMBMGA1UdJQQMMAoG
3538	   CCsGAQUFBwMEMA4GA1UdDwEB/wQEAwIFIDAdBgNVHQ4EFgQUolNB1UQ8gCkVfAEj
3539	   8OeOr83zdw8wHwYDVR0jBBgwFoAUkTCOfAcXDKfxCShlNhpnHGh29FkwDQYJKoZI
3540	   hvcNAQENBQADggEBAIFJeKCcsTKcFqQMpTryujRGzJdYA+R9eBAuDLsatbtKtl4F
3541	   zkgRyOg31/+Cw7H8e30iLrPIFlWN1qjHrjgOyIs5AQ/hgxLvLir3hEUV2Z3MRsMt
3542	   jH2x9SG91PEM046gfPnc9gMGHjMTg1qvaKcLQP5UzpEYPLror2X4P5uXxaP0LIZR
3543	   zWmkw1RF7FOD7PfB5v94M5274XYxW2W4uKGd7QGnUZROSvSYkGiWDp1JhqXwfDz8
3544	   A0enITGXnoEkAFvvjiCqh64P1hIeMorj36pgL19oWZD6YrzSWHUz1F00juyuOfQs
3545	   qm6hvrDTqNpHNZ015fOURza1SkCvi9GFmNUPoVgwggPPMIICt6ADAgECAhM3QQV5
3546	   7XV/QqmiXDr0+GrOmqnXMA0GCSqGSIb3DQEBDQUAMFUxDTALBgNVBAoTBElFVEYx
3547	   ETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFNUFMgUlNBIENl
3548	   cnRpZmljYXRpb24gQXV0aG9yaXR5MCAXDTE5MTEyMDA2NTQxOFoYDzIwNTIwOTI3
3549	   MDY1NDE4WjA7MQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBXRzEXMBUG
3550	   A1UEAxMOQWxpY2UgTG92ZWxhY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
3551	   AoIBAQC09InoWDgWPk2af0+StijSNOR8K/hN8D+l078oullsk4ASvSwjsCNo7sHU
3552	   a4xQUl5JO6VqY18LANwORjrc9BaX4MguzsbFXBe6uFh1mVpXmFxSpUByQ+950MFz
3553	   /evPgP96wV+z4TtAwW2Z34rTiz4DxMI07XYNFUEOls/gkUP2GxzymsO2kaYWTut3
3554	   SryCqeHEFbZFkB4urMk4xrIJC3CzWruS2Q0FHbBlfkgKN5wXVgkWFfiOucfCn+IQ
3555	   saqpo1d3f9jSkbtAV5w3vzfog8919MxKI9H6l4KuElnAtJ7BtZcsl7dUy9u9COgE
3556	   ykRiVokFQgqQ7XNDU+r3SeOWwks7AgMBAAGjga8wgawwDAYDVR0TAQH/BAIwADAX
3557	   BgNVHSAEEDAOMAwGCmCGSAFlAwIBMAEwHgYDVR0RBBcwFYETYWxpY2VAc21pbWUu
3558	   ZXhhbXBsZTATBgNVHSUEDDAKBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCBsAwHQYD
3559	   VR0OBBYEFLv2zLItHQYSHJeuKWqQENMgZmZzMB8GA1UdIwQYMBaAFJEwjnwHFwyn
3560	   8QkoZTYaZxxodvRZMA0GCSqGSIb3DQEBDQUAA4IBAQBziaI2p86poGkjd/4KkkOH
3561	   G25nY/0eNARD6/oF0/sYonX2doizcGMk53riugAocCn5zbzhW/JVdYn30UxfyrZl
3562	   RAzEf7GHqgB/NyjOad3pdpVYeDh4ciNKjbs+aEoTWgAkoqENt1sRxlcvb7HVX524
3563	   bKZa1oPTUNlm6QpivtqDIdqGJdGf8L1zLfXBuo2zL3HR+M9CDr4Opq2JCkzP0Qhp
3564	   7poIccGE6I9Tsg+RrOA9iCQsPn1+Tg8YedjGzUWF07rNmT0TzPCVzUAuBlr+JJtz
3565	   OKypyQ3eoZ6EPazXqMyHAVcsm0GI364IOA0b8PSrJNtjh+AqJ5QfH+0e7NSzNnEm
3566	   MYICADCCAfwCAQEwbDBVMQ0wCwYDVQQKEwRJRVRGMREwDwYDVQQLEwhMQU1QUyBX
3567	   RzExMC8GA1UEAxMoU2FtcGxlIExBTVBTIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhv
3568	   cml0eQITN0EFee11f0Kpolw69Phqzpqp1zALBglghkgBZQMEAgGgaTAYBgkqhkiG
3569	   9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yMTAyMjAxNzA3MDJa
3570	   MC8GCSqGSIb3DQEJBDEiBCA4lKOx9a084fB6gb7XvsxC6U70hVOXe3FjeF9sS6mN
3571	   qDANBgkqhkiG9w0BAQEFAASCAQAfMFJgqp9Vb8dS34Kz4fZfKGA1SMbqun/XqC6S
3572	   9/+EpIiDL54Mw3qug01eU/ms0YoBlu8aV/9CbC2DlOdPrFCRuHTWyFClWgi2X5Mj
3573	   fg57SXgGd1KJmhWAtcNuI11l1k6TeoI/pmU/R9tNKrF349tDVHZU/4GWUfuyiorK
3574	   t6TQK0/Vf+JUySQVCUqnx+Zb+bhvWmKfKuX0CJDEOyD+kH21ar0HMNGLK9S9R3MJ
3575	   dfL9+1PmXCXsTP7TIhmnwCJSpBJpmzzq345uu3N52/3SsJYrahIUkbPLnYxTAKDD
3576	   N1k0ijGbEofDEC9RtdwnoGPfv1UG95LK22Ys3tLqApQqkByY
3577	   --a23--

3579	B.3.  Encrypted-and-signed Messages

3581	   These messages are encrypted and signed.  They use PKCS#7 signedData
3582	   inside envelopedData, with different header protection schemes and
3583	   different Header Confidentiality Policies.

3585	B.3.1.  S/MIME encrypted and signed over a simple message, Wrapped
3586	        Message with hcp_minimal

3588	   This is a encrypted and signed S/MIME message using PKCS#7
3589	   envelopedData around signedData.  The payload is a text/plain
3590	   message.  It uses the Wrapped Message header protection scheme with
3591	   the hcp_minimal Header Confidentiality Policy.

3593	   It has the following structure:

3595	   └─╴application/pkcs7-mime [smime.p7m] 7345 bytes
3596	    ↧ (decrypts to)
3597	    └─╴application/pkcs7-mime [smime.p7m] 4436 bytes
3598	     ⇩ (unwraps to)
3599	     └┬╴message/rfc822 679 bytes
3600	      └─╴text/plain 321 bytes

3602	   Its contents are:

3604	   Content-Transfer-Encoding: base64
3605	   Content-Type: application/pkcs7-mime; name="smime.p7m";
3606	    smime-type="enveloped-data"
3607	   Subject: [...]
3608	   Message-ID: <smime-enc-signed-wrapped-minimal@lhp.example>
3609	   From: Alice <alice@smime.example>
3610	   To: Bob <bob@smime.example>
3611	   Date: Sat, 20 Feb 2021 10:08:02 -0500

3613	   MIIVLAYJKoZIhvcNAQcDoIIVHTCCFRkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
3614	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
3615	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
3616	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAFHb+aM8bhyJ1nFFuBDyyBVQf2IplykrvvYb
3617	   mKqBk08i2gecPSOMTkW5e2oQ4+WT4rtU4E0JXfMSA2KukKc+QUA3ycVCoL5zhetX
3618	   GsEx74S5P4JMY/uAoyBlEogGNi2lvagvgOGkqHJCZAjKjPNmqyTfafyv1Y4BQRQ+
3619	   WJi7mURDIbgrc0xfcC/yt7UWxFlfUhm6n7rTvRKhe4D0EOOB8yKupUgcDzBMTw5F
3620	   P9HEy0vFij12+LNKSsOPhVp0PbPkMCVi+ERtXEgV7C7BRVVYBiprpYJxJryO9t3E
3621	   jmIupqHZMgXxlAKFpBsdlPWfI1mrMVZTBpRgy8Bds7CORgWbs0MwggGEAgEAMGww
3622	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
3623	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
3624	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAX1PxPDDlV2Wo766+MhR82lW8
3625	   pD0GWAM1ScYPggh4t5OFmSjFtyiqawhMcQhoRsAkGV387oXupYXH/lkaD7nIdZW+
3626	   pZK1/RZUU0txvlsRIpJduXcWm/Dsu0lQtQSfcg5FaslSMjBpMI41BD2KC9M5meDP
3627	   NqHnzNMFv0ZiPO6x+bTCXhds8WTi/B2DDyXGjEaN6RUFw6rKNXwbXoR0DJCMosF5
3628	   55gQuo1k040YMqYRwdsJGETr/r/JaEPwNekogAfuXBkNE3JQB7aVgePp8mIZNIIU
3629	   0nP6eXp95UwLsoA/zwbOv9XSYgQDCcQ0MWycXmmn4ysbeWi1p7P+6CLwgx/TNTCC
3630	   Ef4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEN9EoELwqIPQUHcQvENM3K+AghHQ
3631	   7MaGZ6VZ5f9fpYjTHCbQSjcBtsF3qd7/z94CkYE+Fdt4Xtm91GlDSRONaVuT9yV6
3632	   vd3hoFTCfrX1aQSzzHn3SPtIh7ySaTG70ctsXP33UjcMjzDbvyvfIl1mxsct5rSx
3633	   e+cJ4z++pLB0vQeq1JlbuqY8SkSX9FyDZegnUD+zCB3qv7YSZEwD+EjifauMcrl5
3634	   p29hRgVx522WoILf6Ty14stVYot76cyOYE5AlEUMxBg98tLLzNgvgpevmhZwNzby
3635	   B3v68cMTXh8Zm8UB6F17oxdLFIszhEMnM4v2RSWB5O7L5C4ab+zWpB58AcOeIesg
3636	   E9TvdhcJVsiQHLMtVqxXcyyzlh/T1g1YZnfI4+Q0gNTTS9kp5y2Jpl8AWiHV3lJH
3637	   ltigpNDSlfbskC4ZUKNLmwMTed03kH2leAZGK9afAC+nNwKvSlhWovXXujmTwGao
3638	   8fQPc9cKfRS3tx5dOnEY5A6ZPbAx3SkcdHpUc/Z6Z9at0NnN80ppl55sichJeP+Q
3639	   yoWX/IMhZwNksoiP1Wqa2KYGk89l3EvBOOKMH3G/IOcilg75VxjfKQ/IrB6xrhb7
3640	   wY3YCV14MtJ4T9gi0rtkXxq6YfJ6LQVXP3BWpmlf3xwxQn3HUsQNFO/dESQMikOy
3641	   PgNT/wkwX0+v0XY59maI2tF9sMFiheLeRRjPDbwaXNCX4ghzpOA0KQ1+0/upcXPd
3642	   O2sskI3b3qh+gbRhTUOxAMA5i/POQ6QOj/0jxfbN081YdiHE49jlx5MA00u/yn2V
3643	   WKlDkXE570tX5Z3upvQvLVYuc7+hfsr0oIC/A+4UKzt3G3kjmHqKvkPeP4ytu5Cw
3644	   VxRQlhl+rWISO/EzflNHsgNwE/X3eOmub8vNl/fX9ng5hMVaz38pAQyQysr2Rg2s
3645	   ZDasrLS4kWuGOtv8gXD+Lm34r31bQfl+0NoVpJFV0iHYzBcmL+refdBec9Jfm0yI
3646	   KkX1YkAovvlnYL5ZYzP8E08hNtZW+rln041yyZa12hRlORO6lBqxb9W23vTgU4O4
3647	   vIRppUbJrf6tmYQMiYXkC+Kugur1nBJtEbLQ2WurYFSkdrrZYLg6+cs/K+sGgCMI
3648	   0GokK2ntwmLWHCVU9w15i+7G0HYxZkschUQeIokU2M6KePbp36Mb0vQlVJhlqTmU
3649	   HdW6EDk+iXDNW72gZccDyPhZbhZT2g4iWHl6xA5iydhE9le80boq437OlgMIHUkS
3650	   2+cEArcITxmKpDQWxREYF74jJyz2Yf8rZY4uI6j97+LHYlds7X5HIIq37xVUKUud
3651	   sDav+1XMQygilVzgdQ6MTKH29rK+/OKJhWZYn5HDGUIa4GzskjL9Sp93xG+sRvtP
3652	   tC2bhURNdHjg7HyyH+RldvxN74NiFrNCj39TXyw5Tzs44nxsVqghdu04BYMm5uGp
3653	   9rN4c7Asn7kfjg9rmntnmnmBotKncRM4W1ybT0zZ4QoBCvl2306QKgll3Qiv4E2e
3654	   3l/POH7VEtTBeYph3JUhCjoF/DU7lQetAaH3sKDdRqvxb8pjvQKI+q3NLUhYMLdl
3655	   /HqrtNXq4ItRsfz+yYsEKlw68fPncK4OEVjxD8e1kP9iccyhEWK9sS+zZmsJmRP1
3656	   +CzHNdV/3F4V2eaa+YRiBgerv8jjqKhozquzKBnFerDrGvBnctYkBCL04sGowv3c
3657	   uxADq5pw1sBo2XIwsA6/hKtCijpkIOiPjawE+uKwDiQdGutdxOx5v/wk7McMU0qO
3658	   tjhrKGa3WqQ7w9lLO/xqNVBsGxKSDsyCZuKnpYlg3MgRK5JEq7GngLiBKRN3EErD
3659	   f74gk2ZQ5l+41eokY/3YTYhAFnDabzhxLK2vZxuc5JWOScoo/Ej7AATgKkhr1U/g
3660	   CHvGyXxqrozMu/Vks564d4QTx7SHcOzJs0pIeN79muMOwEFYBKnQJWZPxyzZ+Bx9
3661	   p97BbhQwhJ3sCJPiwMrLUJCI3d/DDPkz8IPru7rBmuYfTJv2buakTrR4hwjg8oK1
3662	   2YnhHumejoHzR9EfDQelF3hYZSzwCH64ODMsSXGCRZjps7Gu1KWvdRxAiZHHCCA8
3663	   98vBO6pjBFG+J1KVufCTecBAyFKQOToYBMiQ195wzucZjnEeFtBDlaSwTJAx8rM2
3664	   ROR5DasKHRqdV6i2LV4b/3Xq5CUqZw3Q/kZcdSQTrqtDafc5lTLS/dPdCVWr/XAh
3665	   wjBgP9alKi33QhB73CFNTM4T9HAgR4SkqqpfEQEWkcJOIE3K7pfcQbplvR2uIIdg
3666	   gExjg5vyMloBFEO2YBcBi8bzUKF+sVpIkaOyfeD/tUydll0e/eDkwMD6Mx01ssgT
3667	   POJKR7EggddGlm/BCB29IekA5Y4Ydc7GslOFhO8zC2LCm5OHfNgzCaOos6lZtpzA
3668	   II9ihCb2/P0VRO0XSJ4RoR9Srj4DJji/VlzHqqswZJQyzqJMRJT15mQHf2tOmobJ
3669	   PCHpkJVwJNjHphbKTcqfokzHh1YnOvTJ2f0svarDhV8H3q9cM+ODMDPFOARjZ/hi
3670	   ciDo60l0MciMAYzh5CoAbLQgzlHNUZIM4CCqidPVzHyn1lIifhH+yEWkXkkCO8QV
3671	   1kDFbwmBhLRPawpIxsr7QuZ0aICJBdGZ2Xwx55VAbht7SObllNYbM50QeMtpzJC7
3672	   0vKgPkoctvuqR8vO4lsIqxUc6vtHW8C8YWHhz8g9oLBPeR0o/0I4+AePScm/BICy
3673	   DrnYGfFM9C/rMU+PateE/dvsGiW6dTm+9SUFqEqwIOazGfAwE83G85ZVePQ0Q7RB
3674	   jxvZkgnSg7DZkbuy1EmSRUa5gR0wttH+4jVTYo9Zqrjw7NOvn/OLIIYDcpxQBrUE
3675	   /ntfknMq8luYOMou8YJCIOtx/wL89sYZhJu49H657dGB/A2tpGRVSb82OIei7rhu
3676	   +9quDIPXoPgBcEPh8k5eLtF23XJTfTi2sxD7WU1XwhiX0+0CfvQNFt8ptJUrPB9/
3677	   GzNzN0brNex9YUbFEAeGh6BiopGlTAeauu/VSc6J0Dl2uxLtt/sqx5riBDvgiXpu
3678	   vp+N22l3sEjyMeQ1iO3EJKhAHNpAFbMi6uEeMVCNneg9IxJj8lodiCaWKxjQafhY
3679	   i97omBTNjLQWXj3gCyIr4gK8aD9jrcixrPrUuK1yO4jdSuprINoQcDLE1T/yPd/O
3680	   OTwDZewzygLHRI/2eg0JPHtjZer/m+stDLbRxnhKGfwjTR7Redk0cX4oLPiyVI40
3681	   mRZ30OkMZ53iYRvzrsChO+L7Z3D6q5nZ2vO5yKFvfHgcmy3RZW9WyaiCF+wnLGD+
3682	   gcOtrcMs+SYc1FO1xCpCNd2obYK0icviIqH4TpAuSrW0bYCtM6hzoDdbW1OBtcal
3683	   08D6XVsUPgy4o683tf5TyqMZYqEssG6UbY+O8HElcJ4p1jzb50VxwwFrMkfntREv
3684	   Birra5k4+/Td6nOWE/Ba6lCOWVC8cBy1qp0bkKsm1IWNrbbGZmfLx9hgfLtxtCZQ
3685	   +DaWbvzEEeH6qyGy8VR/rX6kU0+rHMIyohPbk35VysC/s87OfBsuUheFCigfC7xE
3686	   v69dle3NAnXQpCE8OyIlL063AWlQBxEvEMfkutCX9LM/w2h7PI7DGu71Naj1CxTo
3687	   g/74mJrIT9lneVCKlEpkmEMCimLd5NzjUcGatCLu574LfGpsOEDRUDvIi8HBJOAP
3688	   spptpgQ8LMAjnvWilPQZcbd/0WvRzzKEp8i5k3IvtVHi/aFu9lZvnopgDJe43L30
3689	   tT3Kt9d/ZjHRswW4MT8vnCiDkBNF7TTyTC/jUq6pOuHglfc5H6QRgEjow/maBCB/
3690	   ApoGhlvCv+7J8ExVzkesaqrcTWQpHmq2szcTpnnhjgzV5W9CHGv2R0GcqQGHvkBB
3691	   Ds4wYl+OKDQhXczbqX7C9bJOjDb6hhlQhTtlO1/M5iBdW53k2OCcliV056KNLFhd
3692	   yLDvXZg7r7IuGo75lb9urObCI/w2KGDfN3P4Y8yRseJeBY9m+txWMJNyhCyNJQnn
3693	   7jLZ3es8cx/zQC/6AUQtNrjHzM+sIoSxSHXnS61Akj21zY0qyn6pZalPgVM0HIy6
3694	   I5r4BTGdIeI/kc6LoKhrfgeQnH6PwZmmddNIFQo6la3lpXuWgOZfqWOILo7L+2dR
3695	   neQ5AYaQj0QdH8z8aYrIgwwFzxFzETtnGJkE/HoN/MNGSaMD2x5b4y8ObDpvAkG5
3696	   AD8/VxZOsBJE1hTz/v7DBFY062MdYDbKHkBSOAxUPMI0ivu8yV5JzC6+x/98L+C7
3697	   NJTs6g2OIWXqgAX+NHZbFDdeIYMcExoMH8R/mz1zLibFZG8f4Buv73rdhwuRQ1/F
3698	   aKAxL58efL/ppkEvFEGrJhOKtXjQv2mEloseTc64JuG7wXql0/LW22Fiw+b9vP8z
3699	   aowf6DrVDB4CiZBvbjpyk/t8EtByn0JLq+Qp/f5FgIglB0DWteA1PVC22i0zlg/d
3700	   +aVKtOHRCsJXupP+jIjdJUekwJSZCid72SmwS6lfCinpJlVedq7OOA/SrJ9eg5Om
3701	   Etg28g9N3x3BzC4Q+gI5CMSKlfC3d2xHohxxdkwO2MJWdOXbjwPaPxgqYbngJC4E
3702	   WLCXLPTLw6XuTJ6lQJRpF3kk6REmqnRlDz8Dmm3ocpCcNLa7Vo05LkCnZfUvmZc4
3703	   jw/2JwuLcZR9yooiuHRMZj/WOFzRhPmWQWwCESCqcKYfNnXLKVsOZfWaUbNapIbA
3704	   5EOZoVpFQYZRz00Q7vdSodDtJ0REPxvybjGomJTYm8VgsICQZVTAhU8cNkRgh3KF
3705	   tqULWhLK7TzOzl2rrr1+LuSq1pb+QM0Az4ALYByeWEKno920ZaCfa/DxxMitx/Zy
3706	   RDfAtYiUzOmtWKcJnGfPzuInCHQ7QRYh2+xDh/o9k5qSeSV+lrG4MlI0sptm4lfN
3707	   W6oEJR7Y99IoIt1enqjicyLDYpJavZCgMjHznCSPffWziOB8Vy1vpbs80mTQlvN2
3708	   J2V6HqLTgDg27MO6vZoBjjSjBdW+AJcwOzzY0eMvT+hEkLqcSRXXEB40Wr/qtwFv
3709	   aLYhIToRENyvxRbQGmXWL8iT2mCs57m1sr0tvP2t7J4DWbp4CoiPY2IFLC4vZLK8
3710	   KgfPwD1d7qdZEwykzn9tzisOdx83ta0qeXc02kXsvxglglxlhO+DL6oamH2G1BBz
3711	   yVVaDnw3C72aV6BKL5XFjbW5WdqKr0/2Gh8EE6IPZIw9TlMbt2TxSTdGxXDgslBB
3712	   plIDqlQo47imspSjw1lbZm/duczPWuDpNW1f9uHRyIPcA8QaqXA+hvgeLbVpJuJG
3713	   6Y11FEYeIl+0tX251S9qhkDCvZ8MIZZ2muqYoB/Bac/CsbkoGJHgF5kglRNBMCZv
3714	   aUGnTA/PaUEDyHJY74VsJJFVv8Hbsvwi5M0AUuAIIy60lGL3VZqQRdQjInJKEXIp
3715	   szLOcHyaL8tHY0IRSP4XaSR6hiEbFJvbPUIKS4TqTr9N+mT1FeVkJXxjGJVqwcxn
3716	   GSohbJc93gt3r2sS7HAr5fhJI3xDyXIYhWmRIQatvlKh5SXsg9wSVMNFn4D1Ql49
3717	   Flb9J+ydb3ENJlVnOaKGC/hyGhULNAUTDyg+pqz3Nu5lwejgFNgz3/W/KPNnIFnM
3718	   6vJto9bEpNKATOOBLXW20ztJCjgH0DD7AvQAVTGu8208MBL8PueUDlUysqZduTay
3719	   f2aVXIcEfPFwXR8lzHtDe87Iu/RqKwPnkHy+nFRKUSVhyhQ3EgnWZpLRNzHgPxvf
3720	   C74UbBFrBARWFRty28HGPqM75jNsOIsquad+9gxleRsuPE1klsjiXlvDTltrEYE/
3721	   EF56h9hdn88C7SEO4KFMbI/6ae62JQdpO7CPgq+5YGHMVUZeQHJZkfLAQUVTCRQt
3722	   cZH86BtnMyKPZeovEd0guyX0kv27gswviZXf1h0ey5voAGw0EH9j6+z5SN0sPhry
3723	   AzwG8mH27qDlrrGCn1gX5fOS39+xtuuseqAW+iQgDk9IGrqAstMQYRW1kRYXKQlg
3724	   y/1c1Q5/M6kyq5M2iI9ggd7hrqTcEh9Xy1dRBPdCljXyWZo2eTnp0n9whXZbMtLu
3725	   lIZc102dTwLWWXM7uLK3xDQS653AQKc8C46DW3GslHl5+jW00C5orPHh5xeLX9UO

3727	B.3.2.  S/MIME encrypted and signed over a simple message, Injected
3728	        Headers with hcp_minimal

3730	   This is a encrypted and signed S/MIME message using PKCS#7
3731	   envelopedData around signedData.  The payload is a text/plain
3732	   message.  It uses the Injected Headers header protection scheme with
3733	   the hcp_minimal Header Confidentiality Policy.

3735	   It has the following structure:

3737	   └─╴application/pkcs7-mime [smime.p7m] 7305 bytes
3738	    ↧ (decrypts to)
3739	    └─╴application/pkcs7-mime [smime.p7m] 4406 bytes
3740	     ⇩ (unwraps to)
3741	     └─╴text/plain 333 bytes

3743	   Its contents are:

3745	   Content-Transfer-Encoding: base64
3746	   Content-Type: application/pkcs7-mime; name="smime.p7m";
3747	    smime-type="enveloped-data"
3748	   Subject: [...]
3749	   Message-ID: <smime-enc-signed-injected-minimal@lhp.example>
3750	   From: Alice <alice@smime.example>
3751	   To: Bob <bob@smime.example>
3752	   Date: Sat, 20 Feb 2021 10:09:02 -0500

3754	   MIIVDAYJKoZIhvcNAQcDoIIU/TCCFPkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
3755	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
3756	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
3757	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAEqWQtP9NMp0lborDI5F55uEoZxerbw2f8G8
3758	   04jr822TF4ehQnzqtlSmtb3q7XZZGz3OVYv0JOO2DWrWWbSzaaWHXwJ8HdM0vxiO
3759	   87SvZMWXXzwrZSyrabmCte7HhJOo0FYqMphkC8UoGtIE+J5Z1XpZqjpiicTDHZPD
3760	   qKPIXCE026LS1ujO/1l/ON5cBrdMRlzEE/tnl2vA3e95pUEM2ILObukZPPKLiTfr
3761	   ejLM2/oQUklYmh54leeC3dQA0xIf0Wktzrp4qt/qJPPKI/RCw/JL0Saf2x005pET
3762	   PBRhxQdPEyjKfBRIOm/FMa+LkAqzjHlJI6MbYs7a+zAZvqH/tXkwggGEAgEAMGww
3763	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
3764	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
3765	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEABaLUv4/qgPpg9LQVoTctoa3J
3766	   8+wK32xlFwCr3LzD4A+3AZGAzqgJ6roO/cyDbz6swNjZQb6IvsHrxn2hCLyGS7JZ
3767	   pxaqvNh0MTZ7ppvAAMY/cbtim6oo+aR+YBFMuUejNy2Lf4g9Qugs7C86BqwT/DDR
3768	   8012vrQcTRVqxxgtaJtTSHXPZVQeoTL9QvyvBR69XJ4fNvap1F5CVPlGONwVWgYd
3769	   7u1FQCViH1ASwcJ2VMYTAp2vWgrghn6taCB5NuzPH6TLqXM33bzaEZ9+7ya0kOyC
3770	   h6PtoTm+Sk504F3qTf3EZ9l+pZw9dYKmHXnJSXzhInzob22BUwmi8rmAhyz7YDCC
3771	   Ed4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEECnEpHap3uuwIy1DMX4JXriAghGw
3772	   Y9Dgh6eaEPJSGb2YLpt5P4NZqy1iFQN5A5F/ejZ+0XBWbhPihaoCRKaixUL0XFx0
3773	   f1THjHHFDNcuiZ2dxbGtWtuCZkxt44ycJ2GOJpCNcWVnO0aJckEyiPxhjn4yu16d
3774	   pqbT2G4Pt6DEW8teMJFNpaM7AcGbp04KTf02zIy1PQRjQRafhFO8+7Jkm8ndRPUP
3775	   bNfOdLq+oIErDaMDlr84VyUEaSjJzIS5xh7+Igilk1O9cGQViTaOEtDhhL19sWrn
3776	   Tdmrit+/jso6IPZKIlkaA8U1sZ4B3gWEjyxOphDKmtzOY5P5hQNcbXquk6CQT+N0
3777	   2XB5h9OdYPQc5hSUY3PxG0WwUovzQGAQLH/LwCm57sjfSNdTYJO4NijQB5kIzmSI
3778	   8KLqLquMser7JzSyhGaatw3zC9rZl52FUohJQk3OSIzeMhJoXrQ1lyWEQOSfdCFo
3779	   +iaV7OjHoEYQtmmcamzZwOi18JN4FyufRh7DyCBi4RoDx7OwWgKr601VrhcPZNwV
3780	   r+8Ysuqprpb1YEPlE1cqL0ZxVX5z21UQ133U08p4CV9fW0TuuNnMFRARnfnwoXFS
3781	   ORqrSR45G/274tG2/j3R94EdomMSJ8/Zx/qf7fou+EkdhfVNB/6ANb2jAm37bUeg
3782	   I89QvN/BTVcXwhMDsYV6OqPMaHwD3B/O7yF8HjyRiVh78bUX9rU1pIgXSrmnnuyB
3783	   1noOrWKpacjxQenLebNa8CZVG4ZpQRa3f/NXOcS17auNb/qoT/xtgcTaWb6jF5M/
3784	   D3ulDiILH/jCyDaglL7ItSzTKu2BCH9tNXy2DVV0FSMTyfOLrYaZpYGLULvoly+u
3785	   yBqTQram5ZxmWjGhM80snWlmaB4kQ1FBWoW++rnEbQ9JEL+n6UxTJHBbR6bNuY7u
3786	   5jjYih1tEKM7Y6cQbWn/PykRIjP76mukR/PI84WHQGP+n6K8QjCP32Ij5v0BdXCN
3787	   KftDYROYNGK168oej0ozUpPnz5LJw3vbDEFzMVVCjEY2qOD7EdTFAYojNwL4IuGW
3788	   W43/PKeEi7smTQWxGWrbIFxPwuuNKyMOHLGiKXqSJSzj531jTiGasWVpHibEKlUS
3789	   IWOXef/7Q/PZvCa8vxmVGowSQ7gWQTVEohKi0MV7lYuxDTWRacPetjFzkwOZoTHF
3790	   5gFV+/CY2W5VXVSKIR5mr/jjQtBu+7LOAep2MGq1u1LZJgXDaOkPR5Rz6orfCz70
3791	   M7oE85uq430h6goP4YKeCU1sxSE9YXRqICN83AhY7JCzrP4bKVnKdia56XEmxMKR
3792	   LQ29Z2zSakaIPKbSmxMuIqknlOV29PGG1KztSDonWIFVVLJb6Qne8altI7zTxml1
3793	   IMi5zxcto96g35HGN1V0h9zJKA8xOf6q18yhfJnWQ0ONkMpfHrHPTOXaU1r4hzm3
3794	   mPEnuG94PWMw6EKi485rsY0tZgE/PZr1slDsxmAO6r06mqwc5NfNZoHwNl6WFWZ6
3795	   1uRmctWEMW7gHeqly4TfXH4QiRMXAuzDdrYnVjWGqNlk3zEY/v/ppxI/woU4wBmw
3796	   pxwr3LTvna/8jpkt060hM8ZUkAs9zYbtQBGLqrSy1prf+nplrXDQhkIgbV3Lpx2H
3797	   hdMljzMyvPJse5AyQ42L9w5SZa0vIA9t7Rn+i9LKxjpdMsY+zW7tgqMhRTd6U9pY
3798	   kfRsOnDJJuv1ypSBwbaEfZgiNtUkFwuzQRrfKLqjJeKCXw5cpad+f4xPPPc52UM5
3799	   RnJMTFe6UFlNmodzkyLr6pltMRmnLxs12uTXHR/9z8Ni/+mUWg8G/9aTwujB1JOl
3800	   6Le8TE96yPlWqF//qSz8WJVWgTrfPGpQkwpzBWaV251LvgKzETe16/EY8zo/G3nN
3801	   ahlOW1aeBxbKm2VwtGwZM84bYWaH0cLPAQAvkFhv5zk+5pgC98rwifhhXTefYA2P
3802	   0D950lUaTQTWkjrw6t2kzg6mQ7TF0Ee1i5EW+SxVKbd266MQgSZNhzXsFTgs8XA/
3803	   aNmXLx2DjpbQIjI5AzvE5YWeN+d5lHDee4Z54sDp6GsqpYj136AHZIE6I1jxxi8U
3804	   p7J7Bkc1zs/4FdY9cGfHTlhV7ugtaENq3w5whavoMgaQZIj0qi/PyLBSFrScCK15
3805	   3kfdaRRwdg4E43PqQDRW0e49oKWX6VxGzqVlsOhzo4Hq8GvMhvSjC9gJQK1hIeDY
3806	   otBZIhEmOZQBq4rlJ6nVaWEPJkfebn8GB2xkogf3j+o16u4rv+djux87+QJ1h+cZ
3807	   vOIk/12eJaW3cxzBa/ckfph6TAPM1wEkcdxpLtF+dbNc7WHXK6NV8P5zPBTq58mC
3808	   iCpwhMnRUKY78wOdsAK5/oXl1bya5fFBSrVf7lPPyADaw09puu5di9cJUyOGEcH9
3809	   dWWI29MnuhJ/+GPGLrT+X36CDc4UMuYHNqGI0Eqk6XuEUgZDwbsmpYUt0J2zBvu+
3810	   Rb4xAIb1a94wXzsAQ/4aVKaUSd6ofjycbzcc6aU1vyQtqAOZPFP7S9z3dyN1LCA0
3811	   Uiat5crCQbVhJQNVMabkFBOWIF5kGIIERqmupnlukf8OFS+XGw8t24PPq4os2MnP
3812	   xtdZMOlmE1wvFlcD2/thU8hfXUfYnT2qmObikJpXQE0e7BAsAnYQj6u05eboEhfH
3813	   1bx1ZsZX+8bb504ah7QLfuqwAg9WTzdWooCpiCuYlAS/I7Ey2JW1tna3BZMCYMJi
3814	   SOD4yZG62wfP4QZFvv4WWKyg+NYdPj4XkHse7Yd7qTI5mxCr7bjtccBZi80JU19G
3815	   w+OvdypURyiYXylUYolj55nFnEUX+IP3/pToBWpL7yRizP/Q98xEUjoOS1QV9rz8
3816	   ppg7XjBYZrns2JERC2L2xQUUfBgTtd28lNgCt02PwnF8F+KrS2w+kiJZI9CvN3ie
3817	   No/ufb4uOFLlJU+YWC2c1kBb+5bxF1uVN2jhIfZRNXzbGVVifpTsIaz/qddsFtnI
3818	   8Y6yhImBpFCrdzt9GjsZjdNRFwTy60fJrXdkzwQgTwR8k4b8OF7AWYPxqgLHRhRv
3819	   v2P26GOG2d7+BhGyZcaiz2y/eleV1eG/rgfqYHi+a3IDAa3Iq0hDg9IQ4x6/qh5L
3820	   viDAM70hN8kqGkg8//BaXvgETIIMyupmvi7nWpBVKozs/jGI90UCOSf8uJDDcbnP
3821	   XOnV47XI0XufAeIdxKa30hxw7b9UTqE6DAe0Vzc3qtWLscadPIxjHOoko+PGoUOe
3822	   A7w0vNwutU8beBDHkhz84Ni9hmSWOy9A+7J3XFMm7QxJJTmKoRe5bySvCy38god5
3823	   12WxVrlxuftoGPf8QYtLc5F7B+gx5i8Pv8eI/JJLMnGBdci9OUYkIe6IAw0zMxjz
3824	   0wPzIITHL8l5ejE6cc+Gy+SwVosoa0RC43n0AzP4BWu4wRmJungQTSzMUM+6xb2k
3825	   ku3XkjwdQLVY7qX7M7AbDr/7eK7ojWnixTyNY75zqObQaoyhgKJlD+6iwadbMVq8
3826	   SYpSY2EUnFSVM3+NeGVF/ANLoGcBHzYiokQy1HQZlTpB/2nYA3kBfL9mZoUxN0fi
3827	   Ca8uDcGvB0MsHne8wvOMv9A4GCYYHSQxZ+SMtylTMtZ6qENDdRSz7JFC6jbaho3U
3828	   KM5+8iyAbXOh3PnMNURtJ+9+nFHI+7Uiudkoel/ymgOZgJhrKkbSd6X9i0f2da/F
3829	   SeLx1jFtLx8GDkwZfI+8N/JOTsH0/0tI5gW4UUvWoRtF3XUMU6ZFPnkCK8GLUCqs
3830	   eCgzZdnCV0tYxvZNtQhZe9prONcE1bbRGCJ/OeZRNKKH2CrjdLG811wFC47KfrMD
3831	   xRTM9wFxVsFDyr6VyhxojPuEz2OjmxnStXyd3nofcVVr8kI9VxIqPbRTLvlzevRC
3832	   CMdeZPGMgvEPLXCWAkFTuqpTYwWBx+aHDGj8EPWoVKp/4DRwjwYMEyiErQjz+a6c
3833	   0Kg5lovwNc0x3w5qx+7aU5hA8JF8YGj0+Oj4HdNeFs0n5uAqSXI4IkaiMcik3F5I
3834	   pJRwI5VHLfm/UoeazisJ3IDq3TKAYpeh7lSJ6xotJkZnqlMBFzMA1vu/WMN8Ymye
3835	   1GUEFPLgoRiukUOrfqDC1pfgYKXtvRsJRIFMPiaT/6kGDMA6OOVRjNOBO44OxuJJ
3836	   N2o71Q7+J6/Rig2Gck7bEVmmaZdj/lgrD7H2Hs/aUhFS5vQzdCnTiXBdcfUIyHM3
3837	   AsrOlzmwPgBup6FH4GW6oL64cFGmuSsCzkCwdXJKNt9AMq5h3efJVWhnRnldAYKo
3838	   bgkLdL4u2ls9R802FQHqC9WahhGh7EF/fnVGE+yJkFI13jJUC7ZSU4W+QTLYR41e
3839	   ucYxmO+DmK9UDLOXyExJaSqohfaCba4nz+Dw2BFRSgV3JG3RcbsLsfcerXwQdyxl
3840	   R/u5ZRt3SThNNz/UIgkTZXTYMWZezQbHv6REvER0rwlDtMXpg0/rcPcH6iGSKEi4
3841	   Wn365bCmBTYHd6mCOh8p2YycZoQBgqGAxfSxz5q9OXJGIikrou7UfnSKTHqhubXz
3842	   PVmNwGbxuR5FrEYkR6sHQwpF4Hr9pbiqq4OZFXr0NvdC0fB7LL63x9XWV+TFXnPE
3843	   j9ycJeqxVQgB6fQ83nNfwb7WKCe4waoEARcZ2CNY14V3pePfZttMYwQDtHR7Ssko
3844	   VpjhgDqoQpMP3sdNFR7u7DqmwLkkhwArU1J0LynI72G2IutRxnOx4hWxiNizYntB
3845	   d9bjlUpcOt7UYf6mDnadqFg6gQa69YiYuRR5JChc1P6LUSVTyNNMkCznkoPVOWGm
3846	   VQvaEPkWWZI2/YSmZqtBsuE2G2ggK6q0nRXCO1GxjeNuoJkgaedceHrGFtnyfQBQ
3847	   gHG1j7L1HV840nwdJNS3nMhxceof7nQVsOyllcdHv7Flui5ZSxPzAJb6turW8ssy
3848	   xU8838uMVgqwnwVzj1Hz9mGguIeGX4rATS1tlvVR93GAebDWcEBiGg2hdJLfrvUF
3849	   Gru8B/HMtDc+HFwyDICgwVMrjixqb4QlOMZV8X8B2NdFG66U4KMG2KCmUeVU8ExX
3850	   sCMrf0/JEVC8uXZWUNXby7H1u4rMH257aYkhhXwh/obKUx9DDqkWxW8QFjNeCQYq
3851	   +ACwiXXJlWOPg8CSXw5HQHdTLJHDtUXQ6qGuJMJCB5VCDcnO4SRv93e7wxnqYqpM
3852	   vQeKYt1gEx2SBn79jgkoZUCJ+GKqqdA2X0lWs+n/yl39OSyckWHgEvHv+MzLjx5T
3853	   pAG7lMwClyA5Tg1xiuYhliensL03XmszIm9qLTRD7tQ05RwC+fzpmBa6sU4eyQUe
3854	   ZnLupGijRq4IbhFWng18sDrS2dyVnib3tS3E8dnn9jTBDXxDnQrfgq1GNcK+W7R0
3855	   n4c3EfHXenwQ1mkxdp5gefawftI8pa7VU9oVPdNHG2DbGtNfyrdcvKBjNV8k5Eq7
3856	   f2ScfXVavYXbDN0kFohBQZJCQNMEdrJRq6G1OoBmCu1joXpo48LWj/Wf4EM339nm
3857	   A0umfbUWwMMUHOtHDCdFwMUQ/pviN4J0u67f32f8WnK7FJGLqcKQSBmT710lp0wg
3858	   B1A2gBGUp3/OtsLsc5RZMSUyXYuqZ+qXjKkhEj8ApsB4sO8mEkho0KJRDqW0uu5o
3859	   yij7OfBY9kxe056y0xWee2Fw4O0SRscjAcuGkkiCZi8Beb9JriE5ddE9Hw9W5/Ai
3860	   Xyxn3C7Mv4ozpFzvKgw/bukNYIKdDZ2nWeqpnRoSyAbuHJ0FFdayEvx/XSSPdq/t
3861	   g3V1bNrMbZMYr/QJkQqCvncusXK5OpFeOF/2jj+EnJrbubrOmTR+GzKAN88Qq67n
3862	   nMRrQVCOZ+3Wiq1ykBY7nrVLfHW/AF8BDW+xqr6uNIO5u084yZRpStkE611JMZVY
3863	   MvTtm+Yb5trb/qUuzJbpgSRT40mlHynstp+vEEcM6ujVFSUEITFCQuaPKmZl/qHd
3864	   M+AqbdMRu6MLGBR1TX5rTVd6kIj2qDTmPbnV/6PK59T8Nv6Aekokdc5CtYgc4oKh
3865	   ftDRa60EjpLGiJgCQzT7khzTrHZMN9YxdtrTDBr4fHitqlr5RjU+Aymx+NL0CXmX
3866	   V+LiVvvQxHGpGiZEaV7onQ==

3868	B.3.3.  S/MIME encrypted and signed over a simple message, Injected
3869	        Headers with hcp_minimal (+ Legacy Display)

3871	   This is a encrypted and signed S/MIME message using PKCS#7
3872	   envelopedData around signedData.  The payload is a text/plain
3873	   message.  It uses the Injected Headers header protection scheme with
3874	   the hcp_minimal Header Confidentiality Policy with a "Legacy Display"
3875	   part.

3877	   It has the following structure:

3879	   └─╴application/pkcs7-mime [smime.p7m] 7865 bytes
3880	    ↧ (decrypts to)
3881	    └─╴application/pkcs7-mime [smime.p7m] 4810 bytes
3882	     ⇩ (unwraps to)
3883	     └┬╴multipart/mixed 923 bytes
3884	      ├─╴text/plain 51 bytes
3885	      └─╴text/plain 370 bytes

3887	   Its contents are:

3889	   Content-Transfer-Encoding: base64
3890	   Content-Type: application/pkcs7-mime; name="smime.p7m";
3891	    smime-type="enveloped-data"
3892	   Subject: [...]
3893	   Message-ID:
3894	    <smime-enc-signed-injected-minimal-legacy@lhp.example>
3895	   From: Alice <alice@smime.example>
3896	   To: Bob <bob@smime.example>
3897	   Date: Sat, 20 Feb 2021 10:10:02 -0500

3899	   MIIWrAYJKoZIhvcNAQcDoIIWnTCCFpkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
3900	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
3901	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
3902	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAEa22w/F1c0bIG8WvzjmjX22NFNUPhwFe1V/
3903	   qCroT/wns59jF5f1JcoqaBlFwKcb681of5DTO8vnSkWPKWrnokNw+n7WDxPDCt97
3904	   mpdL2yESFnqJNtOPRi8A+wIqaWL3tbMTcVmkNv2Z+x2gkdjvtXpkv1uGrnVdJ3+I
3905	   6GqCibr/IXM0bqpOLOpDAu3oGz7E7phULsVNqf5pKBgFBO2rz5LoifSfzVXb6NzA
3906	   3G2W2+ohE5tR1tEWif7EAVI/szW1nIHh3bjwvMIcL+LPVR4ktMZQMI7108AUb+95
3907	   HJAZQcl6eiyePfhy+Sep7ADdPufBa1sZE28NA6LF8OCrkRx1xVswggGEAgEAMGww
3908	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
3909	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
3910	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAcikf/KvXtwpXJ3UkcmT89anq
3911	   Gwo/y0iMoldTtl2ZC1RIivydxs2bZY9f4+aGk8eHlvqo/WKedsln6X6h/VuysHg8
3912	   LysyubrBhH7iTE636Jh67I+juBDcX8B7H/qc/lYsBp1ryJ5UGSMp0lctF5OSQsy7
3913	   2MJZkYHuA5EbDAHsUVmbTfK5ms3rkomKkDPeg55OV+aYXZb5KROw/mNzeK2tgvYk
3914	   ec5AGboecFaiedYYXootzo4XkbplhYLf0Pw2GnUhBvNLdzYEbKdB390EQjZI7liG
3915	   5sAbkYcjfQBfCwSrPHlGV+AwgldpHtIRrgYlxywI72HekKN/BIj/2AyxOcKmKTCC
3916	   E34GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEB/2upKq23GgsDZUcUo9+5GAghNQ
3917	   iuAya0TZqTCj2e/BIPKVzRT2h+7eY7OHIsBha+U8Xns2rMqCPtYEwYfyJAmX0nFK
3918	   tkaXj5MDdhXtSBATyz+QMVzEC/m/0+D5U7ssdE9dK1ZfxwW8DpYlzQvNfujGPuXZ
3919	   XP4m2Fwfy4If9itpq3cZubfD9n43HLDcIxiceNYf6Gp0ITvKGPW0z+AThblA0gdS
3920	   aGlRpRokqqYhwNqPS17KqCzSuZz3DfdaOis5d4SDq5l/BC7vSNLb3k10ERgZ5+dJ
3921	   +EaNyDlOuFqL+qm5xnkJzgw5iNJ7Gp9XwjTLbXNwmx7U/1n1X7PufBQPiKsVhTLa
3922	   W98kvrWzckKeHOveCjvjIsHvgtoKBO5l/PL1WINKcDTDH9iFO52FiGLdLtVimTLl
3923	   LqY7ysLEV1N7k7FpVR6RYYdKk6G9xEG3r9bIMlwGQAn4wLk70qFC2BmNGekpzG9/
3924	   muiOdB2XIaweUvNrYGB+jy4oqVYl7Re7+TY+De63ZCBx4odw8tDKgExKWoVHHYWP
3925	   eBxk1vZd/EZjwAkbHI4NMPajKJ+rdT1axfyvRxVfzINsJixkvp1A314fBbNtkub8
3926	   k9kR+oq6R0SxlMOgp9PzKNqkWMkmJyvOORb70BcagZh/Vii+ySQEtRIdoNUZUT+2
3927	   d+TYlunEGiNp3Ny+JvL7n5nSHE0WskzzQrGWV0mZX1pi5lXeaZPXorBt0JPk6H8A
3928	   bzm8480Ioo4QOAohfJsuztHmWlIcBX9KX/fBDzBYux0SGbbsTD3TWK/+ITUZASkG
3929	   gxxt6XJ98uJ/Fji86TMkiE5EZpAcsFQucELhe/IrdTT2sOc3C61c5i7VsGkiCpRS
3930	   URpHL0HcyOmvdLQIKPlpTxEku2W8mBoiRWXWs9tFOcmKatS97ZCj8SbHA8ptq1VL
3931	   0P5Wjuno8PghvVeAafPpq7CI06+EaWu0NETzfywAYhPIs6zfcnct8Zk7nVEHiDZX
3932	   cEBrILiR3pZdigh48YySLofFjYpj1vqb8GuRsVTIhQeyP2K42y4kUHkD7Nteg1Wk
3933	   FpA7Z3bSYwAJp/FGu8+Cc7ItaiMwNstOf+ajrbNkI2+tPJoVuXJmR5wLaXyMFC6F
3934	   PjFkUsJKpB6ZcEFYkJ16WxWYtysYn2FIcQOJXLCQeAn7lPw+awous3Gmfo0wjGo3
3935	   lXjZFKJxTSKsEpMyFPfCHSv6BCwMDfg1/29IjzvhmhGAijs8RHHWm0YexfTf724I
3936	   eBYvn0IpPxfpvlTf+/9gVU6Gp2hJ6u3zkbH/2d/30m2/F9DhDcT5IxIx/9B2r6o7
3937	   Qi0ln9Tx/vCawSIBYE07PCijretGbjthGQzOzXlEG24ARa35tCO4pgPfkD35VSd0
3938	   xHV2bewdZDFKTCpTatl0KhSgBwLeAixU7jBVrZR8VnJByjxWBgFLEDE8KzEddKn4
3939	   Nomaa1oifV+yVBwzzG2C1vZjH4O9paMGCfX3z8TWU90+tOhMmkpwyQriTLjKfIwN
3940	   cIEl2yii4eqWWrrU6gg9POEP04OhmgCsEn48SPlMxnQ6n6g2r0V+wCcow2rPqvjC
3941	   Jsz6VOnLZ1gloZwrJo3Vm9UBmNqiB/PHH/dDjTTRYf+FJFZ2A02Gdc57PQ6MWGYG
3942	   plbzAKYunqcYkVe20/qEV7E6nDaWBK9CkeT1tDB4PVq7MdrzmpgV+Ww7BZ5GVvnH
3943	   KTH+gxoGRd3osBXGiDXSJh1gLjCJeRKyK0L9h281No1WtoF0kEucHubBg8tei6BX
3944	   P4gYgchmcZ/vE3K4adRSm2bnudFRE9jM5tU2ttwxmsp2t+trVIc16MTq193JHYZT
3945	   SzIaxa7oshTxNVJamKzyeabTgeDnB0VQhPrFPxwCxssCs5NQpyWBP7ho+iaqMf58
3946	   tKgV2OegfK/6N33l45npAb2hmA9e4pGuPtbw41/Vvl9q5wdA5M1R2tdMN9PYHLZ9
3947	   HinWeDjg9ibHoQejI2Ji3pbtfqhhBVlVDLGOtJ+4Lc6PoFuZcrR2RWGQxtHOOSdb
3948	   R7zenb+kXANT9Ax0IRPr7MlJAt8etw1yswd/YUws4ifmrfGZSOp+tm9inXWCLzR3
3949	   4bxdlmsUL3AKRqsWQd8xi463Ye69G0W7auEaCl/GR0RnOk5L/FcxcGXAyPdcvn3q
3950	   +mYNGErvcyJIDHAiPbrTvLSrrO61Uy+qU5rv8r6D7JtxUubJujNrs29WmVN44hUL
3951	   SNcf1d/nLuJH6xXFOK+JheMjbb1wQe8fGh79sLoSqp+HNlHnBH+AQ68o4YgomUzq
3952	   0bDNjU3aYg8hQZV2vwpM+hWAUPqU3NMJGpR3k+Nji32R+0RhvdLWeqN1kfnQoT1R
3953	   4aJub4sThKfLuYV44UGr5lbfaZHyNDgjjTCD80AM41L5m/EZSQs91fjzumpIYwBl
3954	   QypmLkoUGiLOyBVP0wdpwmjA3IzbiWMbOmDKHXHsUyMCbxLGs0SYGS2rriwtcqCq
3955	   5sJJbn1l0PizytS8i/BrJII9Nsab1GtX2J35+njd32FsdtL53FN6cPIL0KcTjElG
3956	   4WOg//34Jl+MGbgVPjTurXXGOVZvsdZN4EHy+4rnfd4fMKRYT4HQ27gYMBXHIDHn
3957	   rm8HIuDZ+jYC8AKin3dxJcJhHlitKYTgCeEbzy/svlbhkA96MQaBjiSpVYrELIQ7
3958	   a7hZ5ud9S2Av0hwgcOiMRonpYCGtCdkCCyHa704w5hVxZiHelf5jThQtfTK86oJf
3959	   3HiCAcd3iUpLlNtxBTZ6fbF1yTymjcjO1iGL1wJGFanWRg2ZV3AI5mY3hMq7AtxH
3960	   Y/Bj90EF0sz1Gs4SSLlfYt9lblYjs7c7uSSv06GWIE9UbD8z7HW5FU5tK+HBjBdw
3961	   LPM8brWaTrwL3XzRy/w9ZXdZEPh70HUIMeTC+Oi71hgemjjQYZUDhvXoYVwaIU3v
3962	   CyZ5FajozqxAHng3E8i3dLOYjNygTlqQYsw9joGA1BA2EpQYgEUjSqhd47gXXtdo
3963	   qHRVrHIl9Iz6LAzkdSZrMwb1IJ6kBCI+aP9p9zygcLC9qTWUI6bye0/ICzGIPOgP
3964	   yQPZFiR0aOo6akIeDznSedHDhR0YN3RE/QMTVDk3v7vBtgyM/z9zDID7bScE/SJj
3965	   KjV5V6BDgnnavicg9wsxeqV9V/3cql39JugZR/ABxhy3E1fqLIc/G1ZYruGH1Oej
3966	   csJrtIOhX2Gq27Cq74oezEg5D6wEf4YNs/GNwBPo8ptu/hOIHEHwyKzX1GAQWgnm
3967	   Ip1+AtGXuZlOsWo+ZsrYjfgoL3ziKIszdBpUJTcH51Qlj7GoSjzyppyIRZZxqXBt
3968	   dl0cVI56eZD+nJuT2oFJN3Rgdv7VHOAOtG8kl5iwwsvT4uO7hA2pcAAV55OutMPm
3969	   vf78urtFFzenepJ2dgShgZB8K+FkWDNJ4dyYpajAhnnqkgvZbzDVd+Jc36UtZhnW
3970	   k90OpLrjc9nFTQkyr0ygZPnas8aKs53lM2TSQnRMHBkvoyswglOyBP0eJpptBiqa
3971	   mJDH5qK2ivjt+J77g+QkzolY0K6MwSELc0QwSGiK8z6XEktHYxd+O2Xda5j+mvAc
3972	   Rlcmgsk6HD56X2Ev5m39bMmAzCwXxH58xa4pB+0SAPf2IMD4iyXkOH9TMwA/yu0X
3973	   8usDaDjHPW0S7mjrrA5hvv/NPJHTmahlOPG9ddaEAXqr3JSCyr4/BfdLX1dDq0U+
3974	   m+unOyia9PPOSk+jNGUgp6Z4kT0cdh0d/Z4PiQmPiH9U9H2UTALqBw4NhZfCKlgo
3975	   2UMAhxv1bB/2ovqz1cczDOgCiNO3i49J7y3kTl7b6igRJo+/J6jJPPQXYs/K2h1x
3976	   MZamB266yvpzEQ5XmQVZ/WD0e8UP8PyWmALyhGObnucvDMBH76ENnpoiKG32qdGy
3977	   aiFbGDagENFNLURcZvcT/ov712ubwbfNK1U346ly4npNqJSCAWiw7X9wFJjnL175
3978	   aN0xf6Lif+eYOY+3v/p+TKT7X4dWLqrT0+G8uS8CWg9m5PRHCh6AWH6Rko6cJcpj
3979	   0Fiv9sxu+FSXCa+4N1p8MGEzy368JojdVB5RSE6+i4DFy9juKnH8xlTaJKTw6JDj
3980	   wi54YOxYpqJT4KLYy6ubzr0ka7TPU1LNdyvxoSDKGS549d56E/jP9jBNBKB5MMLI
3981	   nE57fAvuIoEZsSy/ndjmyC/BWfDDMXFZ0Y/w1n8OSph5sudLk4RCCsq+PeFMis7P
3982	   jZwliinGCoE67migyD2BygrIrj4p1GCfROgcgxqez5IXlxvl5xQtlQ/Cohq/HrZW
3983	   bg/HoXzJbbiZfy0dxv9rg/5t5WrzCtIq7TEvgyk9jPUd48vPBU38YXBPF0jxIAxd
3984	   WUlNZMELTHqGyrvaZFSRnh9Z9bCw6V3i2kRkSEfICZPygt+6ocmIDXmA0uv22I3I
3985	   uZJc7ykY7HlgfzrvgENSKN3bdLKfLH740tiBGfvxD/jyk0iBtY2j4lLmnaKeyZwP
3986	   CcZPmoh6iKc8zruDs7LA7v/zOuzD8Y3snjkmuh+kLGtdpP09IkYYdmdoYpPVkcb3
3987	   4Ndz5BjJ5FpRuRe69hBlZV73KZGaR6cHOPzfoKfHJo7dF8QNoK/RSP+DWaAV9bLu
3988	   6ZRKzgVVAR2QMD+3L3zOa1o8SIiSFKlUwR9B0oILEj5ue5bUes9zgIRmPn3ORBt5
3989	   SxegQO9L65uvcg6vnInvUe7BxIBqqxSZFyjCHFgU8qOrVB8+wB9thdTNXSfh9Qak
3990	   ZVtF3Aw14GdvQJaVCNu7jSDuUP6FykZjqLPSYQQqGJcBzAvaZOp6k5Evjnf/Mnk/
3991	   gPwfCeJdAXyJcxSbFYelbx7V7Xk/09OkHWN+L5pqCQ9BAMk3FXWiv0K7wme0iYS3
3992	   krs55liUz2ZSTlWVDdVxukBGoImY8A5i4+8SaOvVuITfvYhThfYS8ZiIKqgySeKe
3993	   VHQl9cfF5gzko8GFJPJB5zVwX1uUnjGerB8Y93OAaWE9/UE43C8QG5kSb7mLSWwT
3994	   OP0/NbLQWwax7L8jPzn4480ntX4AeOK834Dfx4a7blA9/fKtighNZQlAZ3ec0RpP
3995	   i0MiwFsZfqCYjDGHYhXGot9Ak2BwiN7Qpk4VHhICtr1nH6kJOhUbJaFSTHdRW29t
3996	   10E87vda3aDYjtl2Jabl8HqQSZCsJGUskc+4mVq42BQGzuFHxMiHI4DLvFyMpXnx
3997	   l48QAUnwDW5jtQblPSA8uBG+uKTIHOK/JKmHtPGIFeGMi1h8kEIbGEkfE/Pose2v
3998	   u31RQmBs4BspSiMROnGMiLH/aDWgSsBgT+dvsWrtXaVHISgMVERqfYgy4WmyIJyV
3999	   UQ04MxOoGjVr5cO8JH6IdT0TvHpagP/lVlb6Acc9BXSHa2eLAL/VEtm74A2tt8Aq
4000	   AYZ2jHlTtREgeU2PLfffLAZk6PDZwkNi6ltHb7XQNBnyupbfLiWpMFZCemVd0SG9
4001	   MxP6COt4ZQ4d/Khd3ZlVpDClsHX5oLy438m/4pjHEEVUrq8IwR2iE2N4oVqP8BuB
4002	   yj6jswjjEu1uxahEYUqagASBAZU/uoue4B/hPrMgx3vVLs18UYPSIvJ2cawRFtEo
4003	   PgFoTvS5uMDlOTcCvcW6pRksNQbOvkwgFa2DnpxAOKWY4o+6zhWcAzzE4o58m+hm
4004	   54sURdkwq9hoDKwv61Yw/OlI1DMSfoZyccoQ1r54PE0+rDcru4IPrPVsK65TMBHM
4005	   utS8DatppiLRuuryLd6YtRNihlELM6V64vPlbZi/i7allO04RQvHjy/vgZTHrCKF
4006	   lHZLaOAmoyGTPVAugiOVsLGc6SE/7P71Qxfmfw4nEAEkD5bDTLNXKrgSXN+26An9
4007	   pjAg/Kv7VzqkNvPeu41Y8dLEOA4LzUx00W4TtoJaGyOFY9jrOISPkYi7v9c7Onih
4008	   Qay38UcMyaHNrJ3ln45GrH4d6SyY3MFF9pCzYzhrYgMrrJoF12VGRL0CVfWEL7Co
4009	   lWmMQ5sg5vYAVEZmdZA/BjApb5/yByVwYdVEcO4YlyZ4IKXutyPDsOtHn2f1YM6M
4010	   eC0mZq3Wlwac4h8oGh+bb5uyDtRxux20x/mFBO3clrt2Xlxg3Kz+30dz0rwBcJNg
4011	   gb0McWbNuvqkrqbtcjrSsgiYSyc3+8jXBZTF+Gzb0lcQocDCH6c5EVhgkvJ0ZK1q
4012	   xotnpJ5KkmutQcEaxWyzl5CZZJvUatasOH+Hq4742stnIjtgec5S7Zz6YyzWL/uA
4013	   PbskoDQW1FBEgzMBwREQ4M+UjPKSsO8CAIVSreGTeSYYS9JAmfe5iGSTx7HkFRft
4014	   cP5KgEr1sm47epBnV7C9qAf6XVUWPpQMR0mbkn+1b+BYNE84NG3CCEDRl3JTs5fA
4015	   7yLCnNJ13+jmqjtyCtcbYfGVFiZ3xnPMTB2fbO16oTShsTx6jDr7bC+a959XBxWn
4016	   WSwc47R27JurX3+t7BkP0IYiED6yydVbQ0Q41E0p3o2Kec9VXh0fjIEuC6Ttctgk
4017	   JyAEwUylj/APoa//GN4qqHQFXIMALaxfwj/1IvyqXWEE5E6WCIhUdV3GFkMhztul
4018	   d/X6IOqUgQyas/1WakdhSpRiHZC6MXI5WUA1Fj7DqwlckxWDar3Poy9VsvtmP47w
4019	   zh5cgHDbi1Kz65mGK0AjVH1D9UYbOgkW6nAU8yO5Bm0AhS8bDceC6GaQzhhS6a5m

4021	B.3.4.  S/MIME encrypted and signed over a simple message, Wrapped
4022	        Message with hcp_strong

4024	   This is a encrypted and signed S/MIME message using PKCS#7
4025	   envelopedData around signedData.  The payload is a text/plain
4026	   message.  It uses the Wrapped Message header protection scheme with
4027	   the hcp_strong Header Confidentiality Policy.

