Semantics of xenc:EncryptedData/@Type

Hi all,

I have a question about the semantics of xenc:EncryptedData/@Type: Note the 
given examples. The root Element of the encrypted document contains an 
EncryptedData element with @Type="&xenc;Content" FOLLOWED by other content 
(a PI in the example).

Do I have have to flag an error if I try to decrypt (or encrypt) 
xenc:EncryptedData/@Type="&xenc;Content" which has siblings? Or should we 
specify that @Type="&xenc;Content" only means that the decrypted content is 
possibly not well-formed (which I would prefer).

Regards,
Christian

- ENCRYPTED ------------------------------------------------

<root><xenc:EncryptedData
    xmlns:xenc="http://www.w3.org/2001/04/xmlenc#"
    Id="myFirstEncryptedElement"
    Type="http://www.w3.org/2001/04/xmlenc#Content">
<xenc:EncryptionMethod
    Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc" />
<ds:KeyInfo
    xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:KeyName>Christian Geuer-Pollmann</ds:KeyName>
</ds:KeyInfo>
<xenc:CipherData>
<xenc:CipherValue>6unDjuPxr+6pZW5orECbiV2fFyjyzvjHAO8HFm+2HLjfOjn6apExkpwLB
fnZLlJQ</xenc:CipherValue>
</xenc:CipherData>
</xenc:EncryptedData><?sfd d sdf kjghkds ?></root>

-DECRYPTED -------------------------------------------------

<root>text inside root<!--afasd--><?sfd d sdf kjghkds ?></root>

------------------------------------------------------------