On Thursday 17 February 2005 09:04 am, user86 wrote: > Anthony E. Greene wrote: > > On 17-Feb-2005/03:57 -0700, Rauf Abdul <[EMAIL PROTECTED]> wrote: > >>i am talking about encryption. > >>still i doubt-- save as with password option will protect the > >>document with password. But nothing related to cryptograpgy, am i > >>right? > >>But Digital Signature is related with cryptograpy (??), no role for > >>password. > >> > >>pls excuse if i am wrong.. > > > > OpenOffice documents are saved as ZIP compressed archives. The save > > with password function uses a ZIP file password. It is a simple > > encryption scheme, not like any of the algorithms used in OpenPGP. > > > > Tony >
> Are you sure about that? I just did a test save in OpenOffice's > writer and it does not use a zip file password when saving with a > password as the zip file it created was completely unzippable without > a password. Instead certain files inside the zip it created when told > to save with a password were encrypted, which were content.xml, > settings.xml, and styles.xml. "meta.xml" was not encryped and a > "META-INF" subfolder in the zip file had an file inside named > "manifest.xml" that was also not encrypted that had information about > the encryption being used in it (blowfish CFB for me), the integrity > checking method (SHA1 hashes), several initialization vectors values, > several salt values, the file sizes of the encrypted files, and other > info. So, I doubt it is using a simple encryption scheme in for its > encryption. > Thanks for making the point even more clearer: files saved with a password are very secure in almost all cases. As has been pointed out before, someone with a supercomputer could crack the password, but that would take some time. Otherwise, forget opening the file in almost all cases. All the OP needs to do for encrypting something is to use the "save with password" choice. My observation is that all OOo file formats have this choice except for *.html. (That is obviously not a native file format for OOo. Dan --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