4029	   It has the following structure:

4031	   └─╴application/pkcs7-mime [smime.p7m] 7345 bytes
4032	    ↧ (decrypts to)
4033	    └─╴application/pkcs7-mime [smime.p7m] 4432 bytes
4034	     ⇩ (unwraps to)
4035	     └┬╴message/rfc822 675 bytes
4036	      └─╴text/plain 319 bytes

4038	   Its contents are:

4040	   Content-Transfer-Encoding: base64
4041	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4042	    smime-type="enveloped-data"
4043	   Subject: [...]
4044	   Message-ID: <73a42f8e-8f5a-5c62-b982-82ace766fd32@lhp.example>
4045	   From: Alice <alice@smime.example>
4046	   To: Bob <bob@smime.example>
4047	   Date: Sat, 20 Feb 2021 10:11:02 -0500

4049	   MIIVLAYJKoZIhvcNAQcDoIIVHTCCFRkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4050	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4051	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4052	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAHMG7sjRDCJDMqgvQrFh4sk9MkaJJY7q6B3r
4053	   hY87n3jM6UYk/ZaBi9uzcB1pDAF0hJkFLmo+PRUbFLUrmeYfQI6OuvVElpwIDWMp
4054	   cMtfzlXgKAO6fh/On6aoVhpfv9EmaG1rCU5ezDPPbaXW8caNi2/yvL0ustpqKOTj
4055	   cOLgMK45tPcHeIaSD+8A4P0uf/GLzEFhDPdJrt3mVq76UbAoIGasA/sDhhg0xygq
4056	   ZH3IPQoYShFEUmsK+RC9Sc9dmXtVYPByCEsPdhTieJyjW695dde8xl7ZeWS+JZai
4057	   QK8pXZUdRL8El82+001HTXZYybfF05sFmJHQZ3LlftF2Dqs800cwggGEAgEAMGww
4058	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4059	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4060	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEALvjSc3y8/+aA+Mk2+8tupO51
4061	   fsr8cR8BV0+aR/CYDXaeAFg6CPk12PnLcpFRZDdqitxfe7SpMgk0oT3IsBxvuOsr
4062	   0QckRlRLOwlv43Y9jJFMc7VInrB7bJ/cPHHgB07tPtB69/Qf252gsUs3UbWko8JU
4063	   JXBkymfUAe5+x8/gGQYNJdvNC+v9cmnwTORFF/IJ/WcGsyHPhxguR+JZqIJkSI8T
4064	   xjawV40qcahz5G/O3vLI8kxW96lSSmVE9WIuPafsMbP1KZN/6i1gaUOPFcsH1jln
4065	   fdnk3fToayCGwOAQvh/UYvlGTA06Rtnmz44YLZiGbVLFLGlvcXFfwL1JLdl25DCC
4066	   Ef4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEJo6kOdMHnCo9aCxhG8k8qSAghHQ
4067	   oifxeGRuuDaxdcCkEyNhsAq0P92jEteuI38u48FqaDfBniUs9wmW/EiEaTmXWvdB
4068	   f7df3XeOK8yGqyR4pcXSYSK8iGfLezceiIwABbXRS8eLcNT9NPc5MPopD/h4q1Vq
4069	   +L1iuvm8P0OIh561cmKglrAmTebH1bnyjYLw6GH82/dscgRu4mihqvJTYQC3uaLY
4070	   H0dJnqyYV124/K0QyAPKCm3gR9gniHVlejlQKIVwOT649mTdZ6FVeMk9eaLQtKf3
4071	   mkx0trUzXduJnBj4cASKSovC8yySEuGwWu4kROF1g650ledfeU4SC9lwPwzvHPD/
4072	   lk4R/gUA0UAolIj7GaNDZ4CqpZqDYOG2wJvCQjfK7MU9TgoPsSRXhlmZPCam4ecK
4073	   gdybUd0A4UTQ9OlZiCrS0pDyKQyatn0u04SfKU/b97P9VwNageENErZTERoUx1T8
4074	   Vq9yBTKZIWoQe/2wsVvVJaR2+SXunrla9HDwpHqDtZHhR6i9TtnpO8KMOCWLZbb+
4075	   lVrxswrexUtGPCJRl62TBchhyO1dIyz8eWMiUvHhLUkFnSUGh81MdQKItc0qJ9g3
4076	   iu3tSd05AEHxNf+2hKrrTZzWCClatSvyfRbW6/OmlIzh9+JUyJLcCywJbxQUuWRA
4077	   5pc3bHrd6/Ff1dqgw1dbH9x0Q/r0lbKrWK98B+7/KIAfvy/XTW3NAJNdlzpzyhl4
4078	   Ko4ujuBiRJz0xRKIPSMOH4w76YejowDi4O5Ea/F44hlTop5N/lYNVkPIVnGYrEHD
4079	   7s05/cjQTX+A98PpoFVKHxphV+jRiwDz7uUYlW6ClyrC7/H7VkzdtPk07EyY+zXs
4080	   uThq5Js+uwgsbNqnA613vTEF0p8f8k5fLi+HSgL/TYz/UtW7JknTl6k7TvLXuQWT
4081	   UWmrWrD/UKADkkehGkZHpMZe+RaImwRd/x10M9+ZBovlbflDigfhRVimwTppKE2k
4082	   /S+GSXDs5r5ESN7OgIZv8swYTk6Nl8yoFijBD+wvWU4u6JNLl5RlJZZbki00Hhse
4083	   4Of2qogvmNfTpHbAU5DL4UWdehoK1fmPu4KaSpL2sRnTpqzyZEdAwG1JIOB0YAqE
4084	   ztszmcxi1s9KWQ/XdNJBG2QHvSMf4QTCuY2e+335Y9/ZC5WBphpAazRp9xfXc3de
4085	   Pl93N6ydfn09wT5k7TMeLOJrqPa84H06oRAyXqFYwiOVWRvyfrsInUv6AJfhRJBN
4086	   dA3ebIVCwrfG1w8OHerzDBo5yPc1ASLrmuPjaQ42CDrHqzfnMw9tHq5ZajoCGF60
4087	   4mzqu9/99upVaaToFRsA40lUpRN2QoOYUBOl3Ck34mWGWg8vf6akYADylm0SrpRO
4088	   yM+/8WeERonQcc3YqrmVjzM/yh4RLpl89oWWhHIHAAp1YyuwCj+kjiOq2HNhvyuq
4089	   9acwfjQ7mKBfK1i7PAydvWb9dt95VnY5LF+MvevJOdf1lEt6rISePs+AhoQCA1u1
4090	   B92MpDynfPUFoeRMx3do/zhVmY64qN7rlV0XxuuZXUW3WoopjdUzTmHycYBn7sM4
4091	   3U0d02yJgy+IqiTOusRaQGC3/IJiZmXoTL94wBsOB1++cP59GPyvm6qgM7iO9fUW
4092	   VO4ik8lTEs1WegTez1Lr96dwkPv6mfFJQIDlxVoZ4LVRf3FbQa9cZS7wxSe6hgpI
4093	   0Y6YB/s21v13GpCX8RtHEkEkW4Zc/9CrpUv+1/R3QXRvYOnQaWXc96w0/lVkoxCd
4094	   SRrlglhl6yY0QYvOmTbusUdC0QtrcQBRVcVeqqbfLhip9Nxe8vabPkoGQro+l5sO
4095	   xkO8YwlPt6oa0hh5NjqZaBpMhD0xAqHT0826xj7R5wp49KKtR90K4wuUy0OAWpFY
4096	   NdihvipP1jGuCio13PPc+Vah0+ACMMDvEWjYk2qEy2TRbWooNB9szzUoQ7P0kKJx
4097	   LfMSO7ecJ6sSsjcprsKzgOsjQXtIcAgRMnxFFaCfeg2zjW1I5HC+jbiNtqda0aQQ
4098	   L0RZ1a3KWIIPNBq18u+cXXjfaBy4HQhlXmQEnStkLrx1JuAI1wxhXWYdsrjJ2xEW
4099	   hQBjBwcnTAc5i/vU8H+oI1Pnc32DF8qfa51w1uLdoYl37PUMlerpXq+mPvL9cX/l
4100	   w2zd7Nc+UUezqOYPrBbwnrWOvG1msrjBPqKnJGHZJhlZOfLdmLa6inlsQBpX6kXb
4101	   K+8mpshqf472HOfje8/hrdLnOe9Qxdf8eNyi0DHs2MzxkYRktNJFIEK6JHo62NSG
4102	   /aM1VJbKudK1V7FFd/hrOAVg+uLbrsaFBdI6EE868qQpDThpd3WnyX8HztTkm7Up
4103	   zpPujeRarCgEk4RPLl3erYa7d+8lpD0hzZOlQkEALbSlCV0uTW3RSd60fNp4gvXu
4104	   GCzrJ/gsevjRJNggz3QojIXW9RFaU1Wwy80yIWdTguCswGBjMdUBRghKQlM6LlHU
4105	   qqXGdRL742XbYU76RVNlTnjUvAFvumey5cylAck7Lm68hV8rhTBsWMAJCP6VYhY9
4106	   i2AiW440gsNOWu/uCLBNpxPlfA5UFYNx3fo5XriyTPumhhkwsaF1N/jnWeXm8eUz
4107	   /ylnM5K6sD0gOX0ThLWVg90IC+qbMPNu5dOpCznI9DIup6dIhx8L2j+JoeqdsCBY
4108	   6Xt6KE8silLZAkYFFe5A57qlTq/z1s/p/6TlhmRP/2IC+2sSX9EBqXGDD98gy66h
4109	   rBapI4n5N6RNt1N5fnWJPVSnvFYIDQ145EmqPd/gUmMBF/AalgyLEdxc3xKOT+Gd
4110	   G0BcwQJdvmUp8rPGWgP5oy/qNIAdB3dnlfAdeOeeeiiGhaSpcwVhEaWOfYS+IXUM
4111	   kGWNDccjDIZHvGyLNYSihyAP6vOxZWzj2EWWUEAhtGodCQ74qm6JxRMGyVuBvyFD
4112	   MtZxMQE/AU/bPQmNBNCkN69NXyYW9Uk7p//Ef0EvZG4WYgQvaZ1u4E/P8xOL6au0
4113	   pDcB5UWRoqkyU7jguMb7f167iCgkRTTFSLULD+ljv/4zflFv4F6cQhv+NaEAF48l
4114	   fCUFjEMtGLCp99xxnu3M6CdiabZNCyuGEVkhzL/fq1JpVlgKRFeDFU/wfTe8D4QT
4115	   9tranwYyAVj3gd2f0ijrlQ5/9Ch0s83/X2CpSk8fHFOz3oBS7Gfyz45BugIhDqml
4116	   NkX8J2vKlCBOx2Xo/3waf/Wf3ajOEFXKR9fC+TSO6DrSS6XGBSQXn95SsWrzuA9I
4117	   RuemiW8+wYbygIW4auucs+V60BRwG0wxAzn+0lX7zac+WHjerZui+E/7ehmFc8NP
4118	   ZW/FVFtCYi6oc26dysKTzhpOUmh0WX4TvFHEx4KCL9QXTC/Ya1jrZTBFF+OtsJOi
4119	   oRDK2/yjrGU67Q1zK5escKJg0YdorZjMkfb0nNdjNOeJ1fLNL5eB8em/LEpaF+vK
4120	   aCWLa8tVvuq8ggUZ6PHQNkqeIssJoSXrmCfSP0DEtjk2ZDGsHaHOJ8KUBLR+wiSs
4121	   g+NRIG3Uvch6kARJqN3AgW1BySV42A+C6x+BPUEbcwDv3qz0DLmfNob4WArd+jyk
4122	   42Gnk9VL/bbddnhCyzYyHCr1D0XMIzewqzfR9ppDbgCLMxb7Q7a+8Umlkddd/aC5
4123	   wFUAVB88JT1gj+NqxHZs4BIStd91ElFslmx9yXD/dEUPGfqyl5tbTrbGQpfv393U
4124	   Q6L6cwZS11Rg+b7E777ZSuOWxJL92ATouJmzCYLjafI0jBN9BpGIymvi2QvUYgB9
4125	   9Bia2X/SRc1fc00VRK77c1GtW6Nj9L37eiXMKseQEWY3i94vY2Z61ytosB2BCcSO
4126	   R0QRJSWzXCXTJ6btCnFhZUuGhrnG6ibGKYmrTJTzNcrN4yJ/eByDqOc0YBUR10S2
4127	   uGMqxwB0adJ9ci+r76ZLzdo7OvTIb+WGbOP3IIYeSjIsymkc+ShbO4mAEcodrYX0
4128	   n3wYsjrhRYf4WIDxQhWJRUdBpty2LGl4OGUOTPOQPDaKwnGIiBUiT554NJMvv6WW
4129	   KLEBxtJlJQ8LhN/jo9ZwxwI/FZ68pd0h4r5Mh1atVxJHbLmnWmdd0L2b8w9UyBwM
4130	   ts/zY9bdjfndBgU3zmDsjkZgZdgGtzL9KbUwHDInvCKtODM+X7QQKHu482dRb/vo
4131	   uIkQDy6meuxdj8e/xzdSua2aSQhYaRXuZlE7uq4EyN3OcJB/rE3OR1sgKh5k+7hm
4132	   kSibtsFYYMWvBzh/Mata98kYHs6Bf+Rgx/FdA8989koFmkAb/B41NFKuTuS0DmK1
4133	   2SDKgHb6rmn+cftv1MOzfgJdnGObqa3NCEYnICWitPw6NAbqllvRWdKj2A91oMO9
4134	   YU1P/ZNox2vKWdH6rkpGfKJYVwdtVEwu1Nhaobu6p2c71RyCzJSYuAMshOyLXxgE
4135	   1mCup6EU6+IqLryA4WkD2IdpYbVP/tOdFLKY1fBcGJtSVdgJCXiC/krDLDKhrEkm
4136	   RCiIcf6ghGlEn0Jpk0xU3OWMh+kD01MO2IJuwk4TlT0kBRqZAtYWQQYQv0xecZ/K
4137	   DvOXZNUQQSzXFSpnGo7wOLoUh9gB5GOIbDqtAShYsCXbU3fuXl8/6Lojv+f0YBBN
4138	   capJh5oWBmJAmowJU3pL1JyABd5+R//cj1hQFApBKrs+cbP6ZO2cDabDWavBPPQ/
4139	   QQCPjbMENRsGrU5bdWRoG13qP8+FVk+aNHF0xtn+mc18scGhwfem6/hFgKyBCAZh
4140	   H7RmYuWoRZP73XPLYAM3sfwb1hLZSFNhbKHs0O/Fg2b5MkFy3DwttMbqH+2vDLBv
4141	   6CJ8s0VTULjSk9b+ddvk6rgUy+Nce4l3s8Gq1ZfUUdV/AfYeovwoUhCIkKYj2DFS
4142	   jBB6Zvoo8Z7zQpqNOHIiz+02zoYKtLconQWBGhVhn/A5ytYh05JZ72725AjitaE/
4143	   9iRvigf0u4hQrowNuR+5t6bjA+5nfpKimd/3G6JdvY+QcN3BizQ39ZyUrUr3pmY5
4144	   KkyHTZolsazk9ZKQY8LU1/nM2IraTuFzLhP6Mttj8DR+zXDjoPX5xxsr9VVWlcTG
4145	   Y1NPHo1SYvqScQ7K3LVVsiqAzbr7SHOABDF8ZtfwVqIDDmk7cubaTlUEdGA/tXTu
4146	   iQMYNv8iJ4MmE0tte0sRrPKKbnEPlf+UiSI2LDEYPuvXooGoroNFHzqPUX+6BswB
4147	   8GSEpsQDPzSJlYTugYrX+2PlM75c89dhfuidAHdubHMqurOUaWtTKTl57rd9en4e
4148	   HF0ZHQpXBgGQyQ7fT51WsXBZjxhWjHM4uDmc3WiST9DQX+blihwoOGx3moRbbAR4
4149	   UsUJ8lopNmbY+Pf5XGvp92PtxzIBJyJ1Wfp0nCX3g4LhuwHpi5JOGu2nfKD2LZR9
4150	   l9OehrIncV0oF5rcJWwKnRZbTBJgozaxKwkUUfp/qEAteGYxEeAJC0wy4ZD3N2cS
4151	   r3I2871gQAni/LsF8CEAPaXE6swdSsfc0GWTi5W+jnDh2oeAWeUOqb10+vwLikC+
4152	   Xm4VabpnHPZPiozLRL6TaVEqvmBpvUXgZffUIXpXHsWbVpJuPsIzMlmgeKEdwUvD
4153	   Efcmnds0p3V5B4ZaXLfR6aHdtrDT+B8eNb1bB2wOP/IA7Up4NzVf9BtEzq2JKj18
4154	   mtSbNmSuhSGqYP3fKWV4inAgRQiDDw3bnazMh/mI17qMLa25lzP9IJ5RNDRRWCjf
4155	   +mljnLpyYHb5RyZ4nqD4+w59YM9Q/v72C2cyL6WygYE4JVXIWdnrHPSTkjBBjoxD
4156	   P1WbthMP6DJcM5v9t8Rv8Mc8bPiUrKzMDCbXNcPJm1HDCnYrWXFYqOvUpKvWn6zt
4157	   Q39rPppCdrHkNzFS20MsvWiw9KsWg2rb/ph+qh418ac8VdyXNcETVgkLeYHnue61
4158	   Rbb04HvCvu3bBNjy8D6yRlFVIVxH3Zy7+iz3fJ70VwlqqpmlnMsidx3v1ykAeK1t
4159	   uo42n/3t82Dx/5s3p9rZnhWXUdO0etjL88GpyzvdwtkYy3Nj/8afvB62iUwZ1fR5
4160	   rcnklWkphSq9HL6brXQsS3lODDHsy8xIJlu5RrGD2MOIOy/rbMxNT5WnGoZ6j/RJ
4161	   Spn1f944h2LkyVFFNgIlq1W6MLfTNBrZZ6kMpJ8X39iL5KmkrQ1me1rgJTtM4heK

4163	B.3.5.  S/MIME encrypted and signed over a simple message, Injected
4164	        Headers with hcp_strong

4166	   This is a encrypted and signed S/MIME message using PKCS#7
4167	   envelopedData around signedData.  The payload is a text/plain
4168	   message.  It uses the Injected Headers header protection scheme with
4169	   the hcp_strong Header Confidentiality Policy.

4171	   It has the following structure:

4173	   └─╴application/pkcs7-mime [smime.p7m] 7305 bytes
4174	    ↧ (decrypts to)
4175	    └─╴application/pkcs7-mime [smime.p7m] 4402 bytes
4176	     ⇩ (unwraps to)
4177	     └─╴text/plain 331 bytes

4179	   Its contents are:

4181	   Content-Transfer-Encoding: base64
4182	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4183	    smime-type="enveloped-data"
4184	   Subject: [...]
4185	   Message-ID: <27139e00-e05f-581d-a339-d2bd43bd0f42@lhp.example>
4186	   From: Alice <alice@smime.example>
4187	   To: Bob <bob@smime.example>
4188	   Date: Sat, 20 Feb 2021 10:12:02 -0500

4190	   MIIVDAYJKoZIhvcNAQcDoIIU/TCCFPkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4191	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4192	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4193	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAFeMxt6IIoOR5Kq2Jiucu85qezrNEQcYm6sV
4194	   Cuo2f+/3QCmr85ho7PNGXSmj0LkmkvIAh4RYf2fH6jqYSYgsxQjT3jOcx70hhTms
4195	   zQV8e/UJvWRvxQHhPbtnDFketPi2CA++Y8zqvbl3L/dBeL+ltiQqcQprqy9RY5pH
4196	   FibcQ5OkxPIzBZQUL5NrjwRf16gujq+nGVrhphjwjWsCX+ypt6ZrrBPtje3Iudw6
4197	   /0MkMj2lJPEkgWvFEFNL/FkcNRzHlH3dQxqjaf28Jp7eY/3tF4NVHcirE9DSc6hV
4198	   7v5zVlVEtthdFE9shnbPxf+Sbww+M3ZTVOxJwGNwPwhM7ehf8wMwggGEAgEAMGww
4199	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4200	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4201	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAZ8MBsyH2Tp59sokhPP1DnTLh
4202	   iblpxffhKGR1N86t0QjQcmsND8MhB4aM7BtgsymR3IcdKrchClmkt6ATp9anhFwz
4203	   7U93WrdRIUcSqLnwoCU5P6lGpM+w6XYJqWjpU2Yd76iYLPOYBeAFtMbxdrOEwSCh
4204	   KZH2jyGohfZXtA8jwGbf3rV4sQ4EyZum5yfm0i8cOK7FPSPK/7pqtP797I9IBT0L
4205	   YdssDTrrNMDRBKZ8AXRO/UZFGyWAcX1SGSlwAQ4Ilg87lgUblYdKihC4VhH2Qn0m
4206	   YZG37Til6fmiZqAUFyJZp5nuJW8sUMzgrjzv8vuO5u66W7LoEhCQQYTRSrxFYTCC
4207	   Ed4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEAfIC8XIvnLoAcDMT8ITOq+AghGw
4208	   lTqzvMWiOchU/VM97L/Ya1UcMR5Gp9ca4N2T5OXhTDXkanfsUHQtiKBHI9XXBP1h
4209	   Modt75Gunm5g+Jaj5K6hI2OtXZHGJFrH7MkZ6ttTNUeIHqtjacCA8j6Bunoa2qmT
4210	   MCCdHnTipVzH8tFx8d5xcNETtOvuUjXwIpBMsehYbKBqpEG3qcS/Ke9chuwIEbwJ
4211	   vDwkagqw97Cyn+b+EWAj2hEKUGnS/YtzsrhPwkhox3M+MG7eCJ577KUmIvrJcOZw
4212	   d7vku5E0Z075QiAfw40KaHVkqHsEEuAJ6FtQAOpwuHrTTZkMkTiZpETf40N4SPWu
4213	   uk0JIZpJvbxnZvktxbCDZV9FrGV/6TCpFgo0iAh28LWcjVkiFTS1kOtKqMFQxAu7
4214	   78W/dA6JSkli8OYPhevcdyP8Ffyh+S1j+7cFirJPyKi/WS5oJn5vIZqzkJelySyf
4215	   vzGAiy84zd7AFevlZyHSJhYhvkpRa3Q9puIgF2DveqUvoFWuhhkg9SJ3QMGqVC6v
4216	   z8bPYqk+vG2btGT6FjlzZk/J0et2jpe+luFQ6qqVxQZQReUXaY3KZk3jSyub5M8U
4217	   RmIBw+lOeE7HXor+L/IMW2AV4TC45Crl61YlbOadPDyClJtsleWj7nlRkfRZTmAv
4218	   fgecHCgqAFIin76vB0uB7BcWXEJ1je8QBP9RHSadMFsxtO7QMwVXqMXLil4xaNPP
4219	   hUV3Z+YquW+rpMbb3WpFO1AzYtwUbagK08eIzQmEa3nrpiX0so42imrrde3VgWiN
4220	   l/ZRyo9cPuCmmsdsJkxGfa2pdTecK52lE3Add8BI4qjF+W6ZhZnEmzkMiDuHGmoD
4221	   OOWvV+yV5S40HBhvGFlbBQR9xjKp2k5oIWLiSSbeUxpTw96sQ8Viu+MLgjubTjrL
4222	   bvWPHJzykokgM0VgZs0MwDQ6TNw3sSeI4wB/5btssUmjTwOinqjHbVjyityjM4WZ
4223	   5u7z29MaUNUY3I/rTBvN/RllEh/dBBBh1hCjbywizIQtOv146GRwPUGZeWymkNkt
4224	   xRqRxU+ecdzT3FZIDMjcK4F1PqY0ylK06yevfI8mioUFU3HwNBpmkhfwgKx+K+WY
4225	   zoLatFBnvon9gemuVKvI/HblzOSqMXG30TQVzifza9Zhfeh9Hwz0cnknLCKYVyYq
4226	   NcQoTI6PyBZ44Rc5UmMr5o33OI0pffYHq0+QueAb15SskBOnCi6ELWBi6n38fVEB
4227	   Nh/7kpFO19JqXnUwrsl7jRMGp0gsM+sW9xaxbCkb8d6VOVS78gewysolaGe0AerO
4228	   qMQnNbfzbNH3IqxHGote/Y0husOkU5Kyglq6k3Aq7KCLtIlVLnyT+7rPmpf8jbrC
4229	   TlZmT3IaunHh3qS/c7xo0ybB1sFJzHdlrgwZ/FqMFGI65pynQ5zVGH37MspWs3L+
4230	   ZJ0w1nvA8W1e9cYGh41g/Ipz8Tl8hn4hhxP3XbQrPczDQ6i0cZn3Il84Iy0EyW/h
4231	   u0lLnQtzN9aes0ihuE8uL5H5DKFlG0L3zwE9eayxb9DXk+1wVLnCfO6fGHgJFNt4
4232	   tbFIDW6y1ZLvsNT6FZwJUiLD5i21UIaMUDossMBzruTMGp8sTPqadxEtQRO8u/mU
4233	   ezKAKFr0DP86svFjFtMUK8mp9trqWpg5c6ftgN/7uG4fzq5DKAcPFbUspLH9J+Mw
4234	   WcbS3bojohXXNtpV4VgYbdjOqNFw5P2tKHRHSYFyHmu7eznQCrgklNNONJFQA9dr
4235	   3wHvLNshSt8ECsLarvnHUxyLCqn/i5Hy3Elzalma1iL7wYp3/7i+rl+qx39U6RCO
4236	   1uHAZHWw2/IU5JkDkxjqRDOlkHgcfmwGdIBoKuHbcPxohwAlR7fD6ez0pnjW8RBo
4237	   AiDbgUB1rWOOrLKFQMIabr7QDFrnmjLRQ6f19MJUtdsktb5E+r5odPTE/87yPS6w
4238	   wZxtM3xoFbIkmjzAjc3URxJRtDNVeeyKOCvnyxXO/QSS62Rs10/gOGmrpdiAA0yO
4239	   F3+n0jCBMkhtMmP7J2DiCDCwTCuuFglWJwxfE+TzeOzEOiiH5Pjce9PBTRgHJfnS
4240	   7apBM8IT+HatvHMcC848/mtO7Sg1ZpYQo+xBRjM4viMwSfYX+HeuiTQ4X/AxjGeT
4241	   sSOsOmozJwJiRkzwB95wY5yaTuSBLZgk1w0cakzfk6elcxVYiN7PUc1/GOR43sp3
4242	   soZF7Q+vI6pIbDzOXGH5gE8yrutkDhHs6pnQJ5hVWi4KBo1R5dFNhYv2FsQHpVKC
4243	   ocw/Ng+jARRSHTEvRyvZTTe61evbTjG0ocCYx7j2rNsyov8MX4b1XpECBOdpOAUE
4244	   IcfQUUqYtgfs+m4h3QGlch38u4UVUPAbhqCy14HHSsmA2y097eej/A1IKx1Q7AAh
4245	   oyjCVIIrKtZClfkfu6gPq9ft3L0aYqwQY4Ns9Br90qNyC57zvklvZDziNDy+/5NK
4246	   9raZxhPSJzek09erc68W5mR1d/M3+hnHUJJtldIfd1Ud5LdJSnqUd/7f98xxFrSR
4247	   zxyxdyPyCnRix1+mcCRoYsFwkYtnocmBcuKgoNtiGpmx9KZfbEk85xHW4OOBZPus
4248	   BQReMzmCHYMPWTsh4RrP0BjLkdjMrlmwZ+P3fr1PE5CCTwie9z9hO5gXnrc2isRF
4249	   PMhm28AVdi7HHNHW0eCBRluz/TtgwZKK/ZsDJ9kx0NXCoWgvyLC2QhU9NT3q5jYr
4250	   LzSdyoaTypOzoYQT7rIgaQ6nyuo2gJ1rtkKYGAAWKp3Z8QIWz1VFV7XDXekKnPK0
4251	   i2O63tw/PtB/PMRXMqRvO4lBP+M3GY67yROQ75RWfvaAmQhyYfA9p+1FkLnaXlql
4252	   8sh6D/BSRAr0aaGBPdxY+M/WBNnIAr0e1VfcwUIav+x8j4/YJDGi7Rb8IJj3C7+P
4253	   9ev9NDQU3NICaUVlYOXo+PCa+WMVG6cHkk2u4GvYu2r5/v57RScgzDYpfOJwadAx
4254	   EINItmSH827SL6mLKPLPr6nvGhMZSONUSVk9M0XqgGWUVlFPh/Vc7PV4qpi8F36Z
4255	   i898n6XP7u1L7TFUvWYHEbsK5x71uURECMlkCr+tueRKzfEfRtfnpP12Y6mVt9JZ
4256	   fBkOGR8I1ZAoghQ0IsC0JP3c1f4z6msuZwleDm2C98WpohbHX3D1AnCFSPzl5RHS
4257	   /abEFkAJ2hfuaSQNc/nw9BWcceX1WNXxC1bA8GsXRguODW/BgfJ+lGsptFZORZqJ
4258	   u+XIpl7NaHPrQl8pnF+pRN5Zqzn+nDO3H0Uu5tdKKpk0spelQenzG4bDzy0UBJel
4259	   l9cTFLJwz0sUXZStIGz5KhwMiIW9O9evFGE6q8lm4LxUcG5OaSgUNmZWmJ2dGWGN
4260	   72Q7Qyg3FSZRBbFDkkBYAWUFrnjrHEAQSFsD9NVjrCAVEXEHfwnGncn2Ysh+gm8U
4261	   Poj0VWH6R1BIAgDQbITeskfo32dyIn9RHWPqwF16914VXndx/5XO/bORTCqQSpFc
4262	   vaTwSt0NVkFVRvCsGG74SCEznwBulWd6ijslVKnOrZqlMXfzPiNUSTk3DEdwatsL
4263	   12yNVNiKoAdKK9oxbIyMHYHJXJWVluhwPy4gS43ND2PllePBWC6DgnFQyIS2uPmD
4264	   sJ8V4fz6MYcLZQyfI0nOVwyRUE80vTKAczJ4u5hJ0HhhIXSoEqBJONSO9X1Ta7MW
4265	   uKmqm8O3X7JHEZcCa1kb1SO1KeFXtVXRudVLhPP5Lc+o+DaxfvtOEpxjD3wjB2O8
4266	   Z3fYwkH0aW3sDo2aWSTuYC98UJ0/imqlxG8+4FrkwRkaoGetwt6oXaDY1RXE8GDy
4267	   FOBIxBrxAncl1gv5dBxsjOmzQmNYCHtMG3T+AfDKmzsSRyPNWhi8NeEK9G0PThu1
4268	   LYezQjfKTm6zhq3Jlm6Fn9DZ3CxXU7MZRqrVW0yXgsjlC0Mfb2WKiXZB7PZ2lQKy
4269	   qi0hZoVubPHAoAK6rezhq0Amd0lf3K/L6qVeilFMD7ilcP7r7dW/6hm2ZV4WS7Ck
4270	   W3R1ERI/HDgJ15NnWyyaXqcbwaRhpJma70FWE6c3lm5s1mcu64txxJDJSB4E4aI8
4271	   HVkz51slcwbuE/YzdNUbNrr98iuAlh+3iJOZ1jKK3bHfb8zBZL9IDYFv+Hsb/fdb
4272	   tkTASb1fZUIp3u9OhvD91Vqb3IYriQiX8RB6/6cmvk3L+lbDGNk8leupqSPrhIOt
4273	   YvDSVbQSyE93KGdNbyUe1U/l3TervPeu2dOL1qkPFoEs+TXThUUxzjyCvp3kapmh
4274	   MmbI3pVHqZKLfGym9BZcm80gOVMLsD/ICYwLfmMQbGXOVvQRBvn0rVLdbu3YKOll
4275	   MZci10F9Usak+agLidFmLlCBWnLk3uBNsj1zX/KkSFMPp9RBCpVDdtY2f4Fm1SSN
4276	   Mg+dmnVNqZHQuXA/Z2nuxwGKxrWF29crk8Nakha13U0X+qnBPUnRrs7X/IFhpsY5
4277	   OsGsD3US2ACHpojAENsGoCpwJ0ydsQJ1926iSbQpcyL1avqxouPA70KoNWL8Jn6F
4278	   uuh/OM/NC2JhKNa3wbfMHg3btoAZiK1hhT8NKFbZ6P7QfDkrmP9j8kJK7nfWsiYp
4279	   psAur9z0EW//oWWAWR/xZ0E5rG0QUVfjTTWEMVQOwf6Q6cjJ1EhxYrpIj0gA56li
4280	   Cw+ZUqUAyl1FHFEvVTPAeJD2XyZW0jwxaL67DyyxeGBLJj5dzTBbBiZ06vkMk7b+
4281	   u5Z/iGaM1mgn3jS0y8a13WAn/y35u6HZzteP8A42ZL4+fBsFL6cmIrWDYsLYEmB6
4282	   0owZ5Iz6xmqLXbfwNkRZBDmixp2eeQPcMX8FnXK+6lZEl/AGlSlRSz5r8HoPOwI4
4283	   /3HE3uykVyRl3dWCnQG1A9V/2xw325/WgbvZ7z4gOxhwsYTNucIyCik3PR1j8OdD
4284	   GfEICpkLRCA/28hWE663wV93bRwVMqJi1MSTfxprAW10ChqZqe91RM5ijXbisdoG
4285	   yiwKF87xW5/lfEbBhVJAnXqjvjMtDZbkBEteBDMOJ4yR2lWOj8/F+96IPUulX6N7
4286	   6BGczTT+dFe22fgjFqjOllOaA5H9d0A2me1oaSpveDLWSd9k++tuhgbq5amEj0+V
4287	   o8qcJ8YydforXi39Tugm1elPjlJFSfG7uH1LFNzBBKp+cfDWBtfNqnsFUkJoXT/d
4288	   21Xwl9DKzGIfzcjDyrXDQEdf9Lzvh6VJ3CWJ9FwpbIw0rzo49ULXkl40Uyy9nhA6
4289	   JJlX1sI4q6yWxUTSXQunbZH6LogTq9FshR5xAhkHmJhjAdDMkR/d3cBcDxKs0pdk
4290	   5PPw7R1w43Ledc+sV73bvEmD7r+mrQXfbYhvkP8nmLB8VkbPUqq2dqUwvnAq8WkZ
4291	   ggzcOKk8vETew+4B+E1zC3wUzpL+B9O8qhIJu2XHQqkKJraDaB4k7/jTtlgVFjQN
4292	   J3swWfsiDRKYUrPzZfac8+smCyy6FN1S37fGLOAIaDFcTiO1fZc1OhCXRHI3uRpl
4293	   dNXwFG6OepZTs+r3yLEpqH82vnbak35zhJTZgWWlUutcLLYLuulaTv85TntCV5du
4294	   tEPiR2f6oxgo+96zUxxpFAMU6+EZz01IeGYy61+NTJ0aAOhWvlmpff2uDBEJtdnu
4295	   /i7WYT5qC6Pae0ZWIhseLGI1U/CUMfdY295pCfCQSTS8O16J93yHY5bWMwMyDw52
4296	   Vf584mGeE3a5/j9ju9qnjdl7Z5rjR7bc7oYKjCP+Pv+R3pOo7jhNhTKCbipvH2Ik
4297	   xi+aa9nsTlYgNFMTmbFljhcsiTbPSOw6NpNfJmynWlduqM2Ra5ZSMOjdKtOEW5mL
4298	   HKN7LhzMs5nWvxM2m6J26kzfbM3+d5W361BvgU6v9oCE8uSobGI/sSNP0kgGU9Cx
4299	   A9kSrxMnhahtlC02aROS08PSeAcErUnyKJLOdrcACRM/T6iwROLI38Nn3E/PuqmF
4300	   XDcN6aosfk5Gz0WhEuIe7o4bEDcHTKkeZ90/qNyJuCTwh99VUEeN9T6PovTSTYr2
4301	   xpl2Dca+KXzEcdmT6bL3eyrBAMRW8HyfYTxAJntty0pLOgszHc9Im6q5Y+HvKOU2
4302	   Jck3h1nygfBehDUwsLTWPg==

4304	B.3.6.  S/MIME encrypted and signed over a simple message, Injected
4305	        Headers with hcp_strong (+ Legacy Display)

4307	   This is a encrypted and signed S/MIME message using PKCS#7
4308	   envelopedData around signedData.  The payload is a text/plain
4309	   message.  It uses the Injected Headers header protection scheme with
4310	   the hcp_strong Header Confidentiality Policy with a "Legacy Display"
4311	   part.

4313	   It has the following structure:

4315	   └─╴application/pkcs7-mime [smime.p7m] 7845 bytes
4316	    ↧ (decrypts to)
4317	    └─╴application/pkcs7-mime [smime.p7m] 4802 bytes
4318	     ⇩ (unwraps to)
4319	     └┬╴multipart/mixed 918 bytes
4320	      ├─╴text/plain 50 bytes
4321	      └─╴text/plain 367 bytes

4323	   Its contents are:

4325	   Content-Transfer-Encoding: base64
4326	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4327	    smime-type="enveloped-data"
4328	   Subject: [...]
4329	   Message-ID: <fdccb76a-49ed-50c5-9030-e4aeb83d7f04@lhp.example>
4330	   From: Alice <alice@smime.example>
4331	   To: Bob <bob@smime.example>
4332	   Date: Sat, 20 Feb 2021 10:13:02 -0500

4334	   MIIWnAYJKoZIhvcNAQcDoIIWjTCCFokCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4335	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4336	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4337	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAFlb0uw75g4ZCsNeHmu6cGBIrI1m84iH5M8Y
4338	   h6VbVpYvAPA/KiFDEtYIW4jVzcWrLuDPIwDsb5rhP3fqOJVBb+aPueeX+1O9+3kF
4339	   2cbvhTGXV4ypzmLnflRUDcvJc48uin2W9r5jwnz8Hcqzh/hpxkhyjQ+A43PrkNei
4340	   xFk9DHl+TjlbDXIHDBpq4a9UO0DwX3lwzl6+0wqFrnbAKop04yJ11TLZeNlukxci
4341	   Gb6CO3J97HGPwe1agFIp8Dy/V6dV1oHYq2fYtwgXro+FIMKgQJrJIzO/7oXdFpBa
4342	   zR2rgtoj7vlilATvQjlz0TZ+EKA8bSMdAk4lqTt7jsk7/5ZBBrEwggGEAgEAMGww
4343	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4344	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4345	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEABqHnnpvSQAY9G9b+jB6pp/A8
4346	   ed7liUtmJEIpUdbJeWjK2wXX/ZMl8npfxptBfpyVUX/hZKv+7CEXxrR3HDmMhegU
4347	   zwTWcF39ZC2cIYOe31l2J+ejNPWr7447svWuKyNG/TeobeZBYsVw0s9TFKN8+8KC
4348	   T11WUqCA63rx4SG1Ueq1WjRc60fEPiCLrC9Cy0iNatfulUFiMWaUsenyUisqu9e0
4349	   pyknncPN27BkIPY1Zj1Ks1PUy7SwrRztAFey4cQ7duElEoKOz3SrF7vk8/k55GKv
4350	   Lh2WfTZozb4iMgqIVj15K3ARmgUAcoLrNRpFlia1MtN43YyHDzIopnbMLVPyuDCC
4351	   E24GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEENl7tFWc2MLAxbzfKk5mB5GAghNA
4352	   Xw+XtyPyo6kYsiwxV6nx1hSJyw4mPDO9YbV7MWEBXixmizwqXrF3MT9F6ummVZSs
4353	   6ZNGuQ8grRFzR7jjhZJX+plXiErAvp2ntmD50JQ9kzzrzLK4QvWyGIwqPbZ40wn4
4354	   gvk1s1fgWmKHzmku+ajHLgTDAdIhFWvPw1eiodSmVFWSMT1X/KhbTwwcit+mYHId
4355	   L4qND9defiJ9uuadxJeygvQqQbEI/OWxpmYBJxqxWrepc3RnVOdrDpsDx8ONVHLI
4356	   ujn1VaqKc7MFiNXJyhag2F5FngrUyl5TxvfwUmnmPYfwHBPHb9qAHslbnM4+4Mqj
4357	   Q6IY5cio01a2D2fFFETACMzKexbNKGgLzLv8DGIDcgRJGyLVL7KHXdGPG/cUwlTh
4358	   s5IAlFA0pKjZA/rwtgQyGA1oYoL5JThQmYuA0vOL6PuEFDL31vZf3oXKqaSEFoPX
4359	   cjzMaxiBktvqkGF7vyWDk3fGH4iR1Ttgp/xv8Va5Aw94aZORT0dcW2bPKip++11k
4360	   M3VnfL2hpl+5pOsmPDc2d7kXo7OUHkDl4xRMuz0P4HdSlKNH5Kz2bBlBJsuVX0hW
4361	   8GlpvV8NFcJd8ns4x+Xajfp7cRPz1vOP1ISoGs2z5CKvVUH1jEsSC4mWEWo3m7tN
4362	   zmyTqVhMVduAwKmCXn0dfNY1tOaZd2KqJ5/1DtOfy/0JpsSfP+TVe007asHhWEuI
4363	   6uSui1r1XNhXsS/GtIthhxN1Yh0CBMQ5sCQlpcPvbkckAdfh8gxWy1as6mdnSSQH
4364	   6rH7js2DErqn8SJUW+8QW6cIwXCMfuEwUR3TXAHZJZc4+FDzLDh/SFAjUqBAjUw4
4365	   tAzy8O1zM9lUNMaGFjvTulokTn8S8zdg2E22BOlDN6FDKa7xhrqJy4wMycinZxJ6
4366	   PhEz0Cci7O3l0FUoT6pt6WVZo/jwpjmCoY7SWIREzxn8QISqhOCsQiPixdohSQW2
4367	   5tsfSjC8VS75lGEHT4cqg8EZ4/oryfCLw4LVCZTeCl4V0xJFL1p6Vk0fgSOiN3B5
4368	   niGj6eOHkmAnANr6Okuro3ogwoRyOPhetiGlD1svYxvX87vLGxtHYu9+NU5ZwI7A
4369	   grRd7v0XuI3a1tCs1PT0id5hNWfxWYbJcHT78aPJTT6n4Wzy13pKIxkzromw8T+7
4370	   hYByBPXWvrULea1irKL1QQp4Gl3bMDmNH2QGd1l6WlG58IPLXYMH8R18JQg3YPZl
4371	   4ee+dXq40MaOPe+5TpDgBMWj5CTZGswLUOujsSvP4z+p6/N5H4erXNF54O7yBQ42
4372	   oxQjQupz0NhAouYmXcdnsSEc++VwNrgoaic9EyroUCNHvcowtBPsw/fhJ2TYcm2B
4373	   wUyNqfOaJ7VfqeYUZBXhJidTx3E2vvayQ7F4tY0QdXzcSa/4rO0IWnI4Sn8yBMmQ
4374	   ReVXjN2IqTdNo/fWg7sSYvTKLmqKIfGnEIt/+u+V4horrQM6HoaxXuQ0HP6ekEAb
4375	   GugQ44hyMwvKny3v/fhu/5g4y9V4hgyrwXTLoQYIooW4uzFOIbW3XzAOY8GMgIPZ
4376	   7TTdMGTXpQxMb0k7GoFafSBHiygruaJ2HDVaqpXAnOh33ZdbGHxdBhRPlxfzpT+A
4377	   bJ/P4JP4nG3MhrCtHbZCd6pKANcmLtCK7YCPfndumgqKPPl+Alq3QfwXwTnrksMM
4378	   Aqt+PwwNJSq2i/LuOZoRusH85FqnBAhAHX+yTinsUTLZ1cWh6fkfT3gHcAe0u1Kd
4379	   f/vBsS0tbbkJYu4LV1Uqxr6+mm7oZla/NkUZ73Edf7G9IzixsVRXl03ryB8sr56o
4380	   4ouRHAF815+RUFmVacuMGwpJrOs+ql6NNQblPkllveMBly9ak76sjnwX7LJUuhje
4381	   uxaipDAOmd/49cSsKGkzzzAUCW6Ug4Ar+a4fa95CuX2ZSId+I79Mg9GIXRAiz1W1
4382	   LUYHVf5avjvnsms5d54oJCKsukizbSq0T3ItofhfQt0osK9VhbmT9PlntwwjXY3v
4383	   5BhGkSp3CtOZpPjkrx6Cc4WNTBb+PX2ZTprF2+uWxxYbHKKyWv3eSoiJcpPkQUjX
4384	   U0ZaKIxDv1er7Lq8wwdXLjUH3x3KgO3YsofePYsOWmcp33+fTef+0zBT3e60sT8f
4385	   hnoUHI5OzR7dRqEiiKLFSN1Zw9fSXtp9cTxBeM6+jcjnZURoxgy6U+KbVnVv/je1
4386	   P5v3Wqau0FFFmWb5vPSlhHSF5L0z5CvCdWZaadU02lZmdRkYbBDtDADUlUfcQrXi
4387	   T+mJlCM9tAl3iCjm9Q88Poxcye3pri9tq+KqE1OUajmX38wWvlBISiXU1YIAxyWR
4388	   HjnIq8SZ3UvJzAkp92r+3ayy41CotY5o+RqG2ZZ/gAvH4FNOuzeZsDAJPeMR5ivO
4389	   grInuAfP6VeVKgvosaYYKvOL1rkm/acdKBs2wBXlKnceKR9mJwdnXvZi7ruILSpi
4390	   WaAcoNvxAPNfd8Cv12IXz3q5t9OTZhHKrXFMhpMRq1XOmMfIdzr4UJgh8A2LQDsJ
4391	   /Dqpc9NVfqhWVP06ZAgWQW3UCQ0AyVRwYpaUh7fsJdR+rthFMusNrt24aWkE7dtn
4392	   sXPrwC/z7e/nhhPnqUaDmEYqP9i4k0ITlnACDnZsNOUbbNB5BZChmdc2CvTHvkCa
4393	   KHrloihhUT0YWygKGc5BEKfif8l/BrUaDATwzWAGICAyWUIu/XR2SbyjmRrulvta
4394	   +dYMsekYozcKnTtu53JAD7AUun0Dj8Q1bK1i6UfJT/4fjvWslGrR3DDJwoaVC7Nv
4395	   t11hb+seTKdzBAtiF19p/ShhraL33qY9E+T7mo5paRO7GPVj/iOFtwUgUopKSt8f
4396	   BjzoYuwcZGacW3YuMd9qbV8P4V2I9GL+FlnOcutSIech9jPS+7Fit6A+J15Ca87Y
4397	   DlIh1n1MAjOK7IvKnq1UC9ly8uC5e3CUDNGs1rbg9YSHaqnTQ/bTJIjfR55qBmBy
4398	   eWK4/JNsE+gjQzWgWUccI1wDVvFktvM5dSIu1RiFEVHkzEcE8wQbMQ3i58EMhJg1
4399	   9ACyTLucKLuGJRm+CT+qsYXF6PEAXe589wo2wlg98EiQLfS5MI+ofrnMkpG1HNye
4400	   pLMo3YoZt8bUZo58v/e2XWLKXG/ELQ+u6X+MsvfWA12HWiwHb/zyEyZuNZDqVDpo
4401	   RkeLtYtaW/RDHyF82RyHYnmtG6xQCqsrsbtkWKVZCiVIcZONGt6Z/5AFnmJaMjZk
4402	   69ShU2R5x12WGXsvaDaw2Jzgb57DJfukOro2KDYebgTSRPiIAIxtinRlvrFAOfhl
4403	   4W0BQehOVTv3Z48i3QYWG/vHkJTHKgwB6fXesTa5ylfs+YKlwCoP11UlLrove/hU
4404	   cvXtsGju6y8Vs3ga3OA37Un2feDCZkNnpo9jUG8ULAmpuKlJX6otzxi/ZM61W/bI
4405	   5pvxe/GLm7f3zzbxCX16ibeO/ZbqPa6VrqZ5rSXSj3TP6p0IusQ3lqOrvib5VEX4
4406	   YM0g5A0VTFJj1yQ09KMXa9qHoxVq2Ux5ai2Ry2/8A7nI/SFOjEex6mpL/NoCMMAN
4407	   ionN1GU5Hx6oN3nS1nBWv9xNJW0sQ57fYI/gHzZ0mBn88RiwDYRoAWhR4hrA7okq
4408	   elg7J9X/lLDDrgIWNfImqQf8eu5MbJ4fteomo/s1usR0xEisF9RwECWEDLoHLG4u
4409	   m3VyXHzgHUbJEdxnOudweHFGfZDIncnCONYkQSC/IiU7p5t/AgfPyXK1kO+yrWkg
4410	   aslamfOG52KaF1bk+rMOSlD9vQoFQbh7lsRkHg/MMznqHwFnN+/+YM9zGHHNd23A
4411	   SyRnOHRVpfdIRPEwPKV0vf23v7CuajncmG35rl7ALYCPAr3W617N3/w8rNYiTk3d
4412	   D3gCu/gs0S6wOzOTsiMpA4fmsn0ze8GIQ+fkQefTa4f8VmITdXIAuh0uIeJcauqy
4413	   EMSUbsJshKgnXg9zAws19VVRz4tbbt5rgSutuKY2yb8y3qst3bOg/AYlDc8jU2Kx
4414	   k7unJAtMqNfDSFBs8yNd8iRh3OJ4u1jAYt3vbF+9EuGKvdmJStSJuErR165grMeI
4415	   4KaV0JacRThFzC1TW42qlNMx2GE567agk3SQ/+qrQJZ9LvJe5AUaBQU/Pga9S0Pa
4416	   t8k5qKewu9L3SFShSuqWjGTNdNlfRAzBj37I+l3wZe6SFGc7w/TBvkDcXBC58duV
4417	   oZCRMsSb2QwNpkwsicLXnPTtjqQBPPsEklS08pjnYn4RJ3QOQ5LRP0M4rJ5i17Qc
4418	   zO/BVXFtzP/SuGgrjWkEX9Qm3vgOLBGbNdk9Zn2uLtog7vrlSjydl6fYd0dF5otv
4419	   GpBBRvOxZ5BzP07L9CfzXyAMeDu46JRA85m3qEZ7CLwo/aIG0Ff33/yUh65AmUu7
4420	   /j7sLtICekmG3q+gzgreATkA45aVN3v0B3DsNHZnKPwIsit24FItq7mun5coHG6/
4421	   jPoIvLiqR8ER1PROs7S8khfPZk3o+uoJmk1cmSPQdXF91y4qYbCeSuod6FTJU9Pw
4422	   lsjWiaX5SORLkLKea/aNPC/s/v7zfe/Rd/3rDv/UtRr4Ys824X0qT9HKGRXpF0QL
4423	   R42XRcIi3rTBsOmalFlyC6Wjy1RRdGOBisZLnQgNI+enmkmN/ik7bbulwXujIlWW
4424	   gXHzxBo8ADKqtxTRrri1ahNzxdBjuIz7/TkVgNxkTudSy3X1oaqA2TDxW2E2oNkY
4425	   t7raY/bQV1JQra8YXe0rbYiia+u/vEfvEzW+5oGTz830wV6YqxLbTgNWvzYqw2ut
4426	   HDP5q/6YQgoAFzT3+jFbqaankizXQHnZbQFrdEQIom24i+I1wuVhc8XuJydWa5Zz
4427	   z6uitAZF/mxEQ7BoFjNXtxoRVdxWG4ki2GypiN9/VzXpRvSUkUEpb5itnQeo51P8
4428	   2sfTXLQtYKK6r/nLs1QwlfLqIUY73qAz2lStvI1P1ou1ORWK/Ksz6CF+kcUfXOB6
4429	   KGDZvl0NnYg9Tu79xu3sktjfGNC9vaev3MD23Q66xK2kLY3OMikpXwAybmrGdu3I
4430	   OQlZRWVaGCtnNuj6jweCS6vvZtjD5m9uqTvRAtN+pMcqzdMwJne4jh4ljFOcv69z
4431	   bk9Z+mxJ5wfQsRNaH8QoaQmoHGRksaYIQr4sV5L4rA60+AtmXsmTQram6opUAXIv
4432	   7G3ggWdzwt2Nd6iVuMAtq92hiedoOcb7qxCi9/z8kpnLwp7r4X4AzQRsiLq8w6vJ
4433	   rVu96hIxmdP8ob/XU0DXCnZons1fhlw1Qcw00JnxJdQbF2a8aUQ1yBh4ySPfBgZ3
4434	   9ZnZtgzmzHS3LCqEs52r9nJAGvjiGtnWnCmGbFI0xU3j61/XQy4LFQx2Dcx+DCnH
4435	   6qkYaxPJr6LZZQcobiYEHNOCjkajVFW/OTJjPoR6LsQletdRMjOTE8bggbHNEDGk
4436	   ghcwzKUE273LaTdJorbEqsfJ0ZJee3n5l2P2IHA4a+rCvZcXBNfQKlf7JkUabIDf
4437	   f7FPTY0yGj8MuZKzWWFJJ1myE3o73katd7f2cSw/Vi1mFJsFe9hR+9A3ycmjUSfn
4438	   fsaFJNEaMFYckdG5Bg8imadMBrKtO4GsAtEFB0c8qAFxvZClz4/hGXwx7oU99BNC
4439	   LyO07jZmQK0XUNXIwfaZZ5gyfCHQ8nu8AcpuN/7itIRA/ubHl6na3vg2eif+vcEG
4440	   Mh0gdQ3B8gKQ9j2ZYT3X6bpsOjeOXA1e3Xz9KXAgfzcS5ECQeBGPBdg+WIhrhfrp
4441	   WS9+GtY4J3YwFsB9QezWVG6jBZTk60KcqXZ/8JC1Sg19G1sOI/WZ2vyrFPw1mNif
4442	   95zdXk6pM5vyucfXQqOrcIpRmRMez7Dtf6hQv9D06XVbS5sht/bwTqwLXBUe7Vp2
4443	   QjlJhEG6LGv5zuEu7V1BaKfISyMV5YPCqvuF9emD+L0rLirsTgbrOQ10gezruXF4
4444	   r/Biuz07s51rGAahwuWj4vbqaD/onN0G7i4nfAx54YsCW1U4d87ty19K7Rcra93Z
4445	   PeYPT0gwEYcQsQlKVlrU8BmZLIeBOq4SKBIzl0ec/qd+48pPSuom+KuVT/LBiiS7
4446	   JtC469RvCKnlH/kILA6OatQGzYfD/R51QtW3e14LZaJBr102f7oQFFswj1K11Cag
4447	   ucIj54+UQTm4PEMW2SXsWBgwykfLfl1Aimbfp4BF4by3vqcd5pURCG8+B/++tL+n
4448	   DLxf02+KnPHZz6GRhhoGRoB0P4I98hC0/SqHMzbyLvsqDnOWesGUpzpka+JH0aTL
4449	   jxuSDtfR3oyEz6E2v/k66E3Uj5UaRVatOeow8AFZ67WTFmg9v+8yl5wTsw7pllMC
4450	   PNTy2aju5CZ2qP71LA7EprQLjrjc5rloXBGx71VvVgs1iSss/Irwy3WoaI20kXv/
4451	   d4vvl8mGy6Euha2Il+z8l5xCinZgdpf01YTboVBVa4NVhnvWIDihBp2BAIFLWq3e
4452	   I/jpu2+jfPBfPX/9oizqDpQayelhtUdXTL94RRMHR/z8NxdqfJ8X8xOlxLjEZsZ8
4453	   llPcVF7NcqciQEFfMJ7agW/FT6JTBqnwCGr0xXUXc6pRvZKi6qst1ReT7AmNmJS2
4454	   QBF5Rc2fX0e0qQjQEjaXmRymhxiH/sHslb8QNHFzgyw=

4456	B.3.7.  S/MIME encrypted and signed reply over a simple message, Wrapped
4457	        Message with hcp_minimal

4459	   This is a encrypted and signed S/MIME message using PKCS#7
4460	   envelopedData around signedData.  The payload is a text/plain
4461	   message.  It uses the Wrapped Message header protection scheme with
4462	   the hcp_minimal Header Confidentiality Policy.

4464	   It has the following structure:

4466	   └─╴application/pkcs7-mime [smime.p7m] 7605 bytes
4467	    ↧ (decrypts to)
4468	    └─╴application/pkcs7-mime [smime.p7m] 4626 bytes
4469	     ⇩ (unwraps to)
4470	     └┬╴message/rfc822 816 bytes
4471	      └─╴text/plain 327 bytes

4473	   Its contents are:

4475	   Content-Transfer-Encoding: base64
4476	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4477	    smime-type="enveloped-data"
4478	   Subject: [...]
4479	   Message-ID: <smime-enc-signed-wrapped-minimal-reply@lhp.example>
4480	   From: Alice <alice@smime.example>
4481	   To: Bob <bob@smime.example>
4482	   Date: Sat, 20 Feb 2021 10:14:02 -0500
4483	   In-Reply-To: <smime-enc-signed-wrapped-minimal@lhp.example>
4484	   References: <smime-enc-signed-wrapped-minimal@lhp.example>

4486	   MIIV7AYJKoZIhvcNAQcDoIIV3TCCFdkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4487	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4488	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4489	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAJG/Nu5fmnMkn1fBsCANbQMYLALsx0mJWEly
4490	   TzK5u5MUntTeOq+fVAUULIJkXaF4inxIe6HSau/bWDWISRy5txztdBIrGLB2RZt7
4491	   Yq6OY4UVqXmD3EwkUab9wJVVj1ZTP4O8ijOAfpCjJkzfcQD5J0ZLr3CRXz7JT1wR
4492	   CUHwhSBCMOuy7/lM2fKeyI+ThUNFUQQRECIjA0PmMrQt1dYM+bXNPi4lY9BVM5qx
4493	   J8DQG9XNcQtPsIfz7ELwD20a7jGykPYUHzyFE681x+4KTBKjRZb9t2Ezecydep9M
4494	   T92aV0ZU4A3Vd8bujGl9sUvWCbFR6/vhT9TOHHpqRUOOLJr20iswggGEAgEAMGww
4495	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4496	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4497	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAKUK3Tne27yc9+vIqGMeTO6/u
4498	   Ieg0Iav3LcaUwnCOGLjLZhlnpZEzC/SfNTobX7d/2yPH5oc4gDxGekJO2YyCkin5
4499	   RqpYlhIeCEWtii45otBUInis/kAroFNbe7TOfJ9ck5tVXxLJ0WwG4mW+CoMlRF6o
4500	   E7tB3VSvplzvuapfi2/TrLtmCDb4rlAfyhTIeIQy8J2LuSEbmDm2RllrWNVhVPTo
4501	   9gQYfEz9VxyC6Ix13w18tJ7vAgvECibxVDj6AVkAB6ThJJGle5YRQHsqbEDbQjBX
4502	   RBXfKBjTQ9eZqxRIKjfP11iYA+tNktr4WRyY6YUA1dWvb+GBV/qS2F78yjK4ETCC
4503	   Er4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEE9Ajv97rc3cRK2SsCiVP3yAghKQ
4504	   4aCK5bc+ic/OjQtKizK3Vidpqd/12OkW7gP/7UOS3BiPtRIUkwQux1cSiCmFa8FS
4505	   B2Hv6npe8PgIkgv6B4E/paVga591QdjPmnyoUmAWrH5ILbAdHllugybzhs45sSg5
4506	   xHftcE9xswAoBb0Es60qRMyNEbOilRKYIDVoXjFiyA5SxLCFxXZTveJGqQV6bErY
4507	   bEsTEhz578Cq+tMZVC6fRR/iSi1ZilyP7AYtCxUH1K5FSgt8qnxLSwk1kiRaBnMJ
4508	   Wtk3Ve+BETCUBTn6jYdL3rBLw8rx2bp+qUcVCu48KTW1Bk/eytSJ6Fn62hJnmNs3
4509	   m7U06C3nra2hvFWYhKva0JgOD+EyAiqGWwXOdD7jRS9js/dkFgguZVT9OewCvEb4
4510	   gGTXLtmTF5oiCipk5o8rRhQk8mkrXQSmfAkD0R7hav45BnaisfI+4rd3VRBqV0NZ
4511	   wXVFiOfEpq4hhA2fCV3owC+DiW+54F6gUEz0htkkfbJdD4r7+8u1Y8oLrEkPZGJU
4512	   7SOjAM5yC7TErr4U9FCligOLjWKmeKud+rV+AGKUVEtgXlAe1C6EPQDY+uToSsP1
4513	   bwRmAroLwBBD1fttSRuS7089AsGqDNLbLfhoxrwkwtyDG/1t0XbjWNNw+8a5y/nn
4514	   xnLklpqHvaHRSzrH6VAcSmrSuJUrJ+bxm7yPWqJbz17+8wrQa1FObsq7NBfUz1LD
4515	   93+hvKOmLVIWTpYq02QlkYgRNyEFSXgTbLslA5l9WChT75VhrwQrRT70JVP+RXwd
4516	   LT9su8myIifWOZpEIJpSgSMAJs7EPDJTdckMkBEVyiQRIcNra7lZsjjI5JQa6nVg
4517	   8pqD7tbH9ZH/AV/Z87q00VNUP3ppQWlkwaw3ZuLEH9DWfxVbrIxD+c9DjzTl+axI
4518	   voBsFnXWUQyW7CsirR0jhoM7sLcLXqv87UnwxlH7WgSiwkzNAoNj5gvZ8FB9xLw6
4519	   ZvndV4o8MOYKaXQuOkIo4fJ8xkjxa4g2suRFsOHUS8+EeuBKmMJhmOXx3P2TVFmY
4520	   jZcIPkXuHbJUMS3sCcDkwsN6Xbt7aa3jzqUpEJwwge3BG/1PC7Xeb4JgWH9uP5Hy
4521	   /JkC7Q4gfLcqXNvBE800MyGXpZCj9iXWNYSbAHLazBYpARpj+a2/nj+D0xjPYNo4
4522	   iwBzCBpOpva2C0f0MO7Axas7XDRRRuoP0bVeo/gDS7Nm7mq+HpH4RYdLP8Idr4ff
4523	   8wHmnihggUDFmvJnWAEePrMXZb2fCjr0zFAwHG7aL7GI4bH2tbN84uOYFGCUrAf9
4524	   qRe+7v7SGZIiQIXNvQCzsHkNbhSb1hOeAeKpMG+nkU4IHI2GGjs2291D7kEkKN0F
4525	   VA4f15pSlKLlEF8T4HhoWc8S8+sGxdXm4iujbis/yrkXH13bk46A55DNk+aCvDkl
4526	   nJatM4o58mMFun1LaCMUZl/AQW3CFDRJxOU2Ae7VbgXRsb6gokkiL7hmxC0fNXwG
4527	   ff75Lo6/MywhXI8vANmoTBVNeOCO7atRVdzYZ3xvQ7tTgUgr2BCDQlw+1aDLso60
4528	   SxunTtZxDECm9V8mWeoQjzmWYLuYeCbaUfeoY0dhQfwlph8tOrunEfwrbfCMK1Gv
4529	   QX5b1eQURzZ/owrqE9/fUHHY+EjMrxk0T6+45cA+N3oOJS32KkIgv6+91GE43YKK
4530	   9eAiDYmrBaIoDMXAzpW0yyWmzPjSuKuolPsCKnVeMN1bM/1Iib1/lyjF0yegu4bS
4531	   0VIh+z/cNBg9Eetrbr2gR68d5mZzWXvB/Wfa6VM6Odl6t7Kq30wiFUJ5OtVaRPkg
4532	   NSOeAXekL2rUQdmVJFwOtO6FmoYimgc+YD7b4HZICUSbpaernIhy9+ZS3iLrci3Y
4533	   9tiMlikwHpBX8ykQ59fI/i21SK+JVtqzjFOVq6hoRLegzQ/OSHuiEr+RWYmnGXH3
4534	   TLRaPx1xp4S5P5zEsrIGmkQVudXavewItyxq4vyEzC1BS7L4rK0XcK0n940IKJj5
4535	   YwOIj2uiGGew6AFVEF2GsO29XdpbM4XbuIrXMVKBV5VR8B06ppA8NcVOK0PgvfhO
4536	   66yomGxgvUn9V0v76+x/ZZpsyonbIsdfnoHmaK5gIfUcAKVIp8I2B7gN4tH8ut1+
4537	   YumRhc/R6Y37ZbeY9ZpMh1WFDJ04LOaiccFaU8yt0Grdhmg+VLQg+mzOUIZReTJb
4538	   VCP2201EGNisGeYp4sIqlVfziAtyPgnvTN8qtUhoZOZ5ghK5xlB9nmmbhf2wjOGY
4539	   vB3dyw+dTkOBIH3tqqS90ATEddzJHHVV/oXzFAs6FtGbRFA0YpGvgYC+RUpYqvqj
4540	   lcm1OLqlEHl8tpQlrWzTEIGVUMePTRBW77CXSZGNh3yz+eC6l270KPKbhNbvZSQg
4541	   uI+NZXnGCdapQh8NIUmn4Suo/Kevo9/Z5WKg2k1gFI6rZVw2rdMuY0PVZfyuGTeE
4542	   KuLtXAmNZ8GVFBOq/uz6GoiO6s5nFh7587LHc+X4bayK63tuKnkRdKJoqzChoU7y
4543	   P7zFJGwR0Rhe70vFwlihlYI2y9kH11Y6GSzULYY2tYozH0cmAkYMnSTmeo5lq7Oh
4544	   NveHC6v1vVQZ6BUYN+6fm/jU8fuE8aTgrnREfdDNbPUF4G3hZz7Kyzu5KgWxWVjm
4545	   a7Jd10MxVjUhqVtU52/H8eikdanl1QCSTtjnt8BP2apT8lXjzT2zdZsiIeEXhylX
4546	   03ao14tBqMDvpZ2Uriq0S3d4O6zZ8DdCA/4vqyVpdA5GYxj34Wg2tMN07XHZ+5iF
4547	   4D+Dra9pXS3mqmR+U/MUF495/9xM6+eKSN0e3gyHW3LLhMtnc/sNIod0mMvIkexl
4548	   1VblCRNsO/vKpLm9TOgilk4uhk6//Nha+SoknZwZbKpV2HP/yjFm3/yopccmqRbJ
4549	   96z4Uwgqeq37EBPdrck7d395U29Wntzzh122iauJyNYXmer9OqsH+tM71mJ6NWiR
4550	   KQ23Pj5h4nxvhDRAMD2tN65RfRPD+Qjz8QJ/6h9scXL2we2QuzNSZZ/IfITHt1Tj
4551	   c0Qp3HQgFH24JSf/QnhdPz06SUZp0rzR1Ykgh97miSOzOZZt6K0oPYy/YeAC+kyL
4552	   K15Cu3F7fVrk/aYuU3TSSO10vfblioC3K74lWQZHmEd8nOF25++U7FspYVGa68Gq
4553	   lJiI/W8vhtTDUCdSwymn1NgsrVVg9ip7RCkSBjoibnup7nTOLbdi/yNTmgD+s/Fu
4554	   F9ieEEQN0/k8ARP71YAZR8YSaG2dLuYh/pRTpe3xoxLqwNyC6ck2eOWq0lK+LBOi
4555	   /T+b6HH2v64De8MGR33MNDf2DagAJ40/RlJJqXhLm6JTn0ZB4C9gygJRUumv9KIV
4556	   li9yccYXs/dU+zYXiVOwedmN7vtm6lJTkWfet+gTRz4zS0z3UA2+dtiu8LLVm9oG
4557	   5BGb8qiRF5WNXjaB+HC81bpJfuIDzAja/2QPAwFH3tG5ixKlN4/ryCwoGllkamDx
4558	   IiZPf+2itg/7CLDnomfCGn2XEe1WxS8CGR+c+sH1k3umqpDJam0FZ8y1g7gaFUO3
4559	   QhpGY2kt7EvPhOXdbwMhNADHFCu9oEC/TLxknowMsdjme/vA1h00ttDWG0dPnKQO
4560	   VYpCRCFQCVOvNqbrc/kbRRiIZxnuPmcoRcI31MqUDirZWfyxpMJsfgGCQxAMe72q
4561	   nCHGQgaRIC60JXosP0wFPSibg9HloaEAFAwheI6rMoKaLy2WL696rG/zxEQSovB5
4562	   wTsHFs1UAaB70nCVoLu+0lS7mL2s5JPv6Hk0i0+wSi5uYMOpO6TUY2tZE3ay52zR
4563	   tJHKVK0rT7yTe6VQOr6PW//y7Ygqy+glBPVUJo8YV6oV4QF2vrj+StNKV457paQ4
4564	   +ACh6FXcShgGxI6Em41W/wrBQEt2wzOUv2QKsx1T4rjtBk+hA1xfJoCYuJjiTqtT
4565	   HpdHHTPqX4WzGa+7Kelr1YITR7TGAbOlPeJd0IMP8mu3zoRc1p15Te0mrXwM7CuA
4566	   7f+c5VIPIXaPxcQmGdPgrs9t9jzpV+JUpeokAtUpVJ+jcJtTaFf1SQqd/6w6rI3o
4567	   uvYT5IxS05EUu2nTYxjQRuTlonWNXkqVHEDGi99u/FrOgh9fZ10oX0FgTN4u5R6H
4568	   58uGsmJnWUE0Voj+1iSKb86wgwDJw8QOHhnrAoDBxAhtWTuydmuEhjGaFmQdNSKr
4569	   I3xC9o2Q4dqI/Kmht/fzrZiifbxvPleMkvaMUOKPEdWOQXaDeIAauR/Bg14jyrvo
4570	   5GcTdHxa9DBvSpuhE/jpTk0029DBIKhTWPiUK2mCoRk+e1JILSi+k/q6P105sziD
4571	   TIBCjg7ba04EahFU7f8EReRzToWb2e+a2/F1DIw0r6o8SQJcrDi2MNORjEpOkAWP
4572	   HEAeTHh9WojXnEsnHChwG+pshviy+tZInONjU3Q187xSUbNseO5u+tKVTLtMEr6H
4573	   AnU8UzFHkUDnpw6fjJjRfKYe7BQrM4uxeN+V3CjzNrK2VLQvMiUw5fcuEOboEbBT
4574	   dzhUObkrGKaUGGbuyIBhR5zVRQC3QsATra0ITzrPEBxGD2yY/PkpW+GhiV+6Qp57
4575	   fHtZSB0EQHOM3mihF0XJqLnx8dXAXJobdo5jNBXSo14os4fw88WdUCpmBDPpbWgD
4576	   Fy6hynY8tjtmeaGFQC6o8tzFNMnSH/Re7uO77x45Ly1WeHBhXHARumCEVRkI1Yg0
4577	   8WE9KLZ+TEkcTok4hMcYH27XnKSWElrUNV2ViuXKyH2jDZe2lSvLO9kex+h8Fl3C
4578	   cfgeToh4pYrcxYB1Q+2Sehwy/nubL2pTbq09ZifaTyJaUyf6ilbAX82TUVSCRRn9
4579	   pqGlo6+sFZsKG/AitwV0xZ3DsuFbhVaePSArpAGJ6VLTMeHqHGy/20euCky6fsyE
4580	   DAU/W4DYjv9cN2BoATOxWkWKyI9IbGyN0Ob6E8LfPXoCswXAtuW/MdphWUHWlKED
4581	   v/WYC1ZYL8oRIzDAvNQGJxp7CI9iGaQCEcsbwzoGw7AGsb7pt0lfLJfVTNC28qSG
4582	   tCei/HdZbUvdwUDRwePFXxSh8uhZEOWFNnqaIVTYDdbxnIHfnHNNjBczT+TjKKlz
4583	   s5A5dWgxCtLZcGKGmqcOmiw/KnNsAEJ5y7fFur4fvKrXQvQYctdYiJ5yX1O2gtci
4584	   IHiHmfohFrl4TWB7iKEVj0+pfQqqnJIWYj5Sgd96UkR9FOl+Suc4lnTRqzSkOkYj
4585	   zkYZFaa7SPobvhK3N7as3niAgcb4VfTAoFXkOX7oVPPpDrHcd7UfZ/Vj2RnuO2/7
4586	   4o4aUm89U3k/9FgEapUL/rKCOoCGnazK+w4+Hcg2wzkgkSNFU/sgxEqY7cKAHjTt
4587	   TAxKYh/F1r7MizSf0uFRyksMEa3NSeDqNhDhHV0IbPandc9CWVT2eqU5uvOgsNPp
4588	   oLnDUUFC7rkQhQW1h39BaUzndXGU88LT5Lqb31Z8/8/AMMn4ZxowOTggd3Z0NSVe
4589	   ymrsuSGyuOEU0agx9ipbomjzc5Cz1oOcF2D0/0ofzdTPkGFhb1NtOjutGbg5x50B
4590	   3bIphtV6lpFP+GapZKcX6e308lJ/2AV2hJywbxN1AnLPnqmkGeHaU1nOp60JQ5TR
4591	   It8Oi/LjjNc5hrFa8zKU2aM+c0lXT0VQu9DvEkHqqkMBCH8B35NXlXn7GYDzFwBs
4592	   NnGcrNvJl3y5LbJjdrORsyggVHjl5Rda8Nx3ihLdt2lkse6UBoUkZMJGwc3ZmpGW
4593	   2wX7+5Pv9ttUmQ4bx7xcKy0su4jQaOWpjoJ1l2G5Ju0BzRx0Vfvn2WGX4aY0AJR0
4594	   uIZgeibQy5/3hW5keuHgB1Q7134DgYMSSjj0C4PBvHnpSnuTjYPqgE6+D7UrNnbX
4595	   x6PbWeP0soJxQfy3i26+flQ2yPZcNIOSzSulQdK36RTeOR7C2XcQhsivgBbsM35Q
4596	   3E29rbMMFDfUzCZmdJNivvf+kvHID5I8RtX2p51YIQVcyItTunQkR9P/avTMBqyN
4597	   28vQlzFk3RtJrpOuy8m0nOfNue4VpUV35u3FdYIa6RkqLB8ZBiLcSFoi559B9czW
4598	   C6zz4GlpoHMNJbPN+dNbNFIoTeSi0dE0vHlP++Xo3phOC3bBcRxNwEoIExYwxxBS
4599	   uWGQBDNIdRHsYOVYSSiEx9QE0bOinnitTHLthPcpcE0yMQkl+diABJe/J5IBPee8
4600	   O9sicjpgeFcIozBDz26njPOgLMl5o0xtKDsJ1tKloM2g9NpA2kjXy/4uW1iru69E
4601	   c592xssBoY3eEzoKdAOE2OHUBVnmA2v+kJc51y1BkY3YYi9LICEDPZvR0PTDl72o
4602	   cJY2hGykCCDvfrTBjTuvIB5KeKgMfJRJDMtGAfzPESCXOZcDr4pXX4im1japeGUx

4604	B.3.8.  S/MIME encrypted and signed reply over a simple message,
4605	        Injected Headers with hcp_minimal

4607	   This is a encrypted and signed S/MIME message using PKCS#7
4608	   envelopedData around signedData.  The payload is a text/plain
4609	   message.  It uses the Injected Headers header protection scheme with
4610	   the hcp_minimal Header Confidentiality Policy.

