OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

office message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [office] Proper identifier for Excel-style digest algorithm

Bob Jolliffe <bobj@dst.gov.za> wrote on 07/08/2008 04:13:16 AM:

> I agree.  What we would need is a URI.  But it would be better, if
> we do need to define a URI, that we do so in conjunction with ECMA
> ie. that they would then at some point use the same URI that we define.
> Though given my earlier post and the input from Doug, it does seems
> that this will be more of an application issue than an ODF issue.  
> If the intention is NOT to write out those legacy hashed passwords
> in an ODF document, then having a URI to refer to the algorithm is
> surely not such a major concern for ODF.

If I recall, at the BRM they were trying to make the distinctions between translating a legacy document into OOXML (where the legacy hash may be written out in the OOXML document) versus creating a new OOXML document from scratch (where the legacy hash should not be used because it it known to be weak).  There was not time at the BRM to hash out (forgive the pun) the right language for this.

I think we have a similar thing here.  When converting a legacy MS Office document to ODF, if the legacy document has protected sections, you don't have many good choices:

1) Either Remove the protection (changes the functionality of the document)
2) Or, set a new dummy password like "password" using a strong hash like SHA256 (pointless)
3) Or, preserve the existing legacy hash value (but this hash is weak)

No document encryption is involved.  This is simply a password hash.

It seems that 3) is the least bad of these options.  

We could add language to the standard that makes it clear that this algorithm is deprecated.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]