all encryption/message digests are applied to the 'contents', leaving out the 'type' field.
used during processing
content as defined by the type
See Implementation