https://bugs.freedesktop.org/show_bug.cgi?id=47482
--- Comment #5 from afunk...@ig.com.br 2012-03-26 18:23:11 PDT --- Actually LO 3.4.5 and 3.4.6 behave correctly by using SHA1/1K and BlowFish CFB when saving an encrypted ODF file in legacy format (Openoffice 1.0 *.sxc or *.sxw) as is evident by examining the corresponding manifest.xml. However LO 3.5.1 uses SHA256-1k and AES256-cbc to create the password-protected file with the legacy file types, and at the same time is unable to decrypt the very file it just created and encrypted with the newer method. So it behaves in a way that is neither backward-compatible (which would be desirable when saving in "legacy" formats intended to be opened by older versions of OO.org, or when re-saving older files originally created in the past and in use for several months or years without difficulties) nor compatible with the decryption capabilities of the newest LO versions (3.4.5, 3.4.6) besides the very one that created the "locked forever" file... Is there a reliable way to manually decrypt content.xml or the remaining encrypted data from these "corrupted" files? Has LO 3.5.1 actually used the user-provided password to encrypt in a way that cannot be decrypted by the program, or has it actually corrupted the password? If the first is true, then does the program makes some "assumptions" as to the decryption method that should be used for opening these "legacy" formats that prevent it from using the appropriate AES256 / SHA256 methods when trying to reopen the file? Does someone know a way to manually recover the content of these malformed files by typing the correct command line code (e.g. using "openssl enc -d" or something similar, and how to easily obtain the "hex" version of the salt and of the initialization vector, and whatever else is required for successfully recovering them)? -- Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. _______________________________________________ Libreoffice-bugs mailing list Libreoffice-bugs@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs
