SignerInfo.verify() incorrect with authenticated attributes

pkcs.SignerInfo.verify() verifies signatures by operating directly on the data that is either in the ambient PKCS7 object or given externally. This is correct only when the PKCS object contains no authenticated attributes.

When there authenticated attributes, one of the attributes contains the message digest of the given data, and the signature in the SignerInfo is obtained by signing the DER encoding of the authenticated attributes. In practice, that encoding consists of the encoded attributes as received, but with the tag byte changed to 0x31 (SET OF).