https://bugs.documentfoundation.org/show_bug.cgi?id=162630
--- Comment #5 from Eyal Rozenberg <[email protected]> --- (In reply to Eyal Rozenberg from comment #1) > but then - what would we do with the multiple encrypted versions of the > document? Can you please flesh out your suggestion? I'm sorry I asked this question, it's a dumb question and I didn't need to have Bill write a longer comment. When we encrypt on save, what gets saved is a zip file; but instead of the actual ODF, the zip file contains the following files: ./META-INF/manifest.xml ./mimetype ./encrypted-package the encrypted-package is the binary data, apparently under symmetric encryption. The meta-data is in manifest.xml, and in there we have one <encrypted-key> element for each recipient key. It looks like this: <manifest:encrypted-key> <manifest:encryption-method manifest:PGPAlgorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/> <manifest:keyinfo> <manifest:PGPData> <manifest:PGPKeyID>NDQ5MzE1RjcxNTczQzI2Mzg5RjZGMTk4NTJEQjVERjc1RkQ3M0YxNAA=</manifest:PGPKeyID> <manifest:PGPKeyPacket>NDQ5MzE1RjcxNTczQzI2Mzg5RjZGMTk4NTJEQjVERjc1RkQ3M0YxNAA=</manifest:PGPKeyPacket> </manifest:PGPData> </manifest:keyinfo> <manifest:CipherData> <manifest:CipherValue>hQEOA5HTv6k+SoraEAP9GGSuWkNj+xieV6wjssMidtwgR7SIdHzUAMcjWoauGabGTH1yEo+M1mD+VyvhQ1pcJw492BblRGeAn23gh3TZ8owFvSBUwCM2Ni4+M/35WlJwmIssaFLKL1nTkNtaWRD5L35e/+sFi </manifest:CipherData> </manifest:encrypted-key> if there are multiple recipient keys - we get multiple blocks of this kind. Each person with right secret key can decrypt the symmetric encryption key, and with it, decrypt the document. (In reply to Heiko Tietze from comment #4) Actually, right now, we can pick 2 people using the preferences - an arbitrary person, and possibly also yourself. And they are _always_ selected, in addition (I think) to whomever you picked on save. That's a bit of a weird behavior. -- You are receiving this mail because: You are the assignee for the bug.
