Skip to content

DocFence 0.50.0

Choose a tag to compare

View all tags
@SybilGambleyyu SybilGambleyyu released this 06 Aug 08:31
v0.50.0
7768c42

DocFence 0.50 rejects the one DigestMethod Algorithm URI OPC expressly forbids: http://www.w3.org/2001/04/xmldsig-more#md5.

An MD5 package-object binding leaves declared coverage unavailable. An MD5 manifest part or relationship reference is aggregate unsupported and cannot lend part or selector coverage. This remains a bounded structural check: DocFence does not decode or recompute digest bytes, verify XMLDSIG, or judge a digest algorithm’s cryptographic suitability. SHA-1 remains structurally accepted because OPC only discourages it rather than forbidding it.

Validated with 69 tests, fresh wheel and source-distribution installs, DCAB adapter coverage, and the public USENIX OOXML Signature Security corpus.

Assets 4
Loading