public byte[] encrypt(byte[] data, X509Certificate responderPublicCert, KeyPair keyPair) {

        try {
            KeyPair kp = keyPair;
            PrivateKey senderKey = kp.getPrivate();
            // выработка ключа согласования отправителем
            final KeyAgreement senderKeyAgree =
                    KeyAgreement.getInstance(responderPublicCert.getPublicKey().getAlgorithm());
            senderKeyAgree.init(senderKey, new IvParameterSpec(sv), null);
            senderKeyAgree.doPhase(responderPublicCert.getPublicKey(), true);

            final SecretKey secretKey =
                    senderKeyAgree.generateSecret("GOST28147");

            // Генерирование симметричного ключа с параметрами шифрования из контрольной панели.
            final KeyGenerator kg = KeyGenerator.getInstance("GOST28147");
            //final ParamsInterface paramss = AlgIdSpec.getDefaultCryptParams();
            kg.init(AlgIdSpec.getDefaultCryptParams());
            final SecretKey simm = kg.generateKey();

            // Зашифрование текста на симметричном ключе.
            final Cipher cipher = Cipher.getInstance(CIPHER_MODE);
            cipher.init(Cipher.ENCRYPT_MODE, simm, (SecureRandom) null);
            final byte[] iv = cipher.getIV();
            final byte[] text = cipher.doFinal(data, 0, data.length);

            //Зашифрование симметричного ключа на ключе согласования отправителя
            cipher.init(Cipher.WRAP_MODE, secretKey, (SecureRandom) null);
            final byte[] key = cipher.wrap(simm);

            //формирование CMS-сообщения
            final ContentInfo all = new ContentInfo();

            all.contentType =
                    new Asn1ObjectIdentifier(
                            new OID(STR_CMS_OID_ENVELOPED).value);
            final EnvelopedData cms = new EnvelopedData();
            all.content = cms;

            cms.version = new CMSVersion(0);

            cms.recipientInfos = new RecipientInfos(1);
            cms.recipientInfos.elements = new RecipientInfo[1];
            cms.recipientInfos.elements[0] = new RecipientInfo();

            final KeyTransRecipientInfo keytrans = new KeyTransRecipientInfo();

            keytrans.version = new CMSVersion(0);

            final Asn1BerEncodeBuffer ebuf = new Asn1BerEncodeBuffer();
            final SubjectPublicKeyInfo spki = new SubjectPublicKeyInfo();
            final Asn1BerDecodeBuffer dbuff = new Asn1BerDecodeBuffer(
                    kp.getPublic().getEncoded());
            spki.decode(dbuff);
            dbuff.reset();
            final AlgIdInterface algid = new AlgIdSpec(spki.algorithm);
            final AlgorithmIdentifier id = (AlgorithmIdentifier) algid.getDecoded();
            id.encode(ebuf);
            Asn1BerDecodeBuffer dbuf = new Asn1BerDecodeBuffer(ebuf.getMsgCopy());
            keytrans.keyEncryptionAlgorithm = new KeyEncryptionAlgorithmIdentifier();
            keytrans.keyEncryptionAlgorithm.decode(dbuf);
            ebuf.reset();
            dbuf.reset();
            keytrans.rid = new RecipientIdentifier();
            final IssuerAndSerialNumber issuer = new IssuerAndSerialNumber();
            final X500Principal issuerName = responderPublicCert.getIssuerX500Principal();
            dbuf = new Asn1BerDecodeBuffer(issuerName.getEncoded());
            issuer.issuer = new Name();
            final RDNSequence rnd = new RDNSequence();
            rnd.decode(dbuf);
            issuer.issuer.set_rdnSequence(rnd);
            issuer.serialNumber = new CertificateSerialNumber(
                    responderPublicCert.getSerialNumber());
            keytrans.rid.set_issuerAndSerialNumber(issuer);
            dbuf.reset();
            final GostR3410_KeyTransport encrKey = new GostR3410_KeyTransport();
            dbuf = new Asn1BerDecodeBuffer(key);
            encrKey.sessionEncryptedKey = new Gost28147_89_EncryptedKey();
            encrKey.sessionEncryptedKey.decode(dbuf);
            dbuf.reset();
            encrKey.transportParameters = new GostR3410_TransportParameters();
            encrKey.transportParameters.encryptionParamSet =
                    new Gost28147_89_ParamSet(AlgIdSpec.getDefaultCryptParams().getOID().value);
            encrKey.transportParameters.ephemeralPublicKey = new SubjectPublicKeyInfo();
            dbuf = new Asn1BerDecodeBuffer(
                    kp.getPublic().getEncoded());
            encrKey.transportParameters.ephemeralPublicKey.decode(dbuf);
            dbuf.reset();
            encrKey.transportParameters.ukm = new Asn1OctetString(sv);
            encrKey.encode(ebuf);
            keytrans.encryptedKey = new EncryptedKey(ebuf.getMsgCopy());
            ebuf.reset();
            cms.recipientInfos.elements[0].set_ktri(keytrans);
            cms.encryptedContentInfo = new EncryptedContentInfo();

            final OID contentType = new OID(STR_CMS_OID_DATA);
            cms.encryptedContentInfo.contentType = new ContentType(contentType.value);
            final Gost28147_89_Parameters params = new Gost28147_89_Parameters();
            params.iv = new Gost28147_89_IV(iv);
            params.encryptionParamSet =
                    new Gost28147_89_ParamSet(AlgIdSpec.getDefaultCryptParams().getOID().value);
            cms.encryptedContentInfo.contentEncryptionAlgorithm =
                    new ContentEncryptionAlgorithmIdentifier(
                            _Gost28147_89_EncryptionSyntaxValues.id_Gost28147_89,
                            params);
            cms.encryptedContentInfo.encryptedContent = new EncryptedContent(text);
            all.encode(ebuf);
            return ebuf.getMsgCopy();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }