...
Note that the compliant solution throws a general Exception to limit the minutest of the information leaks that relate to the cryptographic implementation. Finally, one should refrain from signing encrypted (sealed) data. (See SEC09SEC32-J. Create and sign a SignedObject before creating a SealedObject)
...
SEC05-J. Minimize accessibility of classes and their members 01. Platform Security (SEC) SEC09SEC32-J. Create and sign a SignedObject before creating a SealedObject