search

ONLYOFFICE / DocumentServer

ONLYOFFICE Docs is a free collaborative online office suite comprising viewers and editors for texts, spreadsheets and presentations, forms and PDF, fully compatible with Office Open XML formats: .docx, .xlsx, .pptx and enabling collaborative editing in real time.
https://www.onlyoffice.com
GNU Affero General Public License v3.0
4.91k stars 1.1k forks source link

Add support for the new password encryption implemented on LibreOffice documents #2841

Open vivadavid opened 3 months ago

vivadavid commented 3 months ago

This issue is unique.

Your idea.

On the incoming LibreOffice 24.08, the new password encryption will be used by default, a format that OnlyOffice doesn't support yet, which means that LibreOffice documents saved on this version can't be opened.

Here's the info:

ODF Wholesome Encryption A new mode of password-based ODF encryption has been implemented, with the following advantages:

more performant due to deriving a key only once per package more tamper-resistant with authenticated encryption (AES-GCM) better hiding of metadata to reduce information leaks higher resistance to brute forcing using memory-hard Argon2id key derivation function (Michael Stahl, allotropia) tdf#105844

LibreOffice 24.08 hasn't been officially released, but the installer can be found here.

I've only tested it on the Android app (version 8.1.2.), where you get the following message: "Conversion failed".

The password of my documents is: password.

document.odt

ElenaMaaya commented 3 months ago

Hi, @vivadavid! Thank you for contacting us. I created ticket 69682 in our issue tracker. Problem reproduces in Document Server.

vivadavid commented 3 months ago

Thank you, @ElenaMaaya .