4612	   It has the following structure:

4614	   └─╴application/pkcs7-mime [smime.p7m] 7585 bytes
4615	    ↧ (decrypts to)
4616	    └─╴application/pkcs7-mime [smime.p7m] 4600 bytes
4617	     ⇩ (unwraps to)
4618	     └─╴text/plain 339 bytes

4620	   Its contents are:

4622	   Content-Transfer-Encoding: base64
4623	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4624	    smime-type="enveloped-data"
4625	   Subject: [...]
4626	   Message-ID:
4627	    <smime-enc-signed-injected-minimal-reply@lhp.example>
4628	   From: Alice <alice@smime.example>
4629	   To: Bob <bob@smime.example>
4630	   Date: Sat, 20 Feb 2021 10:15:02 -0500
4631	   In-Reply-To: <smime-enc-signed-injected-minimal@lhp.example>
4632	   References: <smime-enc-signed-injected-minimal@lhp.example>
4633	   MIIV3AYJKoZIhvcNAQcDoIIVzTCCFckCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4634	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4635	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4636	   Boq0MA0GCSqGSIb3DQEBAQUABIIBABgRQRzXTRs0Jqxrl9ouqlyyOUVTZpzsEN4E
4637	   rRGV0bKlOV1O8OiF4s73Oamfc1GowC6YOss5JBen3EQq5NmMsFXjlU5sSiFGgsX6
4638	   IjkVSHC9c9QtdJtXyEoqEhf2lGJ22FcLjU0M21XxtKMlArch5aouJO1+nTj8AIqk
4639	   25JNvqG2dpiLaN61T9hSnyZe7bqDUflBo5Xm5REOc6EBvO+lFgjtIJB73QWiGBu9
4640	   C9iPJPz7du0yIReoX0wtkClqUzrBEiqO64SNQ2MuLTLrl2niNDfaQrvfDa62Y6Zz
4641	   RKPE+I461BxC2Evp18cJVdmOLPE/41b6QPu38l6L8/fSoKYoCk8wggGEAgEAMGww
4642	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4643	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4644	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAbgflLBuq/SuTA535o03fl0T7
4645	   hFJz1cRgrOgdYfajI+bAIAncrUXPCxEhAIJAV9DNOJnISnnTNW0E5ND32Dbcji83
4646	   GwhT2iC+Uzx+0auUYuuVZ/go7eHMUWrY1Vm5dqNq5JbTwVgWy8lIC5CatZVYDVFW
4647	   o26J351tuF7mAaIaLYXOnUrLgqWpgqI7zXjHrL0hADXlaJARcCY3Uv/PO1YOsb83
4648	   1zQQs7Mu82fjhmJWqZ4yQX7rBKSk5V3aoPjFcj1w2vQWUXHqczJmr0ZHYiaZQuLT
4649	   gglkNNSPNFVlfipXESE0ksP3ZoM+DzLahjfKSLiQTY1Gacasb9+oVwALBhUoCTCC
4650	   Eq4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEKODP8WCdJVi34OU9/jVCwaAghKA
4651	   Ed5TZquhpH35bEbuVz9wfPotJOKJ6xieYlQEcchc8+87Log3fBKWsZo1NwcRMZzW
4652	   PhE8p73CscBYylFWDtwWTtQfsu+pizFoH1B2u+byGhyr+cEVOcI2hSM7BTFzBEbR
4653	   RlAWNZse0ZlvW9MABUHhu/7QFVwV9LYaL+UlEEAvoPfnX1QP1WPbjyIl4v+/4i4B
4654	   6jk2HBMlN2r7Kjk1+i0hdt8V7WXHRWifGO9rGmZzi4hVkFIiRkqOqXpghbsHOdTL
4655	   mWf8LfMXatmz39ueE27ZJC/1KHygfdFqQkTfSutBP05eP7lJHPn3cb7ktJ3wmEj+
4656	   0iCyGySJlwKB9EFbWPOo3ENWZ90csz4250Djzzx6HIUk5jA2ePiEw8VyoTCq77kc
4657	   n88G6ucn+7hApODGLazPByQeB4OTg4EwkVwa3fZ6CHENZfDNDjiqYtBtxLUh7KAt
4658	   elv3UmZ5PtoWGuUd/7MYNeGiZeVuALdFAzI9Z8uY1BEQE6kZQY4g1IAvvd09Xvu5
4659	   Z7LA4qbfbpw3708ps9KmKmlcrhmDs62DkZP26lKUgC98FmpmKgpKmPb/V475+OlZ
4660	   FLJkE8LVPrhBQlgJWSFmPCj5FTkWml+dAriVS+7RdkeohjOepRIw7ON+BODCpvSO
4661	   AKHry0k5ANJOZhIgYOPCByDs+AypJtqPl8M0azkThmlFLBc1m6HDVroDklpZkGib
4662	   hgANe0pnA87omyIXs3lWpkApS3Ri4HrlJXj8sM1gqJABeQEOOcej3yIlIcKgVh1J
4663	   OYPfeRlibKzDHbIpVFs5QMzKNNwil/t2+VmuV9Reye1pdtpXPFDP68ilPO/VCyMk
4664	   Uq6yKfU/3gtieCtCgYbh/5dAcYwAVwB4XvYqCO4Sxj369X90TBM5Ege/4e/jcNik
4665	   S4wJ1VNVIgs6WlQbAsQ0GwwyULguRbnmXuwXmLySLgKd3pqSeR6mM6HGGXe9rdSN
4666	   miIc53pdrWAaLRqP35oyOCjwdl8xgaaLAV2Un3AD+Lwwts2rSOpiTFbTLRHPYvN9
4667	   /44HfmulG/cxGTWfJrXq54hh+UteebsyKUx9Um4LGqs29HIx5skDVOxhzYPM3+J9
4668	   ZP/IVgnm/tqkzVvYd0s1SmHdhQyXuGt9BaWjii2JZdrQjbUv7KrtfLcGUNGl3yzR
4669	   q4hyRecPQeCO89AryPZor5CQ2H1fi1ibSDcILtCP2UDzScA9qd3lvMRZV83rFcYl
4670	   cRYGUyckJP6aJFYUPCXRiDei9/nSkLDCIjtVHESDyUtGFTv8DeTH208INYj5xjBv
4671	   cEtW1IM2DXft68jf9Z5XsnUM1QO2jhLDaUptBWmKDgzeQa3KESniqdceGLrTM1H0
4672	   lFgMPFEn9W/Ma3pdi2I21TnzIcS7ZaO+NG/2ZLKXMEVBrXVEU+R7heEo6mey9+qV
4673	   ftDsbNZJoB7mTlMf75Ut4jax9YReArT22jhHyxZ5NiUu1200emE6VMlH2t3UB5gS
4674	   9aoVqxh9xNiDMO+6Gh0xHbc3m712hWT6yIHYcPCHzC/wqBE7VE1jcq5PF3ZpfrBz
4675	   ZMVa18yGAvhW+lF/Fl5GUpsyxJ7LR3RMUappLFdx+OBrAHWI3B59ZIDYTodigu6k
4676	   e4qJyNKMwlEGusefonkkAX/53Z63QXe0RswKzW3cfydOvwfC0Hi0TQX4kqXj4MAg
4677	   N/gNFOVRpbUfLEmaWyohkVEkcgxqyYm2Qvw0oADhU/Loz9p6a1Fjz2E29DNsKtdT
4678	   uszU9+2D+9PptibTCm5BOEbgM27wSfTwjcyKpcZ1E+6SEiGVQthWIIj8cCSkp9uG
4679	   vTQrG0F1HCYzBIUixyzrCJoc1jBRv9lcRrjG+xdVOrRX2gNKz/bgU+9e3MPW/MFe
4680	   uuhCqpee6qMBPJY7JQqa6qsJRDIbmjib2gCdSLsYr8+E/KGTwu1TDDb9bKq1I1lm
4681	   3LWl+d+VrGBz3Hl10N2PDgedjwHco3igrwt3dMiciqF7l4R/aDCJXgQOb2PxOqoY
4682	   Eyg6vrAoykdSfrpFU6UDhXbnxBdlsRSQ5zfX49Rr+YHXOk/VWuQQkeWMA0m9nQ4C
4683	   BiU72A3+nP11Kh7mc0/3FXzSEuF7zzfhfU88tEVvzmTpVJkgNm70NEZ2tX6VBe9g
4684	   ycH24ytDbrYu5voZUP1CepPCdOTwq+uD1iU/UcIKxnsnxwPmnvqU/3Chl/wOd8/V
4685	   4TwbNbRlSYit7Xt/3Kg63vkQa3wOBxZ5j/KOZLLPYkSy1OJTzvE7Y1Glf8T8oeGP
4686	   li0RQbOaux8t+j9ZrHCtxfDvbTOEOXYeVuQV2rnbvQcXg+KOAv8Ef4TEfSnnnG/1
4687	   dW0Uvb+YxJjABh84LTf6X7ja8BTJIY+oyIMIptw3Iw3BKmpHe0DqZaJKatzZ2JP7
4688	   IaBmSS46Oxngqb3tIs/iX10OuvfoYFF8JP9VNwlVacn40mU0YuGJi62oWugI5yPG
4689	   zjI1lcVAsiiTYMM8OUmw/UuTDwIgIO6AOSVNMMjWcihBOQSn5HgJNP3dc9JWCIzd
4690	   xM5npoLCukhsKgzQr3MHHroiP6Jn+UsYwoNvFeVkVzb7nZM9sqmrQ75JJPiqADfX
4691	   NpSGqNdGU6q4o7aCtjegr0coM4xyfyOEKyq04w5oXhYzAQ7qGvN4j0iw+WVtIX6x
4692	   kMV1cVXLzeJ/oNxL1aIgZjt+sN8MGTf1IBftWxfuGO+WKvWwuO7D/BTsxexdfstQ
4693	   J401huuod1YSoSsHMcT1YdDaRospOz9pvkjREwwb9RZtlnCjKALdVGeLDBLG3bc8
4694	   SX/LC//AosoGt1gzAFtBa7/n3Xup3EqME+nXH1K0xjvED8jh6xchDA8U+tSghuC1
4695	   0OmY4GFlqXtshxJOf0tbCGEoXJUGFLeYPUG8d8cn6aLwQiRi3D8OMZhDRSdz3KWw
4696	   M08i6lvavxGnwBPG+XIVDvxkzEaeEZrZ9Ea19/RnW+bZwxMwvC7Ecqk4q7o/djW+
4697	   FKjWedjnGYAJIHSZCljRDosskfmgCEL4nfgMwVfqF+xS8bTxyQu5RxqwBPDk8EM9
4698	   ZN1EH4WY00hgN4N2oqllTUn8L2Ehx5JAhiTckZz+cp/nzKVpKArnjBQpCjTBUDiG
4699	   PT28zjiTkrZi1eKw1C2zwaQ8KOjMjRp1An1P6zSiuayEtf/GW8nHzG9FcJoRlMKR
4700	   TUt05KBg7wgE1RxPumyws1RL4cpIb2oWlyfSqlYNHdNCQykyuu/ubaQVg3VZyz03
4701	   CRl5V3ErDa95ZM+cbaGx2JMXR29N6wTXEGi8FCMZpS5gTucp67yZtG3Ik+PPWkih
4702	   8bYskpn0AcPCl283neE57MhsEp+BOekq9tAx4IEWDVzL7w1EotLT5gp5iZlqMeQT
4703	   A4kCWEbcX0emotgo/KgYhSfgaSDa+LJqvFNlOAqpWU0ApqrBkhDUUY97uznHWjXc
4704	   yS5rzHHDbrO448nJpFo9ioCAwFYkWaEKRCEljUlqlfdaP+jHYIz48nuecCtuVOeU
4705	   gpdgE4EhL0mGG+ylj1wC6Isrqdj41aR5m3ZwMeucBE7RkyiCVMW8/GobcG4OEqGn
4706	   grvjoMjWLjOIoJoeuZsv4ED7JjAbedGsA7WqGGzVTyyXbUVseSuYsb7eVy7I0VZF
4707	   KiPI06KglRA9AQYPtnij3qku/RMQNWWrSjSSwUlm4FceY77GGo9BctQ7DdYSoMOa
4708	   ia2CYsL/nR12wRySdKzJOBmgBPDA+cFORwReVoBwGl4z1YB7jCBCpjKaB3zRrfwa
4709	   RGXijQqS8frHtNaj6+jQqa6myg6vlUPPRnEyPz69WyE5BVJOaSftCOixCtBI+Fnx
4710	   hJDiobd6WBzdueaB7Qc6W6tS79C+F50dUbzHeZLQNRXHztZX/H4TyJ2Jz7Bhy1hh
4711	   Haa5mIhgjdV985ZHUEBXIch5x85lmAjUQPADei3chwO0idxi+nbq/exCmsAxj6JC
4712	   cIuVA764o2gftaIAEj94JXMVy7Xi3en12L8wbUezyFZGKhUxwKi1WFhvb3or70DM
4713	   yT4U/URV1HgDgeKAyOsAkTeSAZsK08cRvhxDrpLl7y5wOfxFkSbN/04KujYb6YBe
4714	   Z/aUF4VZeNeg7FEmpW6XAVSorFQ6DgMLmY2TyIIh5GswHwfcB7tqgYVYSieRM/ns
4715	   GZ9hks9nsg6NlaL5ueYYOyGs8MB50XHDS42uK18fvRI8qA5liX/CkCdUJC5Hlu4i
4716	   lt3BXM3Z25iaYaKEmosgNj4cMdreoKFckmq8nSBdeZdIJ0xWX4/ioBdOaQRTknIV
4717	   wSSQb1utN5X/AZmKnF/65svl3IgngkLQIbFCCaD2IAzS5itRuTcbK+KZbKSCLNpg
4718	   U/qYmuh0TDeHHMO126VEPQXAQnxvtV/0MobXpswmuo91PVsbFgCU2IA0JDILkI/a
4719	   xwaCsoQSzTnw9qN5BVmIodbT1BBfoDorlC/C2HrkeD/J3+jSX/35Zbb9GnuLnlwU
4720	   j/fQaGftHgt63pLqqMycYcVmiA0quvpMZYRmBGhHPyr+TcoLzkFNAsNswev6//U6
4721	   hxWkF6SAaIVWF7hTAePbDqIyeVLm4s2S5Qhjw5IAsQokxff2C9GZTLDJpBlKv7oE
4722	   r3HBtOIs6Y2CzkCH9nXfQvbv2LWEgsAgq4dLk3Z2NRCt/LZAWF3E5a1wW4YRRH7j
4723	   Ozl8aACWB6WnKnz82+1v2FciFB9L8b0gNwU01u7sE1ayC2TQGzXAhu0riMtqBiJX
4724	   bLmCos3/VelP2TodcI9HmrjSPH5HOWnP0h3M7VgXHbohm9FgOZf+0GNaSI4Hr/3X
4725	   nvFuT6JgJUS4Nrq9uE2RpZ1XDvLUVrwE77tnLaqXMbLeHm/V/TXviqaxEEgtCSba
4726	   iWgsWkhjk8JL/Oa/HBSA5mhf8Sq1ru46/sJXjRdZ1wXGEVmCoSkJmgKTn2a/8K1g
4727	   XE1NMeTFZucz8WJDAC5DFvqthrHHcAcG8YMVTE4EzwfTrYe9dxfHjILMDjP8A3Dx
4728	   c7tlM/6g1c4nQTI471xs28iOsRw3upKY1T4S5MRqidQD2yKYbBVp0zMAwsybq0ay
4729	   Bmugnz5xafztkADCg1mgQ4BzhXWz+0CMNj4txId3kMwGt7Qi20RDf7cDrv0S3krh
4730	   lDGwGSl3fr9aaLISh6m62v7hg5Jn4wl2yXEGxAPj2TXzZwVGL9hmzbghxt8pJM/u
4731	   HR2vMKohagn56K3xIfwi8QrWDBr9r8OKj2Ia88v2i/QeQe8CqOVu6yR8xAxGQFiW
4732	   mJZO3enMPl00rRF9wdj33CxaF2q2kVysid59tPfJanTHUYz+IFV6/NsRfMgye0gV
4733	   9k/ebq0x5OIIjAjhllfIFj/jyupnblUteAILhvNBfkqiDkWg9Yhqd2MZXgIGuJod
4734	   CLUq8fWt0iNV6WkSthZI4O2wMz3ek4YuIfyVrh+oxQcG6PihlwEu5wamZb2g0GDp
4735	   tqa8AD7v/mezlHR4a2xogj9lDLz3RXH1RYOQHSbvvRebgjZrntOG+gidcbQvsB2e
4736	   aS5X3SZXYQ0hbG4KACkwKWTj84Jxflp+KMfdybhVz9HneTtiLMsvlibPVj54ZuPc
4737	   YNmELTHyCxjlsX61mmtydIAoitzN+YrB+MWx06KnPbWW18AsH/gWNX0qtYIRxJjY
4738	   rZkvzOEOUgRBxdWuK9FlOcbAfq6S3fIPMJycTlSalOA6ltq5XtjfozA2ckRutqV3
4739	   1n+JM3Lo55CMe9igKfi4sEuIPmFjQQccxh85PMZKXZv+k+EU/PgD21HxWLbp1y1n
4740	   lwSllaTC9kNAplcvelROfuM5jqi1qDF6Q6w8pwem2m+vUc0aV0CBGJvvz8+Y76Bo
4741	   fho7SD9SeBOnCsSxq1cOKaeWPl10Y001wUfI061oTbSya/tbNGgaE+pXzIbhKCvv
4742	   wOTZ6t3+12dhZ0mx9Ozo1pxslASescGr4MDQePR6lecDPdgU6cJZMCzMiKrbZC1M
4743	   lFlApbM5HdkJOGOAVxHvbBP5u5SSfu5GGDcjiVp27A8kLGB1x1JkFr/ayVqyi0Zn
4744	   7QUQu85CxW0nxqFFkYxXfvWVpPvbzorPySEntj+ZmwdqB6asqBuHoW+WEVf/U4Sp
4745	   7YZ5c4Q6mP9/HZV3J+1b+BaFuuROp8lwuvYuITRpobOncr3+U4Pr77vdBbzYFm65
4746	   kR5uZgS38rm3DX54qlUhb7AeWPnwqtEIaJA3soThkk+J4/GAIDM46cQaJdPfXikq
4747	   AuZkkSOqjH0qEQR2gprYNTTakISQXK3os+aSrdScZq87W55RQ4bW+1pwZjCnlEI5
4748	   zTgzG2iWGCaPHZvoCV0cv+Ln14a+rplNBoRDHhDuN5Vxnd8R3QFz7iL6WOW8XPUW
4749	   Vfhi1ZMHR8/e0rgqlF7nEw8B8XYydKsPRpYDnrjWOUA=

4751	B.3.9.  S/MIME encrypted and signed reply over a simple message,
4752	        Injected Headers with hcp_minimal (+ Legacy Display)

4754	   This is a encrypted and signed S/MIME message using PKCS#7
4755	   envelopedData around signedData.  The payload is a text/plain
4756	   message.  It uses the Injected Headers header protection scheme with
4757	   the hcp_minimal Header Confidentiality Policy with a "Legacy Display"
4758	   part.

4760	   It has the following structure:

4762	   └─╴application/pkcs7-mime [smime.p7m] 8170 bytes
4763	    ↧ (decrypts to)
4764	    └─╴application/pkcs7-mime [smime.p7m] 5034 bytes
4765	     ⇩ (unwraps to)
4766	     └┬╴multipart/mixed 1082 bytes
4767	      ├─╴text/plain 57 bytes
4768	      └─╴text/plain 376 bytes

4770	   Its contents are:

4772	   Content-Transfer-Encoding: base64
4773	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4774	    smime-type="enveloped-data"
4775	   Subject: [...]
4776	   Message-ID:
4777	    <smime-enc-signed-injected-minimal-legacy-reply@lhp.example>
4778	   From: Alice <alice@smime.example>
4779	   To: Bob <bob@smime.example>
4780	   Date: Sat, 20 Feb 2021 10:16:02 -0500
4781	   In-Reply-To:
4782	    <smime-enc-signed-injected-minimal-legacy@lhp.example>
4783	   References:
4784	    <smime-enc-signed-injected-minimal-legacy@lhp.example>

4786	   MIIXjAYJKoZIhvcNAQcDoIIXfTCCF3kCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4787	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4788	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4789	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAB4ecHLrDWfKl3yL1TN/yBLvobSKk41XBXYb
4790	   VJ/3GqI6j/32SELFoDOUXgckW/66RyPsEs14KTmJRFA5KWGZ8NBPDN2AM8zjZfS+
4791	   iRgYm1d57/u4DEUnbUTXOagYTa8eanBrWX4/oGHg1L5wI6pZ9zyI5YUCj0tQUaLW
4792	   9t4v3U25z38eCokhtksHNsCtXSvLAQzx2L6KrFRTCfCmgVgsXhsOBEiTCMf4ZiB4
4793	   hh0lhyu6SV+07dm1LcD0T7cLXAD4mkoeldbIpi92W6P66Y/Ay4PJAXZmvyq01+za
4794	   5eYAieaPxfVbMaGdyayOUMV68ISqH69uKJpRVwVsZGhQQZY/MdcwggGEAgEAMGww
4795	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4796	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4797	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAkBeWGtHTul5YGzJtjM7gl/ET
4798	   UpVPGeHs/jLsqj6oeFQwrE57igqf6sMpY69yrFJnDm3aOjbZdIJg438bax+XjSG7
4799	   vQUy8m6CgeztdBAzlTbdVU75sstdXeiRVwC5fMtz+H0ZymV3SRjjsgCv+0TEJR/j
4800	   gf0IB84y+zjJ1QMgIvCxIEXj3j4qPI6mijEnwqfPZ5nBcBL6/W82N205SArWYX71
4801	   iIt/GE68DH9o6FU4lAXJSQj8iuxVFzDV2GTNJc1pTsgcEFC9bGD9NgZVUZhaSZkM
4802	   JleDMSMloQWPPd8HbXBiogIJG3dRudWSfohmxjOUZVj8Plq5q9JPt8sp6pEIKTCC
4803	   FF4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEMSKvlmchoxV9HtD4C7JxlCAghQw
4804	   uVLuAYWsCKCp+Ltfh81OkGuphM6f7qhorQ3+GLdW8e5C2kjyxEAjowXSHLjFAQBP
4805	   aw7UCTiBJX9XCl6/0D9iCh8MzLDz5XMxwyJmluPAmOsyWvaGfFV8f2mqBrpfgeJB
4806	   kXZoou1UuRjv1MnKCOmwdfGTQTuvfEwawURVVM3cZVNidgP5QdHWBVHayWW4zCwB
4807	   WpdArroepsEA8HvcUJ1j4t+rSefJfA/C3h7+J4HMi+/02tS+0iEUSMVl/xsp7Ote
4808	   jzXdtdjFb53756oCnoRh66ozZlL2EoMs2v18Ccos8yHkPUCkSrBoRjq6fTl76PgM
4809	   mRiREJHwYnNZImV5vNRcvwy/S/+rKwUEfshRDYc0P5NHSkRZuMfNu3yRB6UnaDzL
4810	   3l/qOhv41DdptlI2mbvgziItgMlXdnzGkJQkS9G5V+GLi8/ISN2S7DtWpFCaJOh9
4811	   A77YNI35X5nTFioQiYZgRFjHkLEB/cpbYiANBHHtX0ZE00tW1w1QOUVJHPo8N0aI
4812	   uRx7oIeHWJf6URM08yVqKV0VSrKHxdQ/RXii8qWDlS5DUk9lVZYypqmui4Nd9Vc6
4813	   N8KjbqEmaOlcA1XKTZ41PRAXCA71pGDPVutOrhSx1CuAqk0UJoMcx3FiM+uCmbQQ
4814	   WZ3K2OtKWpbRzgGxn6AFPMYTxmQfhbfp2WFBK4epEZeK9TK0XEba4/L+V++bPzqb
4815	   SKTa0fYkRmfrXrQ+K2yKvMIBO3yPjSbEXQ5Yq4DWu5tTohOgQm+8zAdYeH//S0UU
4816	   F63qGQyKYlTIu1OjIauM9g9F2yGQdJGRtjSmbuyQ2CGOeeJpVY+Y08/5O73GvyqE
4817	   eytAb8Fa7d5gsToARMcxZzBl/NBgIJU4o6PPF7FYSz9cxYVtBdYiRAJBjuF+CghM
4818	   NWPPVxR6SqsNq9fm82EEunJZNlIzkqv0s76xySZaOizvjtvw9TkjDAkJBCP4+o6+
4819	   eTRjYtGsgn4Z5JY5lMQirVxEy/Fd3gBRwGD85mDxrHKXtKT8j0ke7DjhAUuw2YoV
4820	   uChtI1tGku9UZD3n9mbd515LXODVtbCXAJu2JYkearRMmOq+h0Pu22kGwo+9hYpm
4821	   A/hr6XWNmQlytONCbIuNKyRTAt/CIA91trDVpnXqS/hIKdxFGx3OuYfHz2pELJUD
4822	   lLcqpPhDYWsf5RoVykafGc76gUDzknIl8FdiFCD6NNJk+VjBUkPUvwCEIM6fyIPL
4823	   p07H7arnjZ0gJ6xxdyQlXwINqAMZ5DJ/dR0EgJtxJ7btzBtqZ4K4KyLlsDpLj8qY
4824	   OI1aTBH6UilHzQn5khZgC7XHuEHy1mHIbR9B5QeqqlwezWmtpmfPGVSv4UX3fRHa
4825	   h2yZ1QRqtvwalWPa97xj2fvQw7HbWtqF4scO0yLr0buvksZ+FWmc186t3zTdpnOY
4826	   Kvb1GK9VATs5UNjzpAdqqR/uPfqGyxjOZDM1BrDxVMejTL1bCCfzgpJ88A16tTIH
4827	   OvoLhY+8wUoZwaV4aaQIX2/Jq9H5EuXAJX1nffWbPdBusWlbUECf10DsIhjDw4r1
4828	   PoPvqcjIuHNrp8Rs1G+COI1d4KHKN9mMgOxDTNgF1gKkkw33wEy7DRv7/b8ej/CY
4829	   e9xLlTCQnXW+kAKs+OD179cHdHR42Jv80QEwB+Rx5m26mYsIcprqQf83Z2V4Gg1J
4830	   OYUCxd5T5G5rBdzLtRE+NipJJ0RqEKCEyc3RH39NXkg9LnP2XvA8zsByExwrruTb
4831	   6HZ5ojO7UvEXRZ2A/H9nu94C0+KPtER4mtESJFDq/k6Tn8MF+vw7k/2Dt2Us+TVI
4832	   q3do4FvUJfyZXmpX2LdDhgQE8CMb6B3hNPg+NSJX8KvCdWU8K79i+ppaSCknAaNq
4833	   4cxYavHhYdHz2U9zQKLEJt8am2/Iyf2d46q6plUzvFj+DCFoD3z/yddRNqe0M1Wt
4834	   tdgvklkymsJ6E/G+vpoDw89FeDA7oFc7mOgBsxZggi2X1WY2KUIqJqm5GwYy7j0J
4835	   CGpHfQqU7WDvv9kvADEMOq+vIR17lpn9PRUluwutdaKNwICZEw4A9G7LuSNRhNz5
4836	   Me5pO1Tt2BRK7NtKCdiMiuKFq43ezOpMpCla2VCuEANA6iZwGJlz5iBFckCN2IsH
4837	   NTNXA8oeL2sFcW+J9JVTsw4YnR/KYSgMlpoIU/l44fD+FMmC80+MwVPSe6QJkyKD
4838	   zXE9a/sP2WsAC2WEKiG71U38HDbRXzjyEVJcrTJAN/LSjIh/Ko3PFuuEvTu+2Rmk
4839	   A+pOI2vbcEUlcS9qkQHuvSefxiIosSGR8HSWGr7BJMAnQ4/GYcPfJcib8vpN0l/n
4840	   ID6LcyTTAUsPg8rYb7DeGuiwR43iW7wkReWc3HLO0p9N1UhYWQ9jy7Tf4L9NzK9B
4841	   rZgAIPPrsoHuE22crg85aFU8JR1GHQyNJQnRirCCOOqS4B8t2ArY+bkuWrYj9JsT
4842	   xbYzTYYWhA3pytxm10NRGmwD4MU+SEdVGs+yvTo0YN6BJhm/OaHHFpWywNICO3F8
4843	   NeO3+GBtaPXaxyZc1l7y6CJ1d7xGHnGkE3pQfkg4he8exYfyhdHpzxconSoOZ+XR
4844	   ft4fqgk+tB6hyVGumlhyPz6ThWFMorxnJEgzIZR7iIuk4+ooiePjgTGjrtvp+rNb
4845	   98e09SqpIxqWdiU4yCOwfkOg7hEb1SuJVoNFVLKoRMIgf4vBKIM0DBAv7wUebO61
4846	   9JnhoQY20YMxSsVypdYeycF9TLIDreu+zufX6LNkZt+kq+oP7DyRodCB/4SIcRzv
4847	   tzXxNPUjnE5kHv4dxDXieBiC2S8zbQO2vaQ8kjf4/MOGjpP7eYBA7vK59kELCq0X
4848	   b5ooYbxS2aUF/FbyTSRCIeNsCWUKMBmps0pS+MA1rpZ0zFxVRqdgmlpoMQ7AkjqB
4849	   DI9B7RDDrW6ORZXX0D36Tcm+/PbJxf4QFmq7/SAWKPsZlN7GEYOAlRhfOr+XHHBy
4850	   91jPA+XdUDgKXt+y5kUxEcFRu14yGiCCUIOU7vbWxHqvXdiBMrjulAgduWJlVqgI
4851	   CkI9QEDt2NNV/ElKxUS/PCnqCSWBpfg8u955rLijFchVD6sum7w9+X37tblXKeLC
4852	   rn88xK/Wbi4NxZwEdp9OWbpavugUAe8ynkwBgfYIWP5CVbX+gP6BshyN7Sv23TWd
4853	   kVUjudyfoXXBx6paTL64IgokxXvYMHXTPHmRkPhZhcPjOvaAS6SYr9FiE7cbtFCZ
4854	   yL1EcV03stmTO9x6mpJeWuoQs8mLllqzQFTwIKyLG/2gbOTI8Hjq3hWoVnSwDvxT
4855	   xljQQQSqAGhLFhnGqnGHDqTUI0I31e7Yj1Nn4E3z43ft22Kq1+OSJ+g3LCHrqepZ
4856	   N160YqujX1Kd6/5t8dtnKFNjUlCy9gzJ6cy74pVyfQl4edAmMa1s/vZ12VEECXeg
4857	   hi+EmuMLquKZEVv+U0cNQxPfzm5x6LzWj7ibLkiWa8vDoa1//WGIWBcZX8v7HLN0
4858	   42cNimy9xklYmdXVZ34711KHEhwRLpYfcrwNOttlwKOtfThkw0cW4bSatAmtguPd
4859	   SrpBwOpbTKI3am0yVsPCr0cgKmeMaNTZSEN5njDB84rsaLZ7aM23+s1UlJmyMQAi
4860	   /CCD9Lrl7S09s383KZNpNKmEUr4VZ9IQYipiDzN4wOI907mC6DWEVRh1II+bZeBM
4861	   cPQlrOrcfVqPqlNu8qiEyJUT/03Rb4xxAjH16EeeMcEIPs+BRujxEybRnBuPA9BO
4862	   oZ3pmIuN/NEFMBMZz7/VKoCbd0zapuV4KIMFzaEn5HmnHbP/DU9lSQKZcr/e0MHG
4863	   7dnTM/zx2VxNk1f0b+yBjvZm15pV6FyjgGeldnl42Rq0uAzkYcs1gcKDmaEy9OVZ
4864	   gNbu2k78DOtDhg58PRfBmX2luk951xf9F+PMe/K8KHSBqQQ+oD51kSUxuMPgQxA7
4865	   rMxjdy8G+mfk63cYrWKZcNrr3vQ9e9w0oLjZ2dCtKsw7jLCxjAc0TIycSvn+bmOS
4866	   kv4vg1BgsU5xTUVEK+6AIRc/bzOA7JkqMW5tsTYaQJ3szW3nYrTRjWMOIEG3ghvb
4867	   urJy/Jw0UBkozxP3zl0Neol8rrhAM6zFQXIE/nuOasAd6YF+TrFljIOIJIl4IgTV
4868	   yTAQMeRXcFLYWRggFpdp3d/7a+M5d2p4lYbo58jydWPvqSF9/1PThswzHbDFT4fo
4869	   iFZK8EDY3wWjN55vyXusuB+8vOXMBLvamfTfFb5XDjZLeXp4jjoyaDf5dI3m65+K
4870	   xegr4fk0R0wvtdx4h1AtBb2C5myMLN3tUPQN6r9aEoc+U9ZiyFZinpaW8LGuqcyE
4871	   MIP4qWglDlE+7GaQbuvQfSsxcQ+YbQI62OyIgczsp6X8zMqKzhB0MgE6k5XSlYw4
4872	   86IzcjlkdDYyDHNvQdmt+yfcqSrHsvBgkyD+ISr7zFrcW5WgCLuzi3WIlaRjgLfz
4873	   IDNUjroPB8xE+3YguefHdSoPF/Ai+lUzFXpRj9AE14JkH0WM9pPKc+JPgqlda2US
4874	   a6hLRd4+z4MF1HGbINbFWDmV2OiPDJrUzLcwaAHWu5QK+NyXlQWmYUB+iwOg7hyg
4875	   /gG9mYNUpzqtJghdu74HZxigX5jGUKQLthULGqDA2EL0vR2KCOMm9gLxeJkOrxqN
4876	   8YvCSpYUkaDvtIJcwExkfGu7LhiTXl5vvHrF0RDnhK7Q8QT9yQo7Er8Aay5ySRVi
4877	   ZFD9GhfQlix5cDox/YBNMyfSQm2T+O8WJdvVFWHF9mBX7ceUEg77EP65fjV+boY+
4878	   ir4XmTJlZ01QUX/RuepGrm0969L1kpgwhpXIecyu2u3RKL4JTv6jLGpK69GMqNrB
4879	   Ol6zRufAgsUbFAzpvS7KeffSMQVeib6TthMSqiw5eTlUFj6stHMJzgnzu2tQphDb
4880	   TUkogk/41XGI2q8oMczv/4AL78eRQVTPTCU9MQGe9jdNlqrnbh6mSIXAxA+MUdpf
4881	   KzavSvbQWqnEEGQzsabx6nLQ5uPV+e5kDPs8IeEV83mi4Fg9v7YFrAtMf8nA30Vt
4882	   eCHnZdgiQbaZQ6lt+hdiaJQ/+Edu9HM2v8aj1o0beiw8Zy++bGo3G32xazJVkFte
4883	   704GrOVWo5W0N0YGbzacvkI9ktZpwudcS7u5qp6HvATahMJpI0Pzujww+Y9j06JJ
4884	   xudfTJ6BgJlak458LUz37PrzSPuT0l8VGA7WUWeTTXjpNQ6WEiEcVyVmyHKbeB2+
4885	   5hIZKHnueZzqbtQjoBldChMeLRpYgA6RyrUxDJjRXrkPKdn0h5hgwyrYqdeQO9Wa
4886	   5pfE2mZ4BJbOFLPZv8SMTKEnbR6a9bP6Fxhir80T30HiPW6Gc6Yk+yUx0aPfiRcJ
4887	   3qFKBOVuwrjEP1QZqVopm0XnjGr6pSii0+qk3f35bykpl15n/wRH3lVpPW1jFAlo
4888	   xKK9/9atIIy6+UejHD+tIgbVZD+FXcJKhtdf0by7WCOMnM7qaRrLqloEZlRVN8pD
4889	   283HqyRu+F05U+0bVL171kjRkPlb5FrtpqiRV3KswxP661pvIpVOGSh75izSb9fo
4890	   YsdVCcSa/8jFS2VxugUa22efyOhAlCNQr+kwHTXztV3V5yMALNpnnUOd/t5IG6oI
4891	   5PUAWfhPFco9b1em9v/XfaHwKt4+/buRfjIXiJOf9v54FoO6FESNXcyAPS9Fmd1S
4892	   lHSqrGKlD/lz5X7IbEq4tnZoBpkTMtbPnQrWUU+6HiHggjrh6goeLwKKp5IgtonX
4893	   YmmGzyiLY34japtze8CfCyUZGtzkJqQIaYg2V7XF7aM068h1OVupmCYlkr3frM7Q
4894	   HWssHhhcyVZ1q5pM2+5lEi6AZTblEVI/gwO6/0Efn47vwAwABCGKOR//MX877q7m
4895	   Zcn1X1fxpT2V8hcEcgCOOmFWebIBdagvTDYu1QNBmGmKUTe9r1OTWhG2OEC8GgB7
4896	   WMrNGS1i6wYDU712ZnjvLfUT45wsDgPBkGToecIEcT6PN/kjj33IYQDQGxxrXAuf
4897	   oZeYnioFc/7aRwh3tYjJNnNz7GpI/gVNwHJRwhufkVvJjlxqkE+sCGjgHaPo7n43
4898	   0ZzaA0OADyFmrLQeFDzeFElDUn/35LjU87CZSZxOisurHvzV4hpfQJtCuJh1FPBt
4899	   hC6ITgbq2hZSjPtyZEd0gYTyMhw+mdDyk/a+fbgquB5UcZDg7Kj8Kh738m+WLxYn
4900	   wNiMwMbeaLMw6tnDt2D6GI6+qCjlBGydFm28El30EfimhifK0qj0utVgbNvhzgJe
4901	   XEJyXivslEzetRVvSRAy66COopqyDb/R/cKXJ2r7zgDmr1+Fq3OXB8ypw00km7gw
4902	   0Tih89GOnyTMvTOVOFF9xaL3WL9lSEi1LjJ4S9XgNxiv6nCe4r2NW38Ql8RbF2jr
4903	   XtOjGt4nY2KSaCtN/FMElqUilj3VtTmRRBzrjB8T9NpnfHSLbIgW9xevNHUeCZwB
4904	   fgkpW+CjkywygPuogLtdq6tuqb5gE0GT9KBDRMTIlQYgdICvBnwDxVnAQreJ3HPH
4905	   VhpRkJ5Yav/37Yq9YF8RSM7XqPuZm+YgZElNMMTHBVKfE5cW50fFWaZLzZHjjS1L
4906	   75nd9FFceSjzhLMVC8sC7oWZqGdQBpcNg/BYBAn2Stf81ipSpz9WBoqQzNcO25Wb
4907	   qyGxUQfDvto9TVrJe+/7bCFqZbwx6RKZDUAnfgC4hs//PKm8Ts3+suSkwzfEpxN7
4908	   0cESXR3yioZNbkubxRXWzemAJzGn1G+Dk7MjoYQ3h6Pgjv7FJ2MDnmTDoJlL0jLI
4909	   zYNMz6izuerW2r5m3PXfkhffU7mlwn7Bo/6mbR6ztrsTOm6CbjdlkjjdSq4cMmX3
4910	   ZeUnehbRY/W4cGu9zMxJtNVGRTFAGV4zXGqjL8mTEHzA87OHf2BSJjOCM/V545U+
4911	   Td8ulTmmLG6hyNn3E+cL5Tinka/j92yxTzzUA2TU1uE=

4913	B.3.10.  S/MIME encrypted and signed reply over a simple message,
4914	         Wrapped Message with hcp_strong

4916	   This is a encrypted and signed S/MIME message using PKCS#7
4917	   envelopedData around signedData.  The payload is a text/plain
4918	   message.  It uses the Wrapped Message header protection scheme with
4919	   the hcp_strong Header Confidentiality Policy.

4921	   It has the following structure:

4923	   └─╴application/pkcs7-mime [smime.p7m] 7605 bytes
4924	    ↧ (decrypts to)
4925	    └─╴application/pkcs7-mime [smime.p7m] 4616 bytes
4926	     ⇩ (unwraps to)
4927	     └┬╴message/rfc822 810 bytes
4928	      └─╴text/plain 325 bytes

4930	   Its contents are:

4932	   Content-Transfer-Encoding: base64
4933	   Content-Type: application/pkcs7-mime; name="smime.p7m";
4934	    smime-type="enveloped-data"
4935	   Subject: [...]
4936	   Message-ID: <0e210732-9184-5855-9a95-2a635560d3a6@lhp.example>
4937	   From: Alice <alice@smime.example>
4938	   To: Bob <bob@smime.example>
4939	   Date: Sat, 20 Feb 2021 10:17:02 -0500

4941	   MIIV7AYJKoZIhvcNAQcDoIIV3TCCFdkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
4942	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
4943	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
4944	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAIEzSE7YJfWjy0TMQGEfYcrcBw2uruGZw+/k
4945	   QaHXEcEFdwDSaKvAzEFoNN0xMpZ090ybC5MHqteYMRpaax43TsCnes6XevL7o7FV
4946	   gSMI6CCnmVlY2Dvj+oGPHkl/ZkFRPz+Hsrnvl65Fs19thjbtQ7LX9uKE8TBODLRF
4947	   nCnuyDdHx7iDJGI6xepIvD4M3zaUwpNa3fFi8XOC7UH7br6+UGCRQCZl9nrAU1W/
4948	   VvfRt+6XSWXl71IU/0syMw4ghwS2tsLgZhIrDkFNlEokgVR8bDejaV9px7jH+d3m
4949	   FJ0t4hBjsZAfnggaecXwoKUaPqlj6Xl0e9cLtqwr+26h1TmA8X0wggGEAgEAMGww
4950	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
4951	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
4952	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEACUHcgXEC4pKuedLh3CB0QLAW
4953	   HULF5htBXebTlJVES1voU9Smp5OkueBMptF18R2ojjM36C5d3xtdsBddVweJqNyA
4954	   Hgp92O7qVoPyVXvp7BByoNRgZcrMx1pRoTREEjCX585MOXEBFUxRVRPohViZaOAM
4955	   dgdWFB02fcOwGh+RtwBfE5Ege2zujhTpF/ie7XIbNOlWsZrTDGdQ63VaqvX3AS0m
4956	   TPJyeqUkstDWSzOIrOlp1W/YjMcYNjDkygeNgppdV4SEUFYTNxz6rqql4E+a8LxX
4957	   IogOTMh2ruDPamtoAEMfsMvz9XUjSN4TRWXORLkzQeaI0jcPVjr6AHLJFG6etzCC
4958	   Er4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEDyefElL8mhLfkZjajQLY7KAghKQ
4959	   4f1OU+eyhjobu3iIzeCooqq/a6JmdoGQbY6s656cODYMhlimkXQkRV1QEZiLkAOi
4960	   aKPZy3zmuu00h5lnpduDqzFq16Clw8CY/99ep7I6vANjzmvh4pV0onCsR9GuYexq
4961	   65nR8oy9dXdCFP6vkGBFXcrTqnbPQrZF9DSxpXiicROjS5ybp8clDbMJKB0x9LQE
4962	   vHcxB5jaNGAsb+IVHZr3LjvO5V5T0/YsXn6aJXQAVU3bOO7iUjxgvGxQGSsShre7
4963	   F5qW99KiI2cc0c/wPtv4PyvgcVuLs/CFtvc9CfgbIAr/Vm4AupZUbaizLnpxSK3S
4964	   PKY0l/8j0x8Eavv7LsO7R9WzZwS8zK5Zrx3aDRclXUMCXyQkel4nZvCOintGDoKo
4965	   QuSs4Fy3M826VYkKfc7uaVo7j5lzoSeNUeD0q5hpmrTnJ/ce8C9T0FES75jc6P3r
4966	   Q6yAakdLcsTL4XPc9Hi9stkX0pPrGYrK1HYaDBDBKZ92VdiEVGlX/41hltwX0f79
4967	   M/R1sbT4a2j9PsWKRI7Pva3L0nNGV0iajjBslyppdXLKNFBH02Vy4zoujcjj34Mr
4968	   SsrmW5EkoxUZGzlX9NAYV8N5/f8faUCYnSbfHg/QIK9WBKggCTm7e8Gq2iGgzVmx
4969	   Jpj85EkYXLDkS7tN4KhgJRp3ZYRFdRUutoq4SVNzNc3AhYDMVyBWcpDAIY/Y8ync
4970	   ZsHpEFB1Ypau4/vtj14MCjlIfOtRDf3oH7Z0Gp6ecWGFwkZ+P8muIY95FEfOofeH
4971	   gTzUi2M3NwbGVOSPpTMxZE5wesAvXaWVS2pN2KPmQLBXPVij7vqavbVd1e31d8JJ
4972	   cRJwxdVYO3Tfe42TQRdKjYIxQmPrjRdx9d6TyyoZE00mGed11v6Z7lxWcvGZDl8k
4973	   rMM30LF4IgQjCVr7EiAYIybviRYLNNKptCqLK/TvANtevYEhb9yTynwevu1nFW5e
4974	   Uw3rihR3MJgCV7+zSvsjKHubdSpuu5adyMKfYpRyDQM94pKVEvEVxR8Ja51xyVB4
4975	   p8T3Y22rNWjlsBf0B7UAVqb/oDuN5oW2M8K53GVXEPUg+80dlR8r82Wq7ahSyae+
4976	   /jAZcaopN062hQvXXsIFj9vy/B2rdDu3hreUtFIjgLrCmKqmeXIvh7lcBL1hQ9Zm
4977	   EI+F7fIJJSynDna7PLsU0tANrE6lmn9XkdL9EVCVZK5LMFp8LtuGo8EMZ/MxZ2LQ
4978	   99duo1um5gSBdZJYhrxb2rpmsVRrtLjzKCmywxOEBlyj3hYBNjFcdYhRd9RsMRgg
4979	   QjoZME5ovHDRyBABUiwOtyGIFD9rt8xNqjzHWEizeAzfj+WbDfWDz9qrysvx4Myg
4980	   scicK+yCWBwRvL2LbNb+uHhX879Ejj4zzkSlqDIuOTvGduojH+Ti6aZjEdnpfKGM
4981	   xHRFRHBI4hmwuiwzqO6h6CpuX/2aew8wByIAaomyyGeTscBaJk0JumMxhSmeyImn
4982	   T9DTF4dUXR9cGEs2qYquQcSSc2KNZpaRpVDNcTETNPLNh+vFUPJcv485g3e8EJIy
4983	   VS99+e2lECdjkc+iHVMBTXdwSMEgrlYdIlfrPCy2nwsajp9+4lhL2aPk3yEqSs6x
4984	   QHPO9cEKNuL7BG1Cpq9wkr0O7CVayEWY9W0k912ARy637pYpgeQ/w3eNhlGjSuRK
4985	   pXZr7WWgT8MEuF0PJPOVWy2V49JmKjP4po+9/V+ewHievS/Z74/xozJnNhNqyYDp
4986	   56mGQ3FH5Q628WcPdk2V9h897AOsHVyFrjFHlObWeUuQqQVctYqT6QtW/rITmQwE
4987	   85DzWoYELv6ng+IjSswQEeKFm7UIbz6UBPe5IVYJaA6nAXV9Ir0ErT0A8QLN/Inw
4988	   Buz4RnznGuXNgm7mONvWZrYnbwNKGsbO/LSmsKDmlCqDd/CRZLP2/r0mgNld6Iqy
4989	   wuFfFo9Ml8WXUY3veMD4J9+i1sm08jMQfIqKgBOOczsBt0sPn2yE9mgcsDgudO95
4990	   jFz4g2E8RUSRJgj/av9nM1lSCYjnizkBezVvM/S/qJmGHOl8RbYSZlZBIJq+xkAv
4991	   xGKG0oNKVzHe8VtMUwBbi5kOOx5oTrvJ/A3s36MrE0JlcBKV/jMMt2FyDE++PvFE
4992	   0X0zf1YsK5281jNBMBIA8GRbLb8+G/6q5RMf/epfy7c4oJRpDblPVhSMWXmgUNxc
4993	   mLmCftewVJZvvtUu0WWcVWZ4s2GZOjtBFlqXcm8nBdY39drprA0pcrkL26XKWM7y
4994	   F+6CqwCgsMabwViBtsY/BMVeO26UCfXJfytMGyCeuano9d3p12VHCLM49TQcWIpZ
4995	   6yRLmKEYoXxvtThZE7WndatiUmS646xpsLmtoHpAhN9V/AJVUB5DPHDkFr75fWp+
4996	   GYsKyEDDIq/4U6gYlFkzWuNF3if8PWwT8PbkiA+2XWrUs9N0Tw+ugD8LkeobRw5M
4997	   gHcphVR6Zia3WvpXBe7u/rGgNqzRWHSDtT2UWKsJx32iPuQEVb7/KQNT6blBhFrK
4998	   LUa6Xp1ZUtvdiJ09fNx9plaKquHQqjV00YTga++ZCrdLnEL0IxRMUbzf6tkF0fF+
4999	   gNnP7uaCt/1mXRyilDgb68oLxN8R/fCRTSVZibLhimWPRFXm0Qf8nznYR2+nOARW
5000	   K4SfFLhhB7QqsLHuQ6WB8k4vwewhAuNM6EDR9wSyp5wJ4/NRtwm8b+Vf9aYXweQ7
5001	   8n+mGBpKQBwStOllzU+pDdorM+jmLeky2hPVkR59IvEiZmnDQXdzEWZAVEC9jbsa
5002	   llb8FnL61OedbblBkjfeaXn+hD3iRbz44vyHa/l/4fi717XNCyWMEL4Op/hezWdt
5003	   pGtexT+AoYw2uA9+qNkz7OxtqcSzcVkm3jWTJPJLrYslUUhI5HF8yH7NtbaySqPm
5004	   ybxysODBGFXz7qf/o/rg2SNHfSIcfr/itP0ZpnuHiCtFwIBYFLoY2ceMYeKfvrKX
5005	   9Ble9lgex4BtKL/uPFQopYWNPKAchseKIJzptZpPW2T37kt1UYzEhzieQpC6IDCn
5006	   qSZeq/Nd56iF/kw78PQMDCGLdulJDh/nu18LD62GhCWpZMEGdxDJvP+VdycMEIkb
5007	   BHXKLKm5NNAygyw2Wj6kiAPR3+/ZJBMuRzBFSxI87Zt/iXoHM9PYvyDcgjC8wwEK
5008	   z4jRNokSW2eSmgRp8ty0ZSWcgnnegymkRsYSYkIc7894qFP44PmypNB981mLje3c
5009	   FsuvRcVny3r/KJ4XI14OqbkYWwD8rkHbXohiYQx8N5VUqlfQCMyPpaqYf247fW1p
5010	   YJwOKXeOsJeiv5/uUiC6GzgunABnBhZS5uFVKoCtVITzzOKpqAEFFMr6fG1nOMzv
5011	   Y9XwwT9fnM3XWB6RsXeHvSMKjQQXzOMxc23mtV0wse1Mg01UJVcLURy1jWoY815F
5012	   DDNeBt5irzunTvX3eRCGz9oaJ6Dzl6er72YqmHFyKEGFyFjCpOxMI3LlwZhUCRM0
5013	   MrsbtGKchcht9fmh2QouxtQh8T9r0vLlVrHyJhWwargNxQG+25ZPyb7pmBR9Fs+B
5014	   5PFhN2O3nOr9LbPdrDXxvsGexOwAwf5kp0LdM/8g+cn5qqSNGcj2jDagZ5j2IPbJ
5015	   9S7HmRxx/D0v5RFnwrc+WVPR+z83bYwlN6Ug9KB1S1lwE9E5DEUb4MWbnh3RCi8k
5016	   Uhh0ErIcBWByUooqZz1in408/ebhlpC2zYCOHqUP1AgVsycmvbZf68bHDZxJWPGz
5017	   w4EJYYCAF9DGbvaF+pA3TWnt7jmf8qLliwGCgC7U2XjsL6aTClql8QseE2OvvBLE
5018	   11g4ZbXJXHs/rV9ZuKzzIE7MTQmZTY4923ROG/Bt9Bc/1AJ/a3e/mdYoZ+79TnQr
5019	   /sLP2FiqVHAOtLY8SQXnVP/Tes/Jc6EAxemoCR7fT+959WcC+vaow6MTngjk6JBb
5020	   YQUU5wNNFl/834tnvSLBI4IohjKbp/ZBqsctq6bg3pGb5MjfJgOxybX3G37CdccZ
5021	   yxd3N0+3lXBWuEuUEzusUu1pqxK/TpVTcptV8IJJweiQjwYCESMsp0vHO44a5ruy
5022	   WDiMaDOdgSiKgTl+4LiQsTTqVG1Hd3WB/16hUvIUeCmwbsDLZ7JZWy6b0PyQSqdi
5023	   AH2GwmcRRU0Kiebx942EDTkSTDudSCd8fcE9B3zg7VkgNkTRyHALUW/4kEm2LayA
5024	   Igg5Rkfe/t3w0wiDfiPkx6KZH//S5FpHgbFbPiXGLcKIozH0ocs5kT6L7vKc433K
5025	   es5nwUksTlIiBdSP8fJjknUww179CqF5H3N00HUo3vN9Ghso3bvBvI0WOd84iuLk
5026	   7OX098rJyQR8HBBiUFG6ze6ZY8hd4EY87dFY2/01p24iuQkLpXgxIRPmm2Z49Wvo
5027	   2MlXLGIao+4D+sY3+E5RtOfjJ9oEUFZX1HJ5zjGB9poPJV2O/RSiRXpU4weIW2+t
5028	   T4gvboMSMPZh4tccAsIMZxostc1LjBl3lrLzR62crJOdOc3vKHhDrd9RdR2QM9yp
5029	   ufaOAwJm+Ubb5+liqVPo5bwyXOxJZ5Q5cyBQRhwwFUL0y+tWwPmyGR1ysoW+soFm
5030	   w0NNGgn4qZFm3O0i7wkFJK1gZzo8t5d2XXx1yp063X6BYVLT+SGuTSNrfpk8MuWo
5031	   0Q+6lyZ6UjZ5XLuGvyKFOyraKr3ETdfMCA/bDmx2FI/rFDhziwWgtYJpSaoEptP+
5032	   I/+rZxfQEd1kzJ+SgvggUbpRXR6/UCHBcvjSnJNMyBRnjTU5j9FBfitay2L5ZOL8
5033	   79hudV2c/NO+qTc1yMir5zQyYLfN5oIHUIOJRRTs1/kSu5Uk3i+ByDvAXG9nJ+I4
5034	   t/zZ9FSvk4RatM+nHLbqQvA31qfv8yoz9quVhEAMZRMticGWmwvPkchjZQdtzwTo
5035	   vCKBC7M12xITparw+kZuD5tD2d62xn8vTAgLhaFebflI5N5dF58XgwOkqMEoYq+l
5036	   mYNorq/q659Ac97jyJ35UEGsS8tbkWCAHcj27WwkCcFnXMyfkRrDXasOyQWqZ8iQ
5037	   mmZeVjJKrHNHAV5Xj8l+CI2BJlLwYyS/IwbK45UuIi1xcMAAx21J/HMk80Y8laDR
5038	   qbqq5IPR2ndsYs2JYchBB06t4VXmcJSzK9Y9CFzK8OOOawFE3DpTjcl4ZCxodKSM
5039	   MuTGLS2+ZYqM4buYp92HbeXBz+tjCaFp16wFiPm3yRpm969smGt8Hhc0wkSvJIOl
5040	   LmFkXib4QXDx5ulHVDRH93B2tnq9kCG0Zs/AHaUkN5/TeFx2BIvMEJyQTNHfl2Sn
5041	   kF0+ao3jREVMhAadVzFq5Yvr907MFID/t29EEyWkk7NU1zmOjTzOt02akO40Pnog
5042	   Qibu6gHHGFY6Aje3zHdIBEXnIETJd1vda//GG5u1fdb7bgJzoY/sdORb/U6ZY2zA
5043	   hlqJnifV7+0aT1aVDXD/F/FSd+B8sK96e1MC0oB7YJ517ZxdZ09WJ/fNJaXBU1PS
5044	   2065hVjG4S4XfYonkvE4Ig3OUntnwg6y4fx3ZUgUFo3XJtGhgyBIw6ZNrHrhyJHZ
5045	   w89PxnGJpGTA6tDbJMUNSir6yvR9/uhgADhfVJszdhSFKKre4BdDwn7gEtd3X2dx
5046	   TbkFAs3TzfummzNHO0Cl1v86RR8xx3jRGRqJLd5RtwoaNUoTMIR6oFNx+1KOG/lp
5047	   ADjBJU3otm8hC7Vp5HdTtRk0mH36inha9dPTjFalx1OIUmj3V5icC2ZlLApdAuzD
5048	   uAiYMqntZJGHawGLKOc9UspeMgmUiblo25gDMYsuG0stOfQZjQi9EQLQ2xyyj4Ha
5049	   RIrSLm+guqcYPQJgRhAOEx1owEGqJqYoR4rmps7w/kAW7TrTrdXeXHLBbvavGtwo
5050	   rt0mrTfHPhPmsYbQz/4T7Lsm2k60TjGbSm8tGgBRydJI5ly45U/FpNXVgykgXBMF
5051	   P+hJLVMvKgHehLCoxn5sBE5Zzf8/PrgZ6c1iG/iBXgnbMW0+yKUQ8sVLvp92YpY7
5052	   hKplcj7RKJL3HBxzUeuUhFGfaiq7MgpKm18vgnFXJoc/NL5N4eKLzn3TD0q/Xhid
5053	   5lpZgm3+6c/mDgS4RUIqtHaALsVQhoMGdrK2Tr1bi2VoKIhEOng9UF2WxQJiDNhr
5054	   VM99rYy6aX8H9bj70xYG+KtlO1fEjp0+S1OEfxeLCEi/DShQjPrEwumCW2dKz0Q1
5055	   7G2u+qo6Zcml9eJp5ZX4GPHrlImX4+ngp27/cNDQML/pHZrTbT+h2HZiDObED3if
5056	   Lj/pAB43Snah9bg7XoUWOE5lNQoOq6uSG+bUFsuuprFeekcs850DtaryNWzpi+4/
5057	   5bScqoMawu64YqNq/1pSCXImEEab9nXtn6q4aPjhKHEAhWD73YR0nP3kV6XUn1yF

5059	B.3.11.  S/MIME encrypted and signed reply over a simple message,
5060	         Injected Headers with hcp_strong

5062	   This is a encrypted and signed S/MIME message using PKCS#7
5063	   envelopedData around signedData.  The payload is a text/plain
5064	   message.  It uses the Injected Headers header protection scheme with
5065	   the hcp_strong Header Confidentiality Policy.

5067	   It has the following structure:

5069	   └─╴application/pkcs7-mime [smime.p7m] 7565 bytes
5070	    ↧ (decrypts to)
5071	    └─╴application/pkcs7-mime [smime.p7m] 4592 bytes
5072	     ⇩ (unwraps to)
5073	     └─╴text/plain 337 bytes

5075	   Its contents are:

5077	   Content-Transfer-Encoding: base64
5078	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5079	    smime-type="enveloped-data"
5080	   Subject: [...]
5081	   Message-ID: <0b3ea6dd-0e91-5a91-9bc0-3d553f892983@lhp.example>
5082	   From: Alice <alice@smime.example>
5083	   To: Bob <bob@smime.example>
5084	   Date: Sat, 20 Feb 2021 10:18:02 -0500

5086	   MIIVzAYJKoZIhvcNAQcDoIIVvTCCFbkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5087	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5088	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5089	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAD2qfM1qd/wlIn5/weLGjTIvhLXq8DBtZlBx
5090	   74LEO41mLd1hgnRYsPIWC2PtjkC/seobOuZC+CV58bybhtZc98t+SPFhw/rCzvKD
5091	   r+TYWJWJ5klGojWrmZJXuXFUA6GW1KvNQYQV2xkntNjeOe0dUY/UwXDXnV2hwOSz
5092	   K0MpYY9/M847oDrGiWv4xDqLd7WrN+ztQiy+4b29oA4Hy40Ll/z9o3yNMYEeZ+ZU
5093	   oICNWAvSHhIHuHztoEhhGI01wF7KFpygyjP34o5oC0MRFwyUPmqJEuj+/o265hfj
5094	   zKAzd20Dh0lY5f4cKRak/Nq7j0YAVUMftIn6Z1AI3NBdqAuncSAwggGEAgEAMGww
5095	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5096	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5097	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAmcFRU9fU/PySxv4kLIQ1zBV4
5098	   nTTHsBv+t6RGYcEOmqToQCdNyyQie+HqTJh6M2/Cc1sbRuOVsrfhJc0RQqKG2VOa
5099	   huevYf4E/x7+3Apl7zzg6rOUfi0rSCv8y5PYLaHe3AbZvJr/ilj5YKIj8+D6JnZe
5100	   WxSSPZTDbmnN+oTtePW9v+hfq6OWomQ/VnUJTSQNUnkxTnhBK5MiOnwmIYBpOD5Z
5101	   29/dLzfgciF1gFtTdEjszQ05IkVB20IvP2hvyaciljfKmFXS3302jAuxLSPiAQIK
5102	   UYw8JQCLz+TEGT7jr2XKXTQQo2yv3dRTB9Y4P0/MglX8fbzqWLyOY94hK8fWMzCC
5103	   Ep4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEBaBWCdD05Wk7rGu0j8AGnmAghJw
5104	   LWbI6Q5pWF3Q3tMokfjJ+6dzF8HNZm7De0S6Hu3eU/9w7ooJDnRsWbdr6B5QI3b5
5105	   fsXYC3Vfjp4iYgwikm2xX4AXzt07T4YUl2V3yKNU5UKPhRLrbH6zb91+ghmZ3Nor
5106	   yEWWu2QuHVTg4xsCaEG/+LX71k2wJTI6Lk4QDH15OyIN6KaivSZkqjNll6OgQTp4
5107	   /0YdExevb/K2WX7w34kdq1KFg0Vju2hGrnPMhgpvfuzkQirtFtZ6FmeUXWm13lX9
5108	   Guf6GeL6F4r6aZqH5gz1JUVh++3OC6bzPG0MdkSVo5hELTYRvfclnSLbyYcoE38a
5109	   v9aMDlRv8v45Nd3eCxClG93Vh/EP8NOS02geATE0/mNk5f3jsZ9iFZOdRMZ+jVuB
5110	   l00t/jCj9PiJaxLZ4+Vf9qB2CJ15PtbEp8CfhNi1mGU3Z8LJbPApUpRW/rzmTf0P
5111	   JbGJzL0mU39zRnEoIRDAFAaqTj5pVgqWiYVJhKkfs7fHXd6hHM7MXqpQXtc4KrPC
5112	   UJWjii4DhyEEeTscOx10QPrGqST5nNFbc6Hb8qFKc0/bIE//QGz9rGerH+cFxeKa
5113	   sOkevWj7Gb6EhMu2aGJMmnqoh0pNj2bp/5vZ6paFmhn37B89nJJhLXqQeDcgglmA
5114	   f7DzuAAN5CSw6KmiJocmaYe6RHZjCEZmILXHSRJoDoTEIIrQiV4NNGxah7Nw3gaw
5115	   wwASkf+dhn6mKg+6y1mVIIPdgW/CjjLSUTvox7WeKdmlX4yjmJSASoCJM3NWGW3z
5116	   BVDdY3nxkSQ6QcpaK1N57MpOmkP2EjbN3ch8vQuj+croYOmR72zD2mGNQ5iMzcl+
5117	   US5jIew4R49N1TavwubkQKXtxl6WnUgVGLeFm2d+J7zGWT6tw88k740Oce8UwVpu
5118	   NBZduEjPtYnsyXIRxL5tYEPqUrSbrTbsK10WesjpTD9+i+fBqvf2Y832yXQeu97r
5119	   9JSQi1Q6Xtyvsmy2lM5ahdzwS8cz2WSxMmJgVyGKlFX7REPjktHf6dkDM+GZs+6w
5120	   SBhDu4Lyf4yrtiwuNsoF1qn2rdhnGQAkjishzsOOIcoctx8ionRi2p+nLn963tfZ
5121	   kYGcbbRaDs27nMBTFCncLpXFqq8Phfmb6fI8Amv4JzptPtqnwU/ygonOdkKoMrqf
5122	   DUXXAJ7r/5otGqc/ABjuCOPe7TeAi4JZm0nnEnJM1SvvuJuPk2cJ18ippjYIF1lf
5123	   zkOU3aaxJtQKofPszkX6eBEuKWlTo9rlh6M7NqmZ3j9Q82SA8K2W43q0ImgYnded
5124	   h+5i3siTYTHrXwSdN07hKtPI7c2ZE9J4ASDtTmWNmrb2i4u9bxF3+IG1ze8lVZU2
5125	   Woj4mqsBYOEO27tKn5IWVGKrCgJ1maKOCEumEi+iICajyyYOXzl5mXu6Z6+84uDn
5126	   RxMCOxu/mualrIjt35zaUVuvkhMMJnkRijEcdbHk+ICM9x0DLnRQruuY9Kxwjgui
5127	   c8YACZcQf0SSMyQZTbMfJjVXvplXUA0TqF5dCX4TorUEiWy7pclCmBvvAkOADjug
5128	   htFRym605C5HtjmVQonQWL5c5e5z4+cDOISgdkaEvVCqg0pu+MSvMLhjiqoQx7dZ
5129	   Mov5sdbk344oo/G0mokjLT3u52mhM00SighMtW+ABfzwBE16DP1I9sC9Ge999HsU
5130	   EU7hw6vEOIzM5O8hsKTAceB6wpXX0ch1um/emFkjglVnxgHGxYegMezigQwkgaNV
5131	   UwuqPnnrFIce4xu7QZ7pcAcpcWVLUZhEtCK1vh8QPUBcdA7CSrcGWdXuzEZ5V0Xt
5132	   LpF2augMYQ+a9XFQjm2Lx0UZErfesN3plZ+1ci/ltQgVNuZCPABIFNEdZpEKtOfR
5133	   czO5y++dgqlPVOAdAP3bhY4cFSFfyoeOTtJo4Ev1kph7Cgp9s1zR2QEUrwah1zMa
5134	   4zyeqnwomcZtbJfFysNTlIOT8FeRrynOImEZaj5HoCRvicEBUB2Y0X6uFcFlyydv
5135	   1pEEIBfoI2opc5Zczm4x7sr+MUAaGbvVBRoXTn8L0r46JILp7hVYlXt+DeoR3BEt
5136	   sKKSE+q3uuGbWCmhAxeoYZEZwt9VGFv5DPJyhugkn62dA6P6AXPHYf+NbIQIh0oM
5137	   HFRx+3xZwluTmCq4+MFlLFekGuYenQnBEySm7ps3aLRBxjdKTuG59Z7nu1KIeLjg
5138	   nyVhQfyDgyheDLdf4EWpb+moqjmfKnW1k83KSMLR7v8EQyWYBO1jSCCoOTeEFez1
5139	   Z0E2ALHfEWKMFt8fGHd7VQoJlwoIoixNj5jYlm8xGBDvNbFDBCa/4e2CaAIj/AZp
5140	   lhRBXc6JJibLqOihgoxc5fMNTE2klv3qWa47QmbYnkQ1VV5C/u3mwBBlnFHSVHu5
5141	   s1MduNiVpN6Z6/Cex5nloPZK/7TqixnA6/058Ckrqf6nLZUGIT5gFo9RRYyGqbNU
5142	   ptIeBZqRpOxLoFanC2KSOFnJFhDAd4XVzaoXTEvyCjj9miTbccY9xh08ldAlWcZh
5143	   0RItsVcqKhkVD25FH9kViSKjct1V2b1fqBAEcuqwytnB4gp2aUNCRmvu6RDPBpy/
5144	   yNAM6d9dgDCyW55KNpv2aUoJmSxEGLuZhSMJjbiZ/B43ipxJHwpMmP1Vj8y6UX6r
5145	   bzpaSRXhPv6RCdohH0Z6dY8rpO2PEufTa+4YNYcv5ehCY0AVcVSGGy4PgSiS+M9t
5146	   HezSWjMkqB/Oa3a7rEKo0Em/n9Y2L+h3npXY5BPACo590diiPdbOajojdP8s9DbH
5147	   kGepW9TxYpBKKSODBZJF7Gv/yUf1xJ23g+eZjnRgOBaNTRImSe484pSgmSCbOg8N
5148	   dW4Odnk4zyoZg61obVAQShRtmBU2slIx6Yl9zrVJUIxo77d1dkybPob6mtgAauxZ
5149	   RDKT9uaaC03fm4GEJ9HEWfKwK2m4lt8EiHLrjz5Qar/XUW7JajxsJG9+d6pMZtak
5150	   TKevdDYv+3Sr7+TSDUEYtYgPbxBdPtT8yXZa0vruA5BA9yazmxIfbK3HhKe9XFVW
5151	   CEpR1kHad3g8t+xQFEvdKJEEfwrWd31KuqXCmPJqPEyT8uZ51NLG4xqb2oTM14v1
5152	   DcoREgm8ZFVpsvuwylItnwH6jluWV9yzetCoL4AbH/M8os92mzgl9OCygBl4PV1T
5153	   t1UGyDidOpv1Pa4tWvvzJQioGf49mPeatlpFv14W+Iqqw1cKsDVbmq1MusOXgafm
5154	   qZ9nNYAnxLU07FfeN09ljVyAEYMTW0BglxWU2Vo65GoZURH8mu5OHau5gD8FPOqJ
5155	   yl3kUiZ8PKoQp+TCYfWs4IyEDXCo4+wKJ0TPVOhH8mBeAZBQsfmYEXtZhBGSlWxB
5156	   OMu9DJMuEXMSlUWFH0NEajhn1bdU1KD3KUvLXx6lH35NoL6c8ER8AwHTB51wPWsp
5157	   hMiG6T1bhXc8mSrz5Z9ftBXe+5NIN+eChmxUZpYTbv6wvUQJ5aq8iO2CTjBa5948
5158	   RhXCrENgzF2sa2tRVQjWOeMzU5G5NGo+v16bIZIzXv9GsWJdhQfiwJ8PEjdNGEnF
5159	   gFb/zSPJbno41vgKhA5vp4r3T9IGR8wqID6Q4Tf6MnP6MkEPwwzqH6lp1tEhNElV
5160	   2W7lpbkL1n63ciSw+2frJ86QiDDeKMU5OFpWR+pt/6dGuHTSCOG6lKIlJRzDLRpg
5161	   Wg4hOEJOFID+9RU6DBZiNpW1FIt5VZ2ZHYjrqSYEy8z+tenmX/yg42YFxI+1UL63
5162	   PAeyXDuNQ+D2OSrs5WqPz+ac9SGqA1NicNMDnLrm+82OG/4z/1xcTUlTI1ewQRCD
5163	   VvXiTNxll1PvW+/wdD5YGcRz/yjBSTqV+Xb1ALKPTk/qrLpHFerTxWw1BITpNEA2
5164	   kKM3lYBpYZQK+ubTQexACbQeeE7129OG5r9rUEtcTEeh1vzg1hiYrWoGzFOPXUET
5165	   G+ru146zMsDoJSALJuJjgZrEQX/BMumYdFHwPVxAXy7d0lzchXUTUlbzTOMteAUs
5166	   Hn6hpaELCpuWYhKPQ30aN/Q2zWpat7jz1w6rm+NPTHbnw1loE0zJclaw9huFUCQZ
5167	   If/DRPbKz9JTOdfZiz1ZqCxDXilpfYXHgFMWa6OMpcMYQ/yDOggqD7/z2fvwUdOU
5168	   NlDv2HxpoZKuBV6bF664gJ3qdHmHEteecKXjKbuzUbTrQLE/dsZIsgvZyW/sMiZy
5169	   ErLCFA+pcGIeO6za9DFYVQheIpv6/y+gJgc/H8NPJXZVREbfbRqnhqkMGmnw65FB
5170	   lDRstzU1AYvq65aeLXkDaT/9wydtN57ebZWD7zbum6OrgEjdBtJWd3NuiUQf/pqY
5171	   dbKBfBifI8r8oUWomyJV3l7HOxXLZO7bwXt6sykngeZhnW6gULF0J2VqRShN62iL
5172	   ycHtr7ug33fo+EGHE/FTia3Wg9SUJXgssrcxB++igW1Ou96AHA/Ub4IQZM9plIpE
5173	   BH4a07A0ia2DxYbpWCpeWZWuKmBa5jEF8VIyVy3baic8L2cWmMPjPZ9+DyQpsemj
5174	   RTutRPZUUI5pNUPiGvAby+c/s4zLFtKFFzk0/mE5MhFhwws69llz1BOA/L3QRNX9
5175	   py9AlucjDPOjFrJ4zmvDzdogkwkXGVSF4ELZgh6Jpe4ZKNqkI0Xrv79GOngnHm2Y
5176	   a1srIFshEQj8TxXc3GT4W7HrzrbCjT8NLGE2YVq8xva6iOAX6DcpPLb0DH3fUcJh
5177	   IYBE0Wxlr6ZSU4DaahCfEuNvKBtLv3oE8izP+SBDvo62etQXWS7ku4kQi3z9Xhlp
5178	   1qjLh1ePnZXdO60RlgrpvfwbmT6sFWrnRrOpeCkjU4YgMRJWwzyhWDJK9VVvYpFv
5179	   axcyjGzBgkmdh3+EV8ha+Owy6OCY95+9tZmv5c3jdBHrs8ErFh1AsYDfVWCeN9rW
5180	   T3PcOGahl3AKqRWT1g4yPxIJSGCwxLR1238YLcd05LigKh6VDV10X1AgiON5fyP4
5181	   5o34WccEbM4qvroR+sEBvlFJkA7k3965R1K1exSFkVqyaZbn5P5EgvY4MMgtCxez
5182	   KvYoCaS26llcK8ofGVy/UTyV8B1N6ViBX5NPcKycjVNrnSroPIDZtXjwRHjZiPud
5183	   iboVmbLDgLA3m5hoUUGeLi1jbTkH+OUVga+0rQy1QSNHX/MGTP4zV4Gcj5NU76CQ
5184	   0XWwelntePs9LTNJCJfYKyLPcelDAJ31JOia3Lqg4GtYEJbp4pq3rwdp8vF3etkb
5185	   8QHUBcwfEPe3kyK1VYRPwfwq4tpmLrfWtvofx/mZ33TAoMa3e1p9SXHI+Ndb+Sob
5186	   KL8Fyp43miL9wUFYKnv0Vo67do3cCXYOA6F/wbJw4V+oLdBS2amMQnMwpra94Scf
5187	   L+B1nmzQsGVpl5nieCQE935uFDxfxGUatNbKbsqkX1ZOIORPplfX+TJrAfShBsSj
5188	   E22uxGfq0Bj2W/3tdFVKnkxzCuNtKECq1xQSuTaWkAHW5apFfpVBpWxzGO5eoiE8
5189	   CadNkpr8YFGswCrirpoYqPgGHE68I96yIHal7H+ufo1XK7QH9ZtVSL7CEirYG0Xi
5190	   ZhGhDlQwMBDAhI/57sF2xfGgv8UEm7l7/94isN0XPkSqEmmbjcBpGhRBvRmWggnX
5191	   7DHoQj0viTY2Cj8B4f8ATvdCEuPY+JpCU3xWVdSTJSOXq9NH/isNzxWWxx2aCS2z
5192	   T/K9ol67FcXMJN8tH3TCs0VmXkYwID94DrPknaUXMPqr8fiTedByso764tCoK/bZ
5193	   FcDRnUbdpn8UCN8koJF4UMp6mHOwWxIg4ekX+V+REudBAWOXF9pRdury8xbVFb6A
5194	   t+RvY9aZhTTr7sFFDHOSlhOnRndzfOVj5u0iiKmdmk4NDMf/gIMq1kQ6m2/vjAEu
5195	   2H1p8DJ6XNsLCIZ4nwdqU5326tFOaeylTAcwSXox4M/23zzEHW20+DCSXn+GAd3v
5196	   U0iN+AKsss6pGPFxzwwBzaWBIpCdXmzV1w3JOoLiHQOx2IHkGXXEeaNPDBOa2PoY
5197	   G/vQRsJCv3vgeYHuq+oKiOORye1rLkFakmuSZjgG2Wo05B5tapxMHoW4plyNDDPJ
5198	   0cezb1xnqbDkceXcHa+nTeCouRCqd/P6YVz5ocD4BIdSwrda5GX+6U0bl/e+IDoP
5199	   pHWKijdsU3DAM+uCJrE9EwZHDrkW2qL/Spp9AhtbdMsugaIqVuuTQyCWhoK+wpz7
5200	   wjCdyk1XEMoCfQ8PAS1RyaSUz7fYAsIk9P+FZ6qwyvM9zhmvFQcNoj3E5ObIq18H
5201	   GezlvPOeoDwieqKamAHWkEwefrUb6X4IK9w8dBJrYQgCjnwPq9G0dWu+MbbP8xwE
5202	   w7LgVMRJKMMDllquSaKDrQ==

5204	B.3.12.  S/MIME encrypted and signed reply over a simple message,
5205	         Injected Headers with hcp_strong (+ Legacy Display)

5207	   This is a encrypted and signed S/MIME message using PKCS#7
5208	   envelopedData around signedData.  The payload is a text/plain
5209	   message.  It uses the Injected Headers header protection scheme with
5210	   the hcp_strong Header Confidentiality Policy with a "Legacy Display"
5211	   part.

