AuthenticatedData ::= SEQUENCE {
       version           CMSVersion,
       originatorInfo    [0] OriginatorInfo  OPTIONAL,
       recipientInfos    RecipientInfos,
       macAlgorithm      MessageAuthenticationCodeAlgorithm,
       digestAlgorithm   [1] DigestAlgorithmIdentifier OPTIONAL,
       encapContentInfo  EncapsulatedContentInfo,
       authAttrs         [2] AuthAttributes OPTIONAL,
       mac               MessageAuthenticationCode,
       unauthAttrs       [3] UnauthAttributes  OPTIONAL
    }

Type AuthenticatedData references the following types:

    CMSVersion ::= INTEGER { v0(0), v1(1), v2(2), v3(3), v4(4), v5(5) } (0..MAX)

    OriginatorInfo ::= SEQUENCE {
       certs  [0] [BASE64] OCTET STRING  OPTIONAL,
       crls   [1] [BASE64] OCTET STRING  OPTIONAL
    }
	
    RecipientInfos ::= ???

    MessageAuthenticationCodeAlgorithm ::= SEQUENCE {
       algorithm   ALGORITHM.&id({MACAlgorithms}),
       parameters  ALGORITHM.&Type({MACAlgorithms}{@algorithm})  OPTIONAL
    }
	
    DigestAlgorithmIdentifier ::= SEQUENCE {
       algorithm   ALGORITHM.&id({DigestAlgorithms}),
       parameters  ALGORITHM.&Type({DigestAlgorithms}{@algorithm})  OPTIONAL
    }
	
    EncapsulatedContentInfo ::= SEQUENCE {
      eContentType  ContentType,
      eContent      [0] EXPLICIT OCTET STRING  OPTIONAL
    }

    ContentType ::= CONTENTS.&id({Contents})

    CONTENTS ::= TYPE-IDENTIFIER  -- Defined in ISO/IEC 8824-2, Annex A

    Contents CONTENTS ::= {
       { SignedData             IDENTIFIED BY  id-signedData            } |
       { EnvelopedData          IDENTIFIED BY  id-envelopedData         } |
       { AuthenticatedData      IDENTIFIED BY  id-ct-authData           } |
       { DigestedData           IDENTIFIED BY  id-digestedData          } |
       { EncryptedData          IDENTIFIED BY  id-encryptedData         } |
       { NamedKeyEncryptedData  IDENTIFIED BY  id-namedkeyencryptedData } |
       { Data                   IDENTIFIED BY  id-data                  },

       ...  -- Expect additional content type objects --
    }
	   
    AuthAttributes ::= SET SIZE(1..MAX) OF Attribute {{Authenticated}}
		
    MessageAuthenticationCode ::= OCTET STRING

    UnauthAttributes ::= SET SIZE(1..MAX) OF Attribute {{Unauthenticated}}