[#OFFICE-1810] ISO/IEC JTC 1/SC 34 N 1078 : DEFECT REPORT NUMBER JP2-18

OASIS Open Document Format for Office Applications (OpenDocument) TC

ISO/IEC JTC 1/SC 34 N 1078 : DEFECT REPORT NUMBER JP2-18

Created: 28/May/09 04:24 PM Updated: 11/Nov/10 09:07 PM

Component/s:

None

Affects Version/s:

ODF 1.0, ODF 1.0 (second edition), ODF 1.0 Errata 02

Fix Version/s:

ODF 1.0 Errata CD 5

Proposal:

Add: table:protection-key-digest-algorithm and text:protection-key-digest-algorithm, both from ODF 1.2 and appropriate language to tie them to the attributes in question. (Yes, we did not specify these values in ISO 26300).

Resolution:

« Hide

4.4.1 Protected Sections
After:
"To avoid saving the password directly into the XML file, only a hash value of the password is stored."
insert:
"The hashing is implementation-dependent."

8.1.1 Protected
After:
"To avoid saving the password directly into the XML file, only a hash value of the password is stored within the table:protection-key attribute."
insert:
"The hashing is implementation-dependent."

8.5.1 Document Protection
After:
"To avoid saving the password directly into the XML file, only a hash value of the password is stored."
insert:
"The hashing is implementation-dependent."

Description

« Hide

Transcribed from http://www.itscj.ipsj.or.jp/sc34/open/1078.htm

Original author: "MURATA Makoto (FAMILY Given)" <eb2m-mrt@asahi-net.or.jp>
DEFECT REPORT NUMBER JP2-18

QUALIFIER clarification required

REFERENCES IN DOCUMENT "Protected Sections" in Clause 4.4.1, "Protected" in Clause 8.1.1, and Clause 8.5.1

NATURE OF DEFECT Hashing for the text:protection-key and table:protection-key attribute of ODF 1.0 is not specified at all.

SOLUTION PROPOSED BY THE SUBMITTER

All

Comments

Change History

Sort Order:

[ Permalink | « Hide ]

Patrick Durusau added a comment - 06/Jul/09 01:17 PM

Proposal filed.

[ Permalink | « Hide ]

Dennis Hamilton added a comment - 22/Mar/10 06:19 PM

The proposal in this issue was not enacted because it constitutes a substantive change. It is also inappropriate to bring the default case back from ODF 1.2.

However, rejection in Errata CD04 seems inappropriate:
"""
Rejected, the correction of this defect would exceed the limits of OASIS errata and therefore it
will be addressed in ODF 1.2. The behavior in question is implementation dependent for
purposes of ISO 26300.
"""

It is recommended that instead we add an explicit "The choice of hashing algorithm is implementation-dependent." at appropriate places in 4.4.1 "Protected Sections" in the description of text:protection-key, 8.1.1 "Protected" and 8.5.1 "Protected."

This will better satisfy the request made at the SC34 Ad hoc working group 3 session in Seattle, September 2009.

[ Permalink | « Hide ]

Oliver-Rainer Wittmann added a comment - 29/Mar/10 09:29 AM

Adjusting "Fix Version/s" field, because in my opinion it was set to "ODF 1.2 Part 1 CD 5" by accident.

[ Permalink | « Hide ]

Dennis Hamilton added a comment - 06/Nov/10 12:06 AM

This ODF 1.2 Errata 02 treatment of text:protection does not require transposition to ODF 1.2 section 19.851. The Section 19.851 statement and the companion 19.852 statement replace the implementation-dependent hashing with a prescribed hashing structure as well as a way to add implementation-defined password-verification methods for releasing the protection-key lock on protection.

[ Permalink | « Hide ]

Dennis Hamilton added a comment - 10/Nov/10 07:30 PM - edited

Errata02 - ODF 1.2 Reconciliation. ODF 1.2 19.698.4 <table:table> table:protected has removed reference to the hashing, and the treatement of table:protection-key and table:protection-key-digest-algorithm resolve the Errata 02 change and the related defect report.

The reconciliation is already achieved with respect to the counterparts of sections 4.4.1, 8.1.1, and 8.5.1.