Issue 92645 - Cannot open Password protected docx/xlsx Files (MS Office 2007 "Standard Encryption")
Summary: Cannot open Password protected docx/xlsx Files (MS Office 2007 "Standard Encr...
Status: CLOSED FIXED
Alias: None
Product: xml
Classification: Code
Component: code (show other issues)
Version: OOO310m13
Hardware: All All
: P3 Trivial (vote)
Target Milestone: OOo 3.2
Assignee: AOO issues mailing list
QA Contact: issues@xml
URL:
Keywords: ms_interoperability, oooqa
: 94349 101863 (view as issue list)
Depends on:
Blocks:
 
Reported: 2008-08-11 08:05 UTC by rjmoos
Modified: 2024-03-12 02:48 UTC (History)
12 users (show)

See Also:
Issue Type: ENHANCEMENT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments
Excel 2007 with password = 123456 (12.49 KB, application/vnd.ms-excel)
2008-10-24 21:53 UTC, rogimenez
no flags Details
Excel 2007 without password (8.44 KB, application/vnd.ms-excel)
2008-10-24 21:53 UTC, rogimenez
no flags Details
MS XML decryption implementation (13.91 KB, patch)
2009-06-26 11:06 UTC, caolanm
no flags Details | Diff
hello (452.50 KB, patch)
2012-04-03 12:51 UTC, shamshuddin
no flags Details | Diff
i would like to retrive password (452.50 KB, application/msword)
2012-04-03 12:55 UTC, shamshuddin
no flags Details

Note You need to log in before you can comment on or make changes to this issue.
Description rjmoos 2008-08-11 08:05:06 UTC
If I open .docx-Files that are protected with Password, oo mentions, that this 
file is not a docx-file!!!!

If I save the Docoment without Passwordprotection, the File can bie opend.

Please change code, that oo informs the user, if the file can not being opend 
caused by  Passwordprotection!
Comment 1 rogimenez 2008-10-24 21:53:08 UTC
Created attachment 57442 [details]
Excel 2007 with password = 123456
Comment 2 rogimenez 2008-10-24 21:53:55 UTC
Created attachment 57443 [details]
Excel 2007 without password
Comment 3 rogimenez 2008-10-24 21:55:02 UTC
I can confirm that OpenOffice.org 3.0.0 cannot open any password protected 
Microsoft Office 2007 files. I'm ussing OOo 3.0.0 Build 9358 (final spanish)

In the attachment you will find two Excel 2007 files, one without password and 
the other one password protected, the second one present and error when opening.

I think is imperative to correct this because is a very common practice to 
create passwords to protect files.
Comment 4 aziem 2008-10-28 03:37:46 UTC
Confirmed on OOo 3.0.0
Comment 5 openoffice 2008-11-21 15:24:34 UTC
set target
Comment 6 rogimenez 2008-11-24 22:24:17 UTC
To be clear, it is imperative to be able to OPEN password protected files in 
office 2003/2007 formats, and not only to display a warning alerting of the 
passowrd presence.

Is it the target?
Comment 7 sliverbaer 2008-12-09 23:42:30 UTC
Confirmed on Vista Home Premium (32) OpenOffice 3.0.0 and Mac OS X 10.4.11
OpenOffice 3.0.0.
Comment 8 kpalagin 2008-12-25 20:56:55 UTC
Dear developers,
are we on track for 3.1 with this issue?
Comment 9 kpalagin 2009-01-21 20:47:12 UTC
Are we missing 3.1 with this one?
Comment 10 openoffice 2009-01-22 14:14:14 UTC
This is a missing feature. Password protected .*x files are stored as OLE2
storage, not as ZIP storage. Solving this needs completely different access
methods. I suggest the effort to be in the weeks. 
Comment 11 rogimenez 2009-01-22 21:22:33 UTC
What about previous formats (previous to Office 2007), *.doc and *.xls, those 
also can't be open in OOorg 3.0, and I think it’s an important feature.

Are those formats included in the correction of 3.2?
Comment 12 rogimenez 2009-05-29 00:41:03 UTC
I can confirm that in version 3.1.0 OOorg can open password protected files in 
xls format, not xlsx (2007 format), so and improvement was done to this item.
Comment 13 caolanm 2009-06-25 12:34:58 UTC
*** Issue 101863 has been marked as a duplicate of this issue. ***
Comment 14 caolanm 2009-06-26 11:05:42 UTC
assignee doesn't look right here, to default oox owner
Comment 15 caolanm 2009-06-26 11:06:53 UTC
Created attachment 63222 [details]
MS XML decryption implementation
Comment 16 caolanm 2009-06-26 11:11:22 UTC
cmc->dr/hbrinkm/kohei: Attached is an implementation of the MS XML decryption
mechanism. I've only done the decryption work and hard-coded the password to the
classic Excel default "VelvetSweatshop", which means that applied and
out-of-the-box it's able to open "protected" documents like 
http://download.microsoft.com/download/7/E/7/7E7662CF-CBEA-470B-A97E-CE7CE0D98DC2/ISA_PNPID_List.xlsx

but someone needs to extend it to query/accept used-entered passwords, and/or
break it up, move it around, check for failures at the various intermediate
steps return values

openssl is in the "vanilla" build-tree, so I've implemented it using that, so it
should be ok from that sense.

