<html> <head> <base href="https://bugs.documentfoundation.org/"> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - PDF export uses insecure RC4-128 encryption" href="https://bugs.documentfoundation.org/show_bug.cgi?id=107007#c5">Comment # 5</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - PDF export uses insecure RC4-128 encryption" href="https://bugs.documentfoundation.org/show_bug.cgi?id=107007">bug 107007</a> from <a class="email" href="mailto:hans@deragon.biz" title="Hans Deragon <hans@deragon.biz>"> Hans Deragon</a> <pre>Still RC4 as of version 7.1.1.2. $ pdfinfo -opw abc lo.pdf | fgrep Encrypted Encrypted: yes (print:yes copy:yes change:yes addNotes:yes algorithm:RC4) Version: 7.1.1.2 / LibreOffice Community Build ID: 10(Build:2) CPU threads: 4; OS: Linux 5.4; UI render: default; VCL: gtk3 Locale: en-CA (en_CA.UTF-8); UI: en-US Ubuntu package version: 1:7.1.1~rc2-0ubuntu0.20.04.1~lo1 Calc: threaded Workaround on Linux to encrypt a PDF in AES-256: qpdf --encrypt <user-password> <owner-password> 256 -- "${DECRYPTED_PDF}" "${ENCRYPTED_PDF}" Would be nice that LibreOffice detect that qpdf is available and use it to encrypt in AES-256 instead of relying on its library. Also, LibreOffice does not report what algorithm is being used. A warning should be shown that a very week algorithm is being used.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the assignee for the bug.</li> </ul> </body> </html>