[OASIS Issue Tracker] Updated: (OFFICE-2569) Public Comment:Requirement

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

     [ http://tools.oasis-open.org/issues/browse/OFFICE-2569?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Brauer updated OFFICE-2569:
-----------------------------------

    Resolution: 
The manifest:checksum-type attribute supports the algorithms supported by the W3C XML Enc Core specification. MD5 in theory could be used by specifying an URI that identifies MD5. The XML Enc Core specification does not specify an URI for MD5. The reason can be found in section 6.2 of the XML DSig specification (http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/):

"Use of MD5 [MD5] is NOT RECOMMENDED because recent advances in cryptanalysis have cast doubt on its strength. "

Under this circumstances, it does not appear to be reasonable that the ODF specification defines an URI for MD5. MD5 anyway could be used by using an implementation defined URI as attribute value.

> Public Comment: Requirement
> ---------------------------
>
>                 Key: OFFICE-2569
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-2569
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Improvement
>          Components: Packaging, Security
>    Affects Versions: ODF 1.2 Part 3 CD 1
>            Reporter: Robert Weir 
>            Assignee: Michael Brauer
>            Priority: Minor
>
> Copied from office-comment list
> Original author: ronnie thebonnie <ronniethebonnie@gmail.com> 
> Original date: 19 Feb 2010 18:20:19 -0000
> Original URL: http://lists.oasis-open.org/archives/office-comment/201002/msg00029.html

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira