Ask Your Question

Revision history [back]

serious encryption loophole:
version 4.3.0.4 on mac os x Steps to reproduce: 1. Create a document. 2. Type something in 24 font or bigger. 3. Save it in .odt format with password protection.   4. Close the document and quit libreOffice.   5. Re-open LO. The start center shows a preview thumbnail of the document that was saved as encrypted.   6. Panic!!! 7. Click on this icon to be prompted for the password as expected.
but that wall doesn't matter cause your adversary has already seen the image of the secret file. this bug has now been fixed as far as I can tell using 4.3.2.2 moral of the story: using encryption is worthless if LO is saving a duplicate image somewhere else.  Be wary of any software that could have bugs that SAVE UNENCRYPTED IMAGES OF ENCRYPTED FILES because it means your data was not being quarantined properly throughout the editing process. I have not found this, but there could reasonably be other temp files holding your data also.

serious encryption loophole:
version 4.3.0.4 on mac os x x

Steps to reproduce: 1. reproduce:

  1. Create a document. 2. document.
  2. Type something in 24 font or bigger. 3. bigger.
  3. Save it in .odt format with password protection.   4.  
  4. Close the document and quit libreOffice.   5.  
  5. Re-open LO. The start center shows a preview thumbnail of the document that was saved as encrypted.   6.  
  6. Panic!!! 7.
  7. Click on this icon to be prompted for the password as expected.
    but (but that wall doesn't matter cause your adversary has already seen the image of the secret file. file.)

this bug has now been fixed as far as I can tell using 4.3.2.2 4.3.2.2

moral of the story: using encryption is worthless if LO is saving a duplicate image somewhere else.  Be wary of any software that could have bugs that SAVE UNENCRYPTED IMAGES OF ENCRYPTED FILES because it means your data was not being quarantined properly throughout the editing process. I have not found proof of this, but there could reasonably be other temp temp(autosave, clipboard, etc) files holding parts of your data also. data.

serious encryption loophole:
version 4.3.0.4 on mac os x

Steps to reproduce:

  1. Create a document.
  2. Type something in 24 font or bigger.
  3. Save it in .odt format with password protection.  
  4. Close the document and quit libreOffice.  
  5. Re-open LO. The start center shows a preview thumbnail of the document that was saved as encrypted.  
  6. Panic!!!
  7. Click on this icon to be prompted for the password as expected.
    (but that wall doesn't matter cause your adversary has already seen the image of the secret file.)

this bug has now been fixed as far as I can tell using 4.3.2.2

moral of the story: using encryption is worthless if LO is saving a duplicate image somewhere else.  Be wary of any software that could have bugs that SAVE UNENCRYPTED IMAGES OF ENCRYPTED FILES because it means your data was not being quarantined properly throughout the editing process. I have not found yet looked for proof of this, but there could reasonably be other temp(autosave, clipboard, etc) files holding parts of your data.