5213	   It has the following structure:

5215	   └─╴application/pkcs7-mime [smime.p7m] 8150 bytes
5216	    ↧ (decrypts to)
5217	    └─╴application/pkcs7-mime [smime.p7m] 5022 bytes
5218	     ⇩ (unwraps to)
5219	     └┬╴multipart/mixed 1075 bytes
5220	      ├─╴text/plain 56 bytes
5221	      └─╴text/plain 373 bytes

5223	   Its contents are:

5225	   Content-Transfer-Encoding: base64
5226	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5227	    smime-type="enveloped-data"
5228	   Subject: [...]
5229	   Message-ID: <b10dcc75-cf43-5fd7-9e48-f932a9d68fb5@lhp.example>
5230	   From: Alice <alice@smime.example>
5231	   To: Bob <bob@smime.example>
5232	   Date: Sat, 20 Feb 2021 10:19:02 -0500

5234	   MIIXfAYJKoZIhvcNAQcDoIIXbTCCF2kCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5235	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5236	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5237	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAGqHqgj1xSnDA+I9w1gM5jscfj+VbIfCbhnx
5238	   X0JP91o2lvOWKQP/faiuh+g/m0aWux3LmKbFTmeqI1GthooqMKdrsneFFPkq2YVr
5239	   t/bKwwt9r/BHWX7YmC4IaUEt58wY5EpJjyNgxTS6W5rYW0L7Or1u4VavRwDQy6UB
5240	   Z3PwtibHKXAWPRt0GdED9tUfwJodE2NUhpsww0GfbObN19UazD99Tb6l5ez64avb
5241	   v6qp2I3T9K2777AyeI5mTPWLosR2e20ph8VVAaElK7eqoj6fNWUl9oCHEKZ2ugnu
5242	   V4cMPsaqOAJFHnqFjoBCVtzMwKQUlSQdPD/G3M9QxD1eZyUA360wggGEAgEAMGww
5243	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5244	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5245	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAe+PncR8a8M2yRVIrPvFoFBJ/
5246	   sjeT8XqP0JrDGQJAlltXX4VP4yv5f8QnxVyI4GPbmDE18nGDWewzgOcssAWZfuyP
5247	   28Mwa8EFDstckvkFea4MvtoVbIZ1fj6zztvZeb0d/cMz9IWpM4qfaMrF9Ejk4jfE
5248	   AkagViFvjJ6168alDlLbJfAjFUAm3Kg9QMM3GVQrXlLxlhoOAANP+MzTZBk4a0/r
5249	   LS0jU0v6KIq8T5bXj1pwGW/64+koLYA1ilvbMbN+G/1KucNgyYOc3++6LI50BzYX
5250	   woOnmcNJtX32+f0kz33Zlbo1FNI+FGISzxYk3+ENNJbzOApIgRK8N/n6ky95fjCC
5251	   FE4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEF8YHUGL0G/9JbgGJzcUb7iAghQg
5252	   j91e8wyDIuHSPaIhkChDZUXsZphbmazatN+8ebg9nq7kB2HpmK4PyfOvv/kXpOdv
5253	   lMsP8vVjcQBneqza/wHl6Zj2HxqH0ou5sCSuiyfW55y8pquGuqLf77fb+htPIjmE
5254	   +Cw+vCEUw/Y3ekJO3kTSBPoZIb7EWEJXM2LHQ2AW5eE2NhAi7XZVWfMKbSwsRx3d
5255	   LW28ErQcGCDYoF9CTGyGQ7dFn9snr/mi5lJk4nrEXr8wVJpqgfxvcZqhWEAndv2t
5256	   9okudg/3f/kzY8A4yFfoapBF1SCT+ktTpWo9qSQ3gG1j/uPNhKIip2sCWBcwuyJX
5257	   MRv0DBTxObkpv1rgbLB8Rw/8TDRfPdrk/dttoRdqol/t/e/+Bx1KPMGRH86sPPLK
5258	   2csc2fiEGUT4aOALq09mp1ayzHXHBqH6izqKGrR4LvTMEAMgnzbvhBSJVtS35Nu6
5259	   LeJAgytmK3AI8NUzlPa9Wbxn1urGdP0vqisb7YcZ3hfZvifPiVgPgIcODL/6Uei9
5260	   fL7yxqC5FR1DLzJh8KrZ6512xKNLWAH1A/RrY3KIPQUvZ2L1BtzVm1xvvju0m5oj
5261	   1pjWVs1OnfZbft/VCbhyxbpILmOW/XK3lhzRd7s6anzb1nioBPsFw5ToiXEKkbT6
5262	   Pj3Yk+mWPGZbl6Q0pB+o9lgWtcNHr3fc4RIQfjM6H+WqV5VwozCA1CssSL07yYOi
5263	   jQArheZZjo0AsMlr5zOfPQTM/BlQIc9oFtFVs3Yes1pHGeX3c7xiQJ2aSNb2YtNk
5264	   89toDxtEJpzwctlfbaWltjghW/fTBvXj/pDkSO3i2rI/XxuPror1BS5OO/4tB+BC
5265	   qj4Rvf4ZGYerXQuZtNiiv+xwvQ1wQOqVnEbzAx9d+gfh8xNzk7xoAuNUJL9JNyJS
5266	   OnmM0pTPnHyRGFPFE49rE4rpRqWko1t5NHy/T67FZj0rGhssJR/y8RZf0Esqg1Mw
5267	   zHn0qVaCy1ZQimCM87D2+mvZMaD4VOYRanCWNYVOV6NLsjPxG84UCfuPSdNH6SZr
5268	   ZXSy5M8KJgd2IkgxBVwCy//G4mBsgFnQUs2E0n5bh9HnQEQAB+ttVLElGtRitmrF
5269	   UiuJwzCVat0Lp8yQLk/FlLz13pqZSpABLdxKngIfBR7tTUd341/rcLadnF6u7gZA
5270	   cl7ymFwoQT8pRg5yPHqFHoCxgreM6nXEr9Eh/ScaYKB5gKsPTdCGFKDOiJG2bxO9
5271	   Y1RB/EvydEyoCQTLD3qdgFTqEoBqH8Z4u/jsxakqg2+qypO89Jo6QNhrZK8amuZ7
5272	   q0L+ltxcZRefx45cyYrzqTodXk8Gk4UxjD1qvj4nfK1l8JZY8cgEEkKEgCbrsyO4
5273	   mLnmMxvNT11PWqdMhXeQ9KyoDQEYb1Kkkr8VFu9PCsw4XvwP0u/DvvASM8XDawr/
5274	   krQtixD6aXo0ps13JPuzzXy21fJ1qwOnSBnJ3bIrllaeferjBFwmbaxzESi4UtK2
5275	   p0XwQpLKBh7LS+7KToClbvgzoqZO2mN+nTqn+mR+G2PXnW6KBFPsYaupBQoNoJAC
5276	   JwokhlrcdMZXy0C+YNNdmj8lgz3J/qNH7BFAhGYNaqMi9EODs4wBKxt4+WKuC1az
5277	   7lqbFMOy5eofcSl5txCZZyYjQp7aU5QE+2GkY867RtUqqJ6IrxEtt3BBKVZtBwWj
5278	   DeNAeX/UENoDi8bAxuQyggjGsM/ozgfq94q0i4wKThvGR2N7lfKs7dlF2Vk9zuWd
5279	   G9m9MKXmZBk040HRtYDJlvXt7iuHpp/vvqlx4OoMf6QbG1nI3UT48PUHqHgNxbxW
5280	   NHPvNqQGW5ay44ZIbDmpTIAp3e9uUWGqS7F0bfAQJ/IEDnoizEFCL94MB00KCeAO
5281	   DBiKlneEHjY4EnsaKB9XwEjdEumhfveVgwpX9wn3PR9BDKZpWXIxc81I4C1B55QZ
5282	   zfKr0fGcvDRDVLIqFcI5/E2/D0+maSJdtvI3mHv0quU3wT863lDkKruz42ym/h6Y
5283	   M0d9qr9+MHllxedB+l+Qo1LMmkNg8XtVBYmqtyOEA3eu20AqqX2a81YZj2S6qqW7
5284	   fCwiLuSLNvrRxCrTOVkrgVRrKYynK7gFPZFRNaOMQLa3fv0mxiR59bVYSA7qh9OY
5285	   h7swt89nizA+IDKdaUpkN9zfhxo9IvkexukoaxbqHY+sYmy+ULLg9ZuJ9ZdiJpu6
5286	   waBgNKC/ELPvV1V/MwU6u08X+L+LZKnLRc1Ct/EOJlevDVm/MaHEcerKIUmkxUWP
5287	   UDkQoUjjrIznQIODRYllw6E2pKK008gCglnm7er7VjE/yjEPzOdBuFAoRqatVsLL
5288	   pCXATV+wySNzFgpxJWxHcGwRSs+JkWnw2rdbLQJOxrZr4v2rrNztx1BfA8WtGWmb
5289	   vGXqztE2LV2mob/aK5Nb14ZzcySbt/rqqzJo2bGPU7TU++WxlOOPMVjjpURS6Do1
5290	   HeTkgb7JYS65kCYDnr0hJMGdWJCEjqh1lSxOtc3q7R2tWbQokcU02rcFHFabA+4y
5291	   Xc6rDQykW5xeB4XVJ0fO1QQ0L+k5WIj/9ZIifmO3kILrA7d++x39Ewnn/SrQ32Ex
5292	   lbsOIp4AMpyyUx34iNjsQXLUq70ixvWvs0R+B7gVdwa3w8KLgZUYkk6pR7pg06y3
5293	   +R8CzTlKktxNSonU3AazQ4V1TWVcyMxZZTG5+MicEpSF1MUEvDmjuoZHfWv9HgYA
5294	   K7G6hjQ8Q8y6+fY3rQiDDhAAGmLI9FDvoMDCQ1g3zHJuysZlXcOu4x8sCPTpz4O3
5295	   GvtM5PIIB8K2NDeXucYc7jilElUX72sAYixlyoGWmCB+fM1yIgnKXITLRRcGnzr5
5296	   eB3Qjjb/2H/tIOdKysOg1u6Ki3ZwaHQZdLRwRxmQ/BUGxpX54WYAbL7Dv8CioRNy
5297	   wBrzuxldQaTqWsMyOsxpgPSIlzoJRRRrI8WLp2iK5PbKjaEXhdUXOD0zqbXV7KvJ
5298	   EO/9efDUSocGHT4mfTNZHRCxT6AE+rNZ+vPoO6nUpfV0ZIrVEUm0Vi3TTLAvPAR2
5299	   +loTHLSZQJzay4LknzauN0IsD2Gkr5YOYBP1mb8nqHGrZt+9wA5SPfPpBb0tqSzq
5300	   aRIBl5t+Nh3aTznqurQUXoJJlA9F6nXZQoFRwtMhgXqe1c2j9QrD/6r26+wPW2ZS
5301	   3VFH2ZDYLJP0t+wudEz0hdlqTgHqZrJal2tnqdE/Egh2Q81qDE6UiOEBsVa8cx69
5302	   gWz4lfJ9ptmUGuxOjN/Wx/lo/V4apwrZlJarxhkg1DB5/s5rZXHgWen68HTg9nIa
5303	   cc4N7qBN0twqdDpWPebdEMuEms7KqnR/uW5uBTp5DpDRxTyu++71K76HhUaCB9J3
5304	   98uyxSYBZdAl+7aDiKQn+HjJ4R2EaxBNtPiAwYkej24SasQ6sp51IcB+OeXyeIMn
5305	   +EzweYVGn74tHQ0R5ZqBroPKpUYEVz536UCFHb5//9vvy14C1sMoaaqKn0TCZ55R
5306	   zocRoFruFTkwRoEaNnfnB7g/CHrfvm+NIsbcYqIrmyM+FQsRv1SmJcjVxhrB/z9s
5307	   6I6UwJVQNHXs/T05Z9yepEhY4UJDAS19NKDZoH6NTFD13O7PhbW48uf/9wVCH734
5308	   PeVT8swKZjBEfY0hVJ0I5Xh0TchKyUaMZzemCpf4U6/QE6poSggivtD7AF2uwwHN
5309	   4SlXi5cKjwZhk44GEIVRHkjam9OC611yNOJC3DRQrix5ibeXjdVHRYJOk4jCXJba
5310	   hGxhJp21ZLPktke8lVR8BNSs7fJN6P0OahAuWaGxd/EfL6exWfTv+rm4nyDuCDBU
5311	   FxbF2HcgR3b6AStXGhUKY+nNL93roNcpxU8sTRlJDHuuFUmp4jrGVKMs8mSvUyWJ
5312	   BgL9PcNjfV155M+5ggj/VyipUv5feFKGiPa4wYq4zTWBMg3ysl3v4i9f3f2bxBMs
5313	   VwM21BgajuV2ilXi5lbNbLNgLDSeTH+VKEOWs230GfE4dsL+/06qsmVQMVowMtRN
5314	   xgHtzbcKOZcqKgZUe/lb82s4ZmY+EuKF+Uj2lXeGdFO/SeJ2X6A8thdFMnnUpkrS
5315	   eJDZ0xo5B1abVVPldqGPK6d5bC6V8NovF02t24Y09T8FFE4PPdup/yKeZXCa5g8s
5316	   VgztjBNQkrl5K81YBd6gMDMvMdzAfKnbHdzCmF4BvEiES6wpjE2jf7pTlFkrCEew
5317	   uva6sKsdcH/zPshz/BJCSYyNK9r0oy4moHWVrKLvOO9kTc9L+CYXG5TCmHRM1Ad6
5318	   Itbv9249SBepyBJX9Usyf2NNaXvUtWIpZ1PmDH/ctWPqpVYnX9heLtaoDLmJB5aG
5319	   H4QROqKT/EIvaW23xzZsNr+Fa6lgaItjW1z5U4VLW3T19LX8uKpuNefu1fXKLaxY
5320	   nOSsFmsYh+dkJcyfb18W0bhXWPreC2ALI3yOcL5RH0Ix99fu9ivLQtkmUrGcL16c
5321	   9sCqNZJjUbAENUYeGJYLVHnhEGgzHmYsHvp3LcbgBnzdTyPXanAek7Rl8VhIo0vl
5322	   a52LAE0Ld59Cz4Ta1wGDbQezt3wvwJSngKOmJYbraSn7YfmLviPbemeKo3/G2Yt5
5323	   DVzqQBfelLUTdDIm4VGIrUv/UOwONBtlgnzaUOMXJdEE8+Ky95RKeajkPU2ipkSh
5324	   rv3rAdyNx+Hv+kt3PQEkScMhvLSrsbqiyx7nJyjewXzzyNZvu/4glNWZUGQfXzV2
5325	   8+2Ce/zx77vugH8/UulNZntk4CP205P1KNPjQn6Nuw5OqerOOKWx/EIFEUmGmVA/
5326	   Bf46FMejHnrPsEdFJu9eVGwpwF0ut+CaekLCPUhBOBTSCI3n+4f8G8ESTN2KJDQB
5327	   41u+LFN4vhJCq6m85SRcX+tc31GF9jYDXCcrvPFpU06FxKmmKv5rLISPVH9nfzyS
5328	   L3ZhsgUz5TURM2H8OaL5+mYpSpNJvIFajeqNAmWiXsUbZgMSes24ZEgvSjGc4SGd
5329	   IlGCxAQDHbfFfoB6hhb1C9I/Xj36DqNRvqrW8zI+KprW0vDcq6r30/imHn4OE8W5
5330	   jUA/dPpVFRRvMdSkeQfx81FlbNDOThSpNQkrhCEWwp47U6LXzGs7d/WJu8LoxuGh
5331	   jQntq+bhctOqdnolTHSDp6wp6siguul0zobH3O8zP8KQ+y9CMJSKumgNATgvWUtY
5332	   2nDEPTUh5Tjp2MZ9IxVFH+ogsa1A2XRG2iSIKwSrSLzfzgVSTqO5SUATGJYs4qSk
5333	   Kfaz8+i749PZTDtviMTQi1t6QnNH5vHezV5CBz4w3aE1CSDVQJPm3DreSNEXjnzV
5334	   Vy82bjcSw4LCA8bl05swwHmCysoqX/nluv+remcFOPfTEw/gciH5kjBhDhtEV4pz
5335	   DKf4+Sr4OJ6Z1Qnfle3lL8xNCFScL4G7mu/dQnWLklhnlpmBG35elwvIPK+ZLU99
5336	   MPsRMedK62OIkxIE9WzG5Hq2xMP//v67FT/wZuJ2qnXV59u5NlJNc0iWbo8yGy6z
5337	   ZQa3f7SIXoCQAgGbv16T+Hk1YsDFapC5HKLzAAKaWsd3ytmIoecsChRaOsKLla5h
5338	   GehI5HUD67UHjiBqarFwkZ80V4auIFzR6Lt9F+pb/HXyUKsGL33WwkES6TKOnxP+
5339	   8hYBdWGWBZtC9tHkfvrdb2bQi8RNvnzez1zX8V8fCizEgAziDXaf2hWbipC4+xep
5340	   hVf5mMD8KPaME9uD+Rb5Z+AlP+U7ka/d3wKh/DwDPn/4djy94SLJ1TxE4lpUaBm6
5341	   5EIIvnz5LoXEHizghqOIP74y/0FUggCWKEAMzCtLa/eBK3M68r9OFoznUy2QQeYc
5342	   i5Jx+vaP6J5GYffGNPXgL17777goCMNdN3UvWjf5ukDEhE6Q5v130nzlqG/3aKDS
5343	   WSi/MrnZjvhtn3XZix7pb267F4hdBp4HZDG7yLZYRd+O7BoDArqciXlQg6gaI1wA
5344	   2KlImv39QHhJF5aaNUaSYw9vMql0aKKG9OPCCvE/uSLGSbUNT7mf/fRMPznkatlC
5345	   v8UhNIzE3T6bIIlr45gNQdvMZsAgQ+yg/hPFpkteawKdqhZL9cvyyXcr5/f24UE3
5346	   USxH7XiIobz76C93oK4gdEjBihN5uglkedwukwqt1/WAGiHBDpM+kbXuKNx/t4R3
5347	   tIMfrLdev5ssBTnBDuh8134RfxFHGHEOutrOd+ECZAIy4yPilypr44SfmKKjECUQ
5348	   bCu/Jr6NkD+89ZjMo9hssAD9If6Ctu4ryx/jO2lZkUzzlDSs5WhwhIhTC4G2wzFj
5349	   p3YYRT1xvaDdkCwAD1gzInssQvTUDEkzHeWpCYSu2rZJHS4ccCiGGA9xhLceD7+h
5350	   4X4epNtb24KysAfBXYIY6HDKnVJ4FEApm53BcLbMGiuM430VfyeMLsTw9qSOFuyh
5351	   KBXW42iEw0ubD12cIKq3CuuTTYSQj+lIDxgNddD8T+WmPRWP+Oi7dLqGoJXRZyaT
5352	   RL0lj92WZ2h+/3P60RwV1+D4zc1x4ptNRG/KV5UVI9rjq801dLEZjayHDm4/Wnse
5353	   raZJV5bFsui/N+MyODq9WTDlHF5GgxAa8Lyc+muDOPOQffIccX+YfaL0aBueXemV
5354	   TrVyq9wE+EXFj9V67c/9iGMVqhjT1Fvq0kCP7ROlPBnJIwO2SzMWKjQLpE0rLZ5g
5355	   nmb6Ii3qM79NNCZHAPMkbdvRGkCfURrR+s/Yi0GXRcF0oT2h8eIwTR9xTFgDFtcT
5356	   lQgVNoS2UcJYJ5k/+q+WQRtRkX39ATSR0HuO2Xfi76p/TnLOqzIKVeesB1BIs4Fo
5357	   DYoG3nvcSItb/G3wLrkryWtRbktpBaEHIDtYrWtITkM2sx6qjQuBmk9NdRQtIfch
5358	   u6MSTmNwqpKIj0rSJ4h/IV5pC9FGxrvF0bVqMU0+CzXHOjjfa+XQWPEZAT1ijOQA
5359	   x8UuwNnS1G6MeJGd5oXIzA==

5361	B.3.13.  S/MIME encrypted and signed over a complex message, Wrapped
5362	         Message with hcp_minimal

5364	   This is a encrypted and signed S/MIME message using PKCS#7
5365	   envelopedData around signedData.  The payload is a multipart/
5366	   alternative message with an inline image/png attachment.  It uses the
5367	   Wrapped Message header protection scheme with the hcp_minimal Header
5368	   Confidentiality Policy.

5370	   It has the following structure:

5372	   └─╴application/pkcs7-mime [smime.p7m] 9450 bytes
5373	    ↧ (decrypts to)
5374	    └─╴application/pkcs7-mime [smime.p7m] 5982 bytes
5375	     ⇩ (unwraps to)
5376	     └┬╴message/rfc822 1805 bytes
5377	      └┬╴multipart/mixed 1741 bytes
5378	       ├┬╴multipart/alternative 1118 bytes
5379	       │├─╴text/plain 375 bytes
5380	       │└─╴text/html 459 bytes
5381	       └─╴image/png inline 232 bytes

5383	   Its contents are:

5385	   Content-Transfer-Encoding: base64
5386	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5387	    smime-type="enveloped-data"
5388	   Subject: [...]
5389	   Message-ID:
5390	    <smime-enc-signed-complex-wrapped-minimal@lhp.example>
5391	   From: Alice <alice@smime.example>
5392	   To: Bob <bob@smime.example>
5393	   Date: Sat, 20 Feb 2021 12:08:02 -0500

5395	   MIIbPAYJKoZIhvcNAQcDoIIbLTCCGykCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5396	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5397	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5398	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAFXRckr86ZKdjwWngyWuYzh2C83A2vwhjy3X
5399	   CIP40KUvi3zDTIC3bHcS4J2+dfZughLHJ4zAUpLaV9aE/mXRFOR4R7+KFsqgFMq/
5400	   AdZYFzPSolrBVrX4mJ/S33n9o4C8liWpYKOHTuCuaIQoncwJnxMjC3MNkTz3IQu7
5401	   bA+8YQsXHKfxgYx/fDqE+M0vQ3WXdN3hNqFV1/vvn9XBcJ4vEqJUWbh20jrq6SWH
5402	   LA4Rf0ehkqkTO2eLfW816sEgRDjbmz9YnwPZI+9v9lTA54DOUHqGRCc4bF22Oauv
5403	   cSMSlXYqYc5t7GG+m4FJr0ojYP2mfqO2fqD5MAWREKiXps55bM8wggGEAgEAMGww
5404	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5405	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5406	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAX2QNNJI5Eh2BB+XRtjP6Xj8w
5407	   I99B8w98DcikKNcEO97Wubdh2e6zqTd5ZcN/l4RxDDC0eo63xq5urZxpjPQMDHNO
5408	   VssAn8w9g5jZ3HSCqGlPqf91uRuZysIqA1QftgYEgMoyv3SJDsTviruYnPlOk3QZ
5409	   rQhq9crW5eMPwcU3pR0fz9RBnUsCA2YSZtZ1Gv46IzxmPIhgn4EFX3gQE5P6Eh/k
5410	   IGdNg4egeONZfpHJu2od14RrII/3keYC8dW5PwqJ2O5M8glq0tcERYG+9G1R85vT
5411	   LVh4+wzEUKqUBG0ZcNuuB4XCH83w18aOhnVG5MkHblyqJVujKuVBlMzS5lwzBTCC
5412	   GA4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEC83L317JnRlmVmZGWUVqz6Aghfg
5413	   Dhdevr/n3aQc13mAIW+gC2eax7HfkRXLt5pfz22kYNixmJQTrGScKgeySwqUIaqC
5414	   sSIOtsX9PkCc0oTY9fer0LFSFCts+Z9N6Br6R7XA4o1Q4+rIiJKAgkxRZaN8HUZi
5415	   DMrz3JPbIRAmSyP3snRlbLpHZWHBml1PaE//wIjBX5JyHwIUSMbfKqZAxunlzuvX
5416	   23zJx7bu9CZBfo3oUF54zLWFNIWSd8Av6TCo8fNFB4nb5CCeUNumnAEOI/gZqhSu
5417	   /RdeMvB+HtAc8MiXyOZGbWVL05EUWIczY0rVFqU7S1MmlDX646Jh+2hBDkExTGLz
5418	   wjWnJ5QvjY375XxHB5SMidNuCWV+/ZxyYPy7GkFZCmsvjPb6J97ABSRJ03t2X67p
5419	   yNz16lijBj7vepUuZvPbYc/Wn6oy2tbTPww1OeWkw/LtzmbNGzMm+f1FWVvuxxpY
5420	   9pxluovr69RfrHzbl7f6Dl2EGVbvCD5yjXxARqXkR+2Nr43KmhLcuaKnrjHdKooG
5421	   XaFmlLfY/A62d9btJd+U2uFFc156PVl+40/q8CVO73bSIZqPEo1MFN9pCs/x6mX3
5422	   RVgzipeItwteQdd8xcBvwYHX18lRVO5j7tql7KqKe2zTGDW4Mm9cy9Jg2o/9CESE
5423	   IDv0nO5Gr1NP4wcu1y0Y0uoZjIK402enFrRAjWKx12ai/iTFfJH05QwkQLWrOycq
5424	   0sHjaqtDgDaTSpSIdctC42QkvoikltgeEyjFC11zbt4CjD9bYI8/MoqN6MjltwI9
5425	   G5TVT03tyBNaEfZrUkcM/CDd85hkClVnX2tBF28T63Ozui9GbVFviW9WUs+I02Je
5426	   KWN6llM7UWNb5XIwR//UG2fWxhvFK3aJzhEIHRV9JBQAQfzK2EVOZsRomgmOBnRg
5427	   mvOMH14trTNPaOcBn/SzdJ4ZW6FvvYjVpH3x4bJ2+pvWWL38t3jY0MgsfXzq/s19
5428	   mvOhoIG7+UcchsQGYR5zrRDIb3oSc+hIJyHk/wkPM5a/iUFCvCIpGGw8ytP6ywhh
5429	   O5KBYA/iEw9mjfJP6t9LWTky1pANXCYYxPXGqBQEQTc0i/yYIIYMwhvyBDiBAcS9
5430	   aAbhlsPEjP2OO978H4MjdMpYlc9ftI62beqXnWRYq7SutLwG9xrdQo0NNyPhxBcB
5431	   h3xR9xNgkC3giBi7DVj30uzDSTVZaSzNf5dtctS4T3SlBGeeqiio0uczevPxwHQp
5432	   xQibg4IbVKSDyETS6TIVL+sDliAWiPTjozptNzXN3ZNxk6pEM2Dtp+6kuje/KHxU
5433	   mbNiR4u4j/0/+lsOlCPtXiso25Zy5Db4FeWC+0kLHcMfRRcHTW1BJGBcHAtDlcwJ
5434	   RnMQK+RSRRGUI6B/bRUsosAWDk766bgJj42Q6YE/047amHvhtgCScqYaELG8G8+T
5435	   rG647BR/rxj/tMX5EKlQvc3qm+/MMc+LprO0WGVWMrGV4T64H5kcbvP0ai7nU/X+
5436	   I6L3VA6v35uWbwi8sfzcrjXh6tyZ5dTSM14T0xkuyzXbahTTEL2+UxXH11qbxh/A
5437	   ZWHpYu9NNocE4/V36BZ+sbsisu6G9dwEAEtX+/rB3U9hm2QJ57lG05SAZ2mrcU+Y
5438	   x+tbMRIBz5dqJSN4hkL4r3ySMjU+p2hSWNWHYX2LHqjywM3+l0Dubjr9BvJAlatn
5439	   uawkgIOLgEbr7BYqyfgr+/2HVrYTu+w7kGWHnGyEZgB9dIZ/kmSdJLJbW8qVdh9s
5440	   v1Z1BJB7ZWIpQd/kI7EXEm/OQsNM7soCrDZycDLDqy3n8G8Y2pu4QkOjvqpjP89v
5441	   T/TssRnDi7wOJ9+3RldrycQSnexuO57PsBQezZHMDbiZ4rRu1heolgsggygdpeWM
5442	   gRS58oqxDakL6S2n5uM1xcBMhY8NBHZQfOvcU0koJo7hbFFoxzRzo+USxJDsOuuj
5443	   +NhqRmVo/Wp0er5yKdeEdeqoqeOSq9IrS/txX58DX2lP/Wnohn47dm3tRE4eImj5
5444	   VsCOyBV3LNTnu0vsWGi6sm5wRLXvQtSmfwTCPwexiTUFjyz/UEpQBUONx5TWhiON
5445	   kBeoz3OFR7SNj0vmLVVny5cIMa5CWqZ0F87ycT7vFzwo/X1QQppmcnEVysipM8XB
5446	   e5AoYlMkcDf0Lh+NFtbksT8giOHoWHhM8pnQSRgScM2TdXC2+YayIb3G4ukgdOTh
5447	   KT8YJolbeEZrzegm15LBwcUftfAcUcxt20MUExVZSf/qQuKmcmwyFrle4thxK9yb
5448	   CAHCNBa8iYyKU6qAdjWX+aH6UoRI/7ysWlx6SupMf8Bd2Ghk+iUllT8CrORNi2Lb
5449	   M2SjZwKA/zNn4W584bAoV6fiwka4IgXh5SvszkU3c7OJYXtRuJwD5q/TpY+0fiAg
5450	   EOoPrqLiTTrEDE9obzPh9lDHGlF85m7WRjqtTmbgHYjuHqydXYAG37QgWMnyoSAF
5451	   YVHWqh7UhFoFvsHpn1Gxp2aqznkw2qXzoGZYoaCfTJ6cXbJNNID4n16eRztv1bOO
5452	   XLVG41ldICCbOH6pmA28+DbNKQBx7cB/ZSpfwD/pQCNg4IXUuJA22p0WRdd+2yVw
5453	   7fPWdABaWydzQtKgN7HnXWCogt6fkz50t8gLkY1F1Q9pRzLDBZO0O/bCMlvPXy4i
5454	   rXGP3BgH06G05OIzxcs9/EbNereRb0/OzXmd+A0wTDaBarQJYNu5IyaV4EIhVLBj
5455	   7x/tYSf+74o9uuw1hjiz10u57ZluHI2LfXcITXRufM3+i4VBlI+RSe9uUgv3dWcr
5456	   zwqzUsMLxqGpVLUyISDoMMjIueIVLKg5TlsLIrjXyQVwj+ZX0mEpubL9US3AKDjr
5457	   UG09davXIkfK5OAPIJn4T9YOmw+bwtt39GCcd0ITKpX1rHhblJQKy7f5yqm3XNPo
5458	   Pw9l2XAYAJ/vnvHoiXwp9pVYWqGY2qoLuCg5VLzlHgQIN+mN0OdzSqGG3KW8s+LP
5459	   9cb5oOw23VSA2AGjEYiEuFcunP5aZMCT8o0wh5J08a04/zwV3+IkaMRfC1ZPgyyz
5460	   YZ7NNh+v2RvR3VeW/QMPOFB6lTnzcHcYQdmK/DY9/BPrmm94yDS9t+wPfvVN67Ce
5461	   zIkk4arX9S2KEJ3mOH0Usky4Co665+9R968xOjzSlUYaPdqmRb46TvYJ8BzmcUH2
5462	   fXMAjPRsxaBeApglXFOPVCDR+H/6Y7T2lqkKWQCZqsIcOIPlD1YVILdPJFTRwXrm
5463	   N85n+wflN50jpAoKKEg6CAsxgR8YxemQB1TFMee02Iv8j2Z2gpnu2TQALVo5dyjV
5464	   PykeuGpWooq9za2hdLQkolkfCmn619yzAsfZIb1eFVNxyMvZO8BdtyZQ/u08eneT
5465	   4a9bAEXzzNTT2iDTXj1mlhO/ifXojWiEyTBUqNeT1eAnD+pNiLqZEQHqtlev1T5w
5466	   MaGx1M3mMUyiU7XN8F7UpfclDuJyOLP2dg3j3ffg+xBD/GAWByXjqTpOFaN0zg89
5467	   qA2wTkLGOFqcJzOWDHb35uPQGdHDkzXaWOSVWr+ebr8w/i5PNWYR79yL0MOzavvs
5468	   rvbgs/DL52R8llVHG9XYxHAVUxDrrvkOczg/e959xFntSsdART8NkuSEQnCBcJiK
5469	   wTHjgd5vke87yC5dMdswj99kG5OJiUSRpBAOZNpUVqL6CaENsg4c6csACQUR15wS
5470	   QBR2MOBaXxiqma9k3i2JM0SPtkpCzfJoRrsSTvShKFVvBQIQXMybiVwFP8HTrnqw
5471	   i63Xgew19nYRXv5jjsmQNvxZJDS6/mM3rbcyLBk3uSXciPFkQuO1sm2wdKb71Rt/
5472	   8ohiCt2xH03dmk1poVq3r0kzelvR2yt+gxqZ0G7DpIhIlm9SASZuoL/GIT/d/d+4
5473	   fecTkPr8dK8SobUGqCscev0ngVJWsDMM/1Q5yxZPoKtccOW9IOqY0zBGgwQxv9s4
5474	   4Bz3vo3SNDRvcvaTyfehrJmQIUm3+ObehmjPMh8l2Vlw19wQbROffjlg34RF0OPg
5475	   spdcAupeeK6rzGz/qZkqs8qvioUM9M23oliyUJQ5j0DlywlnbmHQwbDTRzccroqY
5476	   e0zpiUZ0RX2Pd/aXaDVF3Rvd3ZQjHagWvgXizhNW7LmHyqTxupwYseE3mtBHllZJ
5477	   rNy+Ako6qxPslMv4x1+TrPiEC3xqFQxQ8Fkl2tJ9waY0PnZapSTNIaxf1n/zayLL
5478	   uqVVDmlsJ7W30QxAR8MvazDgW9R3pA/QlTHZTT74vxkjEhUfsG0xNnumWfRmO5Wc
5479	   H5dsE/Bg6Y9lCPsBUQ8bTF6d2YqgHrA0jScPf3S2Me0zpzCYnkgDJGMiZ/DVXY/L
5480	   GUWuItZr2UqLG43LcVuzVAp7av5swE4ebwc5NRKf52UCAJE0R2wwYdHjj6ETd+q2
5481	   1R0Vw8GL1aUn8FE/SvyOTMaCseXhKCb2olnoLm0K6i+EskVucCIeNwwL5+g7kcf8
5482	   /wnTEC4sQA8zvtG68Kr1wQI5zgMNK+/MzYn+Dz2Hkm0NFJRXJFp2JG7CeO+D/OTk
5483	   RX/VBd7Q0tqQFeOnLd3JX5n2Fd/tpsrim7TuThDGVlUevg1Lgp4n4bucUFe+A7IN
5484	   srRmfKChsjU9Yl+Vjyk6wyM7OwNAMLJ8BtY1aCJegncTMmNhTK1IQF2D6lUa2hJX
5485	   FG5Ewc/xqd44hI/pchtFV0mKMX562GIAsndqsqBpgVX5rDReMt6DN0h23f7yzXIY
5486	   xpan5It5aQE9PrIULl+oceRQPJ5tg2JajyJWwDv0nrRLQVk10Ryh2IZnpnFGmrPa
5487	   ukEsJOBde8kCoGpE+4Exgsenv61MSpYxdmhQrm4AgIAHtumk0xBFh7k0TByZAYig
5488	   MuuYUn1iVG87c4E7hGqSKmT3/oycprhRUTSzR/ZErszPAZZYTr6i4wgvrSEoFfxC
5489	   TrVw7w391XRsysO65KEN14pHDUWV6tswSoMpWI1FlcVNaGvfHipT91BVVJyUKoyG
5490	   iEjGzCa49IhqeTjLyjaBfB6u6LDAyC10ovbMo9gmRuEK45UqRWt3E414jUwXD4hT
5491	   jdzX5fdYmHjHfO8dcp7BOKOmr0SEwbhVMxjdGDCj0+hPOJC82jsD5FZJ/sfRtdvh
5492	   lgKUhtAiTu4qjfmq09u4KXeYrZ+8UWrX2XvLlDlvNKYhe+iEqkjQk6SDzfWBYCa+
5493	   UNaDw9SG/cTBWH+JknHQbB1v9e/Qtj4n8FT+aM13D78k/kaVu1tyqa2NfyWIG2of
5494	   59N2IfYFnKc4gw187MPp6NeuhFMqphqYqYSHSWsFa1LSa71R78eK0R8v4q/e6q52
5495	   BU1kaUk8isdPWkG0sgS5Mmejm/ajtoMHYCzsCWySkDfXqM/h9mOZVKRRfDI9Gpvp
5496	   7j4ScwbL+lgKu0XkCv8Qjr5a/rUY8ltD3g6WLSuu3RIWuslmkkfrMHGUUuw68Fcd
5497	   XQ2B7y3vEWU+t9kWUnHnQc1n2jrY25eZ7S+bpuFepUR5a7s3+FIjQJ4EdLActfzh
5498	   YFVC1fNR1vzKI+xtdqfU5p1wddbe+1zlbrmits1fnisg8GRjFjtDGPeHLv31AZMe
5499	   ihvH8devCgSSac+0CTgL0XAohSnnqOemBYYtBKTYkLYPMBnDHpQlqoPuU/2c6OlP
5500	   VLRinaHgxkVx9ZkdDNbY/clTbIgE+hVTOLxTmplV7CPnR/PPa6mWm/DkJXr6T/VU
5501	   vHxP8LQUjPWVYuxSZ8gjRujebi1gc8JSzK4drOf2qgZuRY3pRjHlrK+HdcUAUu+4
5502	   XdzdVBFlPuVl2p57eYJi3QQN5BOHbJfRyCdnitccyLDGNkXbx1fLJf1aGn46LHV0
5503	   kgrbHpg5p0Az+s0XQxvnGMf0n0IdVQ0MwPa3MNvJzMPohAqwfCC47GXAaZFde/6C
5504	   1x+BGQr6SqG+PaHcp7rxBLMGK+IXQhqlbFZ3muwW/AUsTAH47PbM3F/Gcft1m3pT
5505	   LjIk1dbqKQtGmu/cwq37WrMldgPQ6r2Uc4G/0tOMo0B2nV13WJe7jgorb547WUBJ
5506	   3Im1Hl4rXx/uf34FxjTVhy/tuA22VA1vZV2gzwBQ9idalMzX2ouziaoebF8E5uBI
5507	   IcAQmA4oyiaLRQmOwAGy4UBNREEqW91MCGAwuIvQO910iB1mTUjFRx6MskpWUuuU
5508	   BmA3UPzXu4QbBTVSrrbnLZEuVaSKbFRSjhOUdsH36OWQLereNZvg4FyiSm140lD8
5509	   0U2s8e6c2k2Dj0UBAWtJdeCsRLg6xyMCI6z6Q9EbRVsfoJGKB3eEGKl3zRzaTwKS
5510	   3+EA3Mv/0UUshDFV3yd0tnkBC00BXbmKS4qc4Vmgx/N3UlCO+9AlEXoyeb6Z8esk
5511	   cMY6GbsBZwtdRAfNWg9/X7rV88emPa1kUFI33iXVw4XYdYZMtaWEXQZrdab7dBws
5512	   /aHvkHUAan7/Nl+lbuTcduLIHEGshkI7KKO0F8XDTT8TXf6mSgDZrTd6ICKKa74h
5513	   NzO6xEtr7fElIhvi65O2ybWGKA/SVIyIVT4TXpz40GpzzY6mPC/zYv46RfzTetVe
5514	   Msn2Jpi/tnjGVUGVzOLJzo/rQHukaNtDMKb8biQR2SHpxUauizdM2t5KQlht/GyL
5515	   nmvHbV0PdFCKVRrQ2XtwOR9XCmQKr5o2cztaE6Sqh0PLn9PxEwrpmswaMBhHfbdi
5516	   k6hK3gDPypJQYSGohd2AtUFlxokNDO4x/4yzHLCfK3Mpqfg+Q513EiPHEqSubZn1
5517	   Z2i+qSLRnlfYDt2UjPD7jcSelW3uUdLtSfd0bN3uHxZZgqf+3WCi0ry/0WlG/lfF
5518	   g87KfUhWhUtFF/pMN0wdp6BrMWFxrjPfmTb3B9aQ1cQPoMeTQXYc05HxS2Rx6/HI
5519	   LO9s/HNehvLt8tyOy65KdHzCnLfxSlSl4vtRbhW73TYgbrh1BfSEFpzgU9sM1UkH
5520	   8cCzrZ1U2cm6vbv0CO6/1wVhTnL+Ij3i0y3cvCUZpHSz2i0gra1wxEPMT/z5p17t
5521	   z5sppHHZZhzV0eS9ehUkkLdxbguwwFbKWl3OJ2wG82CDQb8Xdtc03K/zTD4QJJ0I
5522	   LSvoCYwnBJi4waoVQCbLGN0FC+cJAqqUaMVlAEHXauQ3VLDOnOWVISGYuUQZ0b3Z
5523	   yom88ScoNdI7jNxjfRp52y6mVkgTY6Mm4z+X5E90+VqH9Bwg7PSFlaaQNC4hIkyP
5524	   ygciHDwcmQHDkzDpoY9+PCZb2DisR7DLxmGEKqX73POlGYTZGXb8pshypv4cqcnO
5525	   WqtJoXs6TPvgu2UvKwdo4vrw6OhaR55wruq5+99irV+IuUk/qZWojKmLdd744fnM
5526	   fYJEKLcU88iPoEHohals4z6km/osvbY7GHH6vRzgzRDIOMV64lONZD0kxW7j+DdG
5527	   JeyoDuxKPICR/Rav1qKCjBxdzhHU73TZijFf4Ht2YelP4g1mx2ciLoZuyfQgaf45
5528	   rqFSXo/GlftzXbW2zSqr5uhTY6J+Wh7kk534m0yqf0lJ1Oa4avYqsZE7VNe+/Xnd
5529	   x8JqZf2FFqnf8+H6FL9DOtyfZugJTQwrDs0egcIVsbTHi3i0N37iDKGGaCAotdso
5530	   Ix47BHaBznn2+lU7VpHEkxTcTSZGAPJQ/5zZ10mQf5wwVAWUnaJlegnCpjjlr3xd
5531	   t81KWFMWAPVuL3otm2vp94yE/lcW1AGGO0tTb1e1e7G4qCzjQv16cy8FlSZv9Vj2
5532	   efUOVSINU+FmK8s0hMsgbJ/hY1yWGkhkL41wrcfvYfkt+Iwv0wzH0Rpan+9zC953
5533	   /KIAvVqO6BK1BQfpYh5u/hOJ/tBC+wz7uReLT/q5qfZrP+bRvvQoApGKZHkWczif
5534	   9wBhsM1cEPWfpDDIhTYdAsG7JFAaznlhb2II7n6g0CXiLP9pNktsLD50oJ9p9RVv
5535	   0bvGc9Ag9x9gTQBOiAqFeT8Ifk9gEfKKUpbpdHYlwiEKBNEvboJ5Q1KROb56OgaI
5536	   gm3i3+Q6lIibNQub39Xdka+zl8NVBf5id0zTjZpFt85/7TGvHGCNuGudW79Jl17p
5537	   TFXMattXtTHGEuAlWlqRKYoFPZpLMynTLsTT5z+gqHIAgURgTOMa9YY7+7QsNLXb
5538	   8et3eNsg5E/cAgzt0OJO/hpkQ0fL5k4dB6DTiJrwEMiedvp7cTeHPtlOdMa/KDge
5539	   Mqk0daemNTOUbk3Vsj2s3SfS7BpDTnulb7/1U0Ti4oMF1Eerc7fb91dOhsKkh+13
5540	   fRAIhT6rto+gbnDKGQffeQ==

5542	B.3.14.  S/MIME encrypted and signed over a complex message, Injected
5543	         Headers with hcp_minimal

5545	   This is a encrypted and signed S/MIME message using PKCS#7
5546	   envelopedData around signedData.  The payload is a multipart/
5547	   alternative message with an inline image/png attachment.  It uses the
5548	   Injected Headers header protection scheme with the hcp_minimal Header
5549	   Confidentiality Policy.

5551	   It has the following structure:

5553	   └─╴application/pkcs7-mime [smime.p7m] 9470 bytes
5554	    ↧ (decrypts to)
5555	    └─╴application/pkcs7-mime [smime.p7m] 6006 bytes
5556	     ⇩ (unwraps to)
5557	     └┬╴multipart/mixed 1771 bytes
5558	      ├┬╴multipart/alternative 1122 bytes
5559	      │├─╴text/plain 387 bytes
5560	      │└─╴text/html 468 bytes
5561	      └─╴image/png inline 236 bytes

5563	   Its contents are:

5565	   Content-Transfer-Encoding: base64
5566	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5567	    smime-type="enveloped-data"
5568	   Subject: [...]
5569	   Message-ID:
5570	    <smime-enc-signed-complex-injected-minimal@lhp.example>
5571	   From: Alice <alice@smime.example>
5572	   To: Bob <bob@smime.example>
5573	   Date: Sat, 20 Feb 2021 12:09:02 -0500

5575	   MIIbTAYJKoZIhvcNAQcDoIIbPTCCGzkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5576	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5577	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5578	   Boq0MA0GCSqGSIb3DQEBAQUABIIBACHOyBpdzWJH0FBPgjsElRkfM603OpOAWv2e
5579	   JJk17KWFDzNyqNUeh6amywEGtKMI9yEQMiWNDafOaySww5OAyv4m5Td1NqvM7yAK
5580	   If8GwwHBsZkZfcQD0XsPeileAUpW6vhIAXNHv+Jx8PxoLef1IlqbpvIch/OYXMrA
5581	   vrupwwg4fV17S9nPLPAbAAsHxkIblgtQd3VA1KUwW7EmuIyZYKlrO1oHXOTKu9fm
5582	   f6+ZYptlsGhqn+sxjWqgdryLyWgHpAyC5lGcRA8/oA6NVFOseeueqYEfRS7d7S42
5583	   34MgvX72chqxXnrEEk3jyq+ofs/LYiOQxNVxnsAcw7uInwzthXcwggGEAgEAMGww
5584	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5585	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5586	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAd2UGrRGdkmM5K4skCB8Bv28Z
5587	   MhHF+f/veYUT+lxq2ui/KUjsxbCAH+Wp9KZxoAqgCxuoc+eqhd96bTpfJ3m1iCNO
5588	   V84S2KOXiq4A1G/IqM056zklYbvPfLI9+EOotWXXW5RSHyMczxsw3GrFEyLLSGsy
5589	   X5mYSLZpdPLzggn7VIP1Qk0gMXQXGgsjqxoUJUhb7PTmYR7F9f7qB3nhxBSIfdQq
5590	   itXe1GgvI+e24eURa+lH57FivKbQGUCPmf24pB7WhjK66EuQZNWJvkMeQPOa2Qao
5591	   lHZBshnyMuTzY88yDthhUd7M3zkzTLTbgOQEFY5JdB2Df39AmhWD5tkD+PD0dzCC
5592	   GB4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEPcJVIQSixxxaBzyW99anlaAghfw
5593	   myNPcQDx8BhQw1sJYG8BmQwWk13lQo28xcdZsyQgbKJ5Eq7Og124W3NJFCTWKtwU
5594	   CmTyu/IU50zFxmD9xm7IPCVFnCZRwuCfeNXiDfQy8KRQSIzMYnFz2CIWNnyJQ9wZ
5595	   WoeoJPTxQapw6ILEm8CAEpmTtpCarvrENS/MKQm7FmfYP6Z4UzIKQJMBjVS99xO7
5596	   3TU5KrneCPFYS3F5i1J2yNQg9O1ACQDZk5O0/arLdYaOs9ybOFMXLofxTgOYjATF
5597	   Oz/2W0ElzsJMhpZo/yCNa0lq/dDSHQSumJTcLhKjSUDTPnj+fTELU2KUmmKmsRWz
5598	   VXxYuusjuDZ00PRUp6NUF+I3goOYuR7+hvXurJFHGQhSp1rQ0fCkAHsyLCjfU6ux
5599	   i46LOkVYZrjQiuCIVFvs2otvHYN02xqhZBARNckq2rEORfA5CaH+9iGwEekhRfND
5600	   +0Nwa+IQmh7AzEBS5vm7Rog5zymsTOu0Rv6j0QlonUiLiKQ6KvTlYHzwbZlspPuE
5601	   aSEq1UZAriavn7Rh7fhX+JPcys6ImdXbQAqE8dl6Wtm+2y52HCaaoKHcJbCAvKY5
5602	   +AttDKOEzkTbYAhmlYOqEaW3NbKGyLGm5MhZ0iTyyCaZfk38P2c2nnOsotMJmtpG
5603	   sbdYA1qWrohadiGUOsLzbtqJaHCF0+TwdVdQ9/d9ecfmmdWm6oHTqCa3zOG2urTS
5604	   JtpVFdIjtp5+5EYGT+HQKYnxEl+Zge43Yzu+70i9Vv+y2j8kubLLRXJXF5bX2Dpi
5605	   cyluo2s68DqrcXrLQ3d2ixmnq5gt87/HZPCykbKzssCQNhdgYR7Wv+01EZtroOL3
5606	   yvqRihxSqg6x4Rg44J29GBUL9b5arwRVo4pciz3F8WPP/jZNldLNqSeqkH+GSXtO
5607	   MlGg6s0dZlsRGdClr5DYCrLN4cqOA6VxCQvW2JiU+Jiwpt3XZ2v84WBEX5ZmKjGM
5608	   oQtVe8fx49OZHrnQsgTMYBdY/Lx3nnzrbnpZwIza3V430HUtClnKbanF1zbnNsyA
5609	   dn6aZVliZW867m37N67g7Yl9VNrB9Qwwg0pEA90G826vXoBNI8aao2ZInTS+sEt0
5610	   iuH8Wz192z+gFFzfD3cyN1HczxBdXaOF5A2pOUEhaWCJWZYhFCLBj29/oUv8ax8w
5611	   obsApX5/RJj4F0POW412xRCePCeQghfuhUUyUYLWn99X4V0ZqAVXmJhNUgfrmass
5612	   lUdPvQDm+FMK7v7Tz23Idt9nmuN70H5GG/Y0r/5e2JkkcxxTS8+yUL4SbVw3/03r
5613	   AbgpVFGYCMcug8UI/BX1CGlSI2PrMAg5MFVhpNW87ph2rOub4mJS7SESQvbPEYht
5614	   ZgOv6gDLCWluJ7QrxsGIUYYOwHw82nqertruj3oZPepIR6WFiDp8JPgTLn/fqaGL
5615	   gMdfGV+Z1VruX4yCTkVdd60MITN0sPCbWoLQqK77QMk7i3fw4PahAnVdasuF5xnz
5616	   /xUYoelUq0gkY/7o8AFjc2zSFM76S+XWZMrmnZpM7IiBx3vBSPWPyR1INQYrD4ZF
5617	   WpK9LVnAOtK5pxIlEziaqizSO1gp+DsY5JFa5W9TPpwbPw3nm3UMrd07cJMGu4yw
5618	   dzeokbYWSAAAu4qfjXB2RNHSw6HhoE6lTHIUJhH2+dw0LA/e48KfRgoUs/BA7E5h
5619	   qCVOY55mqxcYl4eOitv5cYPdJeeqltpifhwEIiW77YFk8bjsZIS3y/yiMiqbYb9m
5620	   +lih/CNy0gLa3TmhpIzVGcTtsGlc2eSl2/GAX4rgg3db6Ut6EyE3MlUquOuQ4eOj
5621	   RGufe7coSwJ3HqwvrFgXYIWNPdus7cTiuIq4ryIqFwg8fShJIDVf9XFncTXNdkkB
5622	   Fbxt2Bd4Eko5rXRn73wDKbtHKI0WclWxChNqGhkpydmQYgEV9GqHXtHTRertkVR7
5623	   sO4Ua2U/is9C5JVtwnraYPNnsggYYWBQUs8zrAiXEGNH8G0mTonPEvuWlay23SbA
5624	   KsnWxrAkrSREA3KX1klBsKhLvJexr5jezV/VoulQs2buTUa3T7Poa+/gygxaZQN7
5625	   0YPZ5FvBdHWZMrnTCgIPi8JyEmlvZAYw7OD48Gv7p7GjudPd3NtUM3v6g7y2Jazy
5626	   wTrQHVCW/BfBs4Qd+0NV4GSzzvGLjsGe7PSUQ5uNL3aOqbPcSanZbtE2DIRF8q4I
5627	   KyI2w+uRh/uiXk0xh3KYUq69xXMesnAICQxdDjqNE6Gcvdtw3NjxAaXUn8MJC9f7
5628	   xd+Je3t51s/r/VyD7p16lo9UXurR/QjtOrMcoC7H9+xnmJ4xPD1aB1Nn7zE6DmH4
5629	   uC1P8thxUQxysv6UVS2QuU91vC1jk6ioamSi7zbfXi/T11Z9pFxKxvjOT+w3b2W5
5630	   A/rG+zou4o7qO6ad2KWpei0ySQMVOW3XZN/7DcFXcQy5gGns3iWurW0L6R4bX6kx
5631	   QQqYtXQpDA8NxfBWu5ZyhCztkTXiuj+Z+YN0/xjie7Lw5wevJHNcqzHpshf9xEH1
5632	   mX7lWpcN5F4Z/uaG6hFyKmICCMCPNimEusCjpKSBrlEl2/ZfasAf7+nlot7gGRLa
5633	   +nEqpZAHK6eZ2u1cOJcqlM6Kd+kj9Igp8evi2IaY/Z1FyQ/3HLJE7hDpP9GpGJGe
5634	   alBt1pfu0IUyEJ2Fe7lJomcVreEXYBMdcPpc5btJbnsuamK82qCUaZBbxzxWfvGD
5635	   yofGz2WySMZWttrMHUiCVLx6cFa9FMu8ME6HjaoqN7FbXplabt2ae+lsFJZ/Ehmy
5636	   5uz/FTk0QqExHhF4uWvfoP92qUUgWnrT92Bua2CLMs4nGxh2b6pH6pjGLLmdNDwT
5637	   w6Z+Cy5FFazNnA0w54FuIGLyV3HL8m8Jbzty+uiIB4NnfpXeAmWvhqStV8GVzH/j
5638	   6VW7ZaZbg2acn1HMTSfKYa35m0RQlakc+1bzIqnLWMdbRB7Pd8mghNSHrZ8rrrCJ
5639	   yUPhO0A980KgzFJZgh/3eLG5eYWwN+6B3nlkT0vETiALnTOE0+ICP6D25yyiy9k+
5640	   iEAkiXY00vUnUv2QJFTKmgrYMRBpnebYE1y5VgA9etEUIOV0tlzKgbMYVlxgcK5v
5641	   TnLVmTioj1DgSPpOwkE8EKlRgjjc8lA14Ih5pcW6qgarDkyW60ZRHfLRsuWkNw6j
5642	   jFnRWskK1LukllBvG+S81ygPvfc1SIMlUg/nfqp3EF4i+1tCA5am5AuOrp23bBsw
5643	   3k15q5FKpsbn3rQ7b3L1NquBtPwIr1E5rIMx6pWXOs40M4GSNri6Fg92eo4ZZfYZ
5644	   BeJZy4jerGNxR4SE7NunWj66j9UumyVyE6EbgZ8ITuqEKt3lx9JMJpWHnkgeqDsA
5645	   K1YI/+L2zGRIMo9WOoPuw/WdojEEG+4r3JMAK3/fqKWiiQosStG2u54XExuUfTpm
5646	   Jzc1keEorZKCvmyhiFFObkQli1Dn0ZwEpx6qZbowDiMmXSGJgC7l9XUd+3mDzmJo
5647	   QPn5IIYwOIkdoPastOGNuuax7RGUOekjl6f+T9SoGu9eVu8sTVNExarMAnwReJTh
5648	   dnrdqWLzSNuJweyR3snwxMruvYE1yy2W9mxiQHM3Mj9apwIPmU3dtE+H9p7uP6CN
5649	   HAMiIUsegY/2du9cSeesA1re3B4Z1nJ8Jt/7wFOk3ob4Ox2lCk+U2RRoorBpJtvk
5650	   8P/BRHq3EoUpbNnoB89N06GQ1w5DkfqOeNQC5E/wDDhx8JXWUHnad54UWGS9++fr
5651	   4mHqUNdU6uA9wgUYUEeXkfUEyVlxY2OZAgKmb7xwAvfPrWxLadODpWMPb6dogmBY
5652	   icxx9Sg4ZOPFgBoSuwLlc+43NZNz++ziOgdIvtbpf0a8GJVfg3ql5Ch8vUsNIfNU
5653	   9cYkQg+hTn9RehPdM0QQzOXWQX3C0vFshV5eGqrko4z+Tw+7E4wfA16Hm6S73trc
5654	   4YmHZtlgtgvWPb+CvQvmmx/xNmpatBYSDzPyusaA3GRb+0vxeIMqGXxdoriD0qrN
5655	   lQeADPDYPcZvGOAYjvpn3UDs8aqKsZrqB88QUannTO+bhBUrjD8GBTSAg/Xj5yrP
5656	   8DMjwc5Q//QhiizoUtsAyDvsfjYFNriXiX0XsIydnVCqBQuk0h2spfIHqXT8+EIo
5657	   nNTq78WLbZiHqnKBNxWWCXakU7L5MeX16GlggHB/Y+klrWq9rcJEsoh68klYO4WN
5658	   jCrLweQMCmAAktbQQhS2TWoN4gtwd3lmjtoCU+97K7Umh0nQOOtOLbOPCONfxwLI
5659	   rnV3HG2gyILR9mOjQbAh70F0GjAgov4C8eDdzVTv9WL0blN2APdNT7dbW69Q/1Aq
5660	   Zh0BncXV4QH+TIH3A/6gwEhsrkCMeLgSpEDAsQgZgPp/2XQ0JjxlnkxnTmsDie/V
5661	   OWH4X5rj1uKa/5dF+RjR05EmGzbExxIYgI9GUx5K3JbDxnx2teEGznvpFa4o8fjb
5662	   dxOlpnrV/NWuQBtyS6Ated+0ngioqqaLDrJBRaWp2Wj7UIepTctAq3Ps0ZaJMGol
5663	   DRg4LtubSNRDDYfcnAbwvMprC1s4IMzLPjtVK7lHwwvqGO6BatjcWUN2qwbKMA96
5664	   GqQFeXZ24loj2rPYGD1vcnFkUHty+ZfEo7F/hdmwLz3/WCnmlBtGj4/ot/UTW3UE
5665	   VFTXxoz5m4JpRIm/eozcLVHh0FT4XviB8RrrrMqelN0dtzNTib0LnklcbAo7Fs05
5666	   2MMWRTWxEokIx3Qmg7X+umqUKehNFtz+DaSmyySZ2i+7zlnWFY9yYV38N5D84Dca
5667	   1BrbEpMpwxREaWTpnxHQOOPPmWAOpdMvBBePNinw2jSQxGLnJt5IGjQ1b+YxcDA5
5668	   OSPvZp0igRaqNi+Dp2L9DATcvz2o3VQtqRDwzEGZk35K0vSaeD6BrFOLSsVhSXWG
5669	   FaMKB5RaX1el+CB7L3wvIq2WsofM8rBAEd0ExLiyk/IC+n59WQPQjW/2UZuGUQiW
5670	   CtgTtpWak+D4V9LSGiET/kUBXor0R1DlKCPmqXdvkd4E//Gwfbg74J8vyZM1y1o/
5671	   dlfTicOJWZhqu7AUdLukBs0mo15P9JHXOg6Txgp/fpAGkYO8UO84AgHfpRDbzHKl
5672	   HGTrERj8kAOv7MdFqDwVZHIdel9+JMw/sUq/TvJgRwrOdiEKLOaeVrRBUoInAe10
5673	   RBFqcQOgTClPZ4Q/fVroIuoNxMQF0OnAMNG1KEDVYt/Gwq3syNH9wUFBLuEriOdd
5674	   OKiFmj+beOl0n3JDREGM9pasBDnE95JnMF7X+EDPVo57W+5ua549SctYcT7SrXzO
5675	   v0Y4LgT3y7EdiwQQy7eyxzTs1fkyFHcr0kLl1ajGLVxaaZWfMchfGIfyEYJWRLip
5676	   HvjCdUhPGjzrAkpbmhWuWbEbUTNpyi1UIzC4rtzWYthVIdL1n/CodIiScKCk7QOH
5677	   0ysSOAveFCmabvJG2GCXo7mcu0x7ruDxWZar3RBaLS+7gLLhHwZeZjU05E433yRc
5678	   2Wme56dOTguGIVv1sBVZjGoQsGg5h1iYBxc0PMfHBCdD8Bz8cFhsU3GzA7lvPAw4
5679	   ILtHuw1pMVM63YEHOeoZwPYUoriQsKCG8C9QDCJGXL2BL8b75b9+aZYojvRLzACG
5680	   YszVDnQ7809N1M7YER66bWpr7Ni1w6+9x2XogefKDYUwV3+cw9BrelaXK4xGJmkp
5681	   cjucFDnUVuTKZwLnmQ3EeBEuAJTdLbTQmKlZi7nX+Sgn5uiQRySg7gy4hAxPlNB0
5682	   ZowjiMIxrr9ba9MYUgS78xP8iOclFJ/C5WxzTAz5XzYcbR4jGoMpwWY4CHAxFERz
5683	   Tm3ZBqVvxqkLYoAts279KnjpYWwft6bL9acZ4Cmovb2wSzsCi2YXeHdll9uTz1be
5684	   Lx3eJ2P3AR80F6LMDtEIL7/EeYHI5zF9bBVG7s3xtb7u0CEAzEUG77vcdQBZOMsr
5685	   cMjEZ70fza5GFIi+cIYtPlVjocd0p4mCfSuFuBrICQDA0iLP3nqXjc+5RzZSkwKq
5686	   TpuVs6PSp52rikxC04IUozxpfaJvqRNQ6fusvMn6/ZinRbuS5ZWncTyfqZYP8JCv
5687	   3OHtdAyF+uGuqgycMGPQU8zZz4/+ZDXP0zpySZQ9WUiQ9zpqeuk8QkoAT1HgwnBE
5688	   53K8HE+ceV32CrS7EODkHRKoMI6WhDg5PL9FobgSfqhNGLTYEW9I3lQxD7U4a1Bq
5689	   MSu4z2QGHPwYjSGZ/aQgs0vu6+3SK9ERSjXzENKDeofah4AVooYoSAMXuKkEevVe
5690	   bjnUJBVh/SBMGx3NTlEVu0JBZqgbfpW7PHDmg+Si0TrrJVSD5IVWYYfxM2iWdLzo
5691	   GHuckDuw8f+jpdZtLpEoQhdzOD3iIiKJ+hrk03sf4vowSZSAmIsNhr2Xjxt2roFH
5692	   KzIHyuIOs1RDc5O1DCZvVjjoC+HbDwaFErZGEQgIcHgZqPgdaTcubsMU0ykmmdw9
5693	   SsRq83TpNTj5fbwrT7Nq3z8NtCr1l3PW11KwzbjIBJooX+bBoahkb0pG+Xuth8eL
5694	   HXmpoGViY+Obet4pzbi2g/41VK4Yrp+HWgc1ZqzlBWR7GxC6lkc+xY6whA00L5Er
5695	   3pBhXMNkyKVzC5hYoscocLOXmAlQVcDoMA1G3Bu8r1e6Ak+SYIviiHj+ElD67kBw
5696	   gIZ0Qruh5GnoBiwIFQgsKUXFyNDF2PSljsWcZyevAJBiue3SlANdztwWMZQ6E28s
5697	   NXMpF345BMGThDDK+YP80rmcwTrF0nOK3oDcn/hFKxNM1RQHHRpMkED8fiGKeX+n
5698	   U32xWYhSBzuBKZN2sZWHzNju81AoK6braMqPjRTxkxX5Lvy0sKkgtGxxu6sHlvru
5699	   26oZloZnCsBvjJyFw7Wqbbq8X9HXzGGAhBrBTCMcuL+TVShMbcgiV40GwCJDQ9SJ
5700	   zaVS8VFoAzYtm2dpjnmjLOAp3QYOhNu78cEtjtS4GXFv+5jPdOuyn2NC/3dT/BI1
5701	   mV0f3NKviHWX9TKLll7LwEeAkdycM8tJAXEydzq/Jyrj2Fk15P8ZM/ltzC85dnht
5702	   qljIT+8ENZSL4U1XFFTOXF7QiEpCmbenvSlyG+0xYb98FSk6Y0KoO1I++qcsr0UW
5703	   n08vhhv9nuhNRAHHcbR5ogv4S/Cr2yW5ChCht0u8a6R13cyJeHEtOZIB0Jr1+/yR
5704	   Jv+tZZRzkI9Bjtppm2W/W/gSMvXFNdx+C7naU2Gtt7fBBTO6i5bRvfy1bGEAJksE
5705	   ht0Wz9ri23JT/NfeL3rQuAfgbp2WaWQzCkuAgRZODnJedA0xOWm5rimru93eISWX
5706	   sDx2eQPdTxndKBxP6b9aFZrWmX0srW6jKeAQ5f4Quy2sXBvU2jAI5vjkA/wWiG9z
5707	   v8R1sTbkXzM8VWz8kJbT1uOEMFNtG39kQoIRq2lQSHrSFn/VhyG2wh49wG5giLB2
5708	   eUtnSUvo3miqqCDfZY9B4rpHLbeDb/3NYlcMMQPQwWEKKR20zGiqKmMV9/jhaIoQ
5709	   Tr3gP8TUhPeuC7vbS/IFLDkIAliAzgpoYllAWUwZmW5J+84dDPMrVStiQMK/CAZk
5710	   ZIBLxwBnH9s6ucxtZWNFaatjMgz3Y03Twn5GOjjOJB9eaR6SdAZxDTeODajJIuGJ
5711	   jB4cjm6Un8lZki3PTAyBFOupETWxRSczCs1aPnaZVcRWkfOV/O8LILxCA7lesZmB
5712	   IrJ5U9LqJLoluggC/4wuxCziXCRXLz7nT4UhxYqG8ZoJ9rjHtf2t1EbmpmT00D+S
5713	   71rAVNUg7Oep6ucSAR0gPQEA6T1sYehVYmIkz0QIJpQVP/Ls9ArZCkVpsmLoVhyu
5714	   +pU/HIn6mLmmnqSlAYl38M8F8xjNX8UsOEuJ1X62coaGREi0FWgmti6rnzzYx0DQ
5715	   8dsaQCHtZR+7+tgxYGrBls6PWxpP2gjwk2u/5kDiirRfIMhvke1ZKLmwK/DvlhSI
5716	   p25G88scGcwUoLhsIzPSfFHoYEIG9MPAS+CJgbiKqljpyhMZoKfsHXyHRdf9YrmZ
5717	   bemiWCBmwQK5J9zAcR8l5ULfkVC3kxgkdHff4hXsf2U08D+oANABAxDhxZFNMIvy
5718	   d6HCmDdxtzdeUNcHF9XTJ/YGme8gsU0PJ1dPBsMPS0lBw2TXJAkHmY01meT8/r0v
5719	   r2uYdPt44EwrLtWonChUe1LwMWeK0D4soADI2Gc+cGxt/CWTFRFbULZF4BRc+1N9
5720	   xKgCvub2mwWSwCGP4tHGKWpAaoTX2b6uP5Kb7N7HDRE=

5722	B.3.15.  S/MIME encrypted and signed over a complex message, Injected
5723	         Headers with hcp_minimal (+ Legacy Display)

5725	   This is a encrypted and signed S/MIME message using PKCS#7
5726	   envelopedData around signedData.  The payload is a multipart/
5727	   alternative message with an inline image/png attachment.  It uses the
5728	   Injected Headers header protection scheme with the hcp_minimal Header
5729	   Confidentiality Policy with a "Legacy Display" part.

