Bug 56486 - [PATCH] Add XOR obfuscation/decryption support to HSSF
Summary: [PATCH] Add XOR obfuscation/decryption support to HSSF
Status: RESOLVED FIXED
Alias: None
Product: POI
Classification: Unclassified
Component: HSSF (show other bugs)
Version: 3.11-dev
Hardware: All All
: P2 normal (vote)
Target Milestone: ---
Assignee: POI Developers List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-05-04 21:52 UTC by Andreas Beeker
Modified: 2014-05-05 21:46 UTC (History)
0 users



Attachments
[PATCH] Add XOR obfuscation/decryption support to HSSF (22.46 KB, application/octet-stream)
2014-05-04 21:52 UTC, Andreas Beeker
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Beeker 2014-05-04 21:52:25 UTC
Created attachment 31589 [details]
[PATCH] Add XOR obfuscation/decryption support to HSSF

This patch adds support for xor obfuscated Excel files.
Furthermore it modifies the RC4 classes to use the standard JCE implementation.
To document further changes, e.g. encryption support (not sure, if it makes sense to support a nearly 20 year old obfuscation scheme (office 95 [1]/[2]) ...), I opened a new bug entry - the original bug entry is #35897 

[1] http://blogs.msdn.com/b/david_leblanc/archive/2008/07/03/office-crypto-follies.aspx
[2] https://eprint.iacr.org/2005/007.pdf
Comment 1 Andreas Beeker 2014-05-05 21:46:33 UTC
Applied with svn rel r1592636