-
Type: Bug
-
Status: Applied
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: ODF 1.2 CD 05
-
Fix Version/s: ODF 1.2 CD 06
-
Component/s: Packaging, Part 2 (Packages) [1.2: 3], Security
-
Labels:None
-
Environment:
This issue applies to ODF 1.2 Part 3 CD01-rev08.odt in conjunction with the latest manifest schema. It applies to the ODF 1.2 draft4 Part 3 approved to become Part 3 of the combined Public Review CD.
-
Proposal:
-
Resolution:
In ODF 1.2 Par 3 CD01-rev08.odt (ODF 1.2 draft4 Part 3),
1. Section 2.1.1(B.3) requires that the META-INF/manifest.xml file conform to the schema provided in Appendix A.
2. Section 4.5 <manifest:algorithm> and the schema confirm that <manifest:algorithm> has no elements.
3. Section 3.4.1 confirms that OpenDocument Package Consumers and Producers may employ additional algorithms beyond those established as the defaults in section 3.4.2. Section 4.5 <manifest:algorithm> text stipulates that there may be additional elements as required to support different encryption algorithms as if <manifest:algorithm> were an <EncryptionMethod> element of [xmlenc-core] associated with the provided <manifest:algorithm> manifest:algorithm-name attribute value.
4. Although incorporation of elements from [xmlenc-core] is stated, there is no discussion of how namespace considerations apply.
NOTE: The simplicity or complexity of resolution of this conflict depends on whether or not an alternative full-package encryption methodology is introduced in place of encryptions that deal with the individual Zip contents individually.