Russ,
Minor nits (and maybe showing my lack of understanding):
Sections 1.4 and 1.5 refer to the outputs as a ciphertext and an
authentication tag. Can we add the following parenthetical to the 1st
sentence of the last para in 3 to tie the two paras together?: ... "for the
AuthEnvelopedData mac field (i.e., the authentication tag)." The
authentication tag is referred to in AuthEnvelopedData ID.
Also 1.4 and 1.5 say there are four inputs to the process and the last para
of 2.2 of the AuthEvelopedData ID says there's 3. There's no reference to
the nonce. Is the nonce just part of the random content encryption key?
spt