oracola91 00fb10cf1e fix(crypt): /Perms limits what an edited /P allows ...

AES-256 files (R5 and R6) store the permissions twice: in clear in /P,
and in /Perms, encrypted with the file key (ISO 32000-2, Algorithm 13).
We wrote /Perms but never read it, so a document opened with the user
password got whatever /P said, even when /P no longer matched /Perms.

permissions() now decrypts /Perms and, when it holds a valid block
(marked "adb"), counts a permission only if both /P and /Perms grant
it. Without a readable /Perms, /P applies as before. R2 to R4 need no
check: /P is part of their file key, so an edited /P does not open.

2026-10-15 17:56:45 +03:00

..

src

fix(crypt): /Perms limits what an edited /P allows

2026-10-15 17:56:45 +03:00

tests

crypt: property tests for encrypted content, crypt filters and damaged ciphertext (#2358)

2026-10-15 02:57:44 -04:00

Cargo.toml

Rename PrintCraft to PdfCraft (#174)

2026-10-07 16:03:57 -04:00