Module enveloped 

Borrowed CMS digital envelopes, with explicit provider/key selection.

RFC5652 §§6.1–6.4 define this schema, not a cryptographic implementation. Reading never unwraps a key, decrypts content or trusts originator material. Every original algorithm and encrypted fragment remains available to the selected provider. Unsupported algorithms/ORI formats remain its capability result; malformed structures and resources remain processing refusals. https://www.rfc-editor.org/rfc/rfc5652#section-6

Structs

EncodedValue

Original open field with its actual decoding position. A selected format owner can read it without reconstructing the envelope grammar or resetting depth, encoding, source work or the current operation.

EncryptedContent

Original content descriptor and optional ciphertext, not plaintext.

EnvelopedData

Complete EnvelopedData schema with original nested decoding context.

KeyIdentifier

Common KEK/recipient key identifier and its original optional metadata.

OriginatorInfo

Original optional originator material, neither trusted nor authenticated.

RecipientKey

One key-agreement recipient’s actual certificate identifier and encrypted key.

Enums

AgreementIdentifier

Both key-agreement recipient-identifier alternatives (§6.2.2).

Originator

All three sender-key choices of RFC5652 §6.2.2.

Recipient

All five CMS RecipientInfo alternatives, without engine dispatch or key lookup.

Constants

IDENTIFIER

CMS id-envelopedData, RFC5652 §6.1.