Bug in OPC: 12.4.2 Modifications to the XML Digital Signature Specification

MURATA Makoto eb2m-mrt at asahi-net.or.jp
Fri Dec 29 03:41:31 CET 2017


"Packages shall not contain references to a package‑specific Object element
that contains a transform other than a canonicalization transform."
appears in the currently published ISO/IEC 29500-2.


But MS Office emits

    <Object Id="idPackageObject" xmlns:mdssi="
http://schemas.openxmlformats.org/package/2006/digital-signature">
      <Manifest>
        <Reference
URI="/_rels/.rels?ContentType=application/vnd.openxmlformats-package.relationships+xml">
          <Transforms>
            <Transform Algorithm="
http://schemas.openxmlformats.org/package/2006/RelationshipTransform">
              <mdssi:RelationshipReference SourceId="rId1" />
            </Transform>
            <Transform Algorithm="
http://www.w3.org/TR/2001/REC-xml-c14n-20010315" />
          </Transforms>
          <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"
/>
          <DigestValue>1vWU/YTF/7t6ZjnE44gAFTbZvvA=</DigestValue>
        </Reference>

This Object element is referenced.

I am going to drop this requirement.

Regards,
Makoto
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20171229/fc941cef/attachment.html>


More information about the sc34wg4 mailing list