minor suggestions in 3.2 (CipherData)

In section 3.2, reference (for digest) is to section 5.6; should be 5.7. 

Also, I suggest to add a comment clarifying that the digest (hash) is of the
plaintext, to avoid implementors hashing the ciphertext (encrypted data) by
mistake... 

Suggested new text: 

The optional set of ds:DigestMethod and ds:DigestValue elements are provided
for ensuring the integrity of the encrypted data, by providing a digest
(hash) computed over the data to be encrypted (plaintext). See section 5.7
of the algorithm specification for more information.

I think it'll also be good to add description of the relevant processing to
section 4, I can suggest some text. 

Best regards, 
Amir Herzberg
CTO, NewGenPay Inc.  
http://www.newgenpay.com/Amir/Herzberg.htm
SMS (urgent only!): _subject_ of email to aherzberg@walla.co.il