[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: [OASIS Issue Tracker] Updated: (OFFICE-3708) ODF 1.2 Part 3 SHA256Digest-Algorithm URI Incorrect
[ http://tools.oasis-open.org/issues/browse/OFFICE-3708?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dennis Hamilton updated OFFICE-3708:
------------------------------------
Fix Version/s: ODF 1.3 CSD 01
Targeted ODF 1.3 CSD01 for the fix also.
This defect has been reported to the Plugfest list and some implementers. The proposed resolution is to accept the incorrect URI and the correct URI, but only produce the correct URI. I believe this will happen before any implemetation actually starts using SHA256 in documents put into the wild.
This is within the letter of the current specification, because the correct URI satisfies the provision that allows section 5.7 of [xmlenc-core]. The condition on what consumers shall accept is sastified. The recommendation ("should") that producers use the incorrect URI is easily ignored.
I think an OIC TC advisory about this would also be timely.
So the Errata should be admissible, and either way the repair should be made in ODF 1.3 CSD01, et.seq.
> ODF 1.2 Part 3 SHA256 Digest-Algorithm URI Incorrect
> ----------------------------------------------------
>
> Key: OFFICE-3708
> URL: http://tools.oasis-open.org/issues/browse/OFFICE-3708
> Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
> Issue Type: Bug
> Components: Packaging, Part 3 (Packages), Security
> Affects Versions: ODF 1.2, ODF 1.2 Part 3 CD 1
> Environment: This defect applies in the text of OpenDocument-v1.2-cs01-part3. The defect occured in earlier drafts as well.
> Reporter: Dennis Hamilton
> Assignee: Dennis Hamilton
> Fix For: ODF 1.3 CSD 01, ODF 1.2 Errata 01
>
>
> [xmlenc-core] section 5.7 is referenced for the source of URIs that are usable in manifest:start-key-generation-name attribute values.
> There is no "http://www.w3.org/2000/09/xmldsig#sha256"; for SHA-256 in that specification. The URI established for the SHA-256 algorithm is "http://www.w3.org/2001/04/xmlenc#sha256";.
> Note: This is the Part 3 counterpart of OFFICE-3702
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]