Method unprotect

mls/src/main/java/org/bouncycastle/mls/protocol/Group.java:1226–1248

(MLSMessage ct)

    }

    public byte[][] unprotect(MLSMessage ct)
        throws Exception
    {
        AuthenticatedContent auth = unprotectToContentAuth(ct);
        if (!verifyAuth(auth))
        {
            throw new Exception("Message signature failed to verify");
        }

        if (auth.getContent().getContentType() != ContentType.APPLICATION)
        {
            throw new Exception("Unprotected of handshake message");
        }

        if (auth.getWireFormat() != WireFormat.mls_private_message)
        {
            throw new Exception("Application data not sent as PrivateMessage");
        }
        byte[][] authAndContent = new byte[2][];
        authAndContent[0] = auth.getContent().getAuthenticated_data();
        authAndContent[1] = auth.getContent().getContentBytes();
        return authAndContent;
    }

    private boolean verifyAuth(AuthenticatedContent auth)
        throws Exception