Cannot compute correct okey in AESv3 R5

[GoogleCodeExporter]

Hi,

In step 3 of algorithm 3.2a of [1], the algorithm to computer the intermediate 
owner is described as following:

file_encryption_key = AES256 {
    data: OE
    key: SHA256(owner_password + O[40:48] + U) 
    mode: CBC, no-padding
    IV: 0
}

However, the implementation seems to forget the U key part when calculating 
AES256 key. This patch adds self.U to conform [1].


[1] Adobe Supplement to ISO 32000, BaseVersion 1.7, ExtensionLevel 3 
(http://www.adobe.com/devnet/pdf/pdf_reference.html)

Original issue reported on code.google.com by czchen on 26 Apr 2013 at 10:48

Attachments:

• AESv3R5.patch

[GoogleCodeExporter]

Damn, that's right.
And the derivation of the key was also wrong for AESv3 R6. I just fixed it in 
the latest commit.

Thank you for your patch!
Guillaume

Original comment by guilla...@security-labs.org on 2 May 2013 at 4:27

• Changed state: Fixed