FWIW, one quirk of their "bundle it into a OLE2 package and encrypt the whole
zip as a stream in that package" mechanism is that it won't be possible to
detect the file type until *after* its bee decrypted
Comment 17 daniel.rentz 2009-08-11 14:47:51 UTC
querying passwords will be done later, I will integrate this patch to be able to
open protected files without user-def password.
Comment 18 daniel.rentz 2009-08-11 18:56:15 UTC
committed the patch with some changes
Comment 19 daniel.rentz 2009-08-12 17:54:08 UTC
now the user will also be asked for the file encryption password... :-)
Comment 20 kyoshida 2009-08-12 18:18:42 UTC
@dr: is this only for xlsx, or does this also take care of encrypted docx documents?
Comment 21 daniel.rentz 2009-08-12 18:27:48 UTC
all filters (Word, Excel, Powerpoint), all file types (doc, template).
Comment 22 kyoshida 2009-08-12 18:39:16 UTC
nice. :-)
Comment 23 daniel.rentz 2009-08-25 10:18:08 UTC
see http://sc.openoffice.org/testdocs/filetype/index.html for a collection of
test files. WordML, SpreadsheetML, PresentationML files labeled with "AES128
encrypted, "Password"" must be able to open using the password "Password"
(capital P).

For spreadsheet: the test files labeled with "Encrypted, built-in password" are
encrypted too, but must open without password request (they are encrypted with
the well-known default password "VelvetSweatshop").
Comment 24 oc 2009-09-03 11:01:06 UTC
verified in internal build cws_dr72
Comment 25 caolanm 2009-09-11 09:06:59 UTC
closing, integrated DEV300_m58
Comment 26 jbf.faure 2009-09-27 21:24:36 UTC
Hi,

Perhaps I have missed something, but I cannot open the attached bugdoc with
DEV300_m60. It asks me for the password and after asks for a filter and, when I
choose "Microsoft Excel 2007 XML" I get error message : General Error. General
input/output error".
Same problem for test files as :
http://sc.openoffice.org/testdocs/filetype/ms_excel_xml_encrypted_aes128.xlsx

Regards
JBF
Comment 27 thorsten.ziehm 2009-11-04 13:35:51 UTC
Is it fixed or isn't it? Please check. Thx
Comment 28 kpalagin 2009-11-06 09:54:32 UTC
m3 opens w_password.xlsx just fine, after user supplies the password.
Earlier builds apparently had broken import filter for Excel2007 files.

Resolving as fixed.
Comment 29 kpalagin 2009-11-06 09:55:09 UTC
Verified.
Comment 30 shamshuddin 2012-04-03 12:42:23 UTC
hello please let me know how to encrypt password from docx file
Comment 31 shamshuddin 2012-04-03 12:51:39 UTC
Created attachment 77412 [details]
hello

hello
Comment 32 shamshuddin 2012-04-03 12:55:38 UTC
Created attachment 77413 [details]
i would like to retrive password

i would like to retriver password
Comment 33 Edwin Sharp 2013-11-14 13:51:47 UTC
*** Issue 94349 has been marked as a duplicate of this issue. ***
Comment 34 orcmid 2015-07-05 23:53:24 UTC
(In reply to shamshuddin from comment #32)
> Created attachment 77413 [details]
> i would like to retrive password
> 
> i would like to retriver password

Sorry.  Those are strongly-encrypted files.  If you don't know or have forgotten the password, you will have to look for password-cracking software that *might* be able to discover a password that works.  This is not something that Apache OpenOffice provides, not even for files that are saved with Password by Apache OpenOffice.

We do not have any recommendations for products that might work.  

Also, the difficulty of recovering passwords is a feature.  Furthermore, encrypted .docx and .xslx files are not OOXML files.  They are something else, but Microsoft Office recognizes them as files that decrypt to unencrypted .docx and .xslx.
Comment 35 oooforum (fr) 2016-12-13 09:06:17 UTC
.

*** This issue has been marked as a duplicate of issue 118936 ***
Comment 36 damjan 2024-03-12 02:48:27 UTC
This is NOT a duplicate.

This bug was about MS Office 2007's "Standard Encryption".
Bug 118936 is about MS Office 2010's "Agile Encryption".

Resolving FIXED.