Table of Contents

Enum OfficeEncryptionScheme

Namespace
DocWright.Cryptography
Assembly
DocWright.Cryptography.dll

The encryption scheme an EncryptionInfo stream declares, as identified from its version pair and flags ([MS-OFFCRYPTO] §2.3.4).

public enum OfficeEncryptionScheme

Fields

Unknown = 0

The scheme could not be identified from the descriptor.

Agile = 1

ECMA-376 agile encryption (version 4.4): an XML descriptor, AES-CBC, a spin-count key derivation and an HMAC over the payload. The modern default and the only scheme DocWright writes.

Standard = 2

ECMA-376 standard encryption (versions 2.2, 3.2 and 4.2): a binary descriptor and AES-ECB with a SHA-1 key derivation. Read-only.

Rc4CryptoApi = 3

Legacy RC4 CryptoAPI encryption (version 3.2 or 4.2 without the AES flag). Read-only.

Rc4 = 4

Legacy Office 97 RC4 encryption (version 1.1). Read-only.

XorObfuscation = 5

Office binary XOR obfuscation, the weakest legacy scheme. Read-only.

Extensible = 6

Extensible ("IRM") encryption, versions 3.3 and 4.3. Detected and reported, never decrypted: the key lives with a rights-management service, not in the file.