ODF 1.2 Part 3 CD01-rev08 Contradictory <manifest:algorithm> provisions

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major
    • ODF 1.2 CD 06
    • Affects Version/s: ODF 1.2 CD 05
    • Component/s: Packaging, Part 2 (Packages) [1.2: 3], Security
    • None
    • Environment:

      This issue applies to ODF 1.2 Part 3 CD01-rev08.odt in conjunction with the latest manifest schema. It applies to the ODF 1.2 draft4 Part 3 approved to become Part 3 of the combined Public Review CD.

    • Hide

      Option 1: Eliminate the extensibility of <manifest:algorithm> and only support the default methods for this form of encryption for backward compatibility purposes. This is desirable if an alternative whole-package encryption technique is introduced with ODF 1.2 or a supplement thereto.

      Option 2: Adjust the schema to allow for optional occurrence of elements from the <EncryptionMethod> element of [xmlenc-core] as subelements of <manifest:algorithm>. Account for any namespace bindings and established element names of that namespace to the extent that is achievable.

      Show
      Option 1: Eliminate the extensibility of <manifest:algorithm> and only support the default methods for this form of encryption for backward compatibility purposes. This is desirable if an alternative whole-package encryption technique is introduced with ODF 1.2 or a supplement thereto. Option 2: Adjust the schema to allow for optional occurrence of elements from the <EncryptionMethod> element of [xmlenc-core] as subelements of <manifest:algorithm>. Account for any namespace bindings and established element names of that namespace to the extent that is achievable.
    • Hide

      Adjust the schema to allow arbitrary child elements in <manifest:algorithm>

      Show
      Adjust the schema to allow arbitrary child elements in <manifest:algorithm>

      In ODF 1.2 Par 3 CD01-rev08.odt (ODF 1.2 draft4 Part 3),

      1. Section 2.1.1(B.3) requires that the META-INF/manifest.xml file conform to the schema provided in Appendix A.

      2. Section 4.5 <manifest:algorithm> and the schema confirm that <manifest:algorithm> has no elements.

      3. Section 3.4.1 confirms that OpenDocument Package Consumers and Producers may employ additional algorithms beyond those established as the defaults in section 3.4.2. Section 4.5 <manifest:algorithm> text stipulates that there may be additional elements as required to support different encryption algorithms as if <manifest:algorithm> were an <EncryptionMethod> element of [xmlenc-core] associated with the provided <manifest:algorithm> manifest:algorithm-name attribute value.

      4. Although incorporation of elements from [xmlenc-core] is stated, there is no discussion of how namespace considerations apply.

      NOTE: The simplicity or complexity of resolution of this conflict depends on whether or not an alternative full-package encryption methodology is introduced in place of encryptions that deal with the individual Zip contents individually.

            Assignee:
            Michael Brauer (Inactive)
            Reporter:
            Dennis Hamilton (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved: