tokens: ['a', 'contentencryption', 'key', 'CEK', 'and', 'uses', 'it', 'to', 'encrypt', 'the', 'MCPTT', 'application', 'plane', 'content', 'The', 'CEK', 'is', 'encrypted', 'with', 'the', 'MCPTT', 'servers', 'public', 'key', 'The', 'encrypted', 'content', 'along', 'with', 'the', 'encrypted', 'CEK', 'is', 'packed', 'to', 'form', 'an', 'EnvelopedData', 'CMS', 'object', 'The', 'message', 'digest', 'is', 'computed', 'on', 'the', 'EnvelopedData', 'CMS', 'object', 'The', 'digest', 'is', 'digitally', 'signed', 'by', 'the', 'MCPTT', 'client', 'using', 'its', 'private', 'key', 'The', 'signature', 'MCPTT', 'clients', 'certificate', 'chain', 'and', 'EnvelopedData', 'CMS', 'object', 'are', 'collected', 'to', 'form', 'a', 'SignedData', 'CMS', 'object', 'The', 'SignedData', 'is', 'wrapped', 'in', 'a', 'CMS', 'ContentInfo', 'object', 'and', 'inserted', 'into', 'the', 'SIP', 'message', 'as', 'applicationpkcsmime', 'media', 'type', 'Figure', '', 'MCPTT', 'Client', 'using', 'SMIME', 'to', 'protect', 'MCPTT', 'application', 'plane', 'content', 'The', 'MCPTT', 'server', 'does', 'the', 'following', 'when', 'it', 'receives', 'a', 'SIP', 'message', 'with', 'the', 'embedded', 'SMIME', 'content', 'It', 'computes', 'the', 'message', 'digest', 'on', 'the', 'encapsulated', 'EnvelopedData', 'object', 'present', 'in', 'the', 'SignedData', 'object', 'The', 'message', 'digest', 'and', 'the', 'MCPTT', 'clients', 'public', 'key', 'are', 'used', 'to', 'verify']