CipherData clarification

I would like to clarify the definition of the CipherData element.

My understanding was that this element is the parent of 1 of two child elements,
either a
CipherValue element or a CipherReference element.

The spec says this in a couple of places:
1. The structure presented at the beginning of section 2 shows CipherData
containing either CipherValue or CipherReference
2. Section 4.2 on decryption explicitly mentions in step 3 CipherData either
containing CipherValue or CipherReference
3. The schema definition defines CipherData containing either a CipherValue or
CipherReference element child

On the other hand the credit card examples in section 2 do not use the
CipherValue or CipherReference children

So my question is
1. Should we always expect CipherData to have either a CipherValue or
CipherReference child element

If so we should update the credit card examples.

thanks

< Frederick
hirsch@zolera.com