- #Collabora code vereign unsigned pdf
- #Collabora code vereign unsigned upgrade
- #Collabora code vereign unsigned verification
- #Collabora code vereign unsigned software
- #Collabora code vereign unsigned code
#Collabora code vereign unsigned pdf
#Collabora code vereign unsigned verification
#Collabora code vereign unsigned code
Keep our existing certificate verification code (continue to delegate the decision to Mozilla/Microsoft).Keep our own code to actually verify the signature (offload to real crypto libs).Idea: use PDFium to extract the info from the PDF file.If a problem requires explicit user interaction, it’s much less interesting.A more battle-tested tokenizer is a huge win here.Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 12 /Ģ0 Verification with PDFium: LibreOffice side Focus on the most painful part: implicit verification on every file open.ByteRange: offset + size of signed data blocks.Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 11 /Ģ0 Verification with PDFium: PDFium side Provide a whole set of new PDFium (from Chrome) APIs:.Later reused to copy PDF images into a PDF export result as-is (via ascertia).Provides just what’s necessary to verify and create PDF signatures.clang-style close tracking of each parsed token.
![collabora code vereign unsigned collabora code vereign unsigned](https://www.collaboraoffice.com/wp-content/uploads/2020/03/CollaboraOnline_420_Tablet_desktop_mobile.png)
We had an own boost spirit-based tokenizer to detect hybrid PDFs (embedded ODF).Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 10 /Ģ0 PDF signature verification Using an own tokanizer first, nothing provided what we needed:.
#Collabora code vereign unsigned upgrade
![collabora code vereign unsigned collabora code vereign unsigned](https://fosdem.org/2022/schedule/event/llvm_ebpf/attachments/other/4891/export/events/attachments/llvm_ebpf/other/4891/html2.png)
Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 8 /Ģ0 Underlying encryption: RSA and ECDSA RSA worked even back in the OOo times.Governments like to give e-IDs to citizens.ODF supports both, see the GPG effort from CIB.Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 7 /Ģ0 Certificate types: X509 and GPG PDF and OOXML mandates X509.
![collabora code vereign unsigned collabora code vereign unsigned](https://www.collaboraoffice.com/wp-content/uploads/2018/12/code-3-3.png)
CryptoAPI itself doesn’t support ECDSA (via ).Tricky question, delegate the decision to Mozilla.Not own crypto, just using NSS on Linux.Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 6 /Ģ0 Platforms: NSS and MSCNG Multiple crypto backends in xmlsecurity/.Need incremental updates for multiple signatures.Collabora Productivity FOSDEM 2021, Virtual | Miklos Vajna 5 /Ģ0 Document formats: PDF, ODF and OOXML Initially just ODF, then PDF and OOXML.When it “doesn’t work”: several combinations (via ).Different encryption algorithms: ECDSA or RSA.
![collabora code vereign unsigned collabora code vereign unsigned](https://help.nextcloud.com/uploads/default/original/2X/9/98c726e730891abd8a444816e2bcff1d9ae3e8b0.png)
#Collabora code vereign unsigned software