-
Type: New Feature
-
Status: Closed
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: ODF 1.3
-
Fix Version/s: ODF 1.3
-
Component/s: Packaging, Part 2 (Packages) [1.2: 3]
-
Labels:None
-
Proposal:
Currently ODF supports password-based encryption, using a user-provided string of characters to encrypt an AES session encryption key.
That is not ideal in the context of sharing documents securely with wider audiences, since one always needs a secure sidechannel to distribute the passphrase.
This proposal builds on top of https://www.w3.org/TR/2002/REC-xmlenc-core-20021210/ for XML encryption, and essentially extends the ODF manifest markup with a few nodes to denote OpenPGP key material plus transport encryption for the session key