IIUC you don't have to decrypt the message - the outermost primitive is the authentication. The point I got is that both the encrypted data and unencrypted data are authenticated.