5731	   It has the following structure:

5733	   └─╴application/pkcs7-mime [smime.p7m] 10120 bytes
5734	    ↧ (decrypts to)
5735	    └─╴application/pkcs7-mime [smime.p7m] 6474 bytes
5736	     ⇩ (unwraps to)
5737	     └┬╴multipart/mixed 2095 bytes
5738	      ├─╴text/plain 59 bytes
5739	      └┬╴multipart/mixed 1600 bytes
5740	       ├┬╴multipart/alternative 1194 bytes
5741	       │├─╴text/plain 424 bytes
5742	       │└─╴text/html 505 bytes
5743	       └─╴image/png inline 236 bytes

5745	   Its contents are:

5747	   Content-Transfer-Encoding: base64
5748	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5749	    smime-type="enveloped-data"
5750	   Subject: [...]
5751	   Message-ID:
5752	    <smime-enc-signed-complex-injected-minimal-legacy@lhp.example>
5753	   From: Alice <alice@smime.example>
5754	   To: Bob <bob@smime.example>
5755	   Date: Sat, 20 Feb 2021 12:10:02 -0500

5757	   MIIdLAYJKoZIhvcNAQcDoIIdHTCCHRkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5758	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5759	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5760	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAJY0bRwKmnM0NyOz+IgHeWMgMOX8/jDwHHrP
5761	   t0MXudwDeJwQDmKd2J6YtkG3fRjZx+MS7bpLReFPedY/7RAe5oW3JgENYa1HpIwm
5762	   aD/h+qIxTicIrNwzuiFAgWpkAArav42vaMmG+/Xh/POG6Gzi0KPeJUnHyySf4Tp0
5763	   AfyjVj25criwnRM5O747uUuPB/jfGaQpY3juME48/ncykOBtoUJjZRnRfGPEGXi3
5764	   PC7dqg1DU6psEBsAblddc3UiWHmvbupTrzFRZ5GJpQxxAiEP+dyYkhEmmymIwVkl
5765	   LmxiN/ym+SGbYN8M6bEyQV+fa1XHVz26LJIZNTM7f6ud9rZlRQswggGEAgEAMGww
5766	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5767	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5768	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAP6JUg6dihpC+SAwERMVQthSf
5769	   ztjACWhmPPjx4+npojd9dah/Wc2iimFnMUpEUzU7AA61CmqDuC3TWJh0CUFy+QdZ
5770	   TS4Z/46E4te2mimwnE/vh84lgRX0G7+XjemnjeWlfbbtcxjwmUQA+largOX/O78C
5771	   3Wq6s45zUj/3gAUDOaIrbS24/VdvM0kNjbflYC5bVoRV7zCrnsv9HZ5Sl4R7aU4f
5772	   AMPAEzt6JuNb56XLUeEjtLc/J1rg+by71moz+bl2vAHrCV7KS4rjuvdX5mtyx+7Q
5773	   RsxO/4U7edUDYP7xwoRJH7BJuQ4TCpribA9gExERt+8TKVw1axoZ8q0gfLklGTCC
5774	   Gf4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEELIL/TZpjp5jGGOzwxBSul6AghnQ
5775	   2G/ggROJ0uuf9cWwp4La4W+lALvFdSImHu8llX0XfYLiBrQWUJsRX4pa4bT8jUPl
5776	   Wq/HHEZvS8ehM3FIlpxebnDey2FCxeAQ6Pn4oByw74UnzFeluL21PEeQeJTPbui+
5777	   sLqZqq4HWlA0WpDERVLbWxhMDGXLNHrgmy3tYGfOa7kP0mKnLahSRBI1FG2HSzpd
5778	   71pHqYy90RE81qK6B6ocsK0+2D5pPZHFOedAS+xVMhagBRJrK9em5mSoTVZPUBWv
5779	   sITwwJI7lA98wuX7WlAHwk2SGNrmq59wkU6hF8ZVpIg+ItMwDW9+5lKI4sEJy3Y/
5780	   oxP/zQX/+/GhQJSArY/Bc2k8dOcLZcFSGKglv46bm5NgDl0tQlg/waZHVYfyvDO2
5781	   lB0AZpiVnum8B8KueauYQ95Mfaq4p5dldBye09fCjNNOsPuPwmmJMyYzwr1+fmQR
5782	   C9yNfArM13+/2aRYo6ti+8nldGl+cnCQDBXu48KlLZH8oBIsghIEmMw+3wGVb3ka
5783	   TXpTsYqAQtjg6V3J9FFTNbyX8LlHhAUbs0I6lyDwgILSEI9/pQdbkTE8oqJ8qChu
5784	   wz4ZMwh89+AcMqInzKkhsOq48DbBLVeZoliknnJsLcejbM/ZN9tYVc+wqZ0YUmEo
5785	   gCmd56WDhEGwKoSz7O3reLmAjen1wrKH8wGIzhlbL9rja1rgWSC1PrlcPVug9ghv
5786	   6AlqZA2q7C+dVqdu2WhGgEktkccAnM+DDmSJxJxCzVjJomW9bdLoVxdvbhNfleQm
5787	   VjxPiY0Bxkqkq/JhyU3JcRpQ+b5XhA7q9PIhDRllcMOarUK4sMEVK3n38fZmaSzZ
5788	   xl7/DjiQn3EKwnEQso4/dajEdCAOe4cjRBdn1heQS5xnZgm0uuYajJ+jv35EvyE8
5789	   gXayeJiyXOHgUesgqNBFzT/Ld4qwQm4v64GFa2NHyUYcyqKpzIa1cWMKllMhaIbr
5790	   iGQun4s36wYtiUEaDDxkfbcMr1jDDHokB+nCNz3Gg36zBRQJyf/LFsIk0tQiCOBk
5791	   qOxMrcYD5x0GT8EDHKYtmfoXlCE+H5I5wAjK3KNlpWDrrpO0Ynp7fYHGeMClt23/
5792	   cDej4eqGpy+/OrVwQMeiJ/V2hL5Q0Qk+POhjUEadbPPw4XODQADBeT/y/kn3hWYU
5793	   otNWg7bnJYhh4pMYXCxYwFSK5tpc5cszCsaR0+CtSRyTVMxWTl56IWl4n6xk/A5m
5794	   surHCqVn33S7TIjH9aTCltz9pB/5c7/Lq/RJbGl3vw48ILJaC6qr7/w1eWJFp+tL
5795	   ZEnFg6oVFa/aFB6QDQHkJfyGa1A8AgtCcCSLPsugeEOMfYsC4ZEg7KooLxDdIblv
5796	   FiHFv0N+R+p8PHNbETNO9NezL1CIGgzS74xGW3wbnOlVbCtEJbGjVljVYWdpBnyN
5797	   8c6i/ASwjIMX4NuAROfJ+B/XS5Q2WTMwNmwxwsEBK6ZDEYEKIgiMstS5cwcIJ5EL
5798	   4f/f/O/7XkE6n2SJ2+n8wSJXQM9uEO+QQSawXBkGeoSVDptDAwiiRVpj+aNmr8Oe
5799	   Hqofz8lbdz6t10Xm9j9+DG7Q0kqoyLBnjBdwc2JGPlTD96BRFz879V/jgTw/FEyr
5800	   x9aGtx+5sBFTg5ds+WzfraqR9DSOd0q9xEGZ6gRKbN6LRI51q96rzoAGoaYTo+bS
5801	   gIL8dxU/PzDxEZ8GOnH110vtnt+b7lYWkLQe/K+tMmEBLMmNMsMHDO0amRU46xG0
5802	   Awak2XOOx3p9lsuCR453Vn4CZwaIXpskIDFo3V1iWIJd58tqHbVwnyizjpnrcnq9
5803	   FILQGrEoLhrOvP7S/utBsZ9PYihbD8aduzZNpNWxC/Lv8LSP1FTDB/ZPogYeDw//
5804	   wRxo/m35QFwfG4U7U+uW6Z/7N/5fX/DdPd4bw7vuJQO1JShB6PCfkK+dGh+1XMKX
5805	   /yI5PkmM7tFNg4y2BORcHGWjaKNp7/xU0PpXFraIwENhXSGT7mOWjvyONjaOldxP
5806	   Tigh3VrsWGOf4kyOPpBDzcdqUs8wbmp3F2OQ7OP8wpa2ou84Ka85rIc+RyjT+izE
5807	   nUAq/aT/agOktwHBAe8EzXBQDpSfCpTQaCfv3NQPL+QK2Ty4EcMq9FnT5idTnlmv
5808	   JP8Q3+Kk8oXz/bdkvW+dksfQw+yE8fZfyfwRJKLIEMzWe3HtOMr18WbVU3pHhwfP
5809	   OouEX/9OCZenycf8P3KJ+ViaS1RrRL/O21jVupUgcC7kumJwiYYYjH8q+e0JI/PO
5810	   FqExNOjm1xm9ZX7xu36KUawsw1HiooaI45x75ddQlRpjmt14pQJYNoaweOActoba
5811	   V1c550tHt7xlOIJNwhLFxIgN2axvPEdhONDLMOqwPjCvG6xep6wBagxrKHvRUjU5
5812	   XLvsPAeItrX0oUCvvydX7Dl6PmWauy8NCNlDZrxrcYrFHQdTWYzVUp6M+pt4SRIE
5813	   V8YYAvAavVsZBWSG9cYTEkiKGBnV07qPfrKn0gzjaqDMGtF+FOxoqv8EiZ8bI5c+
5814	   IztGlNoT7bpFoVv7Jcx7wNcYV9Xh+/+Y7R2GAaW1GN/A7OlLmezgJD2HdfHvaVZ4
5815	   KEZMo0QHuBoJLsqhS7XSLoLgkaq+72VPNI1xYpHC3qO63wW2K7LvxxTs7Z3na81g
5816	   c5brAyNhyERIqGLKUypxNLehBzqoA9/+VoBxnjO5DLpV+7lbVCXuI7PUdvMwWemW
5817	   DFzGgIhjZUf00RXc7/3mxiFtxXc+9/GcBwIluNcC06RiC1cqo8zGbwC2bMVKvrKG
5818	   7n+1shUyxz3QFKXQu/Qv7ZPpDy0QQvv4pOrC7ArCYi1K100uo/lfN7WWF3S08RC/
5819	   5VCzAaUYA0h1OuKbNmhFcK8GCHM91b2KBU91lfmbF6QNh0qeEdVABj9uBO9+26LT
5820	   QaQJZh+bBDQCzTUVu97wHfbQKbd7xy6epVrSoBki9uAfof0pElcuTbpSFtTtgKzT
5821	   kOAWYgmt9QE8ZEqjf6Duj2CBkcXqFKOEacx6QoUxC/tMMrMN4w+4vZyJp0k61/00
5822	   2TgmIUBekdqFx1cg60v5G2ad9fBB/a+q/IwIPI+T5NsepMxapvH3OfqBIfPCLAg2
5823	   3SJKuuPa/YYr0i1z82XHKtbmFwF/pVGVksiJYg4mLZbXAor8RXzAgATQEQ1Xz4XR
5824	   NLS5PAGD4KpY/EFnROv0Iq56t7mEnxISi2TolvjtWnGkML279EDZjBycik9+yRAy
5825	   DkBcMhe8WQdlPKgPXlLLUWZE8QteESP8YJSNqyQ8sYB/W9JzKSmDPYgwHOl+q2P5
5826	   Y1gY+h8uPLzv8Hgbs4WvEq3ns2FMUaP6XuuMeWO5qAgAirUU5L7pNLQUB569z1NH
5827	   GSAhjSAJdhNug9nuubG4upaWuc9DGMbPJe+EC6itqitSaBtL5lxu0aBa2TMhjn+A
5828	   PQEVzDMf78TQSUhZy5HJnj8c2DupKL6i20NIaF1doHHgOHXRxS6VPJGxq5X/XanK
5829	   TzMV0cVB2cltkcf75/JYu1JALe3o+49fm+nGUHrGlp6eHqXo1RwMaKFh/2Kw0nVs
5830	   nivNX2mAoZAQRlZSJJCm9KOX7AtcY+uo3E+9wmNX+3iCwudxTjWNqFmD//Og9CED
5831	   aiqxFmvJF5AopqL5peo/BqH0BsEwb8lbeR9gSP5LUKmFFQ/Jeaf+EmCznUfMi5JV
5832	   q2GzcVsLjsKjBipSccydc96D8TXbWSJJop/qz/47usS5kAlha8RhEDCKGe2s5mPV
5833	   MRtJ+Dgn3HHzsVf9Mhb7IWbrq4W9jG6elr18hRxs39FhzZD0ovnFXPdiR64caAQP
5834	   gyMFBrUdR4AMXahTwyl+rCtAt7SUBjAyIOXsjqEghENX/M/qi56IuI8nWg+cJtDL
5835	   yFWhq3oJ75wEZGSX66GHMYcog0NMes8Lx9rsvBun5MXfmM+Dmq2VHjkAKP4NOPlQ
5836	   jXo+kxW6YjfPGRAdBmlWrXqRqJljN8qffpgbAOgIF4uq/QD0dRx+dUmTWIAcU3C3
5837	   AW7Wux5f3w7AUNZDjt39eD0ivI+3jgMiSUGxCp3yZ+dQ1hxjnpq3YnVCTU9iJJ2r
5838	   MXg8pOQFK4ofZB1EmBmhxJd/2lN1WAvAJHpgFXGs7Qy89WhY6RObYwvBPpkULu2D
5839	   aWVc6sEPXCgdBiSUd9fFbWNhDQd5puLpEuqLftejN7WNE1+Db9aiIlA+v05T3zX7
5840	   PYGxVGuYxf/P+Sl2wBR4yl8r/vONAyctAALCYP/KudSIgXQ7zWVC1klAjqRksWmK
5841	   SDtNmnXHlMfPTt7Av4vHX8iZrz6sOGpMso9j+Sdo62Ppmbwl9vS8gbZ4zFeelkXh
5842	   OXXIbRo7p3tMeFwsogY/7o8Y+9gxep0rm/w1mTWsQRHJr0t967Ki3AUrX2HoIa0j
5843	   mlOL846o7a1kMrKIK0FdFmWUFV7/iWbjoaX6GWJ0ovF5+KffFmfF1jPYDptlKR1K
5844	   PFjDwpzWuIu94fmDL5L7KcMUA/cGd4eSkXaIpYjNBQZ3QD9kqzoT2KopK2yG8DAX
5845	   ScKlkB6EehTUzBIpvYRA2pA0W1Lfjnbzn5EU0PWa3sp2Yq++C4fURxEt+8yT8t6N
5846	   WlFlqUJRQfWmEf1ZLHTA4Lvi7/HUN8JZDfNw7wckorMO4ZPWYI6+zBQmhx1IiGun
5847	   PZ5s+lUSQKPi1uUArMwfcT0CkTE1ebt44z02GEyLyou4ZelKbz5oXh/mz7qyUZcX
5848	   U6WcaNHuvIu+3r2I1RlblH1FYHB0/l6CQYQUPZh/GvVTliPpg0VqxbE//9zTYi+R
5849	   JF430mMMRXBhiNvJhWEfbdVr2YQXQKwN8yngzIlC1blCWWXE8LxrSb9HWbUrFmpG
5850	   XcHg94A9B3uUcZwX80AuW8Km35KgCqNR5se9r3EMWeSvR61cTjZq5jU9lwwpkGdD
5851	   heD7fdGDLq4DRktks2jvwn4UIm7uEu//7A77jhhvXgxv5no1EcrctPsMZsIuSsp6
5852	   wUlMgY07vUuRVTSxmdeSwUXzwTPKqsSCq0XgdPe5bEjgIU/+jCTQczYeIUHqRwLj
5853	   5qay14SkHSEBv29pwEXTJg1R9NXYQ1J9GtPtHrrS9Nf60YWMbsWvCdeM29BYHE0A
5854	   4bZm0KrNNtiQcQu91diLXG4lxsW/ukLTMndvp7zHbKdq0dX0I/uewQsecCZOTNkb
5855	   o/NyDKUd215Mo5LOTQtvvgZ5BB1bB9y2fWGsRvGbI6rZXCcEa96PoCaNlFAjT2tM
5856	   IjEiBcc/5T5qY1zNcw9HgU47GEIY3iTVNTVAdDAIfN9IIt3rWFhjiOgD9jcGBMyf
5857	   O9NNPwapxJ0QDzFBgOxYyQXe5u84T7PTxvsJ2W9wYXawqx+yr44zPrSTGcRC1ed3
5858	   EH1VhSuooWwzhlXFtRKure3d5K0lGUoNXwQAlqyNPA9GoyjGRdUnO4RY85uf10za
5859	   76z8OfGYqxnxyir0ZNZKhCqOhzGI8I1/mNJ/tvmjfF9hLbNOXWajrL4ziMeb1thT
5860	   3Oj2sTLyFWlEcakU+4XhU05IAJDk8RyqRPXD9mmiJx5h9pgAaa+B4huIB8Tbx6Hh
5861	   jsPszUbkzFNt64/+C4y0Oq9c501ZPBKxiSx5/1U6SlwkepBL2TZjio1w9fACjGSx
5862	   /OxUjlZNpWe959WL9eG7GICIy9yDNWGvHiQxxSZZF6mlN9ob1N7KR6jpKhWyKIwh
5863	   EukNuUKuYYqBnLO+nRNCuVJpSPOmXXmbTcPC5QRTrTem/krg6cGRMP1qCQ84jJDB
5864	   XBY+MX1QqAKrK/JLuydUrWjoIeN4Zpw8USZEaBlO9ZNv8ZJlYNv7Y+mkz12ZbnmI
5865	   8cF6pB9Dw16c78ESuwTE+ghGnPtvxZ5dn15oxlkryWIWHkOJod2m+3x6assc2ADa
5866	   HULNQRYqyR1RgwUysf6rQLMT0WRWOEoqn4n/SuvPpfLe0VylldnBMT7Q6awFkTtY
5867	   Y2kWJ3NwP1G1Q8rcW9wcXj6+92XH0NU2sn0bNei7+wK6YnLL5rGgmp5QjPYlYJrw
5868	   sBGZ4hPtxmmuAKRWtoy8+oyT0kHjIEmg7nqxUZ3WJjk/SxQt2j+mYTaBPvqrIqmo
5869	   g0nxu9cnUVNJs1ScnF7Tceu2GFtN1yaBFZlrkW7uX9FWL94LtGletsVJlEPB4oPN
5870	   dT8x2siM3HHmqdCUiQd04oRUYG4A33NwI2GlI6RQ73deLlEJqUPUqhahyA3FvK6K
5871	   lU6x1Q13/TUj2satyjiZe+YNhlUZXmwTinPb+pUtsuo037yt0JcXjqdjkTEJc2yk
5872	   gSKWwYZxQJtZkYRme1TnI0sciULrdtLNWQ1CDR+V4lyoc+6P7w9voCM297Ip819b
5873	   xif6PKmHwNqdigey565yB8ngz8JwLtvq2BbbQjmm2QV4nMbeMJGkvwDijp5q5pTF
5874	   9Rh2ljMBcJq9EY8w0fYcEEEB0PNF8iIVPoIvJNSfUIPoWhz4ocBxQCJTlD9ZhWMg
5875	   yCpOuYjcLm34O1swrvNvO5hb5Kvz0xSMlYhC/bU2phWV3EmnS4DBvZCfNxIUAok/
5876	   zfbfc1B1AzJ+w/3X6dRRcG3tD/zn6GXT+SBJGOAKZ1W7fJcNA0a8yzHq6IkpWdjw
5877	   D+WeHOYQUN+UPiF/8pN8xPi71fyzJRpqj6s792yudJNvcg2WZEf0gdty2LEkQ52Z
5878	   m6mVcj404cGhyeiI8Sa4yD/LP6msfMUB9NGxKpknMfkzE1STGIuVr+3E8wdkLfbL
5879	   Tl/HyfO5GpxgIb1Zw3i/EUGDkd1dy1qI3nq2ILccaYJsY/LjHKnbjAltj/CCyWqB
5880	   W7rmbpHpqhNEHomC1on2C/mzN/Ea28tzhci7bErT2giDHVlqqfaAsaDFGngmbOGx
5881	   G8mpoj9yjrrew9b/KfUjd+eUzuXoWlFVqmaj3IEIGsSK17dd6TCOYbujDyRNfpVf
5882	   nH9H7JWBdpdH3IJMapHuKVj3Gdfb+L0KHgAImHMA2yQQQxmluvLZln38UQuM2a/B
5883	   mXHx4D9tIzk+wy5F7atOqH73gx9KoZcQRvU2E97H9y1ddcTTDEDhhohuupn++5ni
5884	   wX3IE2UywQEd2TPYWV7xCx5/LypsNG+tnwLneN0HFrXle5Yvt+zTKiZDlCl9UkOM
5885	   wphDI6TRyOlIuvK7h44fTyBKSFoSYyev0CBLDP9tUgo3oSR9zlcDJlP0v2XPoCQ5
5886	   jTlj7L96h1JQnKX9xINc5bPDLocMG5ht8q2VItRHtSEQVrZtyVqokJnRtIVDR68F
5887	   aho1hjC9pZoU4fEB6Qwpsy1ITyDdkstjuYl71QDChs0ceoN0xx4TO23czVCLN+z2
5888	   UF5zQwK/fwz4Zf8xpStxhoqEfG29dkXR1y77I6hJTjmjxPyOaWw3Ffw9fFU2mtQA
5889	   f/DrlheHMOyogBSllBX1xXeyD7tneLVebUK/RPzB1wfsxA+t36+f4X0XfI1xMbWV
5890	   Bd9o1bxgaob+zASOSoVhpi/64FCReUQPTrqQlyu+5rz3GsHSVxEBjV3K+F2ZFgXH
5891	   FMt4lj4LKlErUZpLKS+PsoR4Uc71dlrcTni+baJtgsdkuUCnLbI1o1+c33qqtWyu
5892	   3MD2OOEkIO+2AReqvbhT0R6BwkZGlhU7k1sZQcmnjS+wUR6zYRdnQ52zJs/fglEH
5893	   fwKJaRagDSb3+HvCFsQVcgTia2ppzcbnORTYTfHiugWv6TWYBLOtOh3odigIrMZb
5894	   I+a37z4tL2bBR0engUKRha///Hv0HX9hYj6HufnHbrakx7kJ8QDiM7/XbHmp/EFa
5895	   QsubLIXp07htSBG8rYeyFcnY5DCygtNRyeBa4gvrQxN/fsssay7wDPylUjIc/83Y
5896	   WRxvKlsONECIPAUYovLO0AvHZeZsoes55AdGyzqZqhCwOUNwwZknmhL/3D6sZE+M
5897	   8acu/0dBUSVkQKceswjAlK3mwHoMV87E8s8Kvg4g7/mpZbZfNZ0ux/cj08Ilglb4
5898	   C55JlH7H5a7rueuUdkAedi/QB78MjZKsTFHlfeiov5z7C0zv/xxswUxTHF0l5l3c
5899	   N8IWLrgaKG40QoFhHjTPe2QAmgXt4Zhi5BCp+e4JqYnPmmBrw4GjwbnMD4AE5YKf
5900	   SI/JkCSQTaGeL5cl789uzqnVh+wT0rft5uQpB8l+RgekwIqAcwmeHww8VvTIGtB/
5901	   940B+UBeiWsCgFBANm350hrfLn/dh7HwOemg6CRbmNpBGXpIjWwE5L6V7aD9T5Qk
5902	   fPZgmPkc65oZ9S7EejomfGH30OyUr1oC2jsVPd+1llLYlH4Wv8pGWzkKYhXmGyjj
5903	   TKOdWcOsc0/9ChR0cHy5b4E0NVKm0wCoJstY+bgpDRYbA1G3Urmmh43g+pbfZ15p
5904	   jVnx7oQmlzeLpfpWcFZbJ3NmLBb/Y/QmMlmoEtYbakYkbLYgB2DMrBdM3hN7Bwi3
5905	   8VM3WUes9gb1xvz3X4IEVL6Z2cAJDlxgyyFD6dtFlvfc/ONoZXF+pydrWQAalxQZ
5906	   uDZLKo+pdGkVZC5bHtHQd5tc2EmWiNawzK04KhEVkYTbO2KIYWQvwoN0aiDZEY40
5907	   Gb4Pf9kUUMCI0T/uG75DqVrjIvNooNPWOUvE5PuVN1sK7vK9sKxzhHgyElygOCRl
5908	   VOzHKuB787LgfyXrHlTfY2PEIOKCqa4FuYYT8WTG/NtgqVjDE2yCZsHu/qUXSe+9
5909	   EwfhEUDwS3np2N9dwcMUNZKvefeOnc/7D57Z5xCvsioU2yns/NGMlbewMpbVaDjK
5910	   08G9pfLq3EDTU0Jw7iAZgG2duaIouYgQS1uursITbg2npAD42JbQ5iebrRUE650s
5911	   z2rLkM+/7/tz6TWhUbcIJv1BbP5M+xvnWwCCzvm05Rm8CrLzgb+7jFbYHDIaaYPE
5912	   gfGxSiuIXxBYyTAWPj9iIiHuCwr1BBw71VY3U2gRqxk=

5914	B.3.16.  S/MIME encrypted and signed over a complex message, Wrapped
5915	         Message with hcp_strong

5917	   This is a encrypted and signed S/MIME message using PKCS#7
5918	   envelopedData around signedData.  The payload is a multipart/
5919	   alternative message with an inline image/png attachment.  It uses the
5920	   Wrapped Message header protection scheme with the hcp_strong Header
5921	   Confidentiality Policy.

5923	   It has the following structure:

5925	   └─╴application/pkcs7-mime [smime.p7m] 9425 bytes
5926	    ↧ (decrypts to)
5927	    └─╴application/pkcs7-mime [smime.p7m] 5974 bytes
5928	     ⇩ (unwraps to)
5929	     └┬╴message/rfc822 1799 bytes
5930	      └┬╴multipart/mixed 1735 bytes
5931	       ├┬╴multipart/alternative 1114 bytes
5932	       │├─╴text/plain 373 bytes
5933	       │└─╴text/html 457 bytes
5934	       └─╴image/png inline 232 bytes

5936	   Its contents are:

5938	   Content-Transfer-Encoding: base64
5939	   Content-Type: application/pkcs7-mime; name="smime.p7m";
5940	    smime-type="enveloped-data"
5941	   Subject: [...]
5942	   Message-ID: <95b9bb39-c028-5ff4-99b1-f179cb5d7585@lhp.example>
5943	   From: Alice <alice@smime.example>
5944	   To: Bob <bob@smime.example>
5945	   Date: Sat, 20 Feb 2021 12:11:02 -0500

5947	   MIIbLAYJKoZIhvcNAQcDoIIbHTCCGxkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
5948	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
5949	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
5950	   Boq0MA0GCSqGSIb3DQEBAQUABIIBACjMzFIXlc3EbymBS0JPbwPNsuC8oupYKV2Z
5951	   zEPTKjXpbK6gAq2DHXW+UN6VxRnuK5og8/5A6CH1qssj4VvZFE9BYmVtXBQzdSYg
5952	   UB1lOVwT16EfEhaHMPlw2rZ6F7hnMApYrpiH3oMNzDF3L3AOMRwwu4botbDl2ONY
5953	   KC1TGC2i77Uy3EfyHxO6yx2mOvL2xfzXf8lu3uP6j0WcOAI/bcwmMybxP1ieHsxp
5954	   MM/wy92eu4cRreEln/W+FDwp2PCTEQE4EMeJvq9ovQjzRSa9EjAsadZmJ66KRbDH
5955	   OjIxpVISEgPCSD/nmY68P92JPWt4lySKmjm3Z4tzNVWcVYtxKNwwggGEAgEAMGww
5956	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
5957	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
5958	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAI/LCW328CZK5s77+nE3oW/7D
5959	   8ciV58oIhhU2ACOcQX+pBSXDPWl4DcBF0PbajRnzCL+RHbEDOpvV8iIv2pG3izDU
5960	   XKvS9U5iVvFM9ZsCw2aUfOSiyw1sCT09gVMZAJc32hASFpPZDQvQnIMG8lnPMHaH
5961	   nsj0CFc7M1RNcgrI+5hLoc3YSZzlv/khKsj04/TkKtfqJdhoei17Ch3iMRXLXHcT
5962	   J5z+Pp56onPplEa3l6SFYEqj9l5k6aMqIfujFipfXU2xLN8wthVGnus6wroDde6G
5963	   Rh19XCDBTwsqlr46QAOUMie+JOx6mA4anWEDK5UzWmkAsJ70afNOF+TWxpTX9jCC
5964	   F/4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEENOmE62/eOPyBJsQx75+tcWAghfQ
5965	   RlceRC3Yh6DhNhJPej5k0aSqZp4yYE3yGFeQ/nuY7KjRFQ43ZJ2D/McFrfRQrox7
5966	   2JXDYRlN1QDrFY5Ik1CkCArMAH28D4b8+VUH4bLD/hjoCti2nfROXY4dZaBVdB4k
5967	   1sOplPXAHoy5gK8TeMBToyXoIwdQ4SP7BJFzfU1uZq0JIrC1Q7muA1MM2AY+nPhU
5968	   fMv4zr7pODpQz7YWK79GeJVM1Xsu40gvduJdxdt19Tz3cqB3Vg64nU08vDXp5A+e
5969	   fP8qxogkv2pOn+hPv2Etg6TIpZYdcfHIysbQYwGjkdrXxFoSijD9Ankc/OAaZCvm
5970	   WFv6+GIff0jk+lI7vWje107u2WIMsceo5cXdVhBLL4u7/x18RukgCpJF7LPEvT4e
5971	   1aWzI6nfCM+yz7GucNXeRUJ3PP+zjmDyzFJg9KvgL/fibz3G1js3CibezT7cWPDy
5972	   9WeLULXNgvfd6qdeRAk4oW0NN7Wk1ar1Dz/LOyv+tC0YVx7B9HkplY4x9XP3dvqy
5973	   cfgTJ90Z2b1JN9YKa44wGN4PfJkT8ChCpaw+1L9LDZrTQyQAzfgHkAKTTazOS1S6
5974	   SUyz02sM5cx4w/FwQzdSEyHZSzor80DffYiwSUQEgvm8aO3gYtWGvRdTQD9re/yj
5975	   cotzfYeezN3Z2gr6LdExUwyykvpctLjDM8IAPgXfcaJN90QHbfOPoqOCgP/68ohS
5976	   5tY9getzCcNE0UjwWxmkJIRBCoy3IcCKNjAtxwaEEF2Q3Ummaw7i0VkvYaN1f4Kt
5977	   M4uYYxV+Jyde528ltqIYcAsB7+P0PzJ+192TSO/zA4mCH2PlpQZ7OaUsgY4WKo6h
5978	   oiYgTNxNgD1I6SlhqQtRkuQsAOQcVy5rpss453xZNBU7gOlbUygMMZ9M00TDuW2Z
5979	   cGGRi5KtHOxIVkdN8R2/zFLrtyBXIm+erRUyfUupYrHxCQr+BlZsLWsuMwL6nY8d
5980	   beWupZ7uD7l9xdbKwTuHDXwttRhzRzM+IkH5JUh769T8IKNU+DpJ8APSs9sn4Q9w
5981	   y/fuORtJIHKMo6WmTyV1zipHd653aKFL7Zz16rYz4Meg/qsKxzyjlH6yGhgccENV
5982	   2xa6DXmbLMvKp8eME/nurEB7g0ifozwMPab85eJDxSQfPktofgDESqa826WGQI88
5983	   rzHyw6BFBC1uPn1hcMq0r6LR1zPhAcqQsx7zDahTYRspN4xSEUe0p3oPJ9tVJKvr
5984	   mHAHO5GpEx2Zs7RWzXLBYb4fVfrCHu55O41EbXWU1ROX5JsVJS6+lLUQViqUKk3F
5985	   tyBIYZhylAGEFHft/J1JdjNz/6iMrsXntiKNIpRDSkvQdVUT78+97rH9t5DbetxJ
5986	   NnH34n2ZvQEuNghL35vBQv6Pcs4inkZ7OLY07k+3Zt1Qogqxlk/3ZZYQ4gg0x99C
5987	   6bS84GZV5OchQR0h6Ci+iCiR0G4+koTYo0BDZUa6JNR6kyX1LVPZys0QSbwi34BN
5988	   n38Aenw57CUUkLigHfrcd+kw8nfF/VjMFda2wayrpQ0llmYWMkM+XfUtFQjplZ0c
5989	   O9sdIQdE9G5+bG7YcU8UZfyl/UoqTBELBLyVIR7y7+80IDobuErkIi7WbQrs/rkK
5990	   Jzx1lI7Z2zR/Cer5pTgaKURcEzGEyHwUD1jwNdpUstVXgSLz+Pe0zdQOLucAVgtG
5991	   Ct8VtAE6xpdYl9KxU40Ke1VH/FU0L7uq9Br5QBawLVvH9R9a98JgfKdB7Nu4teg4
5992	   P1X8IWna8kT75n1V5o+EcrZTExyNPgQJyAvH00tCdj9cof0QNWQ3gw8RitEGIocX
5993	   +gWqLaeFmXX0500a6a5ypQHQuU6sUujZMj8biD0NaboGN+wMiftu7fRZBcxS+3n6
5994	   dYx0pwlU6CSrDGET03HvVVWaJl9rJ1iGB86Q9VFXvELvwysuR3IpUxmlH8LDyb5+
5995	   LHKxe0PIEEO/DGBPE8YFycGXIpOUGeO/NIRYXWJy3nF5UoVbYLuBrB5i98WB3CY4
5996	   RNsk5UBmoZ+q0EKmzasXgCYc+nO758kBgNtmnVyH/cRrwrQALA8oLm+qURNUF1PO
5997	   vIrQkKnFNh6QH/K+mJEPMQGzSprhkhS18WOql2gpgqiVNbUuj2qQ1DC/riJZOF+S
5998	   b3wwGyBN/0WmTs1VxM7TjyWwfu88RXE/SozKwWbpHrOIY10kQkPxtE2zYACwrXEp
5999	   TVZr6RTCbiazzvaps93hXruLDXBKc0UUUn/wTgAzLyCVuNl4obrl9CAPDkZIgU6M
6000	   sJNArE/HJti3cvWTIavEOf4ez/OTpdzoIsnyv31Wc/0QkGk07qLaxq90nNwiWPJq
6001	   J4HsMDwPzuLhfg5cOaA+9xzKzEEQQquXx3UMKRLht3/i4mwuNepZdYpGz9Go7Zal
6002	   O5ZwzzKde2H3XGa/3wsXhXYfFD/wUagmDYEmILXwFifSKLOo0GnX7E4zR40T0Kfd
6003	   6JJ76u3RCo1j7BMas+dbw7RQ+X0wCd+KQi0lvd9IMZ4Yr7vurZnpGRdQQh79QHbK
6004	   l0RBMx4nyEsHyUQii6VxfmvslF5yzRGzePQD6HW8O6LTci96omIBsdpSt4rSr3CT
6005	   Ig3IP0gSNI/H4pu90R5XButCbu4fJcNFmb1VQswBsmwTXl+5G0QTVRoqst3a8tAI
6006	   +4mnaR/uZRfTt8LBgMDK59jSuFNNWxgrCTUm6PSRaqm/9ZVcwvXHLWXNFYFGC+6L
6007	   tufao/+k2Bphx261a/AERJyRJhgFF1gDyA8G74wfrVcYXXLYwNSP0sirYsjN9pE4
6008	   RVMFNKYFaLsMyYiBAJLAoD0waXEBg2/kKeBPKhpNr8yIgQoNbpSxYV7oYqHCtBtT
6009	   k6o25FIj2MXauDvdxeN27drfjXM40x2Jtm/ryuBhZkF70do8bqUjMWEHkGxbGUa1
6010	   7M7vPMReB7lfJeJs+HjTYrhHXqtLsKMJoHD64boPNMAOQnaJTKT4WwVt0Op552yS
6011	   rgc9vhaA//BN0oONV34x293H6Z7l9aBY6Su5xp5frwgT4vy2T2xXYASSN6ewGsN/
6012	   TSyp5RV7n93PmeYxcssAxRGs8Ww8V8AI8xk1Wi+hRxoLy/IcxuIKajUzdq6XYEBB
6013	   RzAQslcM3bXpIA7xM0OR3P/grAqH1Qhh4zBGouljMH7LWRUqspCW4xGZdBAuPogN
6014	   JgbQaijQzPL8I93qw74qce6qTVTio0EK2ljRdOQ9Q1J/teG8hfaRlAcC5QUAr3GV
6015	   X1Z+CjNG8ywLaOyyYHoQ22yRYmiLuKkR93u79W9gogN8bUE3Qrw4wPxLOKfKZlQn
6016	   k02QnVMrHaQAcY3FgXOpdvMC3Gxhpi8AQzF2OWQDo35UHDjB6rTWTrRIxI7O5oxN
6017	   icVPihJ7XZF5eL2WpISJzJ+zj8tcVDA1GOFiNlC0zF6jHEUEdRvc++tOSao6Ckwa
6018	   +8sfsmoYRAijrsKN/BW6P2NC5K7KH6LwzySHdJNgDofW3Ekgw+mrSK0TzhrE3F9h
6019	   R7m3/mFa/22I2cHgAti+uF3RSL3xli0HOoiH53MM2B7G4xpkcTCWO4tmqfYBrNUI
6020	   BnLSoz2yLxWYH1mYGnH03ooVK45N9/BGUadV5ByQaB9nC8sD3BEft9wTxq0jRBPn
6021	   eEFeiIDpbz2TzkJ5XTrAS14mR6jaxT0gYfM6T0YMhlt60HHUujWtv3SMoC3JBXiq
6022	   lx62lmdvxvJsoxmET9nTA5RmpZJPUSXn9R6jXVNg87CC3EHXGYS3SVyGT5l24X4x
6023	   90mRan9QiF+a3pVjQTt33UzHgpW2hwrljL4OEik9jFwXf4plGBT8Itzdud4P7Wqc
6024	   4Lg3cbsBe+I53m3Ghy04tQ66fggE4Zi23OH6DxljsE/JJ8DBlnFA5kCBvLfAP8zc
6025	   ZLbOMo799nbexsfJp4jo/0TkFzMbjk5Rp0vRvJlxqCxZiMpj51FyPH7q/hd3wd9f
6026	   s06pJpXI4AkUXxeMl3EDmcYe4e6lR3RdFR0Oj+uHlQQFwvQSKMWK7Jq6K3bK1y/t
6027	   DfutHObp05kmTjgoAEJPxcuKV6y7bSbPc6LHKU1SPg4E3hKHVK7e1TQqAbTMp3du
6028	   Hza0QeEbgXw0+6/8pcC089XAoQ9Et/YvfxmYLZ5LMGfYkAfHsmnsy7kKLEOiPQNS
6029	   ZNwef1XUfUecsdGxg67Y4E0y2RvivaKFsoCrFCKVIRXzKIIwVUTo/qyDmbUJaI42
6030	   SsqdxKh0S42Uj0Ey8pew6G5SJuMK3YhOvmraZeVqJvfpQxj/FpEzQIqCKMiSF1jY
6031	   H009sESdyCWH2F0thzranDGRRNDlIbwv81kaflTgl5Ug5Bu/aoPnaBhMmTd86YPs
6032	   PNjBFdcr92jnEjj95zPhy2nGn+o96s/dzrTvaQpq7BIbtZcZRxvQEkY0tYGoZ98R
6033	   C1M+kKImegPFoU+4UajtEnPVhbPxom0kZcPffJcS7i4nRPlrXKaOZnQ4Kc9jxwIQ
6034	   kqJqXakWQqGri3vGaUP5PIfdbEdjVPONpf/WJPMHCz1v4fn7eEsu7uB1livaUVpz
6035	   /vhLzvjMiJB4D0z+B+YKDKmvtnGK2+JNJbwbYiPTaykXBUXxmTFMeClhvz0yZRST
6036	   mWtRFKopcKiK/ME9roq+FpZOeRSPkP3inpZYZQ6UpcfX2GHa6sVmIAIrrmPKjWsQ
6037	   MFNMQXUWT7fwmHRzZhWV0jzDzjPxAIaJ9PAtEGkdOwAbWManCx3G+gju0lJV+WtR
6038	   NQurz4x7mAotU2E4+DwGSAw/XZO7E6Ht+oMKDI13EGzc3P+Tbceg+uoUE3bncrr9
6039	   f9jOXKf8fL4OTvmPeLJMbgzFDTYs/vPzzSuL7X673geebfFhagavUweDx80kNn7j
6040	   ywHTAFxmWEa8irFA/pof3J9T4kVFspdLQoVoLx8PBoCwDhU/12jZ9C4LgbWLbkMh
6041	   4i/eP8ULCiEvw2wNMKt+BJMv9OmDQ4oidBMpxYfKeOullKPJ5FXKF8swhY7XZV7U
6042	   ku2PwEQXP19Ry6RK4+KVWZQlJBS7/IBggyN8mVx0sgpbpPPk3vmesSXRcuiOQe0Z
6043	   3nCvCjOV9A05lk+zS/+O4rwudTmmf0+DJr+cUa0VNSZLNsaykm9HF5txo8Hg7tC8
6044	   cJdtUI2UBTGfc+EAzpbsv1hP0K3SHABmatOuJA8YCOdIb4LWyxxy3EcFsHXx9UhT
6045	   K03riK52wFzaoAkZJnIfx6y9GK1StAQCKaAmo3OrxNWajKV+oWT75ZXfPRa8Cu/D
6046	   sA907g1qT87WmtVHQu5JFE4r2NC52B8bC3UIJVOU/qtijVPhAkundJp2yx7q58hB
6047	   Vo8A3Wv3U0XMpED7wbJBKO6CJc/wa1Kx7RehcEfh3JZhZvYSpbRNkhKBFszW7K/T
6048	   j+Tght9wozEQoc3uVsXflHAN2mROTOT6axo234DmJ8K3jUlpsU+zI3n0qwF6VMgD
6049	   5Qi3lfsbBISRsVK18OtRr7XGGlNNHCnQqsyi0AoTbHSO/N+BhME2jBw4IAh2Hd2I
6050	   0ERKvOuFsy25IrlSUwoTcS0wDR4gUNB1UE+JMRMY96uGz9uYhNby3TnNUclhBGTv
6051	   jH/rmHcIPy6+RAGhnC9E8ejcW7KJ2hwWkvMRl/wsR7M3OSzy/yOMYzQkTSEOJ0os
6052	   cLB9ROASnPBp4ymEoUuqxYd6L4eTxlnUlcSeJK8PI9CspQ2tFCoMs1lJh/eFwp7P
6053	   FlISQEJh05Wl7a7svhDpg9zsUNbrqeyp1UMO4f0ZzQaXK0xwZzUVXoPyCsoS+TpO
6054	   zAp0isrlLYRlHPZFkl+1GctlX0/ho0UqNdhh4v383mGOQvuGridR1J6aOOBUeI3t
6055	   W5ZbD1Z0lZOMYHQRHd7UefCBWp3Iv4qd2iyBoW68JmCLrEnA5MQtBNeuPRFztBjS
6056	   RrjshjrpqthStLAORaX3I7J2tEilicQXD8ohSqRk3GBy922mc5F1RWV5lem2irva
6057	   Vq+gz6DsGaxwdF1AZXnngDw3MjQyCYgMs8ecGOoPr+hJYguhIT0DCNGFix8fCWWr
6058	   joWeejmNokbN8ZDadID9or68y2iCVVVX4N31yxqWUppojT6OiEs3ANhIG0SA990e
6059	   6yaZH9fkG4fA/GoiUviFGy1qaulO6jFmP8M3FDZ0srLnJAf1PtWgGOpxXA+sW/uy
6060	   BSnRUm5fv60rs2T0NsQYPIMoBDwtjcQHKH3xgU4NA94EDi+BGTBVOq3+qgXVwPhh
6061	   0HBDQi6YlRPTDB6Rq68k1ybSxqxIjf7Kin/33fn0q8jA87kl5dLvnTHskZ53R8O2
6062	   QAPRABkjmOUAyYWZIaNU3GUsQhNDKnAi/s6X1zM6YFmgcFdfZZic2N49DD93kXgH
6063	   hjecAv2fmgsFbYlHb+t9rTDX6IQk5KolfbSAsYnFASwn0AIyKnkAkczEGg/p+1oK
6064	   gLp8KQj7dyG7SNI5azVdsyZZxGkzV+zmgfnN7mfGOlAWh5KLvTzGFwd9EtlQDC8z
6065	   CTCrzOKm9Pa7SwSQKIOH4o74XXgeijCTSIYWwRDqF7SWF+0E+kQ9TiMNl9cjG20P
6066	   VWvHv2kMBdCXEfBmPCwkiqmgSIP4txiq1FvS4swwnoT5WzMlEi/gKxUkwC1D/o7o
6067	   d3m3ywLOzq2co9zNNiuvlxblIUCCz5MbCU1rz19rM92IglljN9mu5g476PvzKHPt
6068	   K3fyU5YxOqhlR1JxUgL1dl2tMtBycqUPu/eT1yO6ER4b5Z4v5jzWQ91a/La2l/tV
6069	   gllSFIQ5yGPB745+CZ3uCREOAFnwwXYw42jaV1MxJptchjJHY4oKFarROlXF3Oe+
6070	   7nwuFS4WMkCZuXXHLevrRBPa7F0DX9tRDs2fYpJeEfpOR8epvB4nglk7x+bL0RKd
6071	   xrY6dRH0cS1dJ5TXTWJtvCL/LocfiN+TKJDhlkgq72I8aKOZqxhqDk81nu9y3tbt
6072	   V9QGTzXhtg7KzXyQacxYUoTHHCDopEVVr6CNc0PY1xGN9CpLIg1BTduuBlIoTJyi
6073	   EBgE9dL64xi/D5jYLsV0L+iWO/ASRYEhKzqETSyPte8kWaqvIUUgH8bQCI9rJXab
6074	   mngAU8eMR5Fdl8aXE//FCpUiLfK3cMQtKZn3q15gymnqSKi0BSZoogU4tFQnyC2E
6075	   gghhGe0fsdJgUbWUqlTyhtFTGhNCsFtooFTWVotcPAuo4CiUevm5v7Yu9xm8mvX0
6076	   r4S6I2bBoWhyiosZcd5lZensmUHBAwoHgKuJGAScPSfGQep5nUXcAx8rgW5LOq4+
6077	   0kedmfwIvcvpc0WEOuycX/zFBHgZQJ3bnbNkBtzZf2xPg6jW+BRi7vOlfkzhhOcK
6078	   fSwVELORItBGxRq5eysPrNnNhsftJPv7yy9boCE+MwrwH6WGG+4dnm3Gj6sNKdZv
6079	   44QYT81muB6IDi5lpbK1PNEsko/Yxo07eMjWgx3ChnuuNdfgY7xWh2gnqBFvF1b7
6080	   m1D5AuZW+XAJ/yJTbLrJHLQzSoVp9+k0kvbe/suzbVsGNv+Awqs6E5csFgTM+lwg
6081	   geqq+lF7R6tH4GrPdpm7raGmQxZVc8vh6x/CKDEBqY0Cc6tGr3V2e/gH2oiuHIc0
6082	   V8O04kjr3hJQBBZk34jWg0pFGNGxzPE4WtEI0CxvINs9aYdNvEY2iVRfH1Wi6+HS
6083	   KwuRnMKbysO6rwIevDe1wa9JqBmqJFGteKqkdGzlaHMJTw9ehprhKrRAjf3aJ15C
6084	   xS3AiWc7guUeZiS/pN+DYpgX8HuFTuyf2FxEiDdLFFa0A6ozlq09CzQ3i6OYjQcO
6085	   4fckHJD2PyoaQ3bbHdiEp/UNqq5OrAHSpVlqCCcN/gkTAZun5mNEZ96Yru16QrUw
6086	   jwXRwRff4Fhtux5WQklxflspTTPkQWG33X3WELecjw0abCYo4gcpD1kTjb74LmhB
6087	   eO9t8/YCMC0Di96YRHTvsux9qLFeYzI7J/hSeVm8G2ho7/McWU1q2jQMhdF4e1vv
6088	   G/pjZpCRUj9jfSCGoA9Yu05C/ifkS6p41mt1z1SrE0ttXYGYYgTLZzCR/XsyCHSO
6089	   rLxSXEp59N+Onc48lbgEpcpN3Z0Cf+bOPYIODGfLwRorwoqJpG+cv4UJQfj2ZX9A
6090	   bhBfC4dD0ZlqMAhBjK1zvfDDjafmY/5CD3xfTqPDxKTDjW/UVShgxuLn/Ida0NAA
6091	   pAcZk4SNuLYBM4uG+YEl6ddJfuzndZgKOb4MbCPu34rRIF9AWBNu8P1Gca5dlzuK

6093	B.3.17.  S/MIME encrypted and signed over a complex message, Injected
6094	         Headers with hcp_strong

6096	   This is a encrypted and signed S/MIME message using PKCS#7
6097	   envelopedData around signedData.  The payload is a multipart/
6098	   alternative message with an inline image/png attachment.  It uses the
6099	   Injected Headers header protection scheme with the hcp_strong Header
6100	   Confidentiality Policy.

6102	   It has the following structure:

6104	   └─╴application/pkcs7-mime [smime.p7m] 9470 bytes
6105	    ↧ (decrypts to)
6106	    └─╴application/pkcs7-mime [smime.p7m] 5998 bytes
6107	     ⇩ (unwraps to)
6108	     └┬╴multipart/mixed 1765 bytes
6109	      ├┬╴multipart/alternative 1118 bytes
6110	      │├─╴text/plain 385 bytes
6111	      │└─╴text/html 466 bytes
6112	      └─╴image/png inline 236 bytes

6114	   Its contents are:

6116	   Content-Transfer-Encoding: base64
6117	   Content-Type: application/pkcs7-mime; name="smime.p7m";
6118	    smime-type="enveloped-data"
6119	   Subject: [...]
6120	   Message-ID: <23abef5f-8781-5c95-a46c-61e3a4464d58@lhp.example>
6121	   From: Alice <alice@smime.example>
6122	   To: Bob <bob@smime.example>
6123	   Date: Sat, 20 Feb 2021 12:12:02 -0500

6125	   MIIbTAYJKoZIhvcNAQcDoIIbPTCCGzkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
6126	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
6127	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
6128	   Boq0MA0GCSqGSIb3DQEBAQUABIIBACg5SAEbJdRyrU8Bf5P1nTcvjMySeblcbXsC
6129	   SPaTgaVlplQQBJ8FmEBqzqelnX/JRwlJblVRu3LpDq0jaXSvJOnU0G9n1uuVbwIO
6130	   g2rKZmzj1nR3GUfnvVip5f7hfxCXtdIkTW2nxYrhrlMuOCSn8vhIg1vaZNKflzwl
6131	   B7xn5F94g+SJwnxyOi66u35/A9fzexPN2CziSG9z2UAf6L+PV/AUSM13NnnFCNxP
6132	   WwbnG9DqAOuCPVXq+W8Y93CvFjG4p4UP+6PLTeLcciFe60QKqeZoeE57xBzferxu
6133	   u3HOrMm1m6nLHXXzayGx2PPfC9rGZqHBdS6EeuMd50SchpyVeNAwggGEAgEAMGww
6134	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
6135	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
6136	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAQIKKinEhs2gGBlkr4wmROMLj
6137	   J5BtZ9ui0KT3QP47qn7cy9N18l7BK3yBTmqx3Lrw+Zb0Efyk6Hf5uP7PYj0wdET6
6138	   smbGw9rmBbRIsTxqu/Jpu0jUEwPperuRFfSOU+2h9CkXlbCY9ZnntltaGVKJxFCF
6139	   myXpOYFf5MfVyG6+Z4WljpR9JeiI57DTAPbD/+2LEedm0z/lvhDN/QSCZLDIe0Jo
6140	   vOfS5CvzHmLHyPtUbdHxJ71NMQvbkQhu0dZFbxtFUypWTFk+X84PSCZQt5/NvrKB
6141	   W7+SEzylc/Jbnp3je5M7bd+XjgBdhblYEO2CNw4EwnQxEtLhD+JNn9wzeelrJjCC
6142	   GB4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEJyJ4Y4LdbBu1BDaj40MuPmAghfw
6143	   BPr3MdKD9K8S+bENae4nFDCZSuX/TxLyWxeCErUi452NWR4++LedhDvwMIO9OQPI
6144	   zEzvs/1974yrRPhTfXtls8uyKS2MArtXEP+SwkqmF/sI60Miko1wrYZMm/ccCSor
6145	   G45CdWIfCZmRaFJ+sui9+Uoe9aUw8gFtDE+4J7smDXWo/slu8mBcjbe+ncGk6ahx
6146	   4607LxUagIoUT2ynLRV4N7Ex2uQ/NF/geMAqmAyYhD4mjjWC/WmIDVuQt+j1tZzR
6147	   hUiADCdmR1qtynmG+cNu0RIa04lBw7NQSYZoI6ysnYKyH2e4F7cT42LdcHsiVrPQ
6148	   sgiSG6zyh+pk+Va27L2Ou788dSg+yZ0MvZn129vPksqn1z5Ep22JQh5WKKX1f0mT
6149	   U2lJbn+4AMGQPMzo1dVFydx5HFfV7cbhY5spO9uTV/IZPJOogOaZkNtLM8MMJDJy
6150	   AOWO2iNyFJ5qQUCgK3gHwAe0kwsX9eIKaoCK0m4VeK5a3JLI0ktQduEw8y29asp9
6151	   33CDvr/u2qpNe29ouO7rw0G4K61uA1w9DKUxuSOCPVYocazFKd4zsdlSXgHmKwuW
6152	   GGdYGTvfLD/+ZWSbXWwRXIj40cPzbyHgIRLWOGxkEeBRyHnKp/wdX4QdpwOVXItj
6153	   +fxqvCYc8iKEz/993R1FdGtUG7StJm0gCfOjU4DWnYJhNBSNfv/rkUd5bQtmUpHI
6154	   HxxG7nC1EC3MQdGlZXSghfj2PKVDW6mFU6p2ExpsRkIOJ0RZRrhJuWXsNZvcNKFn
6155	   05GrZzjKiCI199cyY5yJ6hUMl4rinVtr2YEibH5LTTHJAVX1ihv3pS6x1mFsWHXV
6156	   196gLUqHbu1bNceZ1GCS8KJxsm/IGL8lPWWVup/QF4d/528m65Fw6Ww9d2NsSUPf
6157	   byY420MylkUlZslOsepqST14h7jAwYJqfctT6SvK7RBF15c7CH2MNCyta7no7PfM
6158	   6xpq1xQylmBuOEYu3Flk6Z3LHwFNRKxYlz4+rN/5Om56uY9nsGECpC56kjbD3pZj
6159	   cbjrOMYJxmJk8NQ+tPLmNTHBINtUGGUrO9rv2xYfNSPVKOGzKDacij2i4aNhS4IT
6160	   kr/j9Vq6qF1QCZ9J6sUJgAynKQKiRZS7QUFwp0LaBjV7/f9iJE0nthxnw9z+ndFj
6161	   UQXnqTczPc0fzCG8r3Z6TCH3KvVBvJ7uc5gJAo7hlZ2p+hzsaTne3xmQlclorzJI
6162	   53qD6jn0AO3mCb/Ce7atobRput6cflyu4wsgSX7XqjB6GyEtyhT/j2/uZUEwuK1L
6163	   sbkVt69LerG19ALgz+zEpmoivn4Jz2TQ+h27TKmAm/IZv50EbGbIzoJR9ZAYf6ep
6164	   EBoj4XtWSH04kqmTs4qY5EZdzaPgzKrAP1y1H/ouxeltesKOqQAbpeuoNLt17oEt
6165	   SZRfzQemo4cYuqu7cBfIOF8JAn81NupfzD89FhoDIzIpz2Fa2PdUZ8v+CBJSfUmU
6166	   aeem0Y+o1TmoJnNBSLHBCVkzgpvph7efjk2mxNHREOAw0iqdTErh2j1HxHMWJyiz
6167	   NMmzjEUg6Sm7bTTkY16zqMK2j61pH+cR+4nSi+OyFboJbf8PF5Ge2XN4M5ZTbd0F
6168	   /+CXTSqe67ncl9nxl51dz7U9ghr8ryYAAsl69pk1Ozq15Ek+jdqsfj6urjHWIZWU
6169	   ejb4x5qicfhWPbEnmax/TG4kV3LY53KjYQzIzwcHE+jwq71so4uMUf/LnmNv6o9u
6170	   ti4XNQvk+j9hvQoolMuuzOzJO/XIxte3aSjhukE72mcjoU6U4Mid0fFgz1UKELv3
6171	   uH9o4DsLL35cGaJUYo7AYyRXz/REm1VT0H5VtdBPMMvWOC0FaVCnZqHMoZVCSPrI
6172	   Jo+E7W2l/sxNrzKAcy4gVzZKkrazvIEz8tMzWLaIMo0tkiu7EVjUMvHoMLf7Y9g/
6173	   he+JNo7GbfCro0PaycGakfvTBX456kxn9RmWi08hJHVP3fMDGR7DVZyoVHmhgRuF
6174	   o1PYB/CnVop6SHoXg651w5MVa6aVPmTtb+oMK+BzZYshlqQ9JRdbF1QiQRWW9rew
6175	   DPZAkc8AqkDmMa4hUbDl7wPn+noVZk65Y5Jqq6Fn6gHFZSZxGiAwp2R+iF6QbBi+
6176	   GFAYJsmuBRXDquJi//1eXEDFhtWGOOrfhyvtdT62RgANWeaHF/pXXuhVczwfQTwA
6177	   3Bigvd/PsJ/vHT9iJUItTMGLeS3N00xJhmz5VLywW3P5yhC7DOExk3w57guBl+35
6178	   Xxc7Yz76vkKpAmiqHO2sPkGtn8Wke7S/w2uZsfLiflJ3p/8IOQMNK7eTaPuQM/ez
6179	   +0ktdSTvambpu9xekyCqTLyLSwZtlN5Me0iox/Uz15ytNzshe/2enklHEgLMJTrB
6180	   5eHy6J9SykSRSHbvw/aXAIeJYeRqL/e7uG2JHxYsdbJ0gmrPA9kvtTdPvWC3qRMK
6181	   36UP29i9YZQTH5g/3+lfOSL/D4k10RXVO/XfIuU/LnLHeijCIpdQ55hvXFbO6w85
6182	   otk5z/NGQdqO2N2w9dh2dv85SZRZQappzuMVp5N8M0Vb922vhZbOwMTtSDNjyeIS
6183	   xLarc3xrmdl4FV6xRDLWIKVsa12Qv8PGLvYxGvFVHBbdtW1nwP1yEyc8unlBAYvQ
6184	   V73tgsZhwXJ84FoVwGtZ0rRoQ9l6edqNlOYUiSkIX2ai9amIlWuxKYf/rIvu4T2n
6185	   6/t8n3i+MqBKcOmcPGxVWMaYfLxlBQqg0kCh031MgSw/pLm40eV+lHgI8GixyBcV
6186	   QrAV7c8B7Tf9u3xDZ4r360k3Nbm2TnMvVWaO2brcwU7UHrGhjKCJETK7Yn4G0lv2
6187	   YsHamXmxD9ae2+8QnpwJ1+j1QW2K0NzQbj4p5boMQQPZ8UhVIw+btgqK4uu7tMLc
6188	   4a97LDsZY9GefcbovG0IgNFNIYmSolJQyk0vdzRgfcKXbl/yUGagjfL7RuhCU/92
6189	   oVSVl07mGeCTu+WRC//aPCodyT7Lrv/Y/dd4NYzIv7QSyf/RklYiJ75lBhLuwLoI
6190	   YAOtiSV4s6FpOZkRvPby+FuUZLWrD9wmED3Yq2nMsYGSGhDtaZGsWqnrFatfr02V
6191	   ajh1j9WNBJPErhO3LifrWhU3SpSnbzRORZh7AzjjoDBJU8M8lMgkr5JCn+e3COfH
6192	   AfRR9cansxaCXTM8Su/+Dtw6oEm/K7aWAim7KZ7uP1vnhZYJq70vu6/YH01MD00z
6193	   fK7P73+JMs+c6s0PcaMMRm3j1WILGIKQgGk65iFAUW8iGAp6T4Zsv8P5tPPn00Da
6194	   F9Vr6Fz6APk2ueLwrF1dk4eXKt1IrbFeu8sMzPv3O+z6kC7IFv9kL8Wdjlq6MNLE
6195	   BdCVosbTYq+QPWAh0mg7Ky7t52QHi3n5YGLClsj+RXBcv6jwNWlcqgUFjZOAhJDC
6196	   zjPlrRuufAGTK2QCLBnHoVcl+pwFJniCT5B0VuY8sZiwuMhNGRDpMvILw5w+lEvc
6197	   CIQ1lqR10a+OvwFN42YOYmTCZtnC1wkH/1OoY3O0m/lnOrypLKLc27WBV/4ficGY
6198	   VXf6nwhYCAzZEfChQfdXxpAqYp1JmWO0IvKwzrhI+dMr925V1pP1Q6SIubJyci1d
6199	   3jVOHYeFLBr8NwPMaDgG27DnM4RicmIb2qkXDgs4l0jQ+qCEEFF+Itbk+agNOZon
6200	   pILFOAJfkZ7JVptHD0p10AgrZVRx2efUJ3z/RHqmRecwc2S1bftaq4MSVz0R5U+D
6201	   G9ppeQSZwGLXwMhPxgoa40Wu2R9nQAfGB3UAsZHB7yJy6XRZPKncuPD6981lkxAX
6202	   lZG/Ft2lHLAEmnXdzQI85hRiDdwVOY7YgzL7Jibv5oFLOxv0qBEPC+UDurkTOzjf
6203	   w6QS+QQ0gVwpIODaRT4EFTT5rbqAV44/qx1u11JX8Uacz6cGlqu+KBsQ3QAomg4C
6204	   B5PAl7ZaAKOtCPBEbrSSWEwXVgozYVHDJDACGc903cz7rJgcJilvMEM+ZVwbC1cw
6205	   gAM7I3h4Xsku4JZ87lSFz8guc1q8D2W+Z7rq9fMwIxD2nMK11K7LbBMNhUzrDFYn
6206	   vmRGWIU6qatgzDe7qG9lvsGuFS/V8aIMnKjcFuDMSBH/nj8dF6r3X+BBmJuKRK+D
6207	   jDbzogBI0oPnBjs8AyaGYHS415Mn3P/cTsrG1tddngVoKX3Cz3NV8pjd7uIKaBUr
6208	   OHSAwdB39RU20Jbv1YqQTRcgSyBOnVf2HKqP6N9836DAQKfDofz9TQxExaFlbxhi
6209	   xEdc2HSIewAZM7fJY78vpnvLwB6IOuqd3egD/AUjjhK6SDcSaVwfNhp5CLGUDSqb
6210	   zKccNVWu9M6hV38M7yfV1S3FqSZNkZucmd5VTuZmNBpyQhm7mfc9XYVTK+WrBFEv
6211	   E5lGiAkMqW+TBE78MFAf90L2ZkwVXlUjFXrDc9OURnEu7j2UaupA8azc9Aq2Ho4b
6212	   ri7LWwbJplfiGi66TS2CstCnokV8XZ4S3GK/UgATxjVq4hpt1vGWBF7hWIduHJE0
6213	   pNtkoyWby3enEXPUBilH+SSZRU/ZnItmjK+pyjSwJm2SxjIqv98nCB3sSdU4jBpW
6214	   tmqVR2pfUM2+8Jr66Wk8iLRYf0xlNKlTk7U/yKbN/0lvan3nPoXkFF2/HLYdUCd2
6215	   LblEs76eo+TxaKIHu8XKZRDbJ1uzqIJYaOL1INi52kN2gZuKmS6ARdfXJ+V4l19Y
6216	   sTCVMIb6uTrZrzcpPkuxNdSPFex5+jrfeB7+7qmW9zD/rQFPt88VNu6wrFnpNvhd
6217	   hNo0BtEegVk866eJBmKjBFQDzDR3gtRIQXsi9JRyllg414TB7cg75L3VbODOLqmz
6218	   6t2ErgUFZRLRkSepH0Ylz6He4M3LangIBaAd1DTM82I+i8vY8bh7JZsm215BafqQ
6219	   Xqf4yjjfByjcE4nbjeVSFOKrPNCe41caINZd9LT0PMDULCiKQamYCIlyKz+3y6Br
6220	   Hv0Bg+mcHZEqmnNSqAQfY01sWnlqYwqqAat/LwabfVN7AJyXgKsHwIV2aM78Msfv
6221	   2XAx+axVvelIEqVO/IX8g/dQLJ7Lrd5ZVMywRHxs77ObYHrCnhan5m5r765kiFo0
6222	   tUw6ff7ReuRIQvX3i+Yy2LlsIWa4aIOg702TN2BKTEcPo4MHB7frMD+9DhhlmlHW
6223	   oGCNlgrPBZUOU1h3A5LTmiqV3cyeB67xjPMrTVsMp3r8mUEJEXfU9gXXiecRem7G
6224	   vL7KsPSnDnV+YV44fHKI9eaAtUH/XTG3ELho5jN4z6KgzALpramB3bqPmsi4palc
6225	   Qim4NKqhGB3vin4gDCOOlopKpn+CUaKFsBsmmsOZXR5llHXkHiGDAvet0x64xC6T
6226	   /Jt7Ywtc/oIaRxNYAruTQXyva/OEll4Z0Mic2rZyn2UU8rjB2Ax1yKo9N27DbPrv
6227	   wlHqKFO5wdo33s+XECogMJMqmW2almEzw9oliDNWODU/5qDQMUz6/gEBhW3g6nBH
6228	   pF1T3Uwo7S2OGY4+qChysyV9g9uf8CcykQtXMVSYDboo7B9ClUWp4+0W3woVnVZK
6229	   nAgOI0N4Z0pUOg742DDn4kEZMBurUT67ssblb6SFzYrUIXL3hVtJAyLPlkVhIkdW
6230	   aahmeBMAGhq0vgTxlGKvT4DaJZuPCy1rxHDkley5RKiZBHBzzH63kAxikarKEhO3
6231	   i/aB0Btu1Y0Gr4vrM/ynuIwTE///giigc8rTfZnXnHkojWBQVehHaE21nD4wXZbs
6232	   V5FV+RYNnhNs6IpNRWL7h6IdvxwtGZmq1iGYyMmJ3vNIMHaDJyev87ytQEvjphi+
6233	   re9BMYGXIGsbxTwwdKW/VViBMP7MxVoDHO4e4pBoVlhFElGL5gcnpCG7qiJ98i96
6234	   VlJyTFF+ktUtWmDhE8ozkbTnqbz1M79BRsLJIrsOSWSzDeRlfBUBEfBpYwlMfKik
6235	   hEjL4FZCL3UZtE6lpEozA5XWxavUDvFOO+4sXwSYLeos/G9RGCGHs41vVoTu/vrS
6236	   RyCRTQFm7d2JU4yNNUCLKrjSXyJ5ob3OYMZTrpseVwy+9Onwvg5ic81vYQ8ScL3h
6237	   xCfbUxuFf9c72lSNYUrDHCUGdiqPmi7UTfEXn5JnnhG+s+NXY9iK65DcQfuUSL64
6238	   LjGqZNEMw5Z6+UgPOwgw5qp+MC10iOAXvrIXxVeqwAPGTLKpPcSzH/p8z2H51AFG
6239	   xeMNcUYrb4sAY+IkFjhe1lkNeymFax9HogCSsYiYXY9OAjNLsp/gpS9QH7sZqdll
6240	   UHp2pj1BHqumW2EzhIEURb66+/nG/3o1T0JFwwCMVV7mm0pLRuU6QfBet3oU+iin
6241	   9gIymNrJLYa9K3hJ/FpyA2tcglkSdHFGFvHBzKJD2m0B1Y05FIIlDuTAUpjujQWy
6242	   kDrF+g4EWmTn4flTGfbugxMYIDFV51sDKMfOWtDXRGcvef7PP7qFSw3RworYPZed
6243	   e4AvoToZnVIC2Lq2oUGIJbU3bbSWlw6iIOmENBKA8U0jnbcCN6TUEPO2vY33AypE
6244	   BbzgkIO+ruZyIGrcDlhVeAE9grptGCtc342Ii+ywDMPYSkgNC8qs3y+I5WI6NDt5
6245	   RY8Vrm5sYnkJDIYZ6wtkDB2C0VXLIqHtE4qTL3gm5R1pGGZ3y+CRD7ns9yUs5kQM
6246	   a+aQ8AwV2cvmLNgZuJDLlyMBMzrJoTjiHFq7N2l72XRx3BUeDykK8gWeXj1vBZum
6247	   OZen4mUXUskGH92WZcHG3soz4ceby+uOyxJPKMusxJ8wdEfGDJHUKia7jpvi4v21
6248	   qvQ12fwmBV/rPiEunNnKEakczNB3fmZBDeTHmkkUpEyOtIAW0U5VHa0N9sHAjHh+
6249	   wCNB34BFZpHoXQ2yy0D7UHmFep1hFu3dahHfeohp2FEHAi3BkNc8l/Aem9ERznY+
6250	   IvCpxQbLb4pqtnWm/ko9Ai0MI1ouKNAyNzEbwF294ZGn9ABYHOChppB/zGyDLUFn
6251	   K8PmHio/OSyddzwXyHi4gV6+Njnle2M+R/07SMxTqKS05TDIvsgW2i8AN7U08lwj
6252	   csKC9T+4fO7CMFrJqgeTwE9OBE6CY10mCe3AdF/f+a7sgt8Oe+vTXgBvtfo0GNLw
6253	   P5eqf2atPl+/5WzQdjtGSC+CWVmK/WJk/98n1DpoZ0hXn4m4F1AUq1nv7/g5TFlX
6254	   WUFpDbjRb676ynX7UEj0AzyYjrUU8hAzPBvcQkndrjeYSWaKkE4DHn3bbH7wAhRg
6255	   AOhQqXFMIbOnyC5e0NWsIYn9nab+PlY7HUGjmWtW8XSheJkBh6Wf0aaO90OHTrq9
6256	   ZLJ6XZkwtuh5pNUGYdjSrjmVcEPwin14wieGfJXkCbmBsZ8kJXR+eaQBR3qadKcR
6257	   Cfn8kAC4efD761OJk2HvzjNZaIqvdNVekvJyGMiTWfhHpuZjQ0fcJC5NDbmwCdNY
6258	   Qz7iS4YWdbXg10JNag32tazuhNwUegZFGXL9a5gcNkv7AdmWGkSdt0lsSPV05kfC
6259	   QurrTtShb3hfJkR6KnVBSK3jFjcF5asLM/VxoQ/iBgaanPhen0fNWgkyJJaVmDJi
6260	   4xzAhz9r6kPENqyCY5C+e62MvEaekDidg0gZUWuo/gdb6moIoBrCqZr4J9y4W2Tt
6261	   6AZQtChAdW/A4OqDgXlXmXc/tXMy65zIccDzc/JMzufzQcP4wC7DbYC+sg/bNvv7
6262	   LWWT4esu7njEbX7Ni4zIjhBlynqL+qecT5kB8ipGeql6+Js2iKNsi1HYQ+hTt4Xz
6263	   k/sEobzFVLp6yWNpa0ZqyY7RTLcb3OJUM+KCgSftZd6FWi7M1cPn7PUWG+Hdof/R
6264	   dxOt/PaXDxNYEK9yrcVWP4yurQ1YS+0oXzpmuAMQIbWvQki+tr0JcpsKnUxcvvsH
6265	   ZFxZ02bTi73DCFCSWK00j8j5IVbvrRBvtgkVOAl4c5WU34sh6nwJPPBTeO002wFE
6266	   VgO2F6dPTTys/6D9eOzd3yb3aEJ9PNFhpzY4uhS3TBWhEcuyJlpus8ximdQjwjlQ
6267	   IgvT1ty1v2SRJLA8gVY8cmR6yn6KEL2lc2PsclF6zjYZd6khKSyrBBu7ZceIo78Q
6268	   bnPly68qrr8l7x/DxYHFJ6pwZ8LYPg8XkZb4k3TmLZrA4ys3a81R5RKHkwmc9qAI
6269	   kyNSd6lJLMeD2IMC7rxCupV/dIJZ2cIjH/46ZTOTB4jADtrHN1SjeFWOqnHhjKr+
6270	   naZLCDk2EcSquYtna4J4BvyQXdcebEz8/zSNK6jS1v8=

