office-comment message

Subject: protection-key attribute in ODF 1.0

From: "MURATA Makoto (FAMILY Given)" <eb2m-mrt@asahi-net.or.jp>
To: "ODF Comments List" <office-comment@lists.oasis-open.org>
Date: Mon, 07 Jul 2008 16:45:56 +0900

Hashing for the protection-key attribute of ODF 1.0 
is away underspecified.

http://idippedut.dk/post/2008/02/OOXML-is-defective-1-(Pasword-hashing).aspx
http://blogs.msdn.com/ericwhite/archive/2008/01/25/hashing-of-passwords-in-the-open-xml-file-format.aspx

-- 
MURATA Makoto (FAMILY Given) <EB2M-MRT@asahi-net.or.jp>

References:
- ODF 1.1: Heads up on Document Crypto
  - From: "Dennis E. Hamilton" <dennis.hamilton@acm.org>
- Re: [office-comment] ODF 1.1: Heads up on Document Crypto
  - From: robert_weir@us.ibm.com