Will it support RC4 CryptoAPI decryption for HSSF document, and when?

[刘杨 <li...@gmail.com>]

Hi,

According to https://poi.apache.org/encryption.html

The only document type with RC4 CryptoAPI encryption support is "HSLF", and
I found it was supported recently from the latest version.

After checking the source code, I found this encryption for HSSF(binary
stream .xls files) is simply not implemented yet.

_encryptionInfo = in.readUShort();
switch (_encryptionInfo) {
   case ENCRYPTION_OTHER_RC4:
      // handled below
      break;
   case ENCRYPTION_OTHER_CAPI_2:
   case ENCRYPTION_OTHER_CAPI_3:
   case ENCRYPTION_OTHER_CAPI_4:
      throw new EncryptedDocumentException(
            "HSSF does not currently support CryptoAPI encryption");
   default:
      throw new RecordFormatException("Unknown encryption info " +
_encryptionInfo);
}

Then I would like to know whether there is any plan or process working on
this problem.

Since the support for HSLF just came, would I expect this issue to be fixed
soon?

Re: Will it support RC4 CryptoAPI decryption for HSSF document, and when?

[Andreas Beeker <ki...@apache.org>]

Hi 刘杨,

I will eventually implement it, if no-one else submits a patch before me.
Currently I have the following todos:
- #54916 (hopefully just another few days, as this is quite a global change)
- document signature with multiple certificates
- sl table rendering

So I guess, I could start with it, in maybe 2 months ...

MS-OFFCRYPTO [1] and MS-XLS [2] are the needed documents.
If you need help in implementing it, open a bugzilla entry, post what you've come
up so far and I have a look.

Andi

[1] https://msdn.microsoft.com/en-us/library/office/cc313071(v=office.12).aspx
[2] https://msdn.microsoft.com/en-us/library/office/cc313154(v=office.12).aspx




---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@poi.apache.org
For additional commands, e-mail: user-help@poi.apache.org