6272	B.3.18.  S/MIME encrypted and signed over a complex message, Injected
6273	         Headers with hcp_strong (+ Legacy Display)

6275	   This is a encrypted and signed S/MIME message using PKCS#7
6276	   envelopedData around signedData.  The payload is a multipart/
6277	   alternative message with an inline image/png attachment.  It uses the
6278	   Injected Headers header protection scheme with the hcp_strong Header
6279	   Confidentiality Policy with a "Legacy Display" part.

6281	   It has the following structure:

6283	   └─╴application/pkcs7-mime [smime.p7m] 10100 bytes
6284	    ↧ (decrypts to)
6285	    └─╴application/pkcs7-mime [smime.p7m] 6460 bytes
6286	     ⇩ (unwraps to)
6287	     └┬╴multipart/mixed 2088 bytes
6288	      ├─╴text/plain 58 bytes
6289	      └┬╴multipart/mixed 1596 bytes
6290	       ├┬╴multipart/alternative 1190 bytes
6291	       │├─╴text/plain 421 bytes
6292	       │└─╴text/html 502 bytes
6293	       └─╴image/png inline 236 bytes

6295	   Its contents are:

6297	   Content-Transfer-Encoding: base64
6298	   Content-Type: application/pkcs7-mime; name="smime.p7m";
6299	    smime-type="enveloped-data"
6300	   Subject: [...]
6301	   Message-ID: <9cfcaae2-9fec-5aca-9a29-c98da35b262d@lhp.example>
6302	   From: Alice <alice@smime.example>
6303	   To: Bob <bob@smime.example>
6304	   Date: Sat, 20 Feb 2021 12:13:02 -0500

6306	   MIIdHAYJKoZIhvcNAQcDoIIdDTCCHQkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
6307	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
6308	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
6309	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAEWYkOXbozCgn9S8iXQC0gutDVG0YPIJVm7k
6310	   oS/9bJiQJUvaRNUw+Nj5QB2RYBoyUkAYI2JX/1q8PUAHH9KfUR6EOHkMWMYjZNZD
6311	   cEOKyz0lFkhUUL2hW4NtriRalYxcQoQb5lbQpBIm9sSSxSUPLOVfDCKWVtfezLtG
6312	   +G4qtZyK/ih7LmcWW05GTzOhoaWx7QM4n5UqIxvleH2ncJZdWtQxp2nhkww745ME
6313	   jkOBqXRxUpeCGiulXT3lU4efVIsHcJA1G9q9mpXz1OZFewtvLkdUDlVgm/gA9+Nm
6314	   D9LXe6z4VLwWjTCS1k19/9r/GMjxhYn0yD8iwo9d6jXYsTSv8iUwggGEAgEAMGww
6315	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
6316	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
6317	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAFjcQW2naUCwQ3YNI7QTekTBL
6318	   hqLffZscJbnMbWEWh87qQh/++/hy3h4XCgB/28tCMiBkuBAQHUFbrudBaFPbk2D7
6319	   jdhwdId8QCOV64VIP59T2jHwqqEl47M7+jN28ipnVHy4r2hg1XdS8xN3EcOOfxbn
6320	   rE9ERd1D6IIHrGTNMEfzs1Ntvd/6katezKqYtV2zDUkF/uL3SmkIoitIb7hEW4mH
6321	   hy8UsLGt2ZmEhY49lsQWJQqxR4V9/7NYqFCSdSKt+oIbTzv3PVN7rtvZOeM2MG13
6322	   /2zLagsWuUMPrvpC5HMMl8YR4mxOPJOi5m2xMrIS6kgfd3/KrpX1niUfuvEgiDCC
6323	   Ge4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEC+d2DmVGu7vHFBEpLF4Ke+AghnA
6324	   kzd7S/YbQDNpFka9cVZpJMyZSUzF+U3YQH7KjV7717o23YBLQPYEGxsA0LWTSILa
6325	   JOon1R9d7vP81XGUWVHmpP4T7d45bOgQWHysoAREhkMQqyUb01mW3F7kSJkOmKcN
6326	   uNjVH8MJuhr8wiraPjN/GT7+xYy7tH2bXYmkuuzruXMH3s+P2+ZN4nqzvY9KPUDM
6327	   m9muevN1p/dQhYq2vPTFrrUS2QBOtuPjgxOAG02R2jNwJlWiVQrSCG8O3li2JNDc
6328	   Inem3VkMajeDw/8+dSjUz/eZ2/xvmWKhJ9YwtGu0e001+SEXNzMRO3lbJJN9yWqL
6329	   2j8VtnuAwX6QBcauaUg+kZY5DInb3gNPq6pX0px7rKRY78nXLsRpYsOM7Y7xiu7z
6330	   5HoDzf9Hxim2j3gkYr7M+ULToQ0e8t1Vo90GSWB9Z7PnGt/NbCwK2LtDsuzZswuM
6331	   EclO3+Hfjey44GSB7GtuT8hc6I/NBnIEAPV0IbJfgH2MqTowuuM/GZz01rL9ijgX
6332	   Rn1FFGLkrba+pw/DpqLjZCE7qS1vZUS10Br3scbayUl/4HTVWnLbrV2C1SGjVinY
6333	   1pHqiZQSpk6KPtNXoiL+XXNzpHXEv05VFrpulXheD1kz8w3D/Z4YqjR71bb8FVJs
6334	   okvUR1s4ifDrinFwenBtdtH+Ra+8lejaXbbp0wuKX3Ne7hryjX4iKFv7aaJsg+bx
6335	   38DaXujx+9pF2gXULSSFGIxaTujy5fdIhvcKqHdAu/c9YZMlWnkK0xyvC0asGM0M
6336	   H1Rzf4BWMxk3XpVZYzyqW0LIR/K5OUPsl2pN7B2y9QiWBQ061/8Mv3pViiu91thd
6337	   73uzgY9gKdPwsrKYhsSMLqrvuV4O6qTxZF/EwiKn7JRPwRozIVcnZtJSz7+MUH2t
6338	   6mqUNygJlPPo4BF3/NZk8NeqfaHTic+nhgUyYwejhXk3dii8Z7etAFMsyTWFiEw8
6339	   xvdzI521CcmTn/+Ov6kOWSSbZkfzcMkhYSSpoh+8/kk49VPpvEyhT3D77pfIzTd8
6340	   isKyyxyqIxFje1wDXUvKwoGHI1tvRsmxmUkRl9aa7iO1eXHVtQnXosajrM41MKI6
6341	   GYgKCLBh2jIAP/3Ae1Rwrd60XXbKhJek+4W2F9yqehTN9+ev0ZQ/Shtz9I4QiT6h
6342	   gWkk56ijCZGUjxdIIAO4dAj/Iw35eGxvVxpKk7AE0kA9W1PV1NyrxytPn1SHsUHj
6343	   zH536kW463PEBuVbPucedwr7GiAKHZaERhHZwEtSqrXi6Hk84z6LVzb8yG0KEuuo
6344	   a7WnjdliVc23EQsbY1CV1/ZmyxaMZ1cVnKsvda8xko25KI+/y0mD2YK/VcXprfRe
6345	   WOfck9QWC5cvQqMTVpxV1ykMFFPMOOLRqyFDYK79WoMKLV6LTqKEsuzj+JxeMFf1
6346	   rjR22h5WDEjkglngB8P5KYHmpKIJVlSycemCu0gxu4iLZ1iAkncXF3Q/jVe3OepT
6347	   4pj1hiRE6NbmzSo4yiQWiRMAziXu965vloLLlqhyGkeBgI4virllLegB4GM958Id
6348	   iahOSRan0S5zijfQFWW/6ugAOK3d/iuZc5/OnzL1DTP6jISOVpkfpwuh6Va9vxkQ
6349	   dUQZK4bjSW3A3nLl6AHn9RzV4pS7RfINyx/hYN+XoJl7qkfwWBLUxYtsUt03qqJv
6350	   +n4eOpFQXSEOHyFWbIsdoWMUrBjwKCa8xLYCjPbxqCQv2IuLcekNj3rEYxjRWFkZ
6351	   OzxSHhqlmKdNCLrUpxhqRwivDQSHr0VRpNCCfv9HkdP49zdyoF5bOXW8b754aKxI
6352	   BN205TjoGRCbozJ/QmFsrKRKqURPo7R5Pi0rTe51HbTC0aLP056whZjIsjAhNXxt
6353	   QXu0K/ZHE1ip5QD/cfsOQL94lRjwSQPYbv1+hNvxx/52gWrf7DnkVk80NyfNHMcm
6354	   UoeiVgQxp1GpHz8iv/ducJBx+YLCyJzZ6S0MswL1uPuk08Dlhz1ALM3deKEQcOoS
6355	   /665Rb+ZMuwDNFIhi7c7EK6d9FWHLpvAv4OOWVWtv+tQi+cU00CNKKO9R1TLZGVP
6356	   oDii0CcFszUyiluAO5mCUwbgk98EHv4v5tqICI1oUpTy/qF85vqg+//6OcwJrYYP
6357	   4MolKXNYLVaYvjzZZeYpcyx4kC5bLZktp/Yom7Kq8/Nof/AoBJjbDc/IU3f0u81R
6358	   vZXM+b7PTwbfTlw6TQU5UFqEz8BarVINhrMlCkOUKp3ddgkRbnnBsXQp+BvQwh+i
6359	   dQn5LnTew8kVenRPozwG/nThBQd7L/XcLYwM7S5cytcpbECERR4h4axl5FS0jud8
6360	   UltbXu9mG2xSL5ZKDiPteQm86aocxd3bcwD9zbYnx0T7/2nr0gnkitMpO1gGVEC2
6361	   jGJUrmMjvBX3VZK5Pi32FlWJ8u0xWJchY/Sfx6k8hrHiBuyYkHYyhbos7VDL5E/Z
6362	   Pki+8m6aa/LBEV60ll/ZP2CpvWEjtaLqOoR2qUHsHFLTQsGyL6Tvauh0NI5hkFG7
6363	   1nqhmJqp0jL3H2L/UO+cw9HpFUxC5BSu3L1bWp/xsDBvuHQkfvlI+WSaxZCHUYys
6364	   XjcXrrr8PNYKixOlRDUFs3bu+vWhO/SQaTzRKrlHyWOO3M3k/mJdwFh7cQMwXchf
6365	   vpfHC+Ha4po/MLphNa9ZCARlh+OjHt3Wn0TqF+NEqo7Zckqpu7eWKzV6yr5CNk84
6366	   UeWzHXpoXnOF9CDINDj1/+1/ODooRjSHSTk7GSlPzmrl/IUqhfwPTkr+XfozBwWR
6367	   /m/IwWAqdVeS6rxE7IcN3m9cTqE66dX3uHBnOdlc/E8N5lhEmKJJSDgcpWDdfiJn
6368	   YVK4PWHify+iQEg/DI7Bk2slTrmQBTiYHjWPaRhjFxBeHTBkhWeCTbcrT3G/1q84
6369	   3LjrkKmn6VGnc9Oifl3ua4EJinHUoWn++5HgyEosifKWQiPWYkfV6uIYUSMf0Y/9
6370	   5RiU6dNxqPrEwbTRvGaqNoY5EE7/zDrktHl+ZavezUtEmFCGfVru4GmV6JRAAC72
6371	   /J1YcQXjfscu+SRW7GS8pj24jGMM60f5RZy46efRlmqVqZ8WF5ciJN5BAEz8FQ7R
6372	   5KYqHDdRsqImEf2folbLvbSFkDmsnFrLswKdXVgInfdr7ddiud++nRb9KgFugC8a
6373	   lSNt3eOwkEmc6vDd1+auovLXXF9fPnSPx+9N0wBnQbIDMEG4Qbo9FBFOHiiMC89u
6374	   8Up9kmfyqwNge4JaQxxOG0RvQMP4OypGAhyNk0NhGYbS2OcHp+s2kH9BiYw3Xn64
6375	   XawZnKQtQWpBSCKzq/aBIGya2kY/olHJm59NXRoBax60vHf08xGhGWTde4sMhned
6376	   fRlRRSzwoJRYu35a3Xg+iZ8SwvnwkGnAB+pxAip1XDm5kGiR2mXckNJ/8JQQf+CS
6377	   PpMeI3aieEoApqh9CiSgKkNVZnZkzMMBXoN0l0nQ75sPficTVOplYZ0DpbTgmieY
6378	   Kist3Yf6kKH0BBXUmc5tAqPOK++TkFx6wff2hpJKJu0mWhMpTVBVSdv0eiFA59wI
6379	   NwuI8ZccVQcdH2dP1Vqun3C87y49ClagneW818TxK3KocUSJ84/jInFucc/v41Nr
6380	   Kdbl6g43MQmj97zcaIYRB6JM102A89bN9j6UX/GpsICafLb4Ml622SH5LZyrcVSn
6381	   RujexKoiLCTYJscg6VfCnxeEkgrsc79NZ/rp4jd9gc5h3B+azq8uuJj4VwcnqjPZ
6382	   JSdLQKCMSH/nyb+hv+30zi9r+4HXn+sqgqAD6iUPsWB2GL1nKnMHKjMo7FnmA1Fu
6383	   w65i510BeSAkjF2Gx4FIKycoaRqUBjICMtMrorrO/KmGP7l7dRpuhauOukayTOS7
6384	   8VKnb5lJOewHkS6VD5sAEYYrp7xMlX+w+azPxYG6subuEyiACJNRBylcFaKv5w8y
6385	   2FCf4SVXO08bCgM5v6X2V0+44rNTq9SYygUIppVFbe2gZuPA8ZNi0iN0hwTsO9lw
6386	   yJndiesu6NDfxnUqeP4k05b2dE3NMzgfqICUuI+gRVBNpsauXSkZmKRZ5xGSxztG
6387	   j95vpUKXzyzzC7mIrzRq2ZeL7tj7X2u8t5wl+AFWeu8d5jkiII4jFIZlL3kWPSIH
6388	   guBvePaqkcR7uOzPksP7dx/dYMjGjsMucdnf/a9fqa1uouurpZXCp8hSpxV3VHD0
6389	   gN9ojaFQlNt1wqW7H3iy6eY+b8PngKY4//wdyoj3sazcxUWN44nUa+zGHjQWwFFB
6390	   SgSFidez5n6vQABTwhkZrBz47Yhkc0QF2WwzlvEx96/9+eG20MfTrQINCPx/cDWT
6391	   N/PP8QpJkG86x3Kokr8thJYQHnlxgLXZywLIx31jKR3FSYzsD5PERTDzVU9cNEF9
6392	   tGwSqEYg8AcLBFHzOU/iz0ilU2/i1ilcEoAivRD52H4OgpMArMZEL+x7peLEKs7n
6393	   a+on1E1RuQE/YSrA8KgGQ2kSaaouCuybeqx5SyYi1B003c4QTvcE8ShVbJhhbTka
6394	   3vpcb/Zw9rZ+AeYyFfKj82Z6n/ujgEhmd+6Ianz4LNdgPgATpTgD9L/MiFv0LaWl
6395	   CtcGCBHSpBgk1ghemkMlVKORFy+CALQFdoVWtY1dJ2rDZl+BkyQPfTIXdoBmW3rm
6396	   P+TlHYBTA8WmOyS4Td4040h37gqNzk6WOi7oxY2Y5qKL05K1mcuymIvDXdDTTRY/
6397	   Pf3NcnBEHMVBqp4n2P/tDdqPLhkBHzGB/c82A1BXxt1tSrNZrKNYL3sPZYWEUd82
6398	   EtMDgKaNw4on+whyZexNl7hDS/JpO/2M1h8TaPel8EaPc/n0WiTgqajrNWdNUm0K
6399	   Idf5gmeOjTLbNHYyBg81nkEif5k/73YvJvJDDAxZ2CxI/URgmpeqNWQ8SNukidiE
6400	   qjkO+uvxxE105UIOEBCqwNd3MQSxmggMPHyfAIy6wVkE1zaRuEZvikZr2lMB4/qT
6401	   myc4tp3JVK2s4cK2933tWE7NYLMZMGRZJa5EDijFi4rBggiHP0uv2u6MYFCL9WZL
6402	   fahwSlpa1mF3Az7+LaglL7ymyXMEcr1xHCwzolL3pX2J5q98rciCvkw6qkGLZYlL
6403	   x4nAJnaRoxkya7eWZmHb/WcHOV4KghwYifsv9jlSfYrGZrB8YoCksuKZUlcZWB9f
6404	   8992P0K+Pmcngtn2mBh5lTJ5nxPHUOLap3Psh77FLvflfkitP/Py7BPWq6uEQdgs
6405	   Zy5j8DbSQ8gUUzpDIHxwhx0xyvK8jIfAaKmP9ldVI79n+kElJt3ay1r7Gvm+2tsT
6406	   7+AEjB8Nt382mAQte2zhmF4ecl+c3fgEFDySkbM/n/ws2Wp7tbNBDQVGUOTHUq04
6407	   3dUTfMyHdsW+wQPEUSJx5U1OA7T671hwtf/X2OJDdC963efXDdLUiwMJTvK48HzX
6408	   zjWlKwe0PNQj0qmLnzLsz4jzAo0lYeBzmfGmnXQb1+ReiQLAbzvg+q2lKrR93X06
6409	   iSOtSpNP562saAYSD6mx/9ngqTfdODqZUsnD/wcn29hNox/RHVVf7+CJ8lWBrU0U
6410	   7u/E+wKVfvFRkiBw9Aj3gEBC24GSfsb234xYILlIX/9zMMurslXL9uxZz6lKtenR
6411	   As29a8xlDNiDUdZMwJhZbtABJC2gXsw0RK/uCasbkVGNeb5FGYEfOgN9NLtmryP1
6412	   2dcHQtug5WHcyDrtAjxVY6LuQCCpF3/9pzAtpH//f4qpf6tzumnoKwjwXMs54UlY
6413	   snBfIDQHNpRNYINiCyAO2mrNO/h6C6ELJu42zqZFzHcPy/u2Kq7IQAO5CvF7/2TE
6414	   kpe+PusukCdfpJeR6xOZJlR8Zd+CD271ZZSbuxveRU8Q5pu13Wena7aBMXySt3Ro
6415	   RlKM2sQ6gI4TV2hZgk0uOg3g6l02ebXe39YZba2RU8FVsz2ySIgTYDixKmBpnZ0H
6416	   rrl3xEUl5FW3hcH6FU/Bpqtv+K2xp1MsE75l92JIIZOMF88gtbw+/i+gao8lAMmx
6417	   MF+Oa0ulBxpG/uRFMxY5+4iPRK3qZrZNLyjLAtOZ0wBbtoN8ws+MIV7/W9IiWbYB
6418	   Oi3Nu0SXCYibdSFjHizV9Q1SBPHw64V0+wFb+kcAFeOxMeRtvAEsWrQbYlFxRxFx
6419	   17Nm/ldToQ7jMwZZ/zrL2Z9WD6SQgAadPqrXOFtZ1EiioHceNCb4X45GkA1wecsc
6420	   U2yBmjyGiRpNu66D7qI5WjmLI0pYY8ozFJ8sWYWjVnx6B1mi5mOhPgiXjcKnLW7A
6421	   007QdGeAhxOv5nHmPsH8iO29nbMkxioRu0xqw/EvluwBEl18iXyGQXyu8BPXYMzz
6422	   3EDi4Apeu6D0lssgxJySo//TQYCowW9gE05QHTPp6ucMiuFuxRbxmGFz9QvNihxM
6423	   OZ9/d0ZDj+d8uOWSJhDzN+g/Wvegmpe+l4QsSMtPz4oY9xp7MmlJjdr24m8OsS8G
6424	   6ugkxD/Bx4INuQ6OBClWYEn/abxrWJEdsIAnD+8VyVYERH1CJPuEpEtEKPGZpJub
6425	   tlMGAP5H4G1v/vcRNuzwKtwBfwy+2HrCsEXg2ID6KNkaQ5rsF+eaEP40sW0Agrqr
6426	   XOWjvttcSHMzWIdYnKM+dNlbJYQCfszPEyrwoNPy0TZvj/GbhkvptZhxfYlyc1wC
6427	   5bakTYtX/VEQZ8K9u0tHKKbkm1YCq6s0Cj2YoKWDkpFPSqAtw6a91TyWAO9MP1DK
6428	   JAizgrwwJjZz7W68oVeUbVavIiSBqaJEU2FuQHftrpALDTL7Vb4HG+uwlCU1MlTC
6429	   gfl5Z18q5GwJe2BM2ngEUfsddtsWRh4pKYtRoQavbLS6F7A13tvxbjKVU7l18VVl
6430	   bp8WlPN3soXuEe6N1tWfvzZ5LPhC10lUYBv/QasAjyUPC6quYnz4L8YLOGZbnCB3
6431	   xKkTH9LwK3dK3JSu4Br8tURe5tMdEJFmE1XjAXGjwLS7Ao1Yzo7EMtIbdXNFxj0N
6432	   O0BE6ZedBUEoujik0cRtdckZ3yVZzQKkLhA2iTYV1JSpoRRjb/hCEqE7q+/oIqz7
6433	   HkdmKbCWa9YEm9u195BSS5J9vRSADFR3h/uSQEGlNgnxnNBKMNTfXGya7B9IzNig
6434	   MUwlW6IL7sHcUsQI4lfV25+QaW6ii6dZpHXVNUGfFkjk9aVv2D4oBhekLAJxfS9D
6435	   t4FU7GQ7FElrJTiGq+L7+Jo07VBAHQpTejhFUe/myA5y3CfQ/cM6GDOyDJ69Lx3E
6436	   8/lv3Y1EmzbhE6BKCmGTv/3BtGcP1pbMN/NC/SQCYLyQaL3oGjrWiJTLmaPYT+/P
6437	   EQMvuIfoIEplqHLqrZ2tKihBx+dcmt8GvD0ekC5yHDhlZWUFxtJ9LRYaGSY6SgPm
6438	   poceJ756fN0JQFIzUFHzifY8u0TplXEmtbMSLw5qMnJzKcMwHjItG/3/HhaR7lO6
6439	   ZzhrGGCubD3fdnmsSvEIf+3TRMaRX9umMR9hl5Ub6eAp4j3VLDaQK0llQooxFXsq
6440	   Y3a3Q3zq67sDJhUDdxwfeRbe5omx0ut5BygkOWRtT5eYOGyOISlA4f+mQCO6tvVr
6441	   1EH0pncE7Cjm4Dhcg0Q3FxSfAPbr3FubD8D0bqFAAmDdGsR5iowWNiDnVd3+baqz
6442	   PpL2PXsA4zA2fewBQbQtx+W9y8u1bG8R5F55QgzTIU1COJAdS4GF+jUkH//ZUUeH
6443	   0peDMkTIFIxTrbUK+cM8XwnrfixWuKU+hNSKULUxLZ/U6Hwvve9gCRH4nTZrzpX5
6444	   7r7noQBDDA3C8ly4CME3QMrkav1uTnjroXosgGL3u6z1BpuH9Reh0FUYvWo4x2bk
6445	   aHFs0tMx6BOg2mi/ut4POToN+WW/jh+1c8HJfbCEX/XbrQlpzn8O/a1/fU535APE
6446	   pB3AThi0b5dfsMMHGVGds/FT7EnmubAYgnIdTgmXI5aXu6mGChd2SSi1m4DmaMbV
6447	   PsTMF9EE781RWHX3fRYGItLWLTSckZ95wmsW2ossKiLkCpc+oOAfzn4RNcRCxgSz
6448	   KcZaOMhzY7N0Kfq+KZ/iHBcdMxvdVXiQMkAwZlv+xBledRBexuZ5k6psEYDcBXbV
6449	   qhxNF/k1v3deCPJKZs1222LfsxqjzKKk/m3HFwFcEIXPfsImyJ15CYR3m0E27LJr
6450	   YctpbBPYSLzZFHHVOLJbOwrO4u1B0mC5mVW2KNg4sMzSGPBRzr9RGQk77ERDVcSm
6451	   FLIH1+7m7Vvgew4zq2leQtCMKc3j/YHDiWOVse12qugp/56ejA5y2yWcsS/yULqp
6452	   FQb6zqvkZk3Zq5IauhrTrBJrkox7viiZtDXoS+iM+Ohuk0bEecbePs5DEtmwUI5R
6453	   XaaRuKREGzxvPqeTlg6jZu4XuPDwE3zb1vQudey71NDSy5iccWd1aqXDyVxvslwy
6454	   I2srfh1W8v/y6yIQuuwi90/3fD76LInAYUrrr8d12hNdq6sLmrm97vy8Bj1LgLKw
6455	   WlNU15UOIJg3rQ58tfpPt0G2ViULWhYgzS8vQqCsyMExwODbnUUPz4x3RId1lYRh
6456	   p0HIVCVIhJm0mA8IxdttmyD7uPdzaSNNtgHb42q3GhRUQuSDvRumJWastCC4d+bs
6457	   mPjNST59uJgARWKQJXskVRPB0UUW4nmof/AFzI5hcmMsLTWDasaJdQkJlJjib/Mf
6458	   AUTEGQ728gzYwnD/NTvGr2NjcmCzI+O+MW76ACBWrNlLJNssqC0PQ4hDOhk5yRv1
6459	   RMm7qU3RoJ7lRP5Jcv2q1Ttw5zd6FIHBwQmltm/Y6MKQkkPdto7boCm0Zom+xW/Y
6460	   +AnlYDu5cR07uOnX3sYcOp+hye6uWL+IwdDDjZ7aXA/rAj0c1X3A8PAJIkp+o7zs
6461	   Gd0+hXYLrw1ooZzXU7ujig==

6463	B.3.19.  S/MIME encrypted and signed reply over a complex message,
6464	         Wrapped Message with hcp_minimal

6466	   This is a encrypted and signed S/MIME message using PKCS#7
6467	   envelopedData around signedData.  The payload is a multipart/
6468	   alternative message with an inline image/png attachment.  It uses the
6469	   Wrapped Message header protection scheme with the hcp_minimal Header
6470	   Confidentiality Policy.

6472	   It has the following structure:

6474	   └─╴application/pkcs7-mime [smime.p7m] 9750 bytes
6475	    ↧ (decrypts to)
6476	    └─╴application/pkcs7-mime [smime.p7m] 6200 bytes
6477	     ⇩ (unwraps to)
6478	     └┬╴message/rfc822 1964 bytes
6479	      └┬╴multipart/mixed 1900 bytes
6480	       ├┬╴multipart/alternative 1130 bytes
6481	       │├─╴text/plain 381 bytes
6482	       │└─╴text/html 465 bytes
6483	       └─╴image/png inline 232 bytes

6485	   Its contents are:

6487	   Content-Transfer-Encoding: base64
6488	   Content-Type: application/pkcs7-mime; name="smime.p7m";
6489	    smime-type="enveloped-data"
6490	   Subject: [...]
6491	   Message-ID:
6492	    <smime-enc-signed-complex-wrapped-minimal-reply@lhp.example>
6493	   From: Alice <alice@smime.example>
6494	   To: Bob <bob@smime.example>
6495	   Date: Sat, 20 Feb 2021 12:14:02 -0500
6496	   In-Reply-To:
6497	    <smime-enc-signed-complex-wrapped-minimal@lhp.example>
6498	   References:
6499	    <smime-enc-signed-complex-wrapped-minimal@lhp.example>

6501	   MIIcHAYJKoZIhvcNAQcDoIIcDTCCHAkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
6502	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
6503	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
6504	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAC6XPc3wZgeB3FCnDRhzs7bUIr/hjZrbZzPm
6505	   H8yaAt5YW8XRZI/Bt31j9i1OtPWRqthYxM4xwIc7ShdGhF92sGkV6czLsH8kkT0p
6506	   Z+FD424d5ohgjPw87eyufum1GL+1q6TPItjC7DDM4kq3v+kwMaF59PCZ1QdbB1Yp
6507	   p+bGYko42Dd55Ur9xrbkklIuFI8KQuLrt6kdLehhPU8EFF2Trd5s0hbHR8/AE4GR
6508	   46lKp9nZNgkNRo9KKMXSMB9bkVe9kaTjGYKjtD23AbNDDFrwUE15jrgBkQWtWU9j
6509	   BuZG/k+vtFch7NNVzGYQy95etutW1b6Efh1UJ7/sEv1at40ipKEwggGEAgEAMGww
6510	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
6511	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
6512	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAkZniKnyo4dOigzoqg0j2AJRM
6513	   57gPSOt7RygacVe0zmHsvEnmvVeRA2u3C9gJHoxQpZWdDilIEDhFUEG0POmCvksB
6514	   Dl50HiQvSP8h7RDohHPCAT4TpgnFcuLwxASBXOGVEEFUfQOaTxeR3ZecR2vqfXXt
6515	   TTTh+gO8j7y+uKqAdpwaSVRcawrX6KQwjiafPYhWYGkrZ53cHhN9Ljn7SvfwoigZ
6516	   fY7DanPi59cvr69ErFFVQBwQUu2IGpQ2q5O18GPuk3Rjv1WMyG9aX97OlbLxjJnM
6517	   Ql0ajLoSdrQaPe5y4pw5KisbXIAamC7Npu7hc0Trwftyn6SdydpdrUNVJPGf7jCC
6518	   GO4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEIT0h4LUiMtMNeOENaw0gB+AghjA
6519	   h+dlTSrH14NOYcnRg88Aj3gjke5sIzCIy5dF9rptdXw4wmUr6pAL44ufkCY0Qm24
6520	   cq3223vx8qLJYROZRn6DA15kFHcHw1o7mZWLW2EjNo8VsNo2eIrPmT8S/2UqEU8z
6521	   s9ZtYacYtD2bTJesQCr1gGck5kMJ3EXMknPUL4razcOxJB6sJLhb940fw/FsoeRC
6522	   tuaMNP4wYV1FsiG2zDGuOtnIE0Z/f3I8uhLF5uSsScnCDzURA2ERWPK5SwGy2Wz6
6523	   PSw3nvIN0UtA2fSmRETWAog9DFWo/t/6sU428swxvqhFCHH7VZY/jqbE48GffVhV
6524	   b8YyTr6jJvn1QJydL5n4V0rPPJdUMvmeXV/84/5oVPVY1YlOGhUXlgA0yl7JfM13
6525	   q+UubdpKCGXCOXg8NT5g1eBagomHvqjtStAscpcIgvcj7SaydqtnIgOKAzJir0AI
6526	   UkOe8L8uiAZAQ+GjRUdvJVkrRood0EPDUwRO2DFXbfaxyaZOhpc2EsJlm08BTAyW
6527	   kzuRRaZJHYPLqQt+UeibGg653Uo/WYi7m32gjgU9MktBqKw93URtmw8Kmy5xGm6R
6528	   8s10FNZBg1Cj3aPRXbPjkTP5WUb0bxJA/aYBUTVt6bgHgV5NSbUS9DU9S7gf+YPb
6529	   h0LoTqE1DeQktnMjFCeNUrI98js/Hfnq3OYRCn/w2jsJSvj90SR3djIgiUXl0wUm
6530	   YEh2cD6/OAu7UJ+LKVR9JhnJhjCfWACT1G36BLWdC5uGQ1f7/mSmYFxaD/+pwf/o
6531	   GgNZyGq/ob9PLpVXjhCUozHxc6Ucy1KoBZkdPFdH3AZ918oDdQdJCOdf9jP/BV2i
6532	   zPg7W17Ppd8i6QgdgUs2nrRVgJW2J7Jbf4ahlsMGeumoehsElc5BcLqM5daBB5jo
6533	   0RBUrIxUtVpuwjYlJ4fe82vgSUlaa5prSvGQlVhpD2uHqaTf4/5qtCxQimxGMHyz
6534	   +SUSnoglLsYBiDVaaDgVjTv8KRtrXb3ld0PBz1RVRBKJkoynNhgw6GRxjQrce0+T
6535	   qajjmpGWKScDPemN7booTxzKi66Igp/PMsmlDE20VTRH/lrg2pYcdsqz68OBLClp
6536	   lE4mTpM68YcFD7O6Cu7qlW33fxw0hU6jiIVghR1bLm3j0oO1I/wJ9qu8zn7TLc+y
6537	   EFYmOVTWE6DA4Ntoj5ASt51wNAXr7OLqoyod7N/A3XxJ/A80+LA0j/uhLBeqE74i
6538	   qHijFBkdtM+m9mSxhBoCJeOCo/hIWDKP6ML+AQsUKoa5GqkswJ1+OhFkp73Y+PQ6
6539	   3qONvmpgf0qrcdpK7txfva0fxdaqhHZ9Ua8GC2s5CQJD0CyncDWg2EAmC+fQOrqa
6540	   2qDPldVoeUgdl0pSfi9VjpKcG0u6T05WmgFlpEAJr8dJiu/T0u/fCPhkBspAMP25
6541	   glP/sRZwDlmAT2DBDK2TXRFQaqHvXnHfYkbYtUVWkVDwfloeYOL38Xg9CCOOwly7
6542	   S5J91Pp3yFCAQCVZb2m3LadnkMYz22Xy2cxqViP53JPzNdqx7HgsklSHgp5ZZED3
6543	   PV0LNpkeeokGxjGEg59/vA4gk6rxP4Vr6wrpVPo4+WFTRk9QjHN5UbjMgiOYtWhU
6544	   SWJb5G6j2ABx/UpkOY/ICSjqBmJVQnLV5xKJvai6DZhWYdYuRtAQxhrmnJC5Azt/
6545	   7ZTDqdQb0rgyyfvrPMKGB9uoJLgaMevQH3zASx/oJlnbopA03UNaFcDFDejxtj69
6546	   /p696TJesf8841xrZi/JyEnF7eGEXtlENINRqSpdvtNjHCqrcPHfn0zYijFdwrtt
6547	   mrvX8MpUFXTnVZps7bfWOxRzeYbMjCrYmHxt+3belAtrNtuWRAOBNFEU9w0fPtBF
6548	   QKi/Qc69Rc67mGDPSMa+AFIPk9ncJUZN/Sb9Pmw+rj/G2ckrMhijEeSCtI7lNDj9
6549	   +Arts3gZ+jVe8GkP0y5ECwmSMufMdKxfEzslBAEoCIWJuhoK7bms8tPUAJA3mCfr
6550	   IPrI8Q5+2tSMIjqFH0ZY4gACx4RMe22aV86ZuClbXfGeu1vODnk3EcW4x1yLC+jq
6551	   X0bhYHaXmBAjW0Y67q+uNarcKP0Stw17eJt9sgJm2vXUSiY2rsCrWo6oHXo/kiGJ
6552	   OWTx5hMO5eDvEiDvnl7bQx89k+2a9hVLXYcN2HElLhaaW9ngi5DyDU4z0ZIk0dBl
6553	   Qq0celJQYKW+x+2h6DL5JmABT4DoNAi79VI45N9Ku96NZYilgmc7u8HDFJXOA7Dn
6554	   B2NxrmmFx3eAokwXXLr6cO7D7ftHyheRdapaB8Lf5saoKBDE8qAxdspu8pWLoEWN
6555	   SpaLeosea41JmiEvzt6IUFYdPMRCZVbfdo/IY/IcjES/8BB6RCEYCci+MU+mzmUt
6556	   o9e33NxPpO9QHmNrQC//sxfXBevzPDb5fLx9q7RMt5GJUSoggzf1EQxkxGXR3nyI
6557	   uUicEW0zaNfyPUtPyXYDd41ntrNAr5GWQjbtmFzpt2GBK7DeCAmVQTU4Sa7SjMeq
6558	   jqlFtJI5JTCxOyyFF/zg+9qht1beTTTjoxHbc+PFjfGyO/nOr0vbF+/lMbnZ5Wh0
6559	   zCYbR9uDYhPwpyv4lIEtZKgt0udSp2PaaD3N9A/U9AlLl9+cey8yf1li984B0hTa
6560	   3rK50GyIpiP5+KYLS09E0bj8U8r8QilSt7RIbe03aQ3JpfRZ3xRiKwrajfG3VBwB
6561	   8DTgMea5un80h4/RsdxpIN5h7maqbm8pWU2fPe+BIdoDnuM3DXlB2xafZwTTdOoK
6562	   GDmWMBoY7RfFTKryA7vNU4jw3KUHQvE1czL/nIc0ORhLmQpDHQYhgZh+VKUr1J/y
6563	   leQ03G5/iVRNIEY01V/Zf8akV1RIhnGB2Hei0GsxtFsaH644VVedyDspWY49K3ji
6564	   ivtMMZPq1HVY8PADH6bdeiCh0R2Z2T5JqyqCWZ/DUzM57mvj4B/7uw29gF5EDIno
6565	   8qNcdQcsZRCsM2btmeTtN9JNvLrL2v5mSvH4fS0Rd9e56lbMGDDGaECpJHo6BAOt
6566	   ZcVps0041mDMzkFoOs8G7t7bkiNIMTpRaMxNQOz+XBRz6yExkfSgTXaqqs7tv1He
6567	   65Vv/otPZJg1h1/TiyA+wpYnSpH4YDY06pWpk4BNlVDCM7iIeQqPwpLEoZxSVguR
6568	   9JWLLzvPbcOXTJruCoylL9Sf1zgyqwYya5FUhUIEftvzZ1Qt5l6qOD4HrQtz6oL2
6569	   BbI7Ftdy9iodZh+CW6GxaBxPbpvrBtsAazmXopHu+u4E0O9PuwR0mi+WwY7z+RU2
6570	   nMzqFtaNRX0SS+jzPpew7soJjGpPSAwrOinh+NyM/dqG+pTZhOwJuaZqNCQBpXLQ
6571	   696fFQJrddleN9bAV24mjfKy/AK1qbtJRk8TJv1HuxWU1iKqpzV5318i6hilhmDQ
6572	   KBh3S0Ees8vXUqSgj8pG0wGFuzfj8pAEWmEanZko0c39BG/q/1rJmm+bDLIiSgYL
6573	   AzzNTxcHjzDiY/3W6Y5nzV7Z9f2+jYOtAGtDMuS2O4DNW4Lhwo74ud/SIlFkmKtg
6574	   7zTR9X8iK+DUVFgT9DVL4awJYYfoiP32a3Acxa1prL4zXZfF5MY6T7WLn1wMIwnl
6575	   vGxn4/THyTGAOGIsf5zYx2NNxy4xntI3DZO/XJV+nIlN70RrtyuqAicMfzZqkmU9
6576	   3j9+OGSPNys6GMPtxBiB16QZVzk1uUXuA10tRykNnnwWBu5zdNGbYpXcnBm69BgH
6577	   QF2IzlKfh3xwNZQA/oSxxg3oWfCIvVJ2tCrgk0MngZMTmyyabQaEUI85qKAMzfav
6578	   joYB0dUwEHs5RuyGPL3Jfz/YqBaS95p2B9QFC0R9f4sFAQ41y2w51AabVSEt5GcY
6579	   fY9BZGc4wKCiRURjk7NNLRELClNVUmBnCnAkas4QpZK/Ghc/l+AgrJep5vsmpH2p
6580	   gsbY6zBmUm84p4U6f2LXEuNkzHynvyWUZ1o43LftsbfIJM1ao2pUbYjY/Qi1ye+t
6581	   liukpKbGB38YK4GBXbv/9TwCfRMTSjkm9Kh/tz2c0qSVwjhSqoyQf5LZDOdcgNPc
6582	   MlXtVPVGl/fkJhrhzO+Odo7sK8/dpEWf1NRalSHeBrYszmlp5MoSOrRaJs3jBGlc
6583	   kns5SrxM9Ollto0eW72SLZGewu9L6gBg9qjVRuxXzPFF3l5RxKT23/irwrxMzvYr
6584	   vNmopJpIL6WYv0+7K8m3FunsYGc5jowFU2fE+EpzTth2SlobIb0TeRPsiyhq71eg
6585	   +W9hbB59VYURK9kNMtigXpUTP9FENdWBqNVBzalbxKAWi6s9Z1rHDwuqVWp0eJ+x
6586	   KEfkdZg1M9WqVrcNW5JxEFrfQOACB/tzusOBYV6CFXQGPKtwLQmrdspRsSo3obxh
6587	   pt1gEMJYULiMIvZk1q87iemYUCc5ohRKHPvAYgs2k4IHaDQobHM/4va4fnyzJrAG
6588	   u/3ii1nGwO2Ea+//5AMQEG0txgdmA4KOuum4tKNK7iKAEaQ1+WIho9rtfRoLxHbz
6589	   5tBmRgjAdhj6Itd1e2RDMiMRGWiyYzrphyupJ0NSzDxon3PknHg1daQHtAa/BsQZ
6590	   Ptp4QkEUNs9j00gRpZPgMhu/GAwKnOfY/Ik+dT70UvgB069b50yaSKhMCiwALiez
6591	   KnrH/2+IvyjPcfaRuaDbJFA2hYnyUVpDGfV1rOYh1gtuyv9cWImJtgkvJ3O8keZp
6592	   eydNOvmhqDR7NDNIxzjco8kveA19r6jAXyCzX9cTeJZTZUAEor7jedsQq8fHijOo
6593	   l3Hi9b6/6eDNcR1Ud8vjxmTAHUg6cXMVGCxhSI12hGcrPmXK3l3gGhuZjEyEoafm
6594	   Ax2QRrfS7lYGnyrS97BmtJBVQ4AxOD0ajkYXEBbztPQZCtUPqv1/n8d7sTAMjFHn
6595	   qDLmy4btxKeH1q10k4s9Gk8Mhv/jczXtv8nB98ZNrGMq8WAL5Gc6vIMQBoBwpk8B
6596	   BdKVsBFezHCefTgV/cmi5llkhc/Q2rQmXQi9a0MgfrkvlyP9Lvw1AxqJGaWGsWjU
6597	   6xuImeZ9rqsY8jEDV8+cNBwa63CPSqqNKeWUdBNF0r4TVlFHk/IwQ4dEnRKhSrvV
6598	   tjLSbCxhzlL+FHUM8+DjysvMLELs/ZgvBGrpBr3vKrdQTqVKsU1fkNem485O+HCc
6599	   Ir5RiwWygdvavp0bdXSoXY0vR6xKrkoJGbhmtWgh/UYkIcQKUQ9mRdzwlmRXgzHa
6600	   yWi4aWiLTKLKr4yTPXQxHOpblDN27Sjkj85wFSUSHuo4b1yojvFFU4CiID/BGezr
6601	   1FIUd3S7bhVh/HgAD+qW8mR1JP06m9S/vAcgmalVdEsOKo4IpN5Bie8PP6BMcYBV
6602	   VTnLB5hHdg+saN58UlqObWnNetICxcHlGC5yYpcmxmbZQe+uT8ARIYFB4jlvsPeU
6603	   FUN2QDZT+35UqnZGSNat4CK4r4pCQS3lFGjbBAApRCYdV2576fU8LfHCFGqtPgv4
6604	   0JYcdTlWVNMI09LYmnSLvmZYLeKDufYXDuF6DXt26etEi2E3LLTkjg3j4EZUuL2i
6605	   mvPEiRIJHquSkVHRZP7Njg4k3SjcPVMPwp8i9jHrxbuEmXcsPWqogN3XZUFbGXiv
6606	   i4bfdzJAhDjAwrKWjLWUzFhNh4ChDeptuCqs/be1uW8O26xebnk0kW4DidmKUcdZ
6607	   Qpef2nA3e2G/tNRrgx8ogeV/FFrI5jCwWSv3rYGEgOR5az9NaffzN/uMkL6vn+Kc
6608	   gpIi6cIH6wBLo1DrSI4IGocAPllvO+iTvvVHXPSsdkiePtvRdDrLu4rwe+yUB/Bl
6609	   VSWZkmTyIq/nOwfpRX6mU6HWYlvdvYoxJRRwKKhWjE6Dbe2h21fYAOjvPkTwm8Tz
6610	   sXTYlt803yU8ipgdaw93lvuuxNMlkIvKQ20Zo5hOtGdbuq4jyUZ5o4if8monlcQH
6611	   n5xv/5nK5jAAD7ZHmbcaOoMtZlvPf5DIBfAN1kWUQlD+ehjAq1jMjo6R2e7MkBc1
6612	   N8xvK3WB7xJ2pS95NeESyDv/HyTASLaY352extAacSMlDUo2t7/s6aGMbZdjchCq
6613	   x8oc8Ez2045fKfvvNezvTjY8PFKOgzm7KlVJDaVpkDvae004GLCa1b9IeUHCKT8G
6614	   DJnM47hqBAQecijjBczXUHxC19B05aAPJU02CrlxASiG3V2aKI3m9lciNaMpksJb
6615	   /fr4kaMVwUpqZiR5RcgjUAkoSA7OHaUyNkQOL0UUFYh3Kl/+q68gpy06S0PCcU3m
6616	   RIY/Ky4rjCGXGeXhT3uOFRJtZ5vfX4cQ/cP2YZZ+kO/DIzZ6fVYQfRelvC3Ds1zV
6617	   2y/bI6wNn2BdUTtztg9Tyamj3WTumOwZ+o7+XHzjuhBjvc2P8gZOkXVOXTXNFrqz
6618	   9jNuGa8WIIRv3zRHAHCTFxazxiqeoDLjLc44YmTqpjgRDodAuaccAeD+wx+XBYLH
6619	   WbvQarq+aAbVWWaREZ81hRnuac1uxybbkV6JVFi61GW3jFdLc0oOLKTa2RBeO3y4
6620	   U8e2tqSlM39u25lzF2qrKbIyCNK98BvxotWWnogDsH6s5TF2MyqcQpq5kzs634C9
6621	   ZI/8Sc33Qb0zLFDBnvtWQzA26RP+0KLN5PeLJ+2XkjCHJraxg1HRkWbXdCNB/8s7
6622	   gZ8LQDqCj7ieG70FuUWJIPQ32lHpwwv8CU8xPTrMdfkOabsIK0MkwNv9Quv6umHR
6623	   gfToX0l39hV35d8KBuo0SGPkZF6btK9z/V/9RSgGktCC8wsb7V3KEp+C914pQsmU
6624	   XqQ9pF7tZLudtn9J7e1WdRjAYf+Vh9ro80pV/cv8VkMI9OaPJ5/XD/CJMeVuNaLS
6625	   hbWrAiLU6bjhRuuYBgtnxXPG1QKBFwqCyMzP+7ia2VNVrKPjZM6F/D8Q1M9ifpTX
6626	   CkvPX7xi2tiW+zXtAgZbmEnaMp38CoKB5KB+HvM+LB+ms5GVhQV/CpeuLts/2SKJ
6627	   gjpj7dZb9vtU1X8JX/Ek0I/BKODPCyL7ZD2FuR2qYmhgcA1/G89Jb4PWPRlsuRTc
6628	   DTexBIIygaLt5WYDqDjQIslOV9T3Bzbj9mSGqjzTFhwX6Bk9hUxIVcEee8221XRU
6629	   fZwwfkp6wlvSVKzavpRtDFvGqjVfHbHx8IGW2ILWlc/yF3/B2uNbTWFahKpDipyw
6630	   syXCwdZsDDpLFYqxrhBTY0WApT5hYsJSK3jqbBQU4RiDfjXhHpu9RLLpI/abs0nG
6631	   63XIGhiS6nN7d7y9LbkOyq1PJ8ZW+2OD6aq4Cntlm6hXZVHkmOz1h8dTk/8UIKwu
6632	   jmmJI4Mf/I9KR6+k5XeZob6Tfi0sJdj/EretoBPWPVA+lNUB57LbPdWM0K4VRS7a
6633	   Bk/ZoH9phhKRhWMDLdMTqm1kDx/dxqe7DS8M6BfgmZCtFHeQvqPnd5i1npik5bmB
6634	   ivkNet47fMpy+FnQF75Aj6EtKVyNpTWgy2Iju6xiPTle5/1FwrUc2cl7tbHxJhdA
6635	   vmDsIC74DTqN+qw/WUrf5VoUXjJfiVXN+v3JSiBRy34TF4HSsqNRSikyu0Yr+2iU
6636	   UIGhg08JT1WblGjiqxG0+oUyb7lDPtjWeck5fH/qwm8w5CSpVTjJPgLDh9ij59p8
6637	   TZjZS8vQJmp9tfCL0IALmd0OgfmZgGZEiDrsOzMSxaTObpt3kUa2T4qbzVeizQfl
6638	   thSR24XcH0maln/KhLbo1X2mVMlGN1KJf0bMdA3fjL/4tn6JNQuUXzKGTEDhVBVi
6639	   KKmuAkaZhc4Wm1QVLnbNmylr+Re7r87jKAXkg1h1vVg4LxuHEKSv2iWkWoTfW94z
6640	   uSA4Rz0goegkrbsSRdSqxnI99zVVF51FT0PdMRUDG4PdlHpNI9DEZDwJgWipU4pw
6641	   sjvxWKCU2pKv2iryIyChOTEf4rrVNKRNrDA7njq7s8czkNjopR5UUiu47TFIW5H0
6642	   ap+5+Uzl38mqbjwHq/SqhzOzdx0G0duvGc8sX5PWUOCyN8qDn5w7HJT/owvsCQa1
6643	   Z5BQUwmHmnCskr6QzUnXKe2pK4f4udI2996Y0E1ka0OClffCsNAmVDd3QhjvOE3M
6644	   C3S09VCYNAjEdO5QsENSGfdp3+xtH2JhpQUaZPuQUVUUYn4bl2q0oyAdKYnjvGtj
6645	   ag3O8gXaBJB7yu45KE58jPOgokCapn1jykmKkg5iqNla68oUqW/4V4u8EJuzY2Xm
6646	   ZgLL1iOuHYsGGCktPwR3YpFPEd2/t/lmE5pEUyGWD0lRX689zahgvF1ez+sRkm9T
6647	   /dqT/26HERXw+hzdM7PvTdL+9HBkJLO149x0o2WlYLQCo1yc6MWs1ucM5nWiggN+
6648	   rdYvFODbhCZKqJXf3L2n4yO9i87wPRQI7VAVRS8A9Yn9zbMT/7xPwdJzOet61O9a
6649	   P6iBenWdJFJOurnLi4d3lq/Nce21G3eTLlBy3iNo/B/edQbl7L/K/GZ2hdGe3xqL
6650	   EhuVvdmkaOS8RUjAg3ZR5ch7FBGgGFQDZgHdlBS9YNzIhMhLvBpdBaRD1uYX26s7

6652	B.3.20.  S/MIME encrypted and signed reply over a complex message,
6653	         Injected Headers with hcp_minimal

6655	   This is a encrypted and signed S/MIME message using PKCS#7
6656	   envelopedData around signedData.  The payload is a multipart/
6657	   alternative message with an inline image/png attachment.  It uses the
6658	   Injected Headers header protection scheme with the hcp_minimal Header
6659	   Confidentiality Policy.

