[OASIS Issue Tracker] Commented: (OFFICE-3027) Public Comment: ODF1.2 Part 3 Encryption Process and Default Concerns

[ http://tools.oasis-open.org/issues/browse/OFFICE-3027?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=22388#action_22388 ] 

Malte Timmermann commented on OFFICE-3027:
------------------------------------------

Sounds good to me!

Blowfish shouldn't be named "default encryption algorithm" anywhere anymore, we just need to explain that it might be used for legacy reasons, and that a missing tag for algorithm specification implies Blowfish for legacy reasons.

Typos in proposal: "Blowfish in CBC-code" => "Blowfish in CFB mode", and one more "Blowfish CBC" => "Blowfish CFB".

Maybe we should remove the references to §5.3 of [xmlenc-core], as Stream Encryption isn't recommend anyway, also not in §5.3 of [xmlenc-core].

> Public Comment: ODF 1.2 Part 3 Encryption Process and Default Concerns
> ----------------------------------------------------------------------
>
>                 Key: OFFICE-3027
>                 URL: http://tools.oasis-open.org/issues/browse/OFFICE-3027
>             Project: OASIS Open Document Format for Office Applications (OpenDocument) TC
>          Issue Type: Sub-task
>          Components: Part 3 (Packages), Public Review, Security
>    Affects Versions: ODF 1.2 CD 05
>            Reporter: Dennis Hamilton
>             Fix For: ODF 1.2 CD 06
>
>
> There are clarifications requested for portions of the Encryption process, with objection to the Blowfish default and proposal of an AES default.
> The full text is in the second attachment to the public comment posting at
> <http://lists.oasis-open.org/archives/office/201006/msg00071.html>.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://tools.oasis-open.org/issues/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira