Hello,

I just wanted to inform you that in master I unconditionally removed
Libidn dependency, by implementing my own version[1] of the "SALSprep"
profile (RFC 4013) of the "stringprep" algorithm(RFC 3454). This
allows us to remove an uncommon dependency such as Libidn and upgrade
to AESV3R6 encryption/decryption by default. It also removes the only
dependency on a LGPL library, which prevents a full relicensing to
LGPL/MPL2 (to happen after the release of 1.0). The implementation is
based on this javascript[2] version, and it's also tested based on
their (small) test suite. Since "SALSprep" operates mostly on PDF
passwords with exotic Unicode code points, it's not super easy to test
for developers that use common latin based alphabets. We should
produce a few encrypted "hello world" PDFs with Adobe Acrobat using
meaningful passwords where "SALSprep" produces a different string than
the inserted one, so we have a cross testing with other products. Let
me know if you are willing to produce such PDFs or in general test the
code more in depth.

Regards,
Francesco

[1] 
https://github.com/podofo/podofo/commit/f5f8e7e7570f66758b6dddf07a0fcb152767cf5a
[2] https://github.com/reklatsmasters/saslprep


_______________________________________________
Podofo-users mailing list
Podofo-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/podofo-users

Reply via email to