Bug 144559 - Information about unencrypted content of encrypted documents is likely obsolete
Summary: Information about unencrypted content of encrypted documents is likely obsolete
Status: RESOLVED FIXED
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Documentation (show other bugs)
Version:
(earliest affected)
unspecified
Hardware: All All
: medium normal
Assignee: Rafael Lima
URL:
Whiteboard: target:7.3.0
Keywords:
Depends on:
Blocks:
 
Reported: 2021-09-16 20:42 UTC by Mike Kaganski
Modified: 2021-12-07 00:15 UTC (History)
3 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Kaganski 2021-09-16 20:42:56 UTC
"Protecting Content in LibreOffice" [1] tells:

> Information entered in File - Properties is not encrypted. This includes the name of the author, creation date, word and character counts.

But AFAICT this information is encrypted in ODF. Maybe it was unencrypted when this phrase was added (at least in https://git.libreoffice.org/help/+/4f48bcc7937fbc586af7720d4225768ee6913e2a)?

Miklos, Michael: do you know if it is still unencrypted in an encrypted document in some way?

[1] https://help.libreoffice.org/7.2/en-US/text/shared/guide/protection.html
Comment 1 Miklos Vajna 2021-09-17 08:15:28 UTC
No idea. I know a bit about document signing, but if I would have a question about encryption, I would ask you. :-)
Comment 2 Michael Stahl (allotropia) 2021-09-17 08:25:40 UTC
maybe? i dont know. it definitely should be encrypted.

maybe it's not encrypted in binary MSO files or other formats i don't know about.
Comment 3 Rafael Lima 2021-09-20 15:16:57 UTC
I ran a test here and it seems the contents are indeed encrypted.

I created a file and entered values using the File - Properties dialog. After saving this file without a password, I noticed that the contents from the File - Properties dialog are stored into the meta.xml file (after unzipping the resulting ODT).

Then I saved the file again, now with a password, and the contents of meta.xml were encrypted.

I guess we can remove that note from the help file.

In addition, I noticed that the Save As dialog has another option to save the file using a GPG key, but I could not find anything about it in the documentation.

If anyone can provide some information about this feature, I can add it to the help as well.
Comment 4 Rafael Lima 2021-09-20 18:20:56 UTC
Just found the information on OpenPGP:

https://help.libreoffice.org/latest/en-US/text/shared/guide/openpgp.html?DbPAR=SHARED

I'll link it to the "protection.xhp" page.
Comment 5 Commit Notification 2021-09-22 12:42:29 UTC
Rafael Lima committed a patch related to this issue.
It has been pushed to "master":

https://git.libreoffice.org/help/commit/1d9db89cb1d9e2beb64672b55f200e24da405670

tdf#144559 Fix information about document encryption