6661	   It has the following structure:

6663	   └─╴application/pkcs7-mime [smime.p7m] 9775 bytes
6664	    ↧ (decrypts to)
6665	    └─╴application/pkcs7-mime [smime.p7m] 6230 bytes
6666	     ⇩ (unwraps to)
6667	     └┬╴multipart/mixed 1932 bytes
6668	      ├┬╴multipart/alternative 1134 bytes
6669	      │├─╴text/plain 393 bytes
6670	      │└─╴text/html 474 bytes
6671	      └─╴image/png inline 236 bytes

6673	   Its contents are:

6675	   Content-Transfer-Encoding: base64
6676	   Content-Type: application/pkcs7-mime; name="smime.p7m";
6677	    smime-type="enveloped-data"
6678	   Subject: [...]
6679	   Message-ID:
6680	    <smime-enc-signed-complex-injected-minimal-reply@lhp.example>
6681	   From: Alice <alice@smime.example>
6682	   To: Bob <bob@smime.example>
6683	   Date: Sat, 20 Feb 2021 12:15:02 -0500
6684	   In-Reply-To:
6685	    <smime-enc-signed-complex-injected-minimal@lhp.example>
6686	   References:
6687	    <smime-enc-signed-complex-injected-minimal@lhp.example>

6689	   MIIcLAYJKoZIhvcNAQcDoIIcHTCCHBkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
6690	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
6691	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
6692	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAE9HDUrbtMm6tMXFiddE04F6o6+6+bjTxH8s
6693	   sdumFvkas9JR+jvk2mMX6lOmglY5/r87cdSAMFq59MAGLAxpBHkr2qzzLsKX8JGc
6694	   x/nMEwX+pAqvd6gGEYtvJlEpOY4n7MIaDSXcivOOEDd2JQemZ8nCqwAePFZ161r1
6695	   NgmG9hanvscPHz3slK4QEiMI5SJ/81EHuYFZsktu6JtqrKzR7vvQFRRMwKZ+xcI5
6696	   QYSQEIMIhLG601FHAW9ZvQpb4lIcm0BZOkVk05zLUimqAN5/g3Cb3rlPzz8rH0ZO
6697	   maAO/K2OcZG/3kR4r2/mMRHnNQQw5atxiBz0bMSfPCnjjjltYDQwggGEAgEAMGww
6698	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
6699	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
6700	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAC0bAX0tnVecfETyTe/YHNlO5
6701	   RkMhIq7QWdrJlsMTdIDQIe4LtcL9iyHi0+5lbftUdhHByg7az0TKs6rJ5NV6Uwo9
6702	   zH5FDMzk+Q1ry+KUdDuZqlW8gCa81n9VIZj1bnn51/7jTfa656ILTD4oF5l4TB39
6703	   VfDJ99OEJ88aca8MKwB7YQp9mQGMj6ZBHMR8qz2m8hov8t0iVnuXEv2LqBXxh3nW
6704	   TC3/Tz4eVbhsFWQWnBolLPG+vbgXy1UJl1Qc1g4qfcc+NoNgIOVsF4Ydj5DJIhSi
6705	   TObg8Atl72wKDLhnMFmdj0thcdhj7j1+UoW3xpKXoZtdU0JjLKyz0JgKZ+mMQDCC
6706	   GP4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEDvsksBd/Sxh6/HtirTanleAghjQ
6707	   7halciQ1qTXJOovaSxq8ykfDhIyzuHI8vAv2YCDVAmRhBA5BURTAI8ByapJwuHJY
6708	   1PMlCXJGYaCJ2YMGfvUHW8KMQtSJwbPz6FuLznN5wHVEbm9rLc9HsevvFCi/HFsP
6709	   igfu6k10vP5CfLlR75bs3NY3QnFthGdoTGsta4jf9yGqYOA5wvVNQ61N8Yw4DALK
6710	   SRg3kE1cAvXmjtUaEq5r8n7F97lCLhbces9aRK2sGDE55mCGE2VR3hDSkeMEkve1
6711	   mmRBHYnjRBlqA9ph+tpFMkdaSTNiBxDbrN3tfJglSxHAwFfncx/5CaldBZ0rvdwP
6712	   3msCeJNNkTy+wkiqEN3kFUo3lbkcgijteAxSmGz2xePytwONy+Bg3/75PmGwSe3H
6713	   p35HdfqzMoHtgoyOgR9opKsRVfGKtoQwsi/oXGTvTmA3cMh9LRlL441yEjxuFKnK
6714	   tqax8Hz9bJJrXqItUqr+0kSswEMvGalw7B0GFlAoCDsqhfECwvqwoftfIIWmddcY
6715	   bd8kQhRYwMWzg7Xpo3RoH0b6AYP2Dc3uRlpauq9jHRzozzbBni2ZvGnRRausVvtM
6716	   Qu21NXdome3FNZMNLx1a4RlN5x/VXWvaU8snlCIQqcUAT8pCsrjP++WvXC0+dHIa
6717	   MgQyGd4onroTh11HeyjNmJgINh7itdqXBSDlZUMBymcZOXByB3SA7OfMB/r+3MEW
6718	   rOHNtEWflM57fvHu9HgTeEDp1bwh4nb7K7BLAmbsp8RXmWum2ZiCIpqac/NXaeeA
6719	   1sKziN9yC89npmQscQy+BW0KUxoqPzRGJqLb6uUyy2ieGuHcWfkT6v6+BZsCfWDM
6720	   wGhLP0Po6LaG1RwzPwk3z17rIlo5Z0B6abzDo9J+3NTTlVE4/dkbXfhi7LXfwJBK
6721	   QnJN7ZrPtVLK03auuN2oKaqaP6RYnFU3qNlf2azKqy2U3lkeqvpa2iw5Gz0EY8uc
6722	   GYV58Qu3YQkNWRE78lVmKL37A7RkVGBi6Kpgi2XDmpOqIkDa49Eu9hBfMseivXJm
6723	   Ym7OgfRNSiwej4Ccj750yRKr59i6TwEzrYkIviEE4sXsVMueDFWtDLcjvQ9NRt/L
6724	   0E0zrmnWX8T+yMiqJp7fUcpHjnOATpO4QHbpGU/+l+N8hT75pQkwgW6iVCyNTClH
6725	   FuziSdoSvq1hT5bUGBK0dVoHLcTKOaKhxDSwQGcb9C/+GU3wYVUPh3qa5s9VhXmT
6726	   Xwvw9wln6MibrbfKoc3P/k/9q2gNiXmaJvK1SfB3hrMt67OVALZu1QKmJd/S5yPU
6727	   7vBKUXwCqr26sxATQPqJ0Mqvbgasy5V41ffddwXMwXzH86m+epy3fIQiAPoEA5NL
6728	   LrwBQVFV/1DCMJYAlAXTFQK2tkq9B0p4CxnXbkyIDG++Py3a+gSBKmhlEkJBnYsW
6729	   5WqKABo+4k32Knds0mmp2ZCZ/tI8RTG0q3CAF6gfHRRimdlv3uiOXhF7JlBZZAeT
6730	   pM4PCTT6hpZrlNC9Ipo83n4qjXnsy8D4eS7hJgZ6zdM5E9zczCYislSqPWkvC2ew
6731	   7kpccJHw8D73e9bAicUPaXyz6+Z3C7mDEdZpJ7Av6C6ChsCaSFGwrV92QLzTAIHU
6732	   nfKuln2TArGYxqyKiI31ihSrMM/F4AnNkAAZ1hh21Ni3WCQ40qVWmbW2LCSBUHKu
6733	   vcBYJ2/kuTKBZOqouORkgZQiuSatoesjHptHsWnCVxJE/+0o0xoJphODfP516ivF
6734	   zgJ87tb000E/Kn+yUASCHg8bS6cNxnQ2995mC0wa27htw+xvWpwPfw6gPL5r4pDn
6735	   pO1SfDuCO8iMbyNaIg92qiu/gFdkIXSIAXYLABAhSgThV1wauWtdJIxPif3sYsoc
6736	   AoxVRPBQXyfBqL+RE/iSyhkeKH6NfN/f2gmfSQ+SB8xmb/NpkpA0clKIxgCLUFiG
6737	   3sWj5EY/02raa1T63+g6zO9+UcYNpeoqu8skzVPUrudhcVTZtBBTYAjA8ATsmkFJ
6738	   nm3eOj2BkJQ079qQ2RIjXk7nj+b2RMI9UPbM9fFxP5fsjoiMifNsBA6Hddlskiae
6739	   c2a69VT1LlKi2mQCgxdLiTkIGBuf6t7k5moMFeG4iKnIgi44EDYHAd+9hsuALS5Q
6740	   w7A3NHF3LXvugAse192Vq3aEsXoeQqOajPdDybctE0i0cQXLvD7e/We/3jZ5MX7/
6741	   uEyLBJgFeZCqwLzX64Lt+Z5saUQVbq75JbrmA/kLcweoJVOIxnz/nA8sX1G5tTub
6742	   T0i/nJkUkktL5rLpEgPwuOpt3ed1i4hna0LNBDNsmPonyS9nguNCMyU0VYK8Q1xz
6743	   GDvPwH7WxaVggn+3zQ0DDqE0i+XmYjuryEemgx0JC9Aki3yZbXCf5QaM++pqDdFt
6744	   U/HX4bfB5sofSbNIqhq6TYTqhJEmUuQaQzH2/4m7j8sJgC3EzQwVvU/yffiKBGUY
6745	   CeSgy+eLHEDzqC342SCAY+okSep0jgrZwsRx4r19PuBeVq3I1vcWcNPrEcjamk7U
6746	   m0gMfi8KTIiGex1He+eoO0yupXu3JI91gDoIwZCSjjq4bOlBOrvV35OjlRZl3HRI
6747	   xAYa0etVtrtBUrBLayFWpFBYDcDHlD5CwU3YpgB8UWEMtcci3qjsiBuKWLQ1tjhU
6748	   A+xXrEg4yBHe2NNPbUxqYtxFf4lA50QRUP2vxOnixOiCjd70AfWSXm52tYijD3eO
6749	   uVkKgyL3g/xJsXVA/oNlq+a37PY8sb5Lp+gc9g4NcI86ZaxBWNE+PfTTFTT7TzdJ
6750	   CVajr0dWZMhWmPm4hwwUuR0Jy9Y8nxiFES0erfL36ftqtpZbcdeK62W9EUKGD3jl
6751	   X1gM0TF8z2UHUqQ5UWq0aHKrSDaL4+Ipm3JWBxERIAWEtiznc58B3yyiwm/4Vh+L
6752	   n+9V1F43psU3KLUTZ6XkD2uYS/AenypljtUJFEEFCZtwKLXugKEB0AejSpPUqNFO
6753	   pa5338v5ocqMowr9c3ErqEJZcQLUj9TdYAry1FGe0Spv3LX7HmHr4KcvDXAWSUQD
6754	   lii1zJzQatmuwx75SYMeN3x5D7yhjYL28bJaJcPvFDbgCsHrW8YWu6+o9Xpg9rKA
6755	   JVvjtThGsLEllTA8c+HYCf97mS7ccBoL1JqW6/TgYF0aL+jnSTulcB1snBhGAjB4
6756	   fK8sYQcBAFUHbIMuxjr2tHhxWirfSkI1zqaaVg37chfkCqp/r7uMU++xs3xbiQvS
6757	   mOI/intNv4bZBE05guL/EP1dHyjyc1EQu1t8Bj4cCGlDC/AfmGJM1Zz+GFImW3hT
6758	   DZco+uenvnMhTi1O0vqGYYKwTmlw3VQGhllo6o8CUf2HL9XhmZBaA1sAzPByJTlM
6759	   2FjPMzM1pG6qj2vYMuRHK6/GvqVpHcJESUIrXzwT1RwxhDV8H0j+ygZIM2Kozgkn
6760	   Xwwanf7euqy562uxPIWP+kXKCSuCyAZX5oZG7Qx6yUSCcTV02zMOrCS8WMYLxMLx
6761	   MB1XS7EjqLEkfasgW/IzRR/3kgznp9PU5FaT7VaiSwkIL5PNl2RoXfoCAu/LKBF9
6762	   bYaaGW4FVkn/JocuQKtG7URRPji1uL/kM4sePpgRuDJmvu3AD6YjQ/6XUt4GfPIa
6763	   JpTVJT0fFH8vRpdiZ2zRlib7meLI2If6swEzv885sbp/smsi1SjNIuTgzqeK/Rdc
6764	   XOdLutvQ/MZyyVDKHzw/rG7ceTKniijS+tqcPtI+2IdSxuGCxPS0tE1dJ+DVPBS6
6765	   PfPx0uM+l4T7QEWgDEP3wGDKXyAETj9fCgPPaTi5qjX1bEqCo4xSSoFi3qu8tFXo
6766	   nPBrPnJbjk0Qpd/gRXsudKm5T3Mx1iL43FtCmNrdRhyrAMZiqIXVqvFzoQtxutOB
6767	   X5KTBb4SB/2NCnEwhZwfPaiZVU4CdTQWocffuyzi5Q7VpJGZZA2aj+FPyx+9R8w7
6768	   V7d+7yBgkEsYBfB7c7760QaVvNWdIza9OY44VioMGt1KYmj/xLoR5MnZ/CPLDRLw
6769	   V6wRbsmyuLKn5eq2lkOZPK7zRjhPmk4jMI+hZ2NA2vxgAOnP0iQbTR4ilXms8NKz
6770	   +wgvr4W6zr2h2Aa+CLPESKeo+OQKWaxr3AwBsUHgVUYkFk+gR5GZHRuZWre7KI9f
6771	   zMORjhYthKy2l/52+MFIirsEBmIR5aB1b3MOUWU1OvaWR5purOVYi6KO+zzmZGZd
6772	   lHja+wOi8/KC0liG6kja2JGy/Qrmg7icn0ScrRTEvXb8ut9Ej2/ybx0WK6oty8VH
6773	   +HnRdKfb75tmbmsM3wFCO64szakuLwJyE6qmBmWej4tf0JAZNXpt0f2BIzE5XzdX
6774	   sEbiUZpc5wk06obXxVmpluMRAJR0mUhhDWiCcdRF1LrxCYAQprmS4AV7/kxOxSTT
6775	   Uram5vArneefy66nIZ/pPajlWY1oZC+9BhViGk+/TJLBbGCCWRWWDHLmlnl/UjJ3
6776	   uURhhEu8qhu8sRqUh2iTlYlspfZLnlldZYhKX6gbfzPwK/l4ydF8JFSUTKE39qRf
6777	   hrzxsVEjpCKJOGGiGUia9B6trZvFAAYr+sxpqcYkqwNMB/pxRVT/0GMN2oTjq3uR
6778	   Z21zPhtNL6nUjUrQRYyiqlPc6OYPntu+ZkrKFJYzfHBkqfmNQtvLY1V14Y3V2vU0
6779	   QjrjhvreW0IFKeadZpYjP4uDLz3r75LJ6zLkjDEQajl/ZAdEXUf3EeA1bgncFYO0
6780	   PUTlhxXf5LrsPLydaZIetBAuklKSCBtfohVt6HIjWWUkwDj7evmi7KvrumyFePU7
6781	   4QNya3C05HgmmE3RYgrmYBDiX7bG5z1NmiL6p2vCRs+inOUMDjEelYLAIKjLWqx2
6782	   lNNS7ZR0ZyOOBq0OcvAxwvv4FFez6APBzLP9ZTj627I1ZQg0pCM74YKmssvFmjQ9
6783	   IoHAyp5Ru7W6hDZLTYKNYycybL0aKe5YafV1NUZxox9k/9iN5Kf6lnaOuEtpTDCh
6784	   8V9kxHadOFLmk3QoPZ/1ufih6ZV3Ael7XRPNL2SZ6a03/rpf6HFOqWxRnhR3V9fY
6785	   LdNe+/Xu5yBYSjoW9CxCR5YACYhGSesSUR8XZwwuN+i1BLUC9WjjNh6Gpar1Y/ll
6786	   mWDKSSdPXZUdF4iD7i9CDaC+eFd7eW370mpXTJNXyCD2jMvYpXRzyf1JC70Atooo
6787	   WAP/eNkAiN2+JDzOYSw/ZGv97Ba8Tz0oNVMIj+aZnw3tlrAmUGWywVOnDoGKPj88
6788	   IVCX007BDnM7oUjmgaCPJpGiCGDGh8+CdU0105cFUiZP8g4Mv049tuE3VVxKQi3o
6789	   h4VwVXU0qa5FLhaRgRiSvpB91ni93oQ6Qc/vB+q0sBThRpjwW2Cra5TAWfJoFia7
6790	   N3l6XqntXZZOsCFDrBs4uzgJiDFj4w0+l43vwIuBS+Z5sCl3pJANNolwdL8jEQu+
6791	   6crgYH64Ib/eJpOEIHu+gXa76XBO/zQ49X25qXDmzDslq786kzLN9QXfBhNykO5g
6792	   nkW0vxIx6y7bI0IzRrx1kP7H80I2d/JR3RwTA2Fokw/9LCptXZZ7D1mv0N11p3qV
6793	   X1doUFDHi/5TkrlmhsnP/1QARy9dLn1FEu3R4GgWNNE5+r/WlODUxh1Qmv/8f43e
6794	   4PhXYiN8KTj4XXNYRVi5Wz/wflZF71V8HbYXWLPD64DuKM9cNGlHpX6SoR5NbbRj
6795	   7H9+OpCah2Rf44N8ap3J1x82FTr6/y2vPOtdU9LRJ3dJZzYUvXe/LRRWN52R35I/
6796	   wBfTgxY+nErhCCfaEcT4SBtQFM75SlxHNHD1IHFqV3a+6q6DEgqAbYz2Sbs56qAc
6797	   8IirCPglJUIxCcUe0fWstwHTdcOIZE/2AhoSOHftKgreC2GkBSTrmWFWzA3Pkjd0
6798	   oovsv2tTHJ/YI87UX9PcUaP1u9lI0Dm78jJmM3GNSCqbWQf+E1LvXvqrF2p/TgGF
6799	   2s4gFm5yanbPUEDDOe69OkZlZjTIy11Qsor6vmwDsHBsBB7DSeRUa+08WRh4TyJX
6800	   FOLE5wpcAj9t2FjAYAEiPVOOMHAnAQFBf18SvKeUr7T0uSVW2RYFjdV3iiE2U7Z5
6801	   WW7UBG86GvttCLRDmL2Yhgp/ex7mEu3L6YgwHg3hAHWhATqeK/yKsN3mA9GA1FvM
6802	   7rI3+SUV1jfJ0/GaauFtXJnZaI58K9SnDG1bCQ6xjzgUowJjjhh2F6hHe/WwjMUd
6803	   w5w6d3cjIUqp3olkQKL/RE5ZmqP0uQIntfQeXDClM5HN1vg4UbnPXXw4d78ipK+N
6804	   2Zu9sYkFX52YcZ2hC5bMenJ1DjU4o4AU8bTdnyTNpBLG8S7Pw0gTySG9rK11SerO
6805	   qaC/xcegf6IkbkXy+YHIdplzsckHl3Dm5Bzh/q82H4YmaikExr4FqJewOyNUydGp
6806	   mYRKNeGcArMblb2XPn8ooEhGvQQaPKRtuvlXdXd6fYbR24YevWkX7Uuatq+RgiQ2
6807	   WmRo6Xx3zduNWxI7Z6Ha7ZFV85jGGikr12ajydccx1GvofrozDzrG/7acdiM0hmw
6808	   OzFFc1N2MBFW9uerEA0jyylw26TCOILN+LBBME8SXzjo2rbBFXJq8Mt94r0PwiEB
6809	   hWuk+jH+4llAEy5Kel1SXDeKfcQOvEpo/2hhrP1XXRfWNv79DF0jDxkWx4jV3B4i
6810	   WmPrWExY5cmEysXFjDzqF+8E3pR5p95nYax+qnvqY4DNzDztQ/Po52ILUsxsw2Gu
6811	   B+lrTp6qVxZoll/lHgxSsR262gMhxJZYOcCkfcQ4kMYzajYZpdqsMlUK1TfuQoNq
6812	   dsHofrYZ0sufTZ/wXZpTmKvkxc2DUaCi43iWmj2aBFYokUA8nlWGA86Nln/GtXR3
6813	   XPSCX0ZBmZ4bYdCMqhJI17JjiU2r9VkdvkaevRMsKE5Gum3NgRkLwAB/EMnvYefS
6814	   9rF3DmqZl7ilyrCIJo+6EZNTo1Ol0y6Pj5mogmix3ZMaVHmOwUCknAFcShsxhV5d
6815	   2h+SSL4EVSRn8OPWRPzYEnlu8XVZ+EW2lHI3nsjuqwiR+4PllpC51CqV1a7PHwHP
6816	   fNXJqyCq+Ru2eFMelIzBWBmzfONXniksGQHn4mX3F7Cby1v5vfJsEut/tkppEDa9
6817	   1Wo0FSMe1IN+2nNtEh3i3MUNykzYJpgM4PGuBNyAW3KInaMmQPifQN1d5Bz07fHN
6818	   sx+uRhi2Kt2dLDZwjLl4U/ZdUILGorGDtisRPyGxZYa1+pT/2RHugdVEFAytR8cI
6819	   LVsGtEL9H1vg2lzHIlFfM5oOzyP9B9eO5XBG9O70+aP2g/kNWWETJcGzm/YE77SJ
6820	   TKZakC+QgAEvfIhHRUx5obw/ekJDyZlcJRIN3wn1HwJ63USgBHMl5OfRyJNkg1fX
6821	   2P+ad2rjEyN/PW7XD6EjNQmAnbRCo3/Yamyg/6MzIu586+MIFZV3mhjXzgwZWzG9
6822	   Oz7R7hjPcaK0Y3kgOGHR/RYWW+MObEesTdCSiLwcGOaucbMK1lRwG3pvFSysj4DV
6823	   DjIhAKF9ai+qBy+G9g/rTO+J2nszZDBW/RgVz0EkOmyow/F+zPk37zavG9VUKYQ/
6824	   Az3CEO0SXCUWRJV4DsaRRMte6TnKMF9grNY/TD+EkWPKKv0rdt80OA7R+y0f6RTT
6825	   EcAG23jJrReBRCwmopkoqhFv4w1vp+OHbMxj/WhiZQUda5UP/ks0YiGSim0BG715
6826	   ExLRXkV1CtgfPji/ZRKdK2oH4rJVTWZ6ej1TOyLhu7UMWfOZyxMei49RP47oV7Na
6827	   wMz44+oFm1oOCqloOIugc2wrsFS04OiAzpLym3wc2kSF0PfnaPY5JqoeRA/D9j6H
6828	   RKhFufAKlJ4Nd/sZKxM45OgTSWjsDBX49UgdRBoakZKhgTVgNzVncZ4AdF+D7egf
6829	   9h2KZOCqWcysKEc2mqEe3MWnusP/QyulTq8gmL+p9tEz/++8ybH1vXVb1VGiFMiZ
6830	   /J2yZoT2l6wBSM5wn8lK7W+Nk9F/ASqVfOnhXUQs9uy0c9+A4Xw45wgxHQWgK9hP
6831	   2dMW0WXIaHCmqPGvg7jEa6iuJI5aOlf0/4xJeqDGfCHR2Rgv5z5K3P7McigBW/ty
6832	   +HAMHnaCLkJ8D/mBDe3ss+INPxnWPti8Dgo4Xrot1hTrdTxopSw13iG5F3i7fXuL
6833	   8ZKQFnWbzFUnhg2ZD7ODrOpjI0/pEe0C6H/Xs2ZpZj4yyhjrA7bHvNXis4D3pF1r
6834	   XbfBYGttazBT8UpAMo1jrUqP4lQ79nBKaTn+nvLD8hpARG1IYiSUe/VMpRLyJ+1J
6835	   Tk+jwqMrD00wALSsoGM5pgA8CWWIAZGz6T5YXkZxI5ArGJd4bj0YR8g7kUI/TYfn
6836	   sMZcROMB31ts24gfQJLWAqYbLI01rf0DH48FTzhE09ZHDDNO0kolViosU8i8HTI+
6837	   xL8J3luyoECvcHSQKXXNLdV56bYrFm0p+KeclsKH8kE9rQlBfLaoO5TOhwgGZxgO
6838	   g3FFo5gLqwtlasf+hXU8ZJanCjUEh1WBjtZ+AwLqMjJtsDyswvxr+c9/WET+4z8H
6839	   BvdgLI+cdV+sKOi+2EJ3Vg==

6841	B.3.21.  S/MIME encrypted and signed reply over a complex message,
6842	         Injected Headers with hcp_minimal (+ Legacy Display)

6844	   This is a encrypted and signed S/MIME message using PKCS#7
6845	   envelopedData around signedData.  The payload is a multipart/
6846	   alternative message with an inline image/png attachment.  It uses the
6847	   Injected Headers header protection scheme with the hcp_minimal Header
6848	   Confidentiality Policy with a "Legacy Display" part.

6850	   It has the following structure:

6852	   └─╴application/pkcs7-mime [smime.p7m] 10465 bytes
6853	    ↧ (decrypts to)
6854	    └─╴application/pkcs7-mime [smime.p7m] 6728 bytes
6855	     ⇩ (unwraps to)
6856	     └┬╴multipart/mixed 2278 bytes
6857	      ├─╴text/plain 65 bytes
6858	      └┬╴multipart/mixed 1612 bytes
6859	       ├┬╴multipart/alternative 1206 bytes
6860	       │├─╴text/plain 430 bytes
6861	       │└─╴text/html 511 bytes
6862	       └─╴image/png inline 236 bytes

6864	   Its contents are:

6866	   Content-Transfer-Encoding: base64
6867	   Content-Type: application/pkcs7-mime; name="smime.p7m";
6868	    smime-type="enveloped-data"
6869	   Subject: [...]
6870	   Message-ID: <smime-enc-signed-complex-injected-minimal-legacy-reply@lhp.example>
6871	   From: Alice <alice@smime.example>
6872	   To: Bob <bob@smime.example>
6873	   Date: Sat, 20 Feb 2021 12:16:02 -0500
6874	   In-Reply-To:
6875	    <smime-enc-signed-complex-injected-minimal-legacy@lhp.example>
6876	   References:
6877	    <smime-enc-signed-complex-injected-minimal-legacy@lhp.example>

6879	   MIIeLAYJKoZIhvcNAQcDoIIeHTCCHhkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
6880	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
6881	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
6882	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAC/zB+nn0jWI57wKmTVdRPMb0gUX5+I/CyN7
6883	   ggibIEWkRQ/Xg5h8RS74HQIHBq8apDwJsMtsEyZLnkwh/9/O+7TYYpMomQcmfT1+
6884	   /O9kt0bP+X8CyDwC0ObwzdTw5sfCpBvRC1s5wmsCG4n/dBxyf+xbKqH34C4DlJVz
6885	   mB487vVdUQ3G+M4C/P1epEahjuskm0LOIt1ZAFqPig3fI60NOAoE+169vIQ4WWbV
6886	   AYEX1n3Q+n4L9tB4LsEt/WjfBU5HQ6IsoHJ2WeNLF4bnd/qthy/qtlbeqrhPC6h6
6887	   nCEALq1hiYMqT0Ydv6U86fXu+nG+GZgf+l8Vl98hhcwJErevsuIwggGEAgEAMGww
6888	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
6889	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
6890	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAhpgwI1cnPotx9KvqcZS0mQl1
6891	   3xkhoArwNvQ/Nv7J9vh0+eeo1AjvC35wOwmzlT+8eoFNjdxVcab/KssfM1Mtf2x6
6892	   m2iM9ReNrTCVHXxWhjvqwGIHPTvhFfdlI9cwuMis9+PaU87fjrOCLLrEijZ1x0Ia
6893	   DPhJdrOVe88xtrf7e45JuLRJPchcjavdPW7ip661mbVTWPEXW7eJk2OBENEoEi0S
6894	   hU68if0w8bagImEKJOyvoFI3WxjcBMBulAnOKY17foyTxPKBDZmX2FzQ3de7ZmoH
6895	   HHlNV+qPLMMn1stiExGftWAZ66ld+oCMU8YIaN+Mgn/Yj2CT9R4nzCDgUM39xzCC
6896	   Gv4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEFlhhAGXoQFFBU0VQo5Y/UyAghrQ
6897	   /LkVplLBhjWKm2DFogyc3/xl0LWqqWgOWrpFuST/KCrWlVgMJ7lEoFaMOZ2jrX4K
6898	   2JwnspyqbuKU5Ng/he+vMsgHM2toGSaZmPa+KmyoYlnyTNKdDx9Tnx2Ey54UGl9y
6899	   DGvSVWzmJ3Wi4G4rc4TMeHHfbHLR3a7bcNT1Sb9+X6IPW3qPAplqrwmpRLWwO9Fy
6900	   GXayWTOyw+HVshCBJz/rPziePAJp74mI8+xaZNSfN7O17F6eAXO/vgwkilOrtnm1
6901	   0krF2W+wsClWDaJDZQUTXeGWirhdiHSWhrJ+RRaQFBCC8kXT2J6HyPVwrpMKR4JP
6902	   H+SpePyK+Hf2HcTwMFwiiatmxZ/gDnG59TCtYatlrAYOIEkXNayfbAOTpRogqNE1
6903	   36ruGUw53TuvLx6xlXYlnnDjSaAFZxN6dPEQNmcW/p3HQFjKJnSQJ6L4pIluSe4H
6904	   3eiY8bpCW7AkgldmG0qRyBYbPHXHwk5GbUq2FIVUtiAYZCaeP9kcvjh7KasV4Fup
6905	   eFeAtB7Qy+L6gKMD+sQ173rGihy3RFwe8Wqhki5vYXrcUdlEF11DnTtXem9L8bsK
6906	   YX17pQyWJqH0gvIoMJLrMWcRhpVHsg+zLDo3yoqDdEm6hP5LtBzA3rlvd6DQUfMf
6907	   dACsi80tYH8vnAOJ/BO89yP3VU5E/hFF59AfzD8rkkECjeiDxsyqzKeIxLj8O1kD
6908	   t4pn0Eeg19dAJYZmeY3lZ8i48ELRDE5IJEhfE7QzagG7Qkd0xvg5QJM/43qm0sQZ
6909	   2w6QBnBpm9SdrHCT2N/SQhZsvGl1ah4McdNdyRC9VtuKFIGxU0DMd5qVuRZCp6dq
6910	   ORWhw8b8egfN4D/TUOoiNVNx0//s26h+G2jZgvC7XSAgmKyF3Ivh07OPqtyz124z
6911	   sqt/ee4rRpIi1KWLrZiHwAuZbVIEmSazCmgX39q0BvaORTXjKFpaCkxCIPhMV7L+
6912	   Qq6y3LtVxWHtIyyfoQNTti+OwSiH12eTU0oraWpgCxI/IF4U9dInnN/xP8yyetdT
6913	   x2uG9+hIVfO0zvay0sCNMWPN4pyG7OigfqAeCkwzjFjV7/kwwe6vlEh1mwvDqZ4R
6914	   NcmjdHSU2tsCd4IhXkmcP77UUbGp6UtheNxbeAUTsQtMDcgLJYitRV2ndVOxSmQc
6915	   UD5KzymuUI8Wg2us2wSB8PZBBDii0gjEBJmReQwHwGMMkcBHm3zxDU/Onr0DwcZv
6916	   lDmqgx9Zpf8yLSaA6WDqIT/SU/dar2gF0N0Tvmx0gFiR93eaS1Dntxkb1CiGG8t1
6917	   5sKwJ8HYNf+4Dey1e72vsVNo1WPxZHBH8BAXzRkXD1r8YiztX5XJhIHO5PIqApse
6918	   q/zLbjkN59G/t++Bc0eg3KoBJvaF9JSw9Pm9ta9gq37AG44PcTXctwK4rtv0yyQg
6919	   D2cUKwIWVNrUei6cqSRmnG7o83EmG6y+0730a8g7OEpksZ9TM2pHGwTI/+CW8Cf1
6920	   o2UXIE7HBbjFMjYEYXGG9629kjE51Ez0ChSfg5xF6ZyDUI35YY7mltwJ3f0SYQgG
6921	   wWpE2a0uIxSaG3bIkbwcwThBlbpuO2w1nlqNndglQVxaaBO2wO66zIuIYqzeCe/3
6922	   zHEE0DOq5XL+eCIRt8G3cT5eYcKCafyPkrQagGlFDIPis76awxukHBpKGpn38RQ+
6923	   quvARDsEjo/iKRl0ZFICCIQbs2Cx0TuO1luhYMjfa3//y8X9p9ZBGRzuxvBu2eXm
6924	   SsWfUSYjMw4bra1Jmcf6dqebJDVQ4NQs43n0k8kPRUb4qxlfkIJpFcbpmb8UabiT
6925	   BZzzjm1gDwhd6nkq8NhOzoDmZKnDw48feY+NnLpltXMjqMugOa7KLGmNPvc4rFq1
6926	   TW5SD3Yp+wH1sdAq46Je4WLRtYvb87fRPz/0fXIl8up+VVMFQIL8BBRhNOEYOcQu
6927	   Eg8xGm3sTf8jxZP+8Nbfibwr9Q/3aFV+fj7AJQ3RDDgm9neVpOqwNQ28OtrFswlB
6928	   GW5V2kjy3U5LrrvKMiMuVQ3Xk2TQgZZ1IsIir7i6NCLa0vzJY8QzgWNMqmIGLHZg
6929	   KUTMrg1yhwbJFaaO6eM99zS2Wrf48KXmRPUk0clq9UyTfXcZsC3zTv7hILo8Jyes
6930	   ASV789kpxXyMvNyBcIcOSL1NLUeb6sdIZUMi1aR42ryELCbM3q9RLzVrvr5sRV23
6931	   fwKRLZNwUaAK20Ex4l714A4tN8hKQnqT/KBEUV0FQzxY8o7zfwXpBCV4AYCybvPl
6932	   EVsHUGB137G/3p+mFfzlfEsJSrqIEIMSIRNIccmRJGNpmI+OwXNda04sWLc2gWYm
6933	   gdJR9WLH+Jb0nhAzrVBJgj2VgYBuMi3LRQ1YT1stq0LASfAoarg5c7Y8rH19qVuZ
6934	   AeiOrJ8xQHPoYcLxWT5magiXtxWXDARA9H1uq6eqhTDHNHYC7HIP5yoN8w195XV/
6935	   OZ95+LVH+7CYCljUjBzOoetB8WdEfa7qAsjL6qhUIhzHo/VlRkbKBSj0h2nmH77Q
6936	   JjhOW+FbSiB6IoNlIUCb8kyQ9xWMEhLgdlcm5ZvEnFoKJZAUmQXq63MdqlwYIR8D
6937	   WCy2f7KLP9Po3UFuOrVbpjqmNWO4o/Pe584gam+uX6gfMVSM2cdAfkV2YWCmgTwq
6938	   RdQZ0x3E2oJZnnjUgLx6KHndgYRU1KMd30z+cgao+4U4bHfZSjKQtnmeQ4+jNtFq
6939	   OCTO+fLfS0j3wlXG7NBXDdibeS5ZPJ+KzumFR7txFAueKMbt4UA+YvlOD12N6kl2
6940	   SrtREk02JRWbn/YTtSSJT2MIGrg9c+HFMr0ik7THx0bZlCQNrsoqm6jZ+NVyaPvd
6941	   EdzXXaMupFomKXiMJTeXXDnQGtlaUn3jBzn9Olugy1P4Xz7gwFiZfN0ph0NqjDIw
6942	   u6j6I/FPvJXK/TLCrf6+iOmXawf5BQBVxzAfS4Msbqo4NH7Trg8Gc6v1p0GB1NOD
6943	   efJABG61HExQ7JVQ9K/b7DECuQPqUcLW6nhFP2sjWF034ICebBN/pt2+tY/eaaau
6944	   9RGPcKMVkkWuTIFHn9Lk7Sqw492Flh9bV1HEN+UBahcW0rKFlrZkUJqtGGiCcsMO
6945	   bICmiqLQiWoSYsPB5pT3VFPu3R49T///Xfe8HZHz1ZpVpfcobDemuM9wZGNOej0i
6946	   08cEX/hLuANdCdiRsK4rWs8gB7u4mvGqM2ZUxC+QGkp4Ao7OucZ4h/V67MHdOTHW
6947	   VUHrp689r3G9NnLrUrux33R1VZtMMSwIeMeP7I7jm8eOiBSLfHOUkptF1NFAtlGM
6948	   +JJvS3aAey2rLNGLw4/SoYUCnRgiguHvlD/fNljIeMx6pGIW3RlK8OtR+CXKwtm4
6949	   2Zfdj/mDLv8A4owJuDPT9aA6dzWOHE0a+8G2Fn6Hn5jdGmmI+d0sBE473AzbFUYa
6950	   W29iA0+AWS/9hnB8M06m/w0G0Cgqr1+OQz+1KJ+6QRDuVJXcXN1FqsIZowQ56/O1
6951	   try8d/dcNetdckBHQuLY1FjY6xC6EJCsJQFeYI/a9g2IIAH2CGJVm9rNxzsCrloo
6952	   XTUQk/rvIs9NENlhOPlJsjB639OcJ3GLcLdcABPfSWsj7dzBjqdZngyktA9k+rbg
6953	   TXVM389FjhIuCOIgHeD94pPpeMmul+yc1CnqxK7DoiRqwgJAoY4CXVjIae8Z/Z4G
6954	   S/R2VtmTRLj21UtRGDfpp8uYehNjYnkBbS1yt5/2mNSnsq/Q8gRFhikWX6t1m8Y5
6955	   v4QKafDWWQBqU3xF9MurToO43+6UMIrvuKO/1cJle+g/q5PQg3/Cnx0oDRJdnmMD
6956	   mvHGMts0C436RZCCtz1xZdYM79O6fmfDM1cmjM0gAqeatX8ez7wdvhrHm6pipDdW
6957	   AzsPfNG0+Tfke7IzSAPmFyxuffmMqBx0BzzqIUdni0wXOivPy/Vlt9rTX0EPr3Ck
6958	   e4VtrzExz1Axc8lN90/bGf0d8P3iNQDbgAkQHURlxfOvJslOs6tK3U09/36shqQk
6959	   0x2j0isAmQXHZLUCxrnfUVWsPJ8iMBxDPlsV2ee3M3YcGu5XXJZYCXl+XJgbUWcI
6960	   M3Gussx0MfwwjxLUT5K4c3j9HB2zYPORfRUvZOpcUME3iEXAo4s3pRqLynbRoYTJ
6961	   LYzSOPb3ifcKQBDzUyATi3MgHSZWJ0F0FCyyZnkGaN3mbuc/bcPhx2/3578iHJ8o
6962	   hKOxesF+l0rpS9VurYe2rgxOY1KCYxcqF/OeoUfaFvtv/Wqi6vr4DFXoUSj1H5Bs
6963	   uQ6BXb+Zheul5qnx2JhpuYN2iGYDWk28rQN2K/JmFQzNAItKIDZG3/1XEaRb1xkT
6964	   ZK42IXCuE178R1/j2T8usGivOqmTMsIRrvEFQJzBJBuOAwcyBcnhRfqa2jJSBKNn
6965	   99vDNOhWfQBRvDMSZfHrK/Tu1ra674y7vSb0/Rk9ygjUAi+rV4C2hM2F7wZ4adyt
6966	   ejdZM2iBgNgCuLFd5GnOwbALqZgxD2Ym4pes3OfexsmQqmHRKAQ+l3zhJfOKhUYx
6967	   9VORuUUDacAv9Ho9StvkBq6T01xfqyAVHhr63QXGj5I3s66Aa2+tiIcMItEuPrKp
6968	   Rb40WXQUdUMYy3LwoJqGjdzZPL5Ea3R7LM4KFZRqhyqG72WndyLxvANb42QWADFk
6969	   4KPYY6K3CNhPP1Kfpa0FlTsirv2nxkaUWNqm7oqFOhoDBBj+ISP72PDEEGju0mZF
6970	   ndEKOcx7oI1HZdS9FgAyE061liam/bPl8DLWi/57/nbNxKfK5WEMLHLEpFs6IBKy
6971	   HxpXO5cl9vA2Dt9X8UVfFuEcZd8ATe7+KjUD6y8Lx50Q/I88kBPRzZS3nhY/ozvA
6972	   SXZ+Zxqi4W9hYzHLOC3XOX/nXwW/ygzr0BkysxFRZ4L2qo192+1RkjmSirJttZCc
6973	   l7McK7jLAWIPlNoKJzVghZK67VVLY0jHM6apcLl5AVoG97ljCxWUIveqyitPcvAV
6974	   nMpBbEIbS4zGEnR4GByckP2yqV2RkeqVpEFQzud9HUmwon5UqYiFQX/XsuWorY1L
6975	   2FHsc1NtbBPzv5SRBsoy1vTQIZw3ULSURd4rfU/F2gUllz8zzvAY/qkkQiO16eh2
6976	   6EBLOyc2R8gMVDyAmF4W898+bWqAZlrivmR6Uj316tofX+4fbil7e/V6iZtM9+OO
6977	   voOp9bktOUMLPMTQSOSVVOVoBA1LxE/4lUyeivyRPhqlk5Z1RWgoCrXOxdqsG4BX
6978	   ltGUl78UiN/kwmcd6m3ZClbqPEZF5QzB+6RkMMPaEd6UkqzE0FRfTYtHMDs0xOvR
6979	   aDBCjIaQRjPy8lXY2NEjBfNnBPlhuoIae9y+5ThWiGUU9RAXJlisfUeUgQw73nd1
6980	   VPjg0iKbVIuOSaeCHnYjEwHkvc1KY/J62vZvDrHfSk06z8i07+0IGDsPK/bvpsjw
6981	   W6ElsSPlnjVpXTfML36aN+u3dYNjlfW9aX1Mqqc/+WNl/PcukeMbYv7EJLkeqHSK
6982	   dJk5cD70xn6lgEe+wQcmbvAWZ3TJmCxLJoWlyisUWr8m1OeVlT6w4Ar4ddQZ7tfU
6983	   96WIRJmKYJFRpfqcHiwAJP6QgAoRZmM1jFyT9BOPxydJtmfxRXDecv1S7D11oLlw
6984	   16eOZEVfgFB+OuDrHaK5iXSMe7vXiqOnuLMxHgAXgulZD0iPZL+nkUT63hM7uDvM
6985	   h0YKbNE63mRBmjXApCgBl6tB1K8yj9PNBHh9C6i3SznAa+YTJb7BxGCqPSkjTTfz
6986	   fxkvCymv5VxD0xRz73f0CAy3bqqaq2jQYdPrNI42JPoBKgjWeYoBSbj/mGxRX6Ls
6987	   I6jX9uEmY2h7wqn/sY2vPx9Pj2p/cmmmR4r+inEw6J0O6M5gDFh27ssY8vpMN3vY
6988	   Mws5ZwqJSBdF8gGHHcqAzfed0yCaevOVIqdOyyb+dtg68aC55PKV1PGky0KdHa6H
6989	   ERNAq5xVStPLvtr4dotA414f4/WRQg2l+AuxVGDUICxaRh5oSPkXWQMYAwy7oKoa
6990	   4I1UzRKe93tiGH2NNZXKDEyesYk9rxIO2fqz6ON8M04Oed6V1LqkJdSmLz3CqZCf
6991	   TZFXuLgLMZFNkknmXzoaOwwDsmO0fPBmzuoiXCUOzOjGNtC2kVmPC/bX+EZu+GPw
6992	   IbOdskU1U4+kVNP0uhE9lvOEwwEbkqpvxhUL18N72XLkhJj36BrUq+WbMYyraFgF
6993	   hEyEctugebCv19CaCS1nx0A+SCfAF3q2D3oTwjQXAHnbuQhAggTTc0GsWDnre+Oa
6994	   eXHIAPbTBEsPk0ti7t3l4hGapCmfzw1PEMxPHJLoIBriL5+ctj5Om0tdpKYHGm4b
6995	   dJvP65UE6JRY9PTuC+/lTRii0GLp/QDd4IAuThgSbXCfMxmIoPP6cMboGm64BKoc
6996	   Dn//tXU1OYSntM65z9kzuRTca+FA8biAkUG1OBQq/HempIF/l/uroL5mMNgD8HBf
6997	   7T4UGrtArL1OG+GPhNnXiL1lunnMsgAKXb00SlbTCtiG8JrC6uFmCYB2r6Ih7GIQ
6998	   EQWK6vxW3RGLanVtlpQTEdlYC6TSsA7fThk6xOvvacHJc35wyogStNIT1BS1xnvV
6999	   rUnuTSlDvLCnrBAuJMMLOoG8m9POcbR2v3Wd0g/BkAXEZndsxX+jwfT18haQJQqr
7000	   Ii53EgmJEzN+dkhs8rYZple9zhRfnIntwvKB4wvFu3HgKD8a4oFEF/OCNVbCG8Eo
7001	   fNuJ77xRVzNNytWMN/BSdgq9MH0P9puEpDPYyeaFOZQcCqZCRSL/dSgyRWeqgppd
7002	   xyjjTXvucoR2c2pDLeI2MUrT3Qa2QBhHOlgVLDFWD/kespr8jkbYl9cM1nnJXWgM
7003	   TYNSn+AIvLnjPyRDSsJL5BWeh3UkRxvnYMaDL0SqEZe27fFIlLMEXPKkBisggpeM
7004	   gz3Ju/0B0Ot/ZlfqnrwEaS8WGTx/yxAwf/l1jfyvyHzoXt56fAEdq7115OMO2zLu
7005	   W/X/Ry5bv5Wl3I+a8PNC0TyOGS2A+U2C9OEZP1woCAj7DdmXdyetKRWkcABk+R8e
7006	   KRBnIZBYY9ufMcOeKlArf2S4x+CfuXtZdJL0tU8/JvDNYTeJLPPSmOQq+IwO5uS6
7007	   VQ1DD1yK8V5ynKOdqcVrP2TFCYX1TIQXnS3tk6L25l87Pt2PJBgjpr/LrX41qSdM
7008	   KfUIMAHKxA9IxDzfSxnhJ3K3l0kwYR5NNGpIR3KF8iMaVM12hfzPHuhGqGmRWz8z
7009	   ahPKQ87SDi55gUFgEyv7xKdyKKkMGShADfuS8orLlXaxOtmFKrf71HOGbWlCF/VN
7010	   wPbDc48mSPEciIHRdAS2+tvHJ1HjrEOAqNrdyOrsZz3/PcpMSbU3BhkPG//1yl7B
7011	   XJ4eBEiHp+IoSkH0Li/trO9ea/Eq1s/8yvJLU9I2mELlFCASJBh9W7jc6tdVzxdw
7012	   PVpXm/zDLyqsnDkCP4zvb/l6h7IWNBSlsjbIMzz/VZi4EN1zAINFovRikvdUxzcM
7013	   QWXjLmXT19X28iV8nuLZjueceeydvjpP5Qacj7WB6TEVHbR2dvMvuColYATbZ5IP
7014	   NDUyvEXlgI2L0fiVZpjO3zyB+cykMUHe2SACwaiLnS6m2xl7lP1SMl/Ivmjrz9Uo
7015	   B0laA6uv30t11YX/FtOfCayEnX0MXKn0QxTIWDkVIqykzbl7fnli7sipcxyrYKjL
7016	   vuUoTs01FIZLiiR5f98FSh9VgRcaURa7bM4RlpSVrIkxDxj1uQkjFTW/fm6EmYxZ
7017	   U9uXCQMILgp2exD6qY9UTgTS50ZYTsGuzHUMShpvy089IAWafd7MrClWAAgJ9TEA
7018	   2OTmeW0CUhpsuU7SRk3L5khrRDYUhj0gLHxjEPpBnk9iIeXDOYPTsEix2aOXQAOz
7019	   sMxfuPy0BLk+b0AHmp/JvreYA/3Fe1OjNIDHXSYJBowUwrqnJMC2BQ1ZA6q40hWB
7020	   /a7K5uBNRB4wTUVXXgXTjRM31F+qjYfYGf6Gcw0PVlgpWCNnUwN89omFEON3Iydu
7021	   7m/40WGHkRvY5DO6PEyR38hVnnlcmxMAI/BT3GopBxQSdEpym2uagH6UeaIvFkUM
7022	   pnzwM/XvkQJqy6uVjiVLwADPRuxk49k0FTNKY1XPAC1TVMbg5JIn3lvA8MTZonAT
7023	   hMX+GjVBx7oHgtF3g7MEjdoW4evc+HieF4JmN3Efij5+HWv0Olo8kR4G+leYrSXG
7024	   qk9Smld4N+UX4X9PonDtC2hxUs8ojV2dblyqGWgl0VrBQhIWAnn3e76A1km2fqEX
7025	   HrqPRGdkt+QcP0BFP3dec7/YITy6Zy4PodRCDBwf+IVgK6Rm9y/bgJFuYIdODnOp
7026	   wpzoP4qSK9pS58RuBKZ0iAV4za1UJ9QxaPc1nkc6DnqeOufHz6WR/7IjS94paerY
7027	   XsC7ly0HnwcwL53zhKGjsv48WdWwXFca2b4gAVuC4HWNFaQkYPUtFcC8Ahmj/Mec
7028	   L/TmVjEKU9IfStmwvzylTvHhnbT3udRVKXPKmPUyImaQyNU/1qzvdomRbhSJTDRo
7029	   b66S3GBWcFTLdLt1lfZlQTWgvQyu4thaxtWQTtGMX5YoOLFsmDVahsZjoqikKvbX
7030	   CJ0YhvEqJEL4+sfSXMRHqtZbOjO4o18I+wRKp0xq3yzM2rzFWsoTAwryoBHxzLvR
7031	   q0LdDURt5qXmNDx5+GDiaK85QZ3KyKvhKkd1Bqn/GP87dAc4kk3T8fgTEnh3TOXq
7032	   9ie1lpOQsUgrg6ad7jDku5N54QLEoJbKtw++9HtQhpjNWemYMnR+WK3Rh6ZGjij0
7033	   hulTG4WkDkLQJBf94j+F0e0AwAGPfR150U1w3fehnCMW6qdV3TQ2YqZ6aL0XoonH
7034	   5q37KcgoJk636h+qXkOKikxVCnwCvMcnaF+ZQE6IwmgiV8TUYVVbSCrtL0Dk+5W9
7035	   T+ZGROgZe6Ro2g1rKYVGU/D/MpqYJodUNII9AOloc2eWXuIXdGd8CcJADmDJP6z5
7036	   bMoGLXudivQpm0hGScHvg0s7A5KUuSGYGJb3eGuKh1GARjkxW/pMbSwpMmob5oMR
7037	   UCEA91EKlSWVsYT8utyarh+MHyzSruV2+6qC2n/WVUTQ4moeDRWWDaDiiu/TjVIU
7038	   WkscDMV9SU2BaXDlYG/ING15oGkjo/xFxXIF5/eFFXUo8PQNbI6iI/WVsuQGHBMQ
7039	   5RYRifuLhgL2N55990m3oajpGCQW/NODMbfK2aJqvcNsgs/5+hmuQBMPN/sbr/C5

7041	B.3.22.  S/MIME encrypted and signed reply over a complex message,
7042	         Wrapped Message with hcp_strong

7044	   This is a encrypted and signed S/MIME message using PKCS#7
7045	   envelopedData around signedData.  The payload is a multipart/
7046	   alternative message with an inline image/png attachment.  It uses the
7047	   Wrapped Message header protection scheme with the hcp_strong Header
7048	   Confidentiality Policy.

7050	   It has the following structure:

7052	   └─╴application/pkcs7-mime [smime.p7m] 9730 bytes
7053	    ↧ (decrypts to)
7054	    └─╴application/pkcs7-mime [smime.p7m] 6192 bytes
7055	     ⇩ (unwraps to)
7056	     └┬╴message/rfc822 1956 bytes
7057	      └┬╴multipart/mixed 1892 bytes
7058	       ├┬╴multipart/alternative 1126 bytes
7059	       │├─╴text/plain 379 bytes
7060	       │└─╴text/html 463 bytes
7061	       └─╴image/png inline 232 bytes

7063	   Its contents are:

7065	   Content-Transfer-Encoding: base64
7066	   Content-Type: application/pkcs7-mime; name="smime.p7m";
7067	    smime-type="enveloped-data"
7068	   Subject: [...]
7069	   Message-ID: <38a0b7ba-76e0-5351-93e9-f44877e20e6e@lhp.example>
7070	   From: Alice <alice@smime.example>
7071	   To: Bob <bob@smime.example>
7072	   Date: Sat, 20 Feb 2021 12:17:02 -0500

7074	   MIIcDAYJKoZIhvcNAQcDoIIb/TCCG/kCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
7075	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
7076	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
7077	   Boq0MA0GCSqGSIb3DQEBAQUABIIBABemnHHf75QhIl2ZGjel+3wmhpKAG/LVZP+0
7078	   rQgw6ZvFFxGLNvTompRv0NrYzBGh7tJR3lr721cWSQKzBKtnpAind4NjL3EAO/bX
7079	   4hICimMlE3HWS5LqmGefPGd8vhuxP9eAjXGh+RaGp9YJEQOCptHAEeHHYnGV0gOb
7080	   3dQEJY3PAcn1JhIX0gPGIbPmjbqCgRbC49F2zWBJvipWADfQ0CE4H0icrG/GoBo3
7081	   KbeAMTV5CRmyzb2dbHdJq3MqM8cZ6WfoeeJKeYSekwe1p/KjbqXhqtnWL3KB10Cg
7082	   y9Mzr9Pn/HOeXgB2utuszGfi8n83rihuQBpuWTKPCgdnrGoYaXkwggGEAgEAMGww
7083	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
7084	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
7085	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAPRgN6kAFQanQSKXPQSUt2zjy
7086	   aTK9dJDqvQrMrgWz6QjVGxn4hAPnZHoEYhW1RAZ/q9XkAV5UQb3U5fgZ9IkRwTy+
7087	   V2Gu2Z4AWIAsWx0kRkYxcu/h2JlYjOgaJmKDwTFzkg1SrgKgre7OvivKmGfrxl58
7088	   D6IWTY+8lTkTSwPMFIeyv6is+IPsGwdz9O+vYPxxaap0sGOCtYKAqwkqRyYaOHH/
7089	   zM2/OyFQ70e/SleSGmndLkodcDQV70VJeznDoJ+c55sJ73aujN1YN8GWL94ZnMx0
7090	   lKKCeOG3/gQ8jBoDMdGZBIJm9y/1ITfYskE+SFesVMJbcXGT6il9105lrRLhDzCC
7091	   GN4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEELPsK65V7wIe15uJa7OWzeAghiw
7092	   mRkClkXZhb1LxibsQotZWBEOBE72+pz9l3DXSIkD5Dvd0r0Jc21r4p3Z/PxxX6f2
7093	   fMSxjP/an/OcfPq19DGzbLon4NThL64YLmAjAWYeoP22DJZNGirpvUXDyMdqR0u1
7094	   egDe78jmp08JMy0F3p8v++lkQhOu9WZeg5JZ9yJB9x2BJwnve3r03X2ixRQCPQDc
7095	   S9UCcBXV9zIpRjseHhe8yhLimaIqcI8Ug7yqY2gM85ETfzHFX/KFALO/hQuZJo6t
7096	   kmHxfsJ7WvowszS4n1Rt776ooXRW7iwWH9xdi3NIGFilJLsbRAzR9g7Kg1V/I5d6
7097	   Nh2G+fD0akyrytsW/lKg8jw0Mqja/f0UFEvTVGTN6D4Yd/I8c7W3CtQke99QM8gB
7098	   N1A9KOexpivBPZaxb4MG9Y7UHo0l131XIQxvbBlUB2/eK77PVKJq96NXusHZbzEe
7099	   qmGM0/GAEccBQI10JHP/i/ozD1icRENY+v9iNJjBHIfLQuyQlxqM++FeJoCU2c0e
7100	   ZsgVGlTvjl8C4XCtfh+9MxlWdpldoaTNvpsmX6r43N/TF2GaEyHU9O//bDpCr+Ck
7101	   G0NI88+I1oJj+e5t7HNJt10BCZCZ8NkYmE0cwmieBWzIBHB2bp9h6g/nzgpVU1bP
7102	   37++dp5EOFf92RBfL4/wEXoeKs+iA7BpJbWXF6AytE+FpcH1K42V3+p1CBlkfiJ+
7103	   KaXR+EqmztZUBgUfJgB0HioauckrGHuSL8Pb+36j2f16yHsMCvOemme+gMtm2Vbu
7104	   YnHvx39UkvFMjIm5DHhDe2IMo898rc5wvri64HkOltEwgJWS7zNCU3FINVy0otUe
7105	   yYRaGD8vP+QWxEnVV7T9t9gIoPKdiMUXmzE7GdB0NgSew1PgTYeKp7JD5xR7Di7l
7106	   5G8Sia5KxFHMTiqFQEHIQfRCd5ka0pSREu24A1oqhH5AERlJQlIKYzH5yzur8jUp
7107	   RYprPX0VJ7A8TWfcpETQkJaH9n4iz6uv3AzXqziQiSYj9OqRN649iuIWALNaVsGA
7108	   xEVOgem8cBkx3TYOFyFTcrbCgiQsUHmr+CoemXL2lGZzYpeMCtcfl8J922n66XA6
7109	   tc8hLQ2zv8T63MkXGTLUvVKb3gDDHfs6q0Yy7ZUyk4ULUsVne4bAhDSuC5LdGjuR
7110	   A/8V+tpElFfC+WcmgkNpfriJWAobaQajXyKfmpJCpn8NSX7UDy0+3Gqc4SLN3rU9
7111	   NfiwB9me6rZOe3SJ+8gQUvtJ/r8pEE3lfSWDxkiLIcuHmSLCAtJvOxoHUXy2WhFL
7112	   gHPvj2AncfDF0Uz1WAL++mZ5o4eazqFUf3znZJka4XHa8ge/5NsfF8kGp4Imw2IL
7113	   BNSa5p9GJMvMMMH9by5idjxhzwGSEmWpXgO10DatC0rAjrwNb4MbW8w5L/jHe616
7114	   qnKFAn07LGQBxRLmymUBTfkDGQzgK9ioV/z6A8aQqPyFmWwCGr+AyUwkb9RCpdoL
7115	   B+nhHWFuwdoH4q/J8YP5AxKWudtipj0s45ABs9OWRnWsmeGlR8Ont4NuZJOdpzAB
7116	   fSNl0PXJP/bJFfDmqsRt4kzp71nSK8IW6Zda/NlLlua6BBhBUUkYtW040/b2miT8
7117	   iZU7+k4GN/Apg94Wq09JNtUltma+NZ7+Sp0gRp21OTxW7pbaibpxqRv+YvouNjuu
7118	   f7+oDSRzjNSVinMbngLjNMXonk/dxyFVpnTLCqItkgGEgFSq/90lgpWPi5BU/sXG
7119	   jjkIcXyPn6nmpzCHz8izZyPLO6j3H2fcoyijuiVeTQ8pf0CshykSbZNI5yfpEgwv
7120	   U4ZDdQFih9VfM318ILVh++BIXu4qNq8YSUaMF+TbjKZY85ls8i4x4E9UbQvG6KDS
7121	   gh6G1yBmBetkNO+JQSo3v4JraMTsfqlngVXsSs7MnWgDAPpmQbSqFWouXGF0K/cb
7122	   ZM3uc1nU19EersOpH+0d9dmYNUIXzRbN6op1prxbeY0A/Wfac6XtGjmn3s6kcVKN
7123	   BkrG5eZmX/bv0YNkirtILqRyLg1b6/cCUHMBWPzQHvqrsRYCJia2pU1pBahP4fFd
7124	   ubUwBL+Y163DF79VxGZIyCCLT3/6mlJIK9hzxGPpua9RPpRDPYRWgjI9lKnUHNTh
7125	   SfO0dKNfflVJ+RFHdTuQKzRrpVjmVgU8nIJ5OAqY1GLzkL85oS9aAgVz5Dz/Ub6Y
7126	   RYMyoreYicvlFJmg3+Xz4TQ78TUfDODIxXvajAr2nvrGNDKd/1zs+UK9cD+RyqBw
7127	   pyj8oswX3mfxUxDD51CY6eu2uA2XkKyDqB9+9o2qMpAzn/sKpb8Gufs9+w/h3fYq
7128	   wN438dwrgm3QmrbnnKd5DIiGN73R/sfbU+jPdBPt1+mbEcSuQfOpn248l1XXfkC+
7129	   AqgOQt/g+zVzEarovYShdrzisNOGWiL03B8I3FjMPORuDOL97ocFjEzODi9qB4A0
7130	   JxNkOWVZSKqlgdAPsnMFV6VJsUzY4n5UU70CO07YaYhUcTNDflyTogDLXdZTZ+XA
7131	   seYTmasKA4AjEi1ryHc0xakiCwXnTREDoteMB0PdsYfETV4epJ1Ulp4Dvuyu1jst
7132	   LW/z32sLvxI4Vf+0+zhdoSsVZbLccdRrGpZEswWl6jGigJnfzHmv/49VRbHk+4Pn
7133	   34xgC6w/oCKHHT4nMxZb9ZVBOONWmPu+pJsv+6oR/AEup4RPFRttX4Su8WoKV5h1
7134	   FLex6YsmBt8Z4EWUiJ1MXOJ7mLsPg15+unnWWrka83zLgjYKa47PKmQtXRgY3AO0
7135	   NnwuF4h3tCmR+1bYmQAwdJhph7ZMS7H2yEBFEDDj7ZWZMinYn7uWLYRHx8hQJTWj
7136	   bxg6I/4HYqav5AvpaDw+4boD1vHkIQiWZcDCKbalHSrUkkwPwAfRcaEFFtVaHrTI
7137	   Og1NXqKY82hT6wuaEZ1FM++S8ggsOzphHGHzfYa3od1VNFKDY7tmBdZR1UEiYFJu
7138	   vuqYfrR3HnaUXhJ9f6yNalXHluAOSRpkCd8mU6xNcZ6WFjRvtR/wnIUbCHRMB9qu
7139	   NkRzDtXFxpzOc/OM1huFXkvkchS998RqIiRBzbQn3IJnuqcS42SadtmzVPVFcWYQ
7140	   B/XQAEQOqxbBRnxGuTIQO66lQexPgZSdDWOYBt0iwgzvNo2jhw1sEAAgre12U0lX
7141	   dt1D0NX+ng4MSmm94NQpOUyVubUx2gOdktIeCptoZ/JVZ+52Pu/3pEi96QW58iGY
7142	   yQVrTTxMNHCa7y8EDgwhJCTF3p/+OBQvy2WeAxbuT7eJM8XNAeYl2h16qc9R2BLK
7143	   JB9N5n+tP1BOeVabmdYDFK9dxuR5OdiPe6p+5Oemjqduphq+THutCTMQLiMdbw9p
7144	   80t79H8ghZa6Bfp4MiWAZR9jGT0Zwti3eC9hsXAA2YHvwPjO2WGQTxVxRe4Tt0Ma
7145	   g4FQ8dlj+WhiNS9Trc6hHy5iyaKf6n/ElVbhzykB+6GVMvu59gsgh8nVlERNc0te
7146	   V8Kge5H+nrflBVaXUc9kZDWcoawn0T78dZ9rdZYhE92mtWsmcqHJzKX/w2q0ysP6
7147	   cC5Gr6raTsQRI6YM7jMgQP2RDCqWO6FNZ2oEjkR29Z2ILJ3I8O5wyHzjc4wLIIIh
7148	   +g8oEfuQBDoJDKEGA9oP/KwO3QdwCiL/splag+lFAnQ7ZY/8V6/ODPHZe11dX3Zm
7149	   52H1sFC2kjZi5jrrmAXEYfgrQz/9StGReHiB6xTnt9qNe5hzkhutkU5LCdMch8nh
7150	   2MrEghbmoCyDnMOGTIIs1MshNYR0N4akI23TtSjbxxc6tQO9KjUWGc4qBYBJMs4W
7151	   iyCYwDVIuO9W/wtEh7uHvFwiiUL4+wfVv/mxwdSCIl4iRxBbPWgcvLobNqE6Ik5w
7152	   kFPsfZ8Slba4EkRlgfjK1c2o3c1khnFVJaHCbc1mKSGOO6y2WKasLYczbfyfqv/G
7153	   vmVmF2SNmun6N2n/R6Zv8eGmFKC7tPx75tMva6+33+uRc2kBva8kd8pvd7pFHZCN
7154	   81P1jf7+Bz9zV1t9sal3NPwtST3CSlRr6fSEYKGF1Uc8K35ex4AOlAxAIGn4PvxN
7155	   8stHYQ/rs/LuxYw3AtFOGBNALeivYyjv7h5c5SMH5xgIUD7OD7WAJkSI9EAsxKSw
7156	   c8FZieyl7HSGzY3Zw9UuYU5CEbkLznkQCwbsG+g4IU7dIGko6tZNDl3TbCG7E1mG
7157	   UzcAfLlF/lC/fdVJCgseGDLiBGkXu/CsN7iS+qvRKOBflryc2fYnwzc60FI7T9H6
7158	   Rn1wpjWzX5FaXu4MPnMl1QmK+rk9R0xkGoYalw8PJ2hWPQYbui4igEjzIj8fjWn3
7159	   L2X5+Xh+utJJjqwnDZWPCgOVJe8ALGXcBm42K+YZpSSbh6urdfpN2U2cZIOUHHbG
7160	   +7FYUD/BbHZKEc4RhZ0PDI62jm7XmK39RgFWkFNEJx7NR2AqMcrzabBn6ThywOmO
7161	   XukMU0t+IODdxCkv+Eur3zD6Ckfp7nVI47jXuV+7lRThbgtf/vBsiVEgY9UsRXIp
7162	   KXR+BqXZKU6eXtVdE9mFntfpJgzY/gUGVUAC0FnkPCGGZ7nJxwBiefjogTdmwumr
7163	   OpMhPLemmKcyw4lhoDmEpfw6PC8V7Jf6mXvk7y/YBI3jhd93d4MWGrYo6sfk40aN
7164	   ipOogZChn1vVF/m9dhJCpWwYAHAWL6hs9aBMPgAyX1Se4yoryvpwCICQqTDE3sIR
7165	   FwSiM0FTJg/b3kNXbqDL2y/F+MD7GAj8wkTAfzdz5cF0zDwGEYI8VSd/Fuo/8iID
7166	   LMERjH7EBIzrDRbDN7y/hNaYW0f2IH0T8U+IsWMrE6L0M9GrVrla8+5AqBfFQNeB
7167	   0W3hiJVKBuWEAj4GMEbe4ui5brMgNMQ8gmsFSSChpsI8DDOuDsXT7PdBpTGluPR6
7168	   RFXW5Wg3NAVjB5R+oTTEDiERj7H4mQQBkQY6aYsjKgiqUoh0KMvggBfQlSMhoXPp
7169	   akeggomPbrjWDTZB7oIxb7+5uIJ/E8QpV1RSpIM+lkcEKwOd52pNGmFdYam9f0uB
7170	   E8fDDmgEqLaxpH5pT9EHCK93SvSGpgknz9NjU7mo4BwF36FW2fQ98MmnqCTppcOP
7171	   HMEh0PPuwbIPwMNXYJgtxIXVVOXHcpXPZ8Ma0AXkm+GbQ/bJ8DNwhCjym3lvnHid
7172	   c8zhr2OqPyyobkxgqqDmXd/6j4ktgbE6Mj5BhGXUlhPJvaM3SMYSK7glVMzJt6/0
7173	   l1P8Jj36d3Xuc7Q1f8DYQbug/t2+EUyaEFFAMHdhRBT7UVARIlpsLgOEIHQhgYAp
7174	   jbB7ifMNNwzy0Av4Ljw8blaTXOAiA9XXbXxUA9cWTehM+q4aNwpC62qpIYfDsiQE
7175	   1PylVVLaXp9dvgVoUx79PSYL+IK0oJVBd/8TC+vxrbE4oMJvivfKpRjvb0Gs+df9
7176	   pGwAyquOK0Mca/VhDTj4iz/wRfVN/XyxlYrIqL2SNDvZOK4XK1yoM4Hpl7VR0fwS
7177	   tsVxDUoufFGcOGWdcxa4G2xFQE9J8PI4zt05aTPVU9blGobxY2h3RK1ckPueqzcN
7178	   YUIaBCLZv1tWXaq15r09dvH/77Ft2cij1UiWoSJqCsUpGqaupjYxm53Ccd6GcbFC
7179	   26NoeKqn65VNLhBo+fEiN66igZhLaARY8pqqs9vFJPFXiz9iWQskIXul7B7dy5oP
7180	   +ZZmb570ZWUWyCX95um4m3h+OpjjzaKL3NGiYSIZG6xmJipZEFBj0Pz7oSVbeG4M
7181	   JmjpQoLAyFuyRjjDw0khwxWfURov9+vWTTzCriLC82Y3bZ+yMsLQzSVRe573LgWP
7182	   IHBWKHQCzAUO6OtKVhk8kzOav4cxUqjt2Z7iBTLmOAnBgNQQ1GBSr1WPddryXjTt
7183	   8px6zLd61sG1ki/4Wms+C02hZVc/p7RpK1C5SrsI18TvIk9Bkhcg1G3lwRSsdRkq
7184	   +mVXfiszPZL1zUJebHljoGK+uU3l9MsLC5rBQ81WvCr+M6ggZE2ep+fZTs8TAgPg
7185	   YpfohgibWutxc1bkDOCL51nO6IbN4DS5Y2/VenQ6EivFGLsnB0B8hJ8lAAQ3WyJJ
7186	   6GbRxlkkOhYYLTBl+DOaVc6/+ncmBQVoKeV4ATm1GDybxnNvPXGTGx+zom7EVIrO
7187	   btfAlEE7Yp+Q+roXlXhZIiS/W0virxKQxFKthhhzGR4jbR4Hy9HKeQGeJnk/7plG
7188	   9RauFd/iHdYQk4paXxMEyKPEj5/JMNhcY08i8Yzn8wUnHMgRzSN+hJ83XBODW4fN
7189	   Kg5TXhAzWy8hX5t0xPU/xzyzwj+TGGbJd+7dkv+9GTJ65MZG1VVHRpiEBEFj9Vxi
7190	   c3xTrice9/QULNIHR+o4beT8j2SnWY2UpyhYL+Rbo+7nRy2n4o9PKjzMYWVS6tNV
7191	   biFel47a+ulvyTi751Vhd9xV+VdjO1IEMHbzN1T+5KyXOvZBfx4eqkdsZ2Hj/5Gt
7192	   3pFODRzhz9H25rePaGZEba6vQe/lKsnba+2WCH2NGXToa4i/CHWIvUMyVM67AwT4
7193	   wVoIePNZcFI24Pnmp/8ACtumdCgTSD8pfFc/mh1Ysq5gU1tRLTODTaYv/9poAVOy
7194	   G2EiikP8TST553FyQesWtlkOcUvZyvGHhECjsixSYJ+8lrFGd/3SuaXP053Iwavz
7195	   KswYHRp5ykstVEbkLCBUh4pBvKUCr+lzY3EYbcV6IenO31PFHwbgWwoV+5Savazt
7196	   f4oYeWzl9fyzY7ek15NqVpKIo6Hi/SkZ93ZDf6IjcN7fBot9uZFQZ9IJ/jva/r/x
7197	   9O3e787qED29fhcqQbP5mYtvnUTEgYXriffbqPnrY31e4UMO4XuncNoXBnO1uDKd
7198	   EQCyYo7Qu3HvxE1aS1H2jx6wliBzBhIv0QTSlkSjY8KuO1Y4zYfdo89GcpEcAUWW
7199	   5Wz8i2jtKqHpochDl4qnRKIcu/N5ped7HZ2jtoxR0erZkrfokujVj6qx/Mzpj/ta
7200	   XF2wNkSwJSMyeluo8Vagsk3a/aNDwwN2UAb4S+H23mVWFb1LmlK14CSSOiRLBbxr
7201	   72b5u34wsMuaRjs9sy4YTA13PBpRga4vLyQ4dBntDj4mp4w0iLXS22xx1u9y/FGK
7202	   WWKDS0MTmTubwZ9RB766/e4EYc2KeGMq6ytTC1GkBSDTLzMGoJXvMaoeVcaDzclV
7203	   w6NCA712RkT29BI81vNW8M5d01Xp9LyVz/HJbP+Ku9EjdUX1DHiv3nUSvEtRKYaD
7204	   ayDvY9avOqX2x0VVx8i1sSx00ramjBfX+H3raR4zIdHYdEylEQNaVuukLQweTbuc
7205	   48BJi4WGzYmrNDhZ98qxQIJJOU3ENFZ2Nd6dCPGwsoiRZG8B/oLZCwbduEdyUhVf
7206	   574qupgra4B7oKrXn2bBb6GCufPrDkqcyYpq580mMuCfio1yajem0ozLFSm4xjMy
7207	   dYKR/FTb60MfAM1iDPTCDhUtg3NsxjbXlaxFjoipdaFT928fR3sbi80CklUxt/JP
7208	   1hyM/aOI0d9eFpiAJvaz0QPpqCrR8V1c8+edYxhymI4uY9ZFzTA66wgYOr50r/gm
7209	   OQDYGfPdIsst89dimu4VsjOQCCwH8KSLL9xdxp1vLsbFMWBxCNh+Wso/HLEhwrrN
7210	   nd52fJCIqLKknBEH3wNPWsadrsPyJ+gzhEmF5Bcl9zhiiloGnCFZ6H4Vl20dO0du
7211	   K9MXE4g5lJUAWEGCLU0VZRL05PmPDWu7nRk/00Up5f3acJ3OhhuBoNMCF1hYlDd0
7212	   r7xKN+8PYIGuMAlo6FtLtHQQ3OMAMspIE0yvpQy4z8DFHF7Qg1OJe4iC1GS3LHcu
7213	   8twH8qh3nAtD1RrUcTzBtxFhN+MuM7W6KHNN3PX0M6ZaKmK85kbmjQwyW4PKL++O
7214	   bfB+XK5qKwwLFmhVt8hGp8h/ZNjn2rS0JrNHWc+4vGmgVLjoiGtYz21WpQmDy69z
7215	   mmU5qH8GnHbw7bhKwCFIVBd4FHS4DCSNVDqpxD/hI4k9mlRyIquhSacoWk6J3rH0
7216	   ntIkWuAsjw4v8+arLCCXfutBqMYLrKtFlOED/6OidqsFRtCH83DsgivRTvwBw3G5
7217	   ogcNF91U+tf7VN8ij3t11LhGaXIGdXUzb659IiSVCAmqzojCLBPmEPQOgeWnC8WY
7218	   TkJnfZ7E01g3WkOiTheVE7sCVGy2oGQ8HzvzH+AVv4lNi55IxPVWVgLEFwbQhRvM
7219	   MeRPidNChc78jREtwyVJPsxKm46gyN/eYquZG4cMnMbM+IzMid4tESznXMmiJJww
7220	   cZi/nN7mSSD/M64BqvsiZ1L81JdDQQxHvHJrTlWH2R9nozsGkSzr8IpbSienRF/F
7221	   iX7pNZXAq/L3mPo/4iC3XUPEPluweAVJfoa/irEZA1tu8eKFqIqQt0kGsFYO9Yf4
7222	   LCXtun62PTxnZ8b9NfqdzWYR3lsJE494Hq8PwMChPCE+YxtVjJI5Wtx9A59otG2S
7223	   FhjPjS2KIEp6rONnbasJnAfb9JGqAd9l+yofLqbajiU=

7225	B.3.23.  S/MIME encrypted and signed reply over a complex message,
7226	         Injected Headers with hcp_strong

7228	   This is a encrypted and signed S/MIME message using PKCS#7
7229	   envelopedData around signedData.  The payload is a multipart/
7230	   alternative message with an inline image/png attachment.  It uses the
7231	   Injected Headers header protection scheme with the hcp_strong Header
7232	   Confidentiality Policy.

