Bug 131993 - Implementation-defined IRI for PGP algorithm is missing
Summary: Implementation-defined IRI for PGP algorithm is missing
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: LibreOffice (show other bugs)
Version:
(earliest affected)
7.0.0.0.alpha0+
Hardware: All All
: medium normal
Assignee: Michael Stahl (CIB)
URL:
Whiteboard: odf
Keywords:
Depends on:
Blocks: Digital-Signatures
  Show dependency treegraph
 
Reported: 2020-04-09 08:37 UTC by Regina Henschel
Modified: 2020-07-20 09:41 UTC (History)
2 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Regina Henschel 2020-04-09 08:37:01 UTC
The ODF standard has some cases where it uses the term "implementation-defined". That means, that the implementer has to publish the values he uses. I have added the page https://wiki.documentfoundation.org/Development/ODF_Implementer_Notes/List_of_LibreOffice_ODF_implementation-defined_items to collect such information.

In this case: For the attribute manifest:algorithm-name an implementation-defined IRI is needed for the new feature PGP encryption. Reference: Forth list item in Section 4.16.1 in OpenDocument-v1.3-part2-packages.

Suggestion: Add it to the above mentioned page.
Comment 1 Regina Henschel 2020-07-18 14:07:51 UTC
And the identifier in 4.17 manifest:PGPAlgorithm.

@Michael: DO you know this identifier for LibreOffice? Or does LibreOffice not need it?
Comment 2 Michael Stahl (CIB) 2020-07-20 09:41:43 UTC
hmm ... looking at a GPG file written as ODF 1.3 by LO, it has:

   <manifest:algorithm manifest:algorithm-name="http://www.w3.org/2001/04/xmlenc#aes256-cbc" manifest:initialisation-vector="..."/>
   <manifest:key-derivation manifest:key-derivation-name="PGP"/>

so PGP is only used to create a key for AES to use, which makes sense as AES is much faster.

this URI is listed in section 5.2.3 AES.

for PGPAlgorithm, there is:

   <manifest:encryption-method manifest:PGPAlgorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>

this URI is listed in section 5.5.2 RSA-OAEP.

... i've added this to the wiki.