OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

office message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: [OASIS Issue Tracker] Commented: (OFFICE-2721) ODF 1.2 Part 3CD01-rev08 Contradictory <manifest:algorithm> provisions



    [ http://tools.oasis-open.org/issues/browse/OFFICE-2721?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=22381#action_22381 ] 

Malte Timmermann commented on OFFICE-2721:
------------------------------------------

Independently from whether or not we introduce full package encryption, I don't think we should consider option 1.
I guess there might be people who want to use single stream encryption, but different algorithms.

Not sure if I understood option 2 correctly, but when it means allowing other algorithms, but not making the <EncryptionMethod> mandatory, with a missing <EncryptionMethod> meaning that the old algorithm is used, that might be fine, because ODF implementations need to be able to handle this case for old documents anyway.

But I would like to see the old algorithm being named as "legacy" algorithm then, and not as "default" algorithm, because it's probably not an algorithm we would still want to recommend as default nowadays...

> ODF 1.2 Part 3 CD01-rev08 Contradictory <manifest:algorithm> provisions
> -----------------------------------------------------------------------
>
>                 Key: OFFICE-2721
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-2721
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Bug
>          Components: Packaging, Part 3 (Packages), Security
>    Affects Versions: ODF 1.2 CD 05
>         Environment: This issue applies to ODF 1.2 Part 3 CD01-rev08.odt in conjunction with the latest manifest schema.  It applies to the ODF 1.2 draft4 Part 3 approved to become Part 3 of the combined Public Review CD.
>            Reporter: Dennis Hamilton
>            Assignee: Dennis Hamilton
>             Fix For: ODF 1.2 CD 06
>
>
> In ODF 1.2 Par 3 CD01-rev08.odt (ODF 1.2 draft4 Part 3), 
> 1. Section 2.1.1(B.3) requires that the META-INF/manifest.xml file conform to the schema provided in Appendix A.
> 2. Section 4.5 <manifest:algorithm> and the schema confirm that <manifest:algorithm> has no elements.
> 3. Section 3.4.1 confirms that OpenDocument Package Consumers and Producers may employ additional algorithms beyond those established as the defaults in section 3.4.2.  Section 4.5 <manifest:algorithm> text stipulates that there may be additional elements as required to support different encryption algorithms as if <manifest:algorithm> were an <EncryptionMethod> element of [xmlenc-core] associated with the provided <manifest:algorithm> manifest:algorithm-name attribute value.
> 4. Although incorporation of elements from [xmlenc-core] is stated, there is no discussion of how namespace considerations apply.
> NOTE: The simplicity or complexity of resolution of this conflict depends on whether or not an alternative full-package encryption methodology is introduced in place of encryptions that deal with the individual Zip contents individually.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]