7234	   It has the following structure:

7236	   └─╴application/pkcs7-mime [smime.p7m] 9775 bytes
7237	    ↧ (decrypts to)
7238	    └─╴application/pkcs7-mime [smime.p7m] 6222 bytes
7239	     ⇩ (unwraps to)
7240	     └┬╴multipart/mixed 1924 bytes
7241	      ├┬╴multipart/alternative 1130 bytes
7242	      │├─╴text/plain 391 bytes
7243	      │└─╴text/html 472 bytes
7244	      └─╴image/png inline 236 bytes

7246	   Its contents are:

7248	   Content-Transfer-Encoding: base64
7249	   Content-Type: application/pkcs7-mime; name="smime.p7m";
7250	    smime-type="enveloped-data"
7251	   Subject: [...]
7252	   Message-ID: <c6774fdb-3ef5-5293-ab2d-eca8b66b4bbf@lhp.example>
7253	   From: Alice <alice@smime.example>
7254	   To: Bob <bob@smime.example>
7255	   Date: Sat, 20 Feb 2021 12:18:02 -0500

7257	   MIIcLAYJKoZIhvcNAQcDoIIcHTCCHBkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
7258	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
7259	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
7260	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAGgB6GKG3BktdYx9b26f98xIYUpPO5jQYr8y
7261	   mu3jMU7EN5GwAY0Ip8BEEtWVO4kkV3HQXLjPR9kQ+v82Lsj0MX6+ByE29ESGUDhu
7262	   xH5X4grXCpBo7QCwHRP3vMrvz2rnUwT3qmP+15eIT/mpSlCSn0nVe0yY9/awCKEY
7263	   FmhxSOz8c7ZOeJnKwD7Dcen+TGr48KGfjykISEpESzDQRkMxRHgysV3/LtVP4Z85
7264	   5GMCQWcWhCsG3gjYWv8qsinz5dzgsCvNdyOrK+q/PwTtAaoGZigwl7Jp4qzp0Jfk
7265	   KdovaPtczTI3cboPx4J9SOlkuYOoXHTvs8TVhXehUejBEpRXnFwwggGEAgEAMGww
7266	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
7267	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
7268	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEADPLALl6xgtRSO6KJPbXlmwZQ
7269	   rDBh5k3KXiAfi100Q23nJ0d1cwaDu0zASg/Gfsl2zg5PbVesXD2KiIQrHxnGQniD
7270	   6kXIvExpulKzi+JVIWUHDsqAiX0rXWC+pqu4Xasq9vnDFiahZfjv432Nfu7ntbR9
7271	   InqjlWZHCnm6Cx5luBIqBjyI7X2ScuUS5IxwS7x5NPmo5zvOEAiAqFwn1+sQvnLB
7272	   1IfVpAJzRlWOQ90wRxHOJ1TdCKUPBKz4DjNPZ5QkKoyrcZL1NRmZhc1zYaO6/WkE
7273	   fKcHP9whDZMI6xKPVXopLdoG69yridXDfJ9/cqPHZvnOQ6C9FnDFb7UAOqodpzCC
7274	   GP4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEOtLatHfIQxoAtToDlaMkYqAghjQ
7275	   vboyJHrq47OmceZe8qUJUTMbh4n9X3Xm6okY6K1/HEL9ocSqD+YLGlbuJ5LLqkCb
7276	   6okCbGytW+zDCBPmxbvXbNfCPVDeq9S82586o+ZkJWSKk62Nvvr69nIOjsL8i1jM
7277	   A6gmqLvYBlyzPX7ZJpaqPSG/MTBaErO5iawYfcMNw1eMcmOWK7JKypzAMuYInsyL
7278	   BCGP47SR3MOtq3Qhyj5dvUNCNhl5oVdI0iWJdwVHVPyGdtMZZcTrZI65+hrvfcJV
7279	   Kz+Js6If3tQUGXtcoHCpERiT1UwQXJgjuGOlYdMfpGGRdz2ysKclBfoOjnxJ5W73
7280	   7uBt+1Gp70CnII+OnwqBLFpPlb+VyKv2QovMlyDMtc1YGHbZR4EkWgqmfa6j728t
7281	   BhqDt85tMy7wVc83rrDfcz4xnlwBFjG8rzoZvldmBCDxW39oeMLnosnPaXltFP+v
7282	   hunoJtQi+rtocaoMOC83Um4OXmNvhpIMQ39WbYGEeJ3riQFQbvhkNr3iMHUo6yt5
7283	   SK8U0LJAd2eUjPATP9fR94bIp9I1JaVB2Sv2BDcPeggly+GI5bFlR7FEO+AtMw+2
7284	   nFjFf1oFgW3gYg9z+NEepQtMfIo3IrZGup68T0XuxvObSnUMx5vdjaIkILUxukwU
7285	   AtxxNzwbX6J2Hu0P808wz0i5IwfMONZGE9Df5g9d3OF3RbM7oDzOAvkljMTYC61C
7286	   FqkoFmsaiQIDihugvYjOcQBfFzCU51Uw8e3L0nkeJbCK6Mh7mPRop6MmBHPW6dLO
7287	   twq/HLZCx0ShnjfVshxS2dyxSJuFrsrqhM95RuOWEFn9Jb+ww3eZBw4FRyYsTXda
7288	   V37J1UpU5EFWjFaZe6h/fLZLm578XhVt/YuutPgNoI/nzAl6zf8MmSIAMLsY9aWh
7289	   0+0TBltpZe3Iucqiio5QHpAzeXSkgEnc4M9lorjhc0q0EPTJ4DyWN/P6L7DuDhMX
7290	   zHua2+LB7Jk3MDljYcZLwRcTWACnzhxk23ie27s6lr4AQMNqtJ2McH5I+LDaV/4B
7291	   o7v7z3e1ytN+lu0kD/LcnobD0vPCC/kNdzybZrdK1QmXf1B5g8bKtn9U1r4hylhr
7292	   q/5knv4BOoq0LO6ZrJF4SLR7V7yc5vlwPnde6S97l+0rWCKNYdQo71S9oQ8Ng+LE
7293	   FF2+qgTPFrxieYkjfcg4ufwvobr+d/a34cXCFtkRzzdRZtHezc5SET28L8QMUKQ0
7294	   Dzu9jNc4CVpwZcZJCt2piSNUP2ZtG5Aw6TJoU0j03RgsRjYZRRK/J38EnfWQFDQM
7295	   NVgM/W9t5eglXpW+5lfvbOwGdkF/MSwsxUFMdGkTedteqMlhEZ7gYKKRyeYgTlHu
7296	   wXnWR9F13+ia7i0mlhW37dTjzRgFqFgOkWcZaLGHtTA0//duQNRCbtpqpaXsPBRS
7297	   LB7fLc8FtcG2j32tDLJ196R6U0cl3/4f+ReLxt7SHl+UA62IhnljYjC5BHQClMZ2
7298	   FOD9J3zM/TIwhDgGd7giwr8E6CcgzEfhR89m+atgRGkKO2P4KMZ+jsDZHm57RIP0
7299	   SbeCDIHU/12syY9XWVkqpQ+RxFuqOg1ifw7w8OtS16NXIB+hvc/ods33JdaKPmhL
7300	   0xHMYOG49VaXxBNZKMUV3lhbH9qTOujjvq5Wv/Pn3VX2Ikb9on1iLhGNnWB/7wj4
7301	   y+5kyQYWEWJLEgIHNMOYRkz4ZNO67JJzUJXOa3FEDUHaX/LGb5BGxzSStP5+gdbC
7302	   bZauUhSd56GP/DG9hkJBkCaSoh9ucrwRTy4KA5Hq9HW9hbF3bK0O1GuxGXME0ATn
7303	   MBN7QGvv1rEsIq2It+P7SJ8lOYXd5JKqhOA4l/pXeMkMJd85fIH7/tA1vmmaiRp4
7304	   89fTehgfU/hFs7ZoUMKyRMoYwCxSBNPFKQ/pQ7oKQlFSFMhzSZOzXU0galm0JGWl
7305	   wWx2zVYmMWt6CsDUDlPxRJF1stohJhCqAVaiWf0ryH6wpyisOkqEiSc8haCbZoaE
7306	   n7CklIz3SX/Y3YcdGa1kLdBNiTTeQgaDp2fCjubN/XgAiNN+0cSXyrXS0WyXux1Z
7307	   vk26ZFeM+IUrlTpqZSLqmQQThHPmScIYN8Az/tTHkGPqWhl7GnMXrLtzGN7SPCs/
7308	   AzAULXxJuf7WysusSsZ6V6KBF42ommqNIC/3IBuDRZRSblG1LUOV3LcvCj8q1mSp
7309	   kdZz0O6G/gcWvPwFBY+xNfjAmAVLbOOK7szIjoZOL39aFlaqkLAzvBKpZSs2cRdC
7310	   qhHhqV4by9F1FTNoKi6+X6ahWpgtzrT0Q67StiCX0yKxHxXau/GAoyt55fGG6dHM
7311	   gFM5n54FlJqUKk+SugjX8zjs1VlBA87Qd6hZ5zpi9iQPZT7OxraZFJ7usdgnt4w4
7312	   P8oCyLsT0OP/TJ5uyyOm20oPiNy/MO5svThrp3Sj2hze3QtVyehi+GdC2QtsGgtL
7313	   p8yk5Am+hpvUj4Ui50sO104C1eNvFCu0CtiBjiGAXVa5v6jxCauIv0b5br82rDTC
7314	   QdU4NQrFD+7940k+Zl0vnQrO0nZtXzbglMute1QB0RhFx+e9SFlXqXwuFichOREb
7315	   Hhkf29fn2lCjqPsvamhIADTDHWMMpvB1mp7ra03vRNTDaiPDGAIxs2hbKWUNZ3qY
7316	   rgnNdjqCWoXw1cJEgPIVhZF88/eRRaHg+4bUQ/1pdhUt1nrgUESxek4Km7FJkJkl
7317	   zm24dCn/QvpIP36geABxN3PMcu5qUCrWn/kDwaK28VftOdRuArsIslNMqvpCMKJU
7318	   c51NYTnPC6zFZv7Jcuv4Udnxlt5Txx1i5FhWeH2BemDiTGtKXYhfpN2WQmLKG4R2
7319	   5UUH97g4/ccyPFTdTo8Vt3flD4o6j1bx46rKbIVLrCGAnDkvyYcNcdV8lGSbzMXr
7320	   h9/uax1DQ5U/yJAz7EpCDR3V4kqdGyf0wN4Hu/U7kufOSgEZSAfmMM4Zt9uOtfK9
7321	   gen3dxOg9syJuFf72gEqzQSB7eTPhmNZq5Fz1LTSa1JShZ50GYBuF4g2DCtt3RsZ
7322	   PQzFCx+0H1EtS2LWwIGyqrVliN5sgXqXNZ9jvxV+oxuNJ9tLqJmP6rPsuwnuWNqC
7323	   N6lr2LLq/DNI/KuJQvjB8c9z/znftdv7b4hBVEp9Avu44fhDAuku+tRhTCyrfFYk
7324	   cdJPY4gLrADre17btiR2V2v/MlJ5mlZlZxQlWsCcxn6ZlRRqoBUi2bVq8ZoM3YSu
7325	   FzCnqtx6nGQLhIbzQSlpt14dJVjslhKRTXV8JgmcBNXGsJXO6CyZsl1pOQSonWuU
7326	   u19s0K++2XliTOeRL+0mNjI8n/Urz8gUyNrLGDOOP7/Ad1Hl29J98m/JwO6YgT/8
7327	   WzbLdZhBtKLsa1XRJZsaClJSVSU3KLOHG66+nRxvjWGqjRdo29OqEWTLm5LN42wg
7328	   +18plDsVOGE/k/GYQG/1CUajmY5uQe2GxFa3MHEYQuutoJzf9zd2fwgi2awktZCS
7329	   X/L7nQ465BX/5/a1w49QGLIgdxCs7aZDluH24w/nKQilDFmcu32Zk7E1raivt1T/
7330	   R0UvQY31YXX8FOPKdqrkmYVup+Jm/HcUMTUFfeox/U1Mp/5hpQCQPLJtqsiFz8d3
7331	   UtEhsDAWhyT+qvmRWWaaZqLxB8U+I413kqPvbzi+eT/7hW3uWHJHQENILOE52Gzo
7332	   vTnIqg0aDcVlW7c7LRDxgNyBbmhfstoE4edSLucbgFNDK+MnLCu5CFhKTcFnncXb
7333	   k4eCuMhXg6C8t+ync2+EFLGwFci333MMLRxDu5hWvFHBKOWHZlwdATg6Rk+Y8GrH
7334	   8w1DDRvFU883fcdTEnzs9EzAjSQQljinQ5bZrG4z/f4E6qYM6Wx5V74dSbt3UY5W
7335	   ytC0sBSSQuwCaT9RWFgQg/NSI11hSw0UpzaLBdx6o7UNZf86eLZ2dQOUpT5dtt9w
7336	   dggL1xWPwEimCFdAVIakcKQgkZzPpd3ZBNFNEnN6hvmc4exXJJSr06HEdl4MwxYd
7337	   7kBB8EXsx07J8YWThRUKydVvgmZI9beQAnLomg1HdkUYZ9AtLNOceTTOF2k2KN5u
7338	   qbuHfVlJs8Re8z0G2IX4piN2LiNugTXhrhNMDRlHkg8TIlYJVD8r9wldWDvCvhCK
7339	   +vAFJXtYG4w0jJDQwLpYWJhP40O4OS7CO1m8X+SpF5KHsUbHXiImHX2j2QfBlMJi
7340	   ZOMZS4q6c0BI9/atOx9Vc+aPqqw3MPSQPmOJcXGsZqcn2nRvmmouVZhejm7FUq9l
7341	   OqbwzgMV2VPiZZcwNt0BSweQmD3uEf0Dxx5yoK8h23DhhYnqIyF4lFvTa5ZMunqj
7342	   8cdbo9W5XhSK3XfLi3LFSLASSZxNoPXYLPsRy1If3NPrMH78uvPvFv7PFE/bUy76
7343	   UnsJDhbCq/vIXlthN9fBsrlgc0/n8j3Zr9cuVnyQ/SIkumPbNdlN5cnoLNXJxqUX
7344	   DRw7CVz3EHt/oGO+ZUw2oT7TBfYRzNorbRPaPG7KPm8s31/FKD3FDXJVCoe5uuqT
7345	   sIlMtDmCizdddEX+GL8nWvR45zNZN9LwfpkATiBm/T2fbbLXJDWHpMY68VRBN+tr
7346	   BXgDwBQPFjezurdjg2zNd3oYqMQSi8TZVcEl4l2fI5nW9h9+C+z8pZJ4LO1+rnGy
7347	   JKigIYJ7XSyU2yruJmGm8E3gq1nfCp0xHiEYI+w/ihtWHtBKDraKKc2W3SQsV54K
7348	   cQ7mwmjYy6fROLRfJvMQus6BmR0p8itSLMwJwRH7PlBKZHHw/zwAWlCSKz4yURk2
7349	   PICcVErMcXGBrvFFhTZ2syLuMFwgQ+wL1mF43D0byWTq9IFPvkfuv8CLwuN2oh4/
7350	   LU1eQmQGGYvKXlyeJOGxaltAj3h5/aBGLgRekQUDnYxqPUQWO4O4OnB8ZCotxOFG
7351	   RXLoH+tCMjDZx+cdqoEk1OtJLvu1iSY93qSccN+kBRjwXMeCWpHJPFCdO+IXpV9a
7352	   d/JwtIqbHRUqrNc2SGOKB4FwhisJOEdc1gfVQGmK267Hr9tLmA4A3AzvMdFV+3b3
7353	   +zLamYS34bxF8MJ5Jc1YTN2pFLbzRbnSrwSwL78AK3kGC1+bfp7UJySeL25HOo+n
7354	   2vikgi67xoEiXadTCL/3zfzlpnSK9gk1nuzDIROAUNXsbuNDnHi7YML9wRhbtuPS
7355	   aNhb5ySowG4b+2y78p3Xag3OWhn+Kr5zdvo+V519f184cL9zHs/sna4QZPLo1JRI
7356	   8h/BkZT22D7sSEw5zAaq3BZexJEbRnc6H+9xCmeS9HYsFHTunuLU6DviMX3SqNuf
7357	   SddFF9lvdqL8MbYmJOwL4U8V8+f8cjjtEPK6jIRvlcM04eVfoUX4qfhmQO0wUKrT
7358	   VOSegJhywPhN2vI98u5oTi/DDIY7oxg99c+BVGo75Z6RbicnrDH+R/CqMr8XUbod
7359	   Ehg65XJUmgKdI6KJhV164dwArPVdjLtQhaM8vEn7GmxNfy0QnAa8AwQEJ2O8VSf8
7360	   0W9d9FH2pNdmYLifp73MOauTe4/U8nGLcydoNQfD1d8aZVsH2ISevmoTTqbeFa4I
7361	   4l1ldSHN8KXFYsd0yGfJ0m3uJmiZ16dzydARi272Xv7crs9MODe6hv4LZEPpUWlI
7362	   DeAOqmsuXU9VASfWw/31kppojLc0aW4UijZR+5Xqac7DLoFW6ufll3cbje9TT6fj
7363	   sUTp8v9aaj/SvVY8nLvyNx9CG82UmaBdZbxQfyU73t/D1a6xa3Q1bsbtDIMyilnw
7364	   ZwzlNHOnDewl8HdaYxpPFHF6TfcV5Y0vVxBYWYjeZ0M8qNOoJmHRnq3MXTsaLXph
7365	   6PlNkiVojCH6Ior1phf+PNP5YDohod7oD+9XP+aVRY4sC+9cLjIfNQ1GDz9gczhn
7366	   dICiefRTWf7LxFg0qr2snwSTWfqXJwLE39hSYHFz9O7rkfeiQjnHWuXmHoLPFW7c
7367	   Yub2CPqdpnndpREzbyUuyxr3opHbZVNyDKFUWkT3sk2T459phaIqJW7aqjML5Jd5
7368	   +l6ABe6W85seCLT+KX7urHrcRVpp7smcK7TuusUN5SBgty2v1dySrsOHOfjr0ruH
7369	   N8sKn0cONU437UF7m7zNNY3KlTOhap9RAfhrPhVgVNDvsTcpRN+i56smOhH/l2VQ
7370	   gZqwa8wz68jgNK/OsfC1nonpeIAA5HUIwwflnZmh7K60QeJaNoizoil6iUmbUNzY
7371	   BrvKrB6Jv5gIS/eYat5RMG83dbjWg/ZsKT5dKqsAyK9FGtwuvR6woG99CUU2SCFr
7372	   IbiqTDdg2myr0t6NDZ7Gm+a/WMrEO40z0cI5wbMOTACb3ahp6+woeM/Q0B79h8q8
7373	   NaEN3+ic3Ewb7aoZK3mKnuZMRIGa72fzl2Wi/2soh/sKlFmcPnBIYgPJI2k3iA3Z
7374	   fzOvwMgnRNc8E/IJkW5Sy6x2hMTUAyxlDaQ9Qtie16n/PBfL6k4bOe4uGyMjEU5J
7375	   BShNoZE52sPdju0JSo8nB+lgGsrcH5VP1gC3b6CMGWl8KjFYL/LoB9fQOQ7YLeGY
7376	   tiu2lgGPFpFF+WBTEsrPfkkx9kSWH4rn4HuwO3ZpiifvA9SovEyRG5pKD5iPVKgL
7377	   cMtgzAoC4eBWRcQGjO1/9ASSw4osCP0UbjzRFa6AnWuI6r8aBKvbAsFjrnS3Oe/F
7378	   LTXsVSLHt/7bBaAbBTuMtEi+DiSI6qqa4ECvwzZlLt1m2OpfiZsQnQm0Rr5Cw2Ob
7379	   PrJODZ1Mdcsil1wqQ8C+/cByHvoy8UTXNoQ3eBiBEcsWVjAAue/OVltk5EilvOlL
7380	   U83Y4YMvE9sU+sPjyk0Gf9H58myEGYe3ZQClRYh0ZhBOlaxV6JM8NxwZYxL8yxjH
7381	   qwglYfwJT0z5yMwZNZ2BoS0lQi22mpnGb5RpzhMYaB9olbluh0agYXq5qawkqdLo
7382	   Y4I0ABTvcl0i/fgkQpmfeaqROJfKamJXw/gAsHnRyE+PsBOZ2alRqqke9nppP00V
7383	   VEWg04UH9+Wq3/JocxQDwM3WdlGiVq58dGeovLLp96qH0ZncDZMuS/VRfbNKt/yX
7384	   DnpPTmg92qmy25NfM0jJm2TU/Wjl3bEtniJ53e/pGrlslIvPi6jlMslDocv0a+dj
7385	   D1tH2RGhyPSGZm0AzEGCq3rImyfFVRVGNFv73nm/9GZa4O2RaKKeH8+ocyadRZDB
7386	   +vbQSRAVggikC6BnCpnpBRnLasxp87mqFcpSHTkyi7b7RBZvyRDIbzrZD1e3Y0+F
7387	   HORdtVtl3B5SWv3LqRaZUg4XIixdGM+XwbO8vyLoURMmsy8dIr4mo++XC9Freohh
7388	   fUDz5RKfkK1s/Bu/9TdJwLTtyPZ33r0bO4mJFzNxleAC2D3prKkf0k2ByYqzKY3V
7389	   gUuHc6OtKgbgcX2gaHESYxgC0iVlOO7ll+txdAa6+BE6QV46NNaeX0CPyKPwgz4E
7390	   pd21Z10844YAF3GhXSydumDXuCaRVwxB9BLHqHm90dING7UbZhKzF8BcIjVQsksL
7391	   ccAD8mWP9MBG3aCywE4rapjPZm3xH+4dv/Vw1FWkeyneTY/nOrgjTtyjiIO8oVSM
7392	   30vCtBUFF7GZZKdmfQ37KSgcgt6TmX6U9cI7lyl/y22xoJHgsB40vRpGHBiWXxP7
7393	   2s2X1lnjSxT0Vv600rcoWT/YKnBfvlzf91thmS48kQ+msFYVOnDa8JUS2NgZuyN5
7394	   tejdY8YGcFoL3PzgL6ryoDFovW3L6lm2CxUnkmEmzLVQdjSr2iJTBJ2DyW5MOOQ+
7395	   X3yIh6fNm4epRPiA+sEnknx0ENRKtO+Cws9pWWU6oIahcZO1mokXAe4xXJtjH533
7396	   tWHtZRw7mS5olUxmq6YbAAIrkc1Wkubl73T+Qppr5i6bU6zxEo7MGglfr/aB3z81
7397	   KN6tX8ECWG4/IAM9fL7jsn4+CKkSW+JbtK9hFubv0IU7zBg4uyLGjggddvSnxMCA
7398	   fcOQYntZaXLmExvuG0W/SLhiG5j9Grxp1ESsloVdQ4o2xOzsW8bRNq6MNss0lFZz
7399	   R/AxVLrepd5uW4wF/wpIYjhS8+72rkEx8e7P+Z7qWLWKpYtdYemoTmQxIHRt9bpX
7400	   TOU7LYJ/mYljf8EPJgsqKRciADk7vhTugpMkkQdHJCdAUbgt9RvZ3RVWLMJ8XzwG
7401	   p0Eyrc8bqjEqa1TD7BXY2NgEBNvSQHCa+nikW1CXhx7p26ERd3sLbgU4Upsir/Sr
7402	   hUt/oRt75UHlBuiHo3hPoKD8BlVbQ3P4unFMkP4E5viJvPIlvpimfU0QbQd1CTGD
7403	   LCiwzxtY5VbUTJh8Bzmsk68W9XYOoFYM86C8eQiwT+iv6SEThhlJ97ZkbIx95jOn
7404	   h1HSVD4BG/VrP1sZHn4LDAoIBugbM5HpwUTVX8UvTkHbqIau4kzadGVHHfyKLw2H
7405	   YfbatQCNwK/lHTMjGdwd76j+jUZ0QfBYD9e2SwhPF2qGok9gx1glZue65xEC8XM2
7406	   hvpBysW+9HrKwp+/SvJc7974MKCcFs76A+Q93/AnXq0lKcYZeDJtBJfjkbqCuvbP
7407	   dTYlFvjuVh2TudqGzxeP9g==

7409	B.3.24.  S/MIME encrypted and signed reply over a complex message,
7410	         Injected Headers with hcp_strong (+ Legacy Display)

7412	   This is a encrypted and signed S/MIME message using PKCS#7
7413	   envelopedData around signedData.  The payload is a multipart/
7414	   alternative message with an inline image/png attachment.  It uses the
7415	   Injected Headers header protection scheme with the hcp_strong Header
7416	   Confidentiality Policy with a "Legacy Display" part.

7418	   It has the following structure:

7420	   └─╴application/pkcs7-mime [smime.p7m] 10445 bytes
7421	    ↧ (decrypts to)
7422	    └─╴application/pkcs7-mime [smime.p7m] 6712 bytes
7423	     ⇩ (unwraps to)
7424	     └┬╴multipart/mixed 2269 bytes
7425	      ├─╴text/plain 64 bytes
7426	      └┬╴multipart/mixed 1608 bytes
7427	       ├┬╴multipart/alternative 1202 bytes
7428	       │├─╴text/plain 427 bytes
7429	       │└─╴text/html 508 bytes
7430	       └─╴image/png inline 236 bytes

7432	   Its contents are:

7434	   Content-Transfer-Encoding: base64
7435	   Content-Type: application/pkcs7-mime; name="smime.p7m";
7436	    smime-type="enveloped-data"
7437	   Subject: [...]
7438	   Message-ID: <acced3c9-111b-5a4f-bd80-34558da32b4d@lhp.example>
7439	   From: Alice <alice@smime.example>
7440	   To: Bob <bob@smime.example>
7441	   Date: Sat, 20 Feb 2021 12:19:02 -0500

7443	   MIIeHAYJKoZIhvcNAQcDoIIeDTCCHgkCAQAxggMQMIIBhAIBADBsMFUxDTALBgNV
7444	   BAoTBElFVEYxETAPBgNVBAsTCExBTVBTIFdHMTEwLwYDVQQDEyhTYW1wbGUgTEFN
7445	   UFMgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhMPLSW9ETmXSs5CVIeh7j00
7446	   Boq0MA0GCSqGSIb3DQEBAQUABIIBAA0KmSPng+cWNJVCbPBeSpZbXks3myShz3E0
7447	   bUW2BwUhb1U0UxNgcFJyvDABOeYHXa6U3BHuJC6DwqwlEsFCpsCQuZqrBbsk6PgV
7448	   VRKAltBb8K2+qArXTlSYg14dOhhZy/qBAJmyf6JBkzrTcNmndsZe04WK11b8BfJY
7449	   OR/YT4FczqIXRt1WyqubDsG0WEJk5GnOqqj1nQkVXxHE6EQKPVPvYvEnW8sy+aju
7450	   /x5WsXtiJkZvuVuN5UKoFv0vMsS8MjmHSmeJquJLDgpxzHZA06E9X1+MjCqxorQa
7451	   BDiXq9fr1BVfcV1zmP0jCnEa3zW6F9lCmjdFHdTUd7qtGFdZhqIwggGEAgEAMGww
7452	   VTENMAsGA1UEChMESUVURjERMA8GA1UECxMITEFNUFMgV0cxMTAvBgNVBAMTKFNh
7453	   bXBsZSBMQU1QUyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCEzB8R0APhiY6
7454	   HGLS64MvlsDXhpQwDQYJKoZIhvcNAQEBBQAEggEAAfHEHAfy9YX7TEVdvY8simkh
7455	   Bei9XOrSiZXM4BL69LYDtuWUSahVtQo3mFwtvfqavK5uxP+sIPoevoj75M0cqJML
7456	   lzDsCqECiKY0uEVbXm9hKIBigOFT7hxnEETs3V+RmEoAz5mdL49NJcYyWU4Z++6K
7457	   9B/WKLDAk1Bdfg8PWR7mi7W8q78Y387vn3CXsrqH+LlLDJjqT2xoNMYKtWtwjYQ7
7458	   em70YgIA/R0695lQbowkAY8Rov42cxWUmVeUicU3MmiNOoiBA8EM+1l05kUvI3H3
7459	   tA81AH7lFXuTX2rHrVclfKSLrHjF9VYx06iy93/DG16JnLHv0NpCTu3+avrGuTCC
7460	   Gu4GCSqGSIb3DQEHATAdBglghkgBZQMEAQIEEK60EiMA0EoglYVOjIJ5jUiAghrA
7461	   Neb6sKO176aT5ELOauda/XWYUZvn9qoGG9dp6SAaJiS2O8zmEgyZyPhdoSIs7wRx
7462	   d/pP/iNoITUD6tcWewEY1ZoBF8+Ozcinaf3jthQLlrnVf7XOolWTDK/pRjUoFSyV
7463	   KFPx9u1qcWxCs8vlcL1CNR74nySEM4sre3ZxaZrkxA0lLDQKjiOVfWkGLTWJpqNw
7464	   3NuUZel3dCNXZqrLAuGedX3guNXYP/RtAL23lCU5oFSwsc01fsKt73oK+Pvvj7+F
7465	   iRiCPx+9P+1jQPf2cFnpKZObeF5EVMPGf2HwptXnalLVAPzlKX38Hedy4LENKz0i
7466	   nnNm06i5jkCv57B1PaamC1zrCBnAfrT1M3E6MPiC6yRNyPLMAjuyHQfFnF4wJHCQ
7467	   HbkDGEzY6U2hwIgD2DJxGQOGpV4hLj3AX8PXC7PI98XoOLU4BTES+zaCvxCJYWG2
7468	   +KlzCtDp47xrUYpWMl1i4LVRqKItfyz+oQmShiRr/Ie/0eU1fG04l42IP2kpsB7A
7469	   /jPsqvZUHBlooQnAvpjZocWdQYSznsVCOpu76grXUsaIsb4NAkdYcrDgNwbY6ZdM
7470	   QmqfKU7JWfzXUQn5R8CMC8LNlqAPv4A0q/PecHvPIxjTood0oGAWTYGYmLDSMma/
7471	   sGlrxv767FD8qnwMDNkOedgsP3U0Z+qjvHHg3iVI/kDH5x4WmnUfzpFZgaTu2GBT
7472	   WZJVR3D4reM+7ppqKHL5f7rIlzabUIHbG9Y+VN5UsfO3VVdeMzioix45v5u5C5eQ
7473	   Y6Ce0doonm7JZMn2rpf6VEANXzHBixgjyY9ZgIQXn5sibRV4vD/qqvkKQsdm99qt
7474	   2kXjKb64W0TpPq5mGsouHLrZwLa8uoeJQ10Y8oxmRWcgp66Qp480G2FOeV6J05Ic
7475	   e/6zvsTVIE1/Vjwr4LkKBmh1rxsP0ExTQxCvHsj07qpV50oj5Wn7eaEWUOAXXKWe
7476	   OnpVzB425SxlBSgKhv5Jyfy5+NeLlDUWnm671iCJzKy7rTV9xy3fG3b6u1QzLyFs
7477	   2/Y63S4StzziJbBEF8W9m9z8TQ0cYX90mSAn9922ZbogHzQNKy7glkGcB2htQPjF
7478	   BOKIOFavJqP8GMUByyte2qo9FOve2gt1hNHiT7cIAGjm6/i5Ax4gM/GxoLxkK3Em
7479	   WisjwDbLvUrlYtUJAGZfwC8dsd6i3EWlNkqb4OAlGrl8qa4FsRLuTxU+t7XyAHdl
7480	   qNYE8OusIf391hL3HVJDmF6AgT4fy0NnST1FRcBf5Y6uO8ZIQblSFAVTTm8E2Geq
7481	   vFDzVCIb6OGrlnmhWv0W20FEGBjTFxt3HZBF40E7plESAUbEEzH3IXOdJeqVtOFl
7482	   uSULf6DTzFDI8ulhLLnkhad+XSkNZtAj585s8VwQELTIlNGbuFLvY6eU4irsQ/sW
7483	   3h20gqVsP0m9taF8h8xQ82Cam+Ok9OMPEt0YkZlGOed4x86lG6jraQw6N07qwmhS
7484	   C5n0jDaSAIFlpr0CmBTpgbS3fkt0+ZBO5VKrywl3KM2tUwKTyDovrkxl2WhjK+Mj
7485	   Xji9A7IXzVnn9H3eMcPAewYSbsuflUEpV5Kq9vZhriFMZUeVPDaw+PtD9hBOKckT
7486	   l6g0Zo+XYqeJSzTCVheYp5LCqQOKS93ptpeElKP7M8M6QXvknxcLXWWqrB8aE2q+
7487	   DJqXUdLPUJP0c+H3OFsyV5dLbuJRvVa7cUvH+IY/iwtGwDG44/ZkAveXFDu9rfKT
7488	   YALvpdmGMTWmW03m7f6uxy3condgOdDLlkTzQ2wZu/cdkm+580kL26KmftTVtwCZ
7489	   dqy3nYiw9R/kin8uTj4TrEecIO4l5pcWQ2yfMPVhUHCfrn9JV7eLcvxSaVwl9y12
7490	   DKCNXw4FGiPo+6w0dTIT2axXZDHkxRzmFebYD1hr1UbOCW7CfJdkWjsPyDLkw5MP
7491	   Y1bvtlWAzackfQu417Jng3WgDofQtQibOYxr1wfPnzTfkyp5iggYcIarm4xYqoDg
7492	   +oheuV6feQWDNqq36dB4DKfVgGtUYTxXjBSwdedgzBW7AuwiZSfH7wa/+iphdksJ
7493	   P97BGRPrRoN0zmtDcQFuI91do92A8PnB7+7DNvheFaxCHkEFsPpMX8zON3P7kSQQ
7494	   HvLcbcJBtHlRHGIaRSWYqZujLFE5Ot1COoncNRdGT0rFi1GFGtA9m9sNtfIAecSU
7495	   d/WySb/wCvrewbdxuMh0/j0MVhdv+ip6ev4bDIm52wTxCb80yww7REwtVdSoCaUi
7496	   KDDD+XD49n2pxsa2TTqT+trxobt1JcqsYuBQFb96ygeRkaq/P47NZZ8i6WL9RlkZ
7497	   Z6tD5xrNLOOsw2S624UEvnZ1B+tjS6/js1N4RWRlJqxQ9FH3LhlmPpRj8IvhCdVm
7498	   XM2vh+987iIx6CCkRaVR8YkkpBHTON5DbW48x5NWlynBMQ9eZoPrxTtCG+uHuGz2
7499	   x7VSdnA5jIqDZEukm6WIvW9eGBfoGwMkhOGvsCnyKOG408mH3QQIea6WFw4SDz2K
7500	   uMnNjCDZ9q+w3j9ZFExd55p9UCX4Eak9rHH/xgHfSRdrsC2bT7cfu7lpJhRrzxdj
7501	   rALLXtPkx9hTlVdoRM/ys6uJU2WsnosnJvyxH95LAQSO2QgBA8AxVoxW0LQWULzr
7502	   gOIbUGjhkTdYI8GkBQiKq+dHpeU/ktG//FhffRirsXdVgdgH0l1q/PJFx5JUOZhN
7503	   eHK/wmtr4NyQtvMujRSIyOPcUzLBAixiyFC3XbZEBjRr5xVOK/Pj/EnS32iKEV3H
7504	   VsNr0C2hJmQpp/LszAXttAHBhZHy6UrXAgvYavUuEEGvFTNgk8m01kiDd9HXDJ2E
7505	   vLXcmeE7O/Hv0Ydafv4lzY9xcWR7juMCEmeBOMuHkItOjccPgex2JdQpKE40x+Fr
7506	   DrXezIhXUpuZyUyx+JLfkIX/pJpIMPFai/rbbmNGSxtNOQd/AijcHr1ETwk1qAYY
7507	   CyoG+GGEr/qWYgXl+bhiVIECK/ZVxutzCj8PyqBuhpvMFuWLRRf6mgwoih9dgl1T
7508	   CFUAM64zn2DU6bnRFEc9Yiap/Dj/cS+rkH+YP7gq3j9VfXxdXaap+cdLVR4tiP25
7509	   cwN3SOy9VJznWNgeL8ZwFr82KXzPvyzxQ0pdr3YhrBm7OBEWbyNJICdicKiNI9my
7510	   CSmg4VxkVX3faQ96e2ywYzO6th6ZlSl6/bR40AEQyxA9Cf1UpfkzzL17E1TF+l8b
7511	   t1fZvJZVAbr12cFJAJ8nmXp0hV4NPU9TgdzhiX+7U+SyD6/t3r9l3x82Zf2k1XKA
7512	   6OWk4WBgVFfvVlQeo5rViAd3yCp6SHZTTA8PbYaYEvNptCYAJm/9Zu16j2IS52sS
7513	   7dzQmgkrfKA9hr48zl24wOo0D96iQXbCNwgOSTwBMWJxNhLnPmapMKFBUsaWiTZx
7514	   zWW4D1TYBFJafcMCkO49O7I8CsN8EA98BY4chjTwYBVG/BrUnGGy8w/lSMW2dtKM
7515	   f88mSkaVK7hzfWTXYL/ZH3gSGMuttb/8FFsqG3ctvR4aFc55L4P9cYZy19tSiwAu
7516	   +28tBzN5cwaMTtFyBjPAzcM3hPidF2eGNd/td7jcs4UkfjLw5c3Fhrys+EbFMFGB
7517	   SGqg0YV1DClFzVOmuCh0Z/ZBigcuCMA9p7y7UuQwQVi452xhykMQZIbj6QWrmOQ3
7518	   wxESQYQomiLon/oOf5KWGCF3CgdG5J4ic80U9WwWxUj/w4d2zXzbON7HGOOuLoTA
7519	   NjbeOPROIXibe37kknekXgH4NZZyhQytOpWbGt423IzF5HYs00nqgUg3xnvAmmBj
7520	   nkm7GMIFUHATKTnTckmmbB/Aoyucwq1fE5vvzrNABTma8tHIQvl4gT0ku6AETU2T
7521	   AqnB25ejz3T1ZoMUshTubcoIOv4dAbyBNPOCUiwOi9O1wyoTt33gy8Iyet0fkYS/
7522	   C6641TjHg6sxPym4tBgi9J3p6vgp1ULPINlv7YMXljvaCG5fJxG4wouP4evt3zwD
7523	   w5ArhYyafGCsBewemFNM2nsnl86lW0HoumNUsnrs2Llu0/qb0qEkDICELYyZuj4y
7524	   6d3cRXv/5C2Gxl1cf4LRhiR7hRtZKFsmd7y2QgsdBrxqxy5n/SDzmT+gGPUp5/hN
7525	   c17wo0l+rdHBDT2p3L7zxepCpyjCvMYOXwwmki7y0Fpo03gp79BBGzo7eZQkWm9e
7526	   wuxjFsPsZRl4x6ZLu9xSrohGDjB3rdd0g9A1Kqx6tlmzdg98msxQVdYZbt/lDl6f
7527	   xbxWiBvIOgI4/tFSmduKhw7tuyrgge053c+KO7XdfVH/1LC84IGQOEjpFGLU4SLf
7528	   BIUp1EZ6l8EdOTKQOkOT8zwi0yVlPELBsy48UxCT0h3Vd02YPIlkaJFnniCyjJx5
7529	   CcH/sLjaotbKc072lfoPtP4XbMnLO08XD8aUjxpg1qam29fAEZwvOlv01wVVD4J8
7530	   nMFKyEbtYV9MtyuXVAKr4Ixw2ns8dMJXmOkfqFWlfJdsABfdd4wtxBQbPSN2R36F
7531	   yYMvPSBUbsfLJkn1klRQbhR1YUSMUjJUEY47e0b8MFUbdHwjUG33Rln0hucvGrhk
7532	   7drbe/YvjRkSGggUdIm3oqnliJApDBc/T5E7B4zYdKGKI+KV5LB/xfFI91628AF0
7533	   UAmPjZNmUT70/YdS7HltLuUJi9QVuvZ0K0sVhsDsnlXG0ZmZ5lqQJW1d4/441QKo
7534	   XBlZBzp9BxTZdbOxggV/ikBGjscrhG/H+i91g67HzYsb4Ag43WEyNGQtSAhQUraM
7535	   BQ6Wc8PoHDDPdydtKA0saujL8+WUUczhtliH00s7vi8He0Hop3g/vnufZYjY2Lzr
7536	   A7uCjBiFwMjKKYQ0D0uECwEoLfp0wn1Jsbrl86dmu2ekckIbdng+G+FUwE2mrMf2
7537	   zfk83YEV2K9bPdHhwvzmHhP+DKzdj5MpMKIbIcMux5jPTS7gfBt0qbxm98+LxKx+
7538	   6oYK0lNTSnPiVW2uaZruebLBk1FTt8WLq9qjYPvxxfdnsGMSxp8CcmWtZxvWbRtC
7539	   ZlyHuN+2E6ZYzJLh4Vpz7FFw5J04KziWN0edvB7AOc8BJylnp77m0aAWEcPMCifB
7540	   wObiwHIIE+UtuSFCb09HdDLXCrc/eojjgUEZ90kibxPAYF/jraiFhAnOKcpunphn
7541	   Xj6Xgjp5gHYvaF9xMHOON+t9v8E+MBbEiW4mNOQhbH0xAKZ8VbjJdIE5m8yDgOtQ
7542	   O6WZLtMZ3yr00ygVK4MFTZW+IHTiuMk+covoZdssEFAauj6+YUyzs1OwdnrwQuv/
7543	   0o2L3LDyfqLmdpjPxaVWtfWjmRkHFxv1/H8Q4CaMxdOVOhh+qn+pvPsA0itAQ40/
7544	   8Gq4CIss7IEN5fZNl1t0z++2xXXAh0VZVkSJv/PKySfiAog/Iy/jmOAzpH2DlVSC
7545	   rtnRcbGOqzlFpsTcfdXieZxGbla5xgfknpCy2af/AUByF0Q6TDS90dEo0WD3xrDz
7546	   F8qcvGXe6rPkO5dHj6HYe5P4vwZgPLrI/OGcNU9ArnNSWX2Ge1oqWkmz3sFaM+jo
7547	   Em7hj82lgzGSBP9lE9AND7y/3WDyRq3TlnGq/hr7hcKW0sxq5icIRXGFcHS3KHM/
7548	   35gTQ443YWCTkuy1pfZdSAe9Ezki/EWB35SaV/4SaPWZVUFa0GxXYwV2m1mmaBvJ
7549	   rMsnwkQuNoDy/5ccMqPmjUMl248Zs9VCNObO36wLYgLNFCp05cnmcl2LRp8pid6W
7550	   h4ChWXdwYOM542N8pxG6kHT9thPblSXkSIDUpkiNMePJS8S88zl6W+D31QAZyVll
7551	   xTXiQJkQ8yIoTPdeIcx/7h7l3KaiThewRFXd/D4BoU5g2maPl8ecBpkdMWPkWuqd
7552	   R78AhYCzcME1VBCx+PB94born54di/MNHY5i8RsvnMndj14DAkzvcCr4E1jvy6fH
7553	   ajQLpkY3N22z+iiE7O6FChU5pk3qCtTRJqEzJKqHd4b7/UtqE2zrScRxCw582PLY
7554	   kggH7GX5n2h2f6ARwtGj52GtFiy4HjPLmvx04V/W2wskHLP3uO0ePMLQKvgFipNV
7555	   tIXvBdyYnYOJLzDtC00WPcYXhO+lakXTl1MkFqzTVSFf+0UfnrDLnPiEp8mSUr7M
7556	   yg+fIrBeUVfFb2O+UES2MqTGcl+nXBbtNsTBQnf46xUN+3afRd5EAWCpeGtDSWRt
7557	   Fa6SH9kOoF6QGSJIIW5NEdyumD199LDOFkw6Sp4ciXZBFEo/diep6mcJQX6AWJEU
7558	   aqX32sSgxXFUrLkkcXxehnrvDsVvw5f8s0ehZnR0IooVdRC6owzXPHQKlww7UrO1
7559	   foWba1f8kfUmAOo6/ghDcTTzQWPcUqvMC/QBvLn9RSHNN6qqJB6hSrjj8zpmT9K2
7560	   LVs10Eo3BOfZn3/rsDyBY4xZZxSsjZlCd6QVi8rJnnf5AJUi18qSIquSeMvKDp1d
7561	   NMRbeyC/8F0yuh3QllV5Wtk+FV2lUnieHxaLhvy7H6wCfJdLRw3hUj8SLwclvcpO
7562	   z6mHIFpjRSZIWprxyx4A+sSWVSlIKKGMySYv7xClj6PkQwZHBOkESithtm4SnIHe
7563	   fYzUylqgQc5k+11Sp6sF/uK/S96wTIc2IffqQBZ3qaoxY944nJL4PnzqU7dQd2Js
7564	   gP1KqLZlaYgh6fhaV6dmS0NmdsUc4kRUYodbKS2rhexD9c8mpXYbE/P3/wa0tWHc
7565	   PJw/UNgw2oDpbWEQNIWmXPyD8nCIvSTQ3BzXbY7zfmbPRRCd0UdHWQ47RP66ImSN
7566	   ZzA6exAJfR9zyjOYznT6hqfAscsRtYZNyGjAJkUtj3ckNZkDWzlrBnBwMuvLtrr/
7567	   o+eeK+/zD8PF6DGD3iokIerhLIDZMMEf/OW49DlcD7yu3MV2qTFBudL1Ng/uVBjT
7568	   pM0UEGqLkIBh+TP1FAa/fq1mNeV0NEdUieJIvXd+FMgoO/tRK7iBuIc6FuhpSMmX
7569	   zuaA4ctZ3gyP67Asx9q7xUGwZpmjrzD4FRCZeen8NjlS9dYEdUjJ3v8G/kqBQQfc
7570	   4mdSD7u+AuH2Y4WnjJfifJm8NycnjB86kLo5/sbuiqipsvLKmyM0cEDd8SbcPA7r
7571	   GBDsSHt8vC2l8HZHWamIjAxfAb+ggL/RuFoaLNggI738SMBlekZH+dDnLobylpQH
7572	   d2t3VEVqGNuubLagBuad5Xth6N2AJHafnYps79at7rlPH7fl3gf1Vfjrabjv7tAt
7573	   D6uvYJkyg5wdPULGiFZ0Dtql7YRqWujy7AL3fmedeRgukrbsDugA/1r95pNe83JI
7574	   wTiWFj5IVWreCwXhXqPvFynoXqy38Yca+5T+SoXPFmKq178AmIqC0+118L1Jz0GE
7575	   Wh0NC8aQbSsIsDHP5IzVogNOTTtI5/yprHG90z6nuAsLLBWcr6eYfL9/2MuNlPHs
7576	   pUg8MOQuoZRYzvD1RJJd+tY8z+Df4eOSHEptbNmrGgACJaLh88hteJRDmQMP/ep1
7577	   bun7lkK10P3IsadldT7ryEGfV0ZXDLJ9wHf7lQI+kDxZTynmmUgr8AldFDbzOg2K
7578	   /APDjgoK/pErH1d3CQBPniDIRERs0aLK8XjtNB8MtnTVY08QlHiXvDqjmtg01nMs
7579	   C84nqFSDaPvJ0eUv6dbPPQNwnU9uSdLgIB3ZUrLXR1CGGs2OtR10DnwkvbOQr95I
7580	   JTIJfuYp8IGKQvd+F8tXCFDiGQgCw04WTTJfdc4lrc0FDcam7wjYOftu3XhSRYKf
7581	   R1bb1wQQWBxW6eB56/f25/cz91PGpZsWFgPub/Yc1TxZ5oxlxjdiBW1iqT3NidQd
7582	   w7iGIDx+kwd7UGWdIETluUBZMHsPUXXBtrKurqiuH7hQEjAk29sHpk1JQI4J/ZkN
7583	   l1ZSfk4yHwwqt4RzTH8S+umZYtEONKOWoDflx2Xk7m2G1eghOzGYknu1sOMqwMWC
7584	   7zHrKben8nWLAnSxYuWePm9pS0EeXtwCE9oUPcGwoKTq0ubzYpZry884J8uw+e+9
7585	   D9SxrAd4BLjEcQW8gVJhPNnvfdx1iSRwyIk6f+Qy3WQ3d0nF7wwQoRFNpUi+MpSc
7586	   2RMLciHhcroQ0NG71XG7xE+c4o5TQOGXb8leAaGH7G3fEILGOaVnxfYMcumL2xk7
7587	   kfToo/Ubqfgv1weZMzJUZxv2X+HkDBwWGydj75Tq7lVlN+Y2dwtjf9HmrOrTfWZg
7588	   z+jgF+1ufbrGhmsuoP+Zy7nqifF1G6KgABs+9TXWg4rZWxGb6/SJRYu49C5F8EDD
7589	   P4JNm+1ntLqBaRZqbLXQ2zua+nrG0/Ja/JEjdQfRYxQ0t7x5W2PMJvxLFmtCL+AS
7590	   n2Qs0AXcgQbnYRI5KYVKkzJ8PBIP7TegmMhgi+nY9w1KNMbmAiEiYcIgqJ9NUaL2
7591	   by6eQGK/ELXUcA1pAbEYiGnN/uH9ttINrhiOz0Gd8D6MajMmwNqrbERxHYlxkGKf
7592	   j1i76puXo7lTTCak82jvkbTq+T18OLigbyaTLhTBC7nqeN/3BcvJEOzjaGGRuRGA
7593	   9zMXWyB7H03entzGRmSGNexkR94G8b1UbAQN3GRcXRT3hTvd48ksocIeDNYx3HDl
7594	   44t6pExdRBR0YPp+kVXSrph4vdOKYLdh6y019dPy0vw4m5NrDd4uNtUOkWtGMhn2
7595	   wE71YSl3b5vy7wOQaP9Jgps64bhf3iRAr1gSAkoT0rFW0fDJR7VV5rwSRaB/re7y
7596	   dS8ddUx/0qIE+/iddSWKkPZIIDWiCQrcUxQqOjS5fxDnzoaaqll0umEDR1zy9KdX
7597	   5UyWiNctfexihp8WuPGsO5WoqdaVUUHLBaa3ZzIEgbVmXW/OCReAxjIwZpsOUHWI
7598	   PilkacVmrYOp2Msg1Wqw74MekZZxf/v9oAP1kFkA12psIw5fnYXKiejtsrxOvXdI
7599	   0Uc55ruTMaMI/SqihEwu6CRjjSDCr6xaFMlKhsE/xAKiJZH0u80QaTm5yT42Cd47
7600	   2n6rCBQmKBoJBKELW+YzoN7v0Kcf1gogx8OXcA0UzZLx9/JLfaxlfUKt8dx8kPzZ
7601	   UkEdz448mE/V90sUVHGPV1rSOZGSaxe+OKchRRUpYM12xcvldvbDxynLfRI6OUYQ
7602	   OC2cH0uJ4wCTCqlRKVvlpZBYRGmQZzfgtZNuFPXkGMfgJ/nMtKasqPNdqTglFubI
7603	   jyUq8xdFzYuIeydv7m6Tf2jBawV8zHbQ/2ZkLl8WUPU=

7605	Appendix C.  Additional information

7607	C.1.  Stored Variants of Messages with Bcc

7609	   Messages containing at least one recipient address in the Bcc header
7610	   field may appear in up to three different variants:

7612	   1.  The Message for the recipient addresses listed in To or Cc header
7613	       fields, which must not include the Bcc header field neither for
7614	       signature calculation nor for encryption.

7616	   2.  The Message(s) sent to the recipient addresses in the Bcc header
7617	       field, which depends on the implementation:

7619	       a) One Message for each recipient in the Bcc header field
7620	       separately, with a Bcc header field containing only the address
7621	       of the recipient it is sent to.

7623	       b) The same Message for each recipient in the Bcc header field
7624	       with a Bcc header field containing an indication such as
7625	       "Undisclosed recipients", but no addresses.

7627	       c) The same Message for each recipient in the Bcc header field
7628	       which does not include a Bcc header field (this Message is
7629	       identical to 1. / cf. above).

7631	   3.  The Message stored in the 'Sent'-Folder of the sender, which
7632	       usually contains the Bcc unchanged from the original Message,
7633	       i.e., with all recipient addresses.

7635	   The most privacy preserving method of the alternatives (2a, 2b, and
7636	   2c) is to standardize 2a, as in the other cases (2b and 2c),
7637	   information about hidden recipients is revealed via keys.  In any
7638	   case, the Message has to be cloned and adjusted depending on the
7639	   recipient.

7641	Appendix D.  Text Moved from Above

7643	   Note: Per an explicit request by the chair of the LAMPS WG to only
7644	   present one option for the specification, the following text has been
7645	   stripped from the main body of the draft.  It is preserved in an
7646	   Appendix for the time being and may be moved back to the main body or
7647	   deleted, depending on the decision of the LAMPS WG.

7649	D.1.  MIME Format

7651	   Currently there are two options in discussion:

7653	   1.  The option according to the current S/MIME specification (cf.
7654	       [RFC8551])

7656	   2.  An alternative option that is based on the former "memory hole"
7657	       approach (cf.  [I-D.autocrypt-lamps-protected-headers])

7659	D.1.1.  S/MIME Specification

7661	   Note: This is currently described in the main part of this document.

7663	D.1.1.1.  Alternative Option Autocrypt "Protected Headers" (Ex-"Memory
7664	          Hole")

7666	   An alternative option (based on the former autocrypt "Memory Hole"
7667	   approach) to be considered, is described in
7668	   [I-D.autocrypt-lamps-protected-headers].

7670	   Unlike the option described in Appendix D.1.1, this option does not
7671	   use a "message/RFC822" wrapper to unambiguously delimit the Inner
7672	   Message.

7674	   Before choosing this option, the following two issues must be
7675	   assessed to ensure no interoperability issues result from it:

7677	   1.  How current MIME parser implementations treat non-MIME Header
7678	       Fields, which are not part of the outermost MIME entity and not
7679	       part of a Message wrapped into a MIME entity of media type
7680	       "message/rfc822", and how such Messages are rendered to the user.

7682	       [I-D.autocrypt-lamps-protected-headers] provides some examples
7683	       for testing this.

7685	   2.  MIME-conformance, i.e. whether or not this option is (fully)
7686	       MIME-conformant [RFC2045] ff., in particular also Section 5.1. of
7687	       [RFC2046] on "Multipart Media Type).  In the following an excerpt
7688	       of paragraphs that may be relevant in this context:

7690	         The only header fields that have defined meaning for body parts
7691	         are those the names of which begin with "Content-".  All other
7692	         header fields may be ignored in body parts.  Although they
7693	         should generally be retained if at all possible, they may be
7694	         discarded by gateways if necessary.  Such other fields are
7695	         permitted to appear in body parts but must not be depended on.
7696	         "X-" fields may be created for experimental or private
7697	         purposes, with the recognition that the information they
7698	         contain may be lost at some gateways.

7700	         NOTE:  The distinction between an RFC 822 Message and a body
7701	         part is subtle, but important.  A gateway between Internet and
7702	         X.400 mail, for example, must be able to tell the difference
7703	         between a body part that contains an image and a body part
7704	         that contains an encapsulated Message, the body of which is a
7705	         JPEG image.  In order to represent the latter, the body part
7706	         must have "Content-Type: message/rfc822", and its body (after
7707	         the blank line) must be the encapsulated Message, with its own
7708	         "Content-Type: image/jpeg" header field.  The use of similar
7709	         syntax facilitates the conversion of Messages to body parts,
7710	         and vice versa, but the distinction between the two must be
7711	         understood by implementors.  (For the special case in which
7712	         parts actually are Messages, a "digest" subtype is also
7713	         defined.)

7715	   The MIME structure of an Email Message looks as follows:

7717	     <Outer Message Header Section (unprotected)>

7719	     <Outer Message Body (protected)>

7721	       <Inner Message Header Section>

7723	       <Inner Message Body>

7725	   The following example demonstrates how an Original Message might be
7726	   protected, i.e., the Original Message is contained as Inner Message
7727	   in the Protected Body of an Outer Message.  It illustrates the first
7728	   Body part (of the Outer Message) as a "multipart/signed"
7729	   (application/pkcs7-signature) media type:

7731	   Lines are prepended as follows:

7733	   *  "O: " Outer Message Header Section

7735	   *  "I: " Message Header Section
7736	     O: Date: Mon, 25 Sep 2017 17:31:42 +0100 (GMT Daylight Time)
7737	     O: Message-ID: <e4a483cb-1dfb-481d-903b-298c92c21f5e@m.example.net>
7738	     O: Subject: Meeting at my place
7739	     O: From: "Alexey Melnikov" <alexey.melnikov@example.net>
7740	     O: MIME-Version: 1.0
7741	     O: Content-Type: multipart/signed; charset=us-ascii; micalg=sha1;
7742	     O:  protocol="application/pkcs7-signature";
7743	     O:  boundary=boundary-AM

7745	        This is a multipart message in MIME format.
7746	        --boundary-AM
7747	     I: Date: Mon, 25 Sep 2017 17:31:42 +0100 (GMT Daylight Time)
7748	     I: From: "Alexey Melnikov" <alexey.melnikov@example.net>
7749	     I: Message-ID: <e4a483cb-1dfb-481d-903b-298c92c21f5e@m.example.net>
7750	     I: MIME-Version: 1.0
7751	     I: MMHS-Primary-Precedence: 3
7752	     I: Subject: Meeting at my place
7753	     I: To: somebody@example.net
7754	     I: X-Mailer: Isode Harrier Web Server
7755	     I: Content-Type: text/plain; charset=us-ascii

7757	        This is an important message that I don't want to be modified.

7759	        --boundary-AM
7760	        Content-Transfer-Encoding: base64
7761	        Content-Type: application/pkcs7-signature

7763	        [[base-64 encoded signature]]

7765	        --boundary-AM--

7767	   The Outer Message Header Section is unprotected, while the remainder
7768	   (Outer Message Body) is protected.  The Outer Message Body consists
7769	   of the Inner Message (Header Section and Body).

7771	   The Inner Message Header Section is the same as (or a subset of) the
7772	   Original Message Header Section.

7774	   The Inner Message Body is the same as the Original Message Body.

7776	   The Original Message itself may contain any MIME structure.

7778	D.1.2.  Sending Side

7780	   To ease explanation, the following describes the case where an
7781	   Original (message/rfc822) Message to be protected is present.  If
7782	   this is not the case, Original Message means the (virtual) Message
7783	   that would be constructed for sending it as unprotected email.

7785	D.1.2.1.  Inner Message Header Fields

7787	   It is RECOMMENDED that the Inner Message contains all Header Fields
7788	   of the Original Message with the exception of the following Header
7789	   Field, which MUST NOT be included within the Inner Message nor within
7790	   any other protected part of the Message:

7792	   *  Bcc

7794	   [[ TODO: Bcc handling needs to be further specified (see also
7795	   Appendix C.1).  Certain MUAs cannot properly decrypt Messages with
7796	   Bcc recipients. ]]

7798	D.1.2.2.  Wrapper

7800	   The wrapper is a simple MIME Header Section followed by an empty line
7801	   preceding the Inner Message (inside the Outer Message Body).  The
7802	   media type of the wrapper MUST be "message/RFC822" and MUST contain
7803	   the Content-Type header field parameter "forwarded=no" as defined in
7804	   [I-D.melnikov-iana-reg-forwarded].  The wrapper unambiguously
7805	   delimits the Inner Message from the rest of the Message.

7807	D.1.2.3.  Cryptographic Layers / Envelope

7809	   [[ TODO: Basically refer to S/MIME standards ]]

7811	D.1.2.4.  Sending Side Message Processing

7813	   For a protected Message the following steps are applied before a
7814	   Message is handed over to the Submission Entity:

7816	D.1.2.4.1.  Step 1: Decide on Protection Level and Information
7817	            Disclosure

7819	   The implementation which applies protection to a Message must decide:

7821	   *  Which Protection Level (signature and/or encryption) shall be
7822	      applied to the Message?  This depends on user request and/or local
7823	      policy as well as availability of cryptographic keys.

7825	   *  Which Header Fields of the Original Message shall be part of the
7826	      Outer Message Header Section?  This typically depends on local
7827	      policy.  By default, the Essential Header Fields are part of the
7828	      Outer Message Header Section; cf. Appendix D.1.2.5.

7830	   *  Which of these Header Fields are to be obfuscated?  This depends
7831	      on local policy and/or specific Privacy requirements of the user.
7832	      By default only the Subject Header Field is obfuscated; cf.
7833	      Appendix D.1.2.5.

7835	D.1.2.4.2.  Step 2: Compose the Outer Message Header Section

7837	   Depending on the decision in Appendix D.1.2.4.1, the implementation
7838	   shall compose the Outer Message Header Section.  (Note that this also
7839	   includes the necessary MIME Header Section part for the following
7840	   protection layer.)

7842	   Outer Header Fields that are not obfuscated should contain the same
7843	   values as in the Original Message (except for MIME Header
7844	   Section part, which depends on the Protection Level selected in
7845	   Appendix D.1.2.4.1).

7847	D.1.2.4.3.  Step 3: Apply Protection to the Original Message

7849	   Depending on the Protection Level selected in Appendix D.1.2.4.1, the
7850	   implementation applies signature and/or encryption to the Original
7851	   Message, including the wrapper (as per [RFC8551]), and sets the
7852	   resulting package as the Outer Message Body.

7854	   The resulting (Outer) Message is then typically handed over to the
7855	   Submission Entity.

7857	   [[ TODO: Example ]]

7859	D.1.2.5.  Outer Message Header Fields

7861	D.1.2.5.1.  Encrypted Messages

7863	   To maximize Privacy, it is strongly RECOMMENDED to follow the
7864	   principle of Data Minimization (cf.  Section 2.1).

7866	   However, the Outer Message Header Section SHOULD contain the
7867	   Essential Header Fields and, in addition, MUST contain the Header
7868	   Fields of the MIME Header Section part to describe Cryptographic
7869	   Layer of the protected MIME subtree as per [RFC8551].

7871	   The following Header Fields are defined as the Essential Header
7872	   Fields:

7874	   *  From

7876	   *  To (if present in the Original Message)
7877	   *  Cc (if present in the Original Message)

7879	   *  Bcc (if present in the Original Message, see also Appendix C.1)

7881	   *  Date

7883	   *  Message-ID

7885	   *  Subject

7887	   Further processing by the Submission Entity normally depends on part
7888	   of these Header Fields, e.g.  From and Date HFs are required by
7889	   [RFC5322].  Furthermore, not including certain Header Fields may
7890	   trigger spam detection to flag the Message, and/or lead to user
7891	   experience (UX) issues.

7893	   For further Data Minimization, the value of the Subject Header Field
7894	   SHOULD be obfuscated as follows:

7896	   * Subject: [...]

7898	   and it is RECOMMENDED to replace the Message-ID by a new randomly
7899	   generated Message-ID.

7901	   In addition, the value of other Essential Header Fields MAY be
7902	   obfuscated.

7904	   Non-Essential Header Fields SHOULD be omitted from the Outer Message
7905	   Header Section where possible.  If Non-essential Header Fields are
7906	   included in the Outer Message Header Section, those MAY be obfuscated
7907	   too.

7909	   Header Fields that are not obfuscated should contain the same values
7910	   as in the Original Message.

7912	   If an implementation obfuscates the From, To, and/or Cc Header
7913	   Fields, it may need to provide access to the clear text content of
7914	   these Header Fields to the Submission Entity for processing purposes.
7915	   This is particularly relevant, if proprietary Submission Entities are
7916	   used.  Obfuscation of Header Fields may adversely impact spam
7917	   filtering.

7919	   (A use case for obfuscation of all Outer Message Header Fields is
7920	   routing email through the use of onion routing or mix networks, e.g.
7921	   [pEp.mixnet].)
7922	   The MIME Header Section part is the collection of MIME Header Fields
7923	   describing the following MIME structure as defined in [RFC2045].  A
7924	   MIME Header Section part typically includes the following Header
7925	   Fields:

7927	   *  Content-Type

7929	   *  Content-Transfer-Encoding

7931	   *  Content-Disposition

7933	   The following example shows the MIME Header Section part of an S/MIME
7934	   signed Message (using application/pkcs7-mime with SignedData):

7936	      MIME-Version: 1.0
7937	      Content-Type: application/pkcs7-mime; smime-type=signed-data;
7938	         name=smime.p7m
7939	      Content-Transfer-Encoding: base64
7940	      Content-Disposition: attachment; filename=smime.p7m

7942	   Depending on the scenario, further Header Fields MAY be exposed in
7943	   the Outer Message Header Section, which is NOT RECOMMENDED unless
7944	   justified.  Such Header Fields may include e.g.:

7946	   *  References

7948	   *  Reply-To

7950	   *  In-Reply-To

7952	D.1.2.5.2.  Unencrypted Messages

7954	   The Outer Message Header Section of unencrypted Messages SHOULD
7955	   contain at least the Essential Header Fields and, in addition, MUST
7956	   contain the Header Fields of the MIME Header Section part to describe
7957	   Cryptographic Layer of the protected MIME subtree as per [RFC8551].
7958	   It may contain further Header Fields, in particular those also
7959	   present in the Inner Message Header Section.

7961	Appendix E.  Document Considerations

7963	   [[ RFC Editor: This section is to be removed before publication ]]

7965	   This draft is built from markdown source, and its development is
7966	   tracked in a git repository (https://gitlab.com/dkg/lamps-header-
7967	   protection).

7969	   While minor editorial suggestions and nit-picks can be made as merge
7970	   requests (https://gitlab.com/dkg/lamps-header-protection), please
7971	   direct all substantive discussion to the LAMPS mailing list
7972	   (https://www.ietf.org/mailman/listinfo/spasm) at "spasm@ietf.org".

7974	Appendix F.  Document Changelog

7976	   [[ RFC Editor: This section is to be removed before publication ]]

7978	   *  draft-ietf-lamps-header-protection-06

7980	      -  document observed problems with legacy MUAs

7982	      -  avoid duplicated outer Message-IDs in hcp_strong test vectors

7984	   *  draft-ietf-lamps-header-protection-05

7986	      -  fix multipart/signed wrapped test vectors

7988	   *  draft-ietf-lamps-header-protection-04

7990	      -  add test vectors

7992	      -  add "problems with Injected Messages" subsection

7994	   *  draft-ietf-lamps-header-protection-03

7996	      -  dkg takes over from Bernie as primary author

7998	      -  Add Usability section

8000	      -  describe two distinct formats "Wrapped Message" and "Injected
8001	         Headers"

8003	      -  Introduce Header Confidentiality Policy model

8005	      -  Overhaul message composition guidance

8007	      -  Simplify document creation workflow, move public face to gitlab

8009	   *  draft-ietf-lamps-header-protection-02

8011	      -  editorial changes / improve language

8013	   *  draft-ietf-lamps-header-protection-01

8015	      -  Add DKG as co-author
8016	      -  Partial Rewrite of Abstract and Introduction [HB/AM/DKG]

8018	      -  Adding definiations for Cryptographic Layer, Cryptographic
8019	         Payload, and Cryptographic Envelope (reference to
8020	         [I-D.dkg-lamps-e2e-mail-guidance]) [DKG]

8022	      -  Enhanced MITM Definition to include Machine- / Meddler-in-the-
8023	         middle [HB]

8025	      -  Relaxed definition of Original message, which may not be of
8026	         type "message/rfc822" [HB]

8028	      -  Move "memory hole" option to the Appendix (on request by Chair
8029	         to only maintain one option in the specification) [HB]

8031	      -  Updated Scope of Protection Levels according to WG discussion
8032	         during IETF-108 [HB]

8034	      -  Obfuscation recommendation only for Subject and Message-Id and
8035	         distinguish between Encrypted and Unencrypted Messages [HB]

8037	      -  Removed (commented out) Header Field Flow Figure (it appeared
8038	         to be confusing as is was) [HB]

8040	   *  draft-ietf-lamps-header-protection-00

8042	      -  Initial version (text partially taken over from
8043	         [I-D.ietf-lamps-header-protection-requirements]

8045	Appendix G.  Open Issues

8047	   [[ RFC Editor: This section should be empty and is to be removed
8048	   before publication. ]]

8050	   *  Ensure "protected header" (Ex-Memory-Hole) option is (fully)
8051	      compliant with the MIME standard, in particular also [RFC2046],
8052	      Section 5.1.  (Multipart Media Type) Appendix D.1.1.1.

8054	   *  Test Vectors!  We can point to the relevant test vector in the
8055	      main text by reference.  We should also include in the test
8056	      vectors an encrypted message that references another message, so
8057	      we can observe the effect of the HCP on threading.

8059	   *  Should Outer Message Header Section (as received) be preserved for
8060	      the user?  (Section 4.1.4.5)

8062	   *  Decide on whether or not merge requirements from
8063	      [I-D.ietf-lamps-header-protection-requirements] into this
8064	      document.

8066	   *  Decide what parts of [I-D.autocrypt-lamps-protected-headers] to
8067	      merge into this document.

8069	   *  Enhance Introduction Section 1 and Problem Statement (Section 2).

8071	   *  Decide on whether or not specification for more legacy HP
8072	      requirements should be added to this document (Section 3.1.2).

8074	   *  Verify simple backward compatibility case (Receiving Side MIME-
8075	      Conformant) is working; once solution is stable and update
8076	      paragraphs in Section 4.1, Section 3.1.2.1 and Section 4.2.1
8077	      accordingly.

8079	   *  Verify ability to distinguish between Messages with Header
8080	      Protection as specified in this document and legacy clients and
8081	      update Section 3.1 accordingly.

8083	   *  Improve definitions of Protection Levels and enhance list of
8084	      Protection Levels (Section 3.2, Section 4).

8086	   *  Privacy Considerations Section 7

8088	   *  Security Considerations Section 6

8090	Authors' Addresses

8092	   Daniel Kahn Gillmor
8093	   American Civil Liberties Union
8094	   125 Broad St.
8095	   New York, NY,  10004
8096	   United States of America

8098	   Email: dkg@fifthhorseman.net

8100	   Bernie Hoeneisen
8101	   pEp Foundation
8102	   Oberer Graben 4
8103	   CH- CH-8400 Winterthur
8104	   Switzerland

8106	   Email: bernie.hoeneisen@pep.foundation
8107	   URI:   https://pep.foundation/
8108	   Alexey Melnikov
8109	   Isode Ltd
8110	   14 Castle Mews
8111	   Hampton, Middlesex
8112	   TW12 2NP
8113	   United Kingdom

8115	   Email: alexey.melnikov@isode.com