CODEWITHSUNDEEP
encryptionpasswordsms-officeopenxml
Adam Paynter
Adam Paynter

Reputation: 46938

Office Open XML (OOXML) Specification: Encryption

I am trying to understand how encrypted ("password protected") Office 2007 documents are bundled (specifically, Excel documents). I am experimenting with a known, password protected spread sheet.

When I unzip the XLSX file, I encounter three entries:

How is the EncryptedPackage file encrypted (which cipher, which key derivation function, etc...)?

I have tried referencing the documentation, but I haven't had much success.

Upvotes: 8

Views: 11525

Answers (2)

dbkk
dbkk

Reputation: 12852

I created a OoXmlCrypto stream wrapper, connecting several open source bits and pieces to access Office 2007 encrypted files easily.

This answer might be helpful.

Turns out [6]DataSpaces is ignored, but other two parts are used. The encrypted XLSX file is not really zipped, it's an OLE compound container. If you take out the parts, and zip them using 7zip, Excel does not open it.

Upvotes: 4

Dirk Vollmar
Dirk Vollmar

Reputation: 176259

File encryption is not part of the OpenXML ECMA/ISO specifications. It's a vendor-specific standard on top of that. For the specification please check out

[MS-OFFCRYPTO]: Office Document Cryptography Structure Specification

Encrypted OpenXML documents are not stored as an OPC zip package but as an encrypted OPC package inside a compound OLE document.

Upvotes: 12

Related Questions