[ 
https://issues.apache.org/jira/browse/PDFBOX-4453?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16758969#comment-16758969
 ] 

Michael Klink commented on PDFBOX-4453:
---------------------------------------

{quote}
The signature isn't encrypted / decrypted, see "isSignature" in 
SecurityHandler.java.
{quote}

That is some heuristic but not 100% correct. A dictionary is not a signature 
dictionary because of its type alone, it also has to be where a signature 
dictionary belongs. I can add custom objects in my private object hierarchies 
in a pdf, and a dictionary with type *Sig* therein not necessarily is a 
signature which is subject to the encryption exception. One only recognizes a 
signature by finding it where a signature is expected. 

I have to admit, though, that these heuristics will succeed in 99.9% or more of 
all documents.  ;)

> Encrypted string not decrypted
> ------------------------------
>
>                 Key: PDFBOX-4453
>                 URL: https://issues.apache.org/jira/browse/PDFBOX-4453
>             Project: PDFBox
>          Issue Type: Bug
>          Components: Crypto
>    Affects Versions: 2.0.13
>            Reporter: Tilman Hausherr
>            Priority: Critical
>             Fix For: 2.0.14, 3.0.0 PDFBox
>
>         Attachments: 2AF-0088-NA-LMF35-40-01-2019-01-18-14-25-52(1).pdf
>
>
> In the attached file, an ancrypted string "0" should be decrypted to "3" but 
> it is not.
>  * It is RC4 40 bit enrcyption
>  * The string is not decrypted because it is skipped because it is in the 
> objects HashSet



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@pdfbox.apache.org
For additional commands, e-mail: dev-h...@pdfbox.apache.org

Reply via email to