Uploaded image for project: 'OASIS Open Document Format for Office Applications (OpenDocument) TC'
  1. OASIS Open Document Format for Office Applications (OpenDocument) TC
  2. OFFICE-3297

Part 3 [Blowfish] Reference Out-of-Date, Misleading

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Applied
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: ODF 1.0, ODF 1.0 (second edition), ODF 1.1, ODF 1.2 CD 05
    • Fix Version/s: ODF 1.2 CD 06
    • Component/s: Public Review
    • Labels:
      None
    • Environment:
    • Proposal:
      Hide

      Replace the Normative References to [Blowfish] with [Schneier] and in section 1.3 replace the [Blowfish] entry with the following:

      "[Schneier] Bruce Schneir, Applied Cryptography (Second Edition), John Wiley & Sons, ISBM 0-471-11709-9 (paper), 1996; applicable errata at http://www.schneier.com/book-applied-errata.html"

      Show
      Replace the Normative References to [Blowfish] with [Schneier] and in section 1.3 replace the [Blowfish] entry with the following: " [Schneier] Bruce Schneir, Applied Cryptography (Second Edition), John Wiley & Sons, ISBM 0-471-11709-9 (paper), 1996; applicable errata at http://www.schneier.com/book-applied-errata.html "
    • Resolution:
      Hide

      Rename the Normative References to [Blowfish] to [Schneier] and in sections 3.4.2 and 4.8.1.

      Add the following note to section 4.8.1

      Note: An errata for [Schneier] is available at [Schneier-Errata]

      where [Schneier-Errata] is

      "[Schneier-Errata] Bruce Schneir, Applied Cryptography 2nd. Ed. - Errata, http://www.schneier.com/book-applied-errata.html"

      Show
      Rename the Normative References to [Blowfish] to [Schneier] and in sections 3.4.2 and 4.8.1. Add the following note to section 4.8.1 Note: An errata for [Schneier] is available at [Schneier-Errata] where [Schneier-Errata] is " [Schneier-Errata] Bruce Schneir, Applied Cryptography 2nd. Ed. - Errata, http://www.schneier.com/book-applied-errata.html "

      Description

      The current reference when there is mention of the default Blowfish CFB encryption algorithm is

      [Blowfish] Bruce Schneier, Applied Cryptography (Second Edition), John Wiley & Sons, ISBN: 0-471-11709-9, 1996.

      While Blowfish is discussed in the referenced technical publication, that is not all that is there. In addition, the description of CFB (and alternatives) is not specific to Blowfish and is discussed in a different part of the text.

      Finally, there is an errata for Applied Cryptography (Second Edition) that is relevant to the consideration of various methods (including CFB) in employing an encryption algorithm.

        Attachments

          Activity

            People

            • Assignee:
              michael.brauer Michael Brauer (Inactive)
              Reporter:
              orcmid Dennis Hamilton (Inactive)
            • Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: