Add package documentation.
Use BouncyCastle for PKCS7 (internals, not the provider).