Print Page | Close Window

Open & Master passwords

Printed From: Debenu Quick PDF Library - PDF SDK Community Forum
Category: For Users of the Library
Forum Name: I need help - I can help
Forum Description: Problems and solutions while programming with the Debenu Quick PDF Library and Debenu PDF Viewer SDK
URL: http://www.quickpdf.org/forum/forum_posts.asp?TID=2475
Printed Date: 01 Feb 26 at 8:21PM
Software Version: Web Wiz Forums 11.01 - http://www.webwizforums.com


Topic: Open & Master passwords
Posted By: DaveH
Subject: Open & Master passwords
Date Posted: 14 Dec 12 at 11:01PM
I'm trying to understand what actually happens to a PDF file when you apply the Open and Master password.
 
From the API docs I gather that the file itself is encrpted using the Open password.  Ie, no PDF tool will be able to read the file unless they get the password.  Being that this is the same password prompted for to the user, people tend to use weak passwords because - well who wants to keep keying in long passwords just to open a file.  So this I think I understand.
 
Now the Master password is suppose to lock the "permissions" of the file (print, copy & paste, etc) but this is only as good as the developer since after they call the Decrypt routine with the right Open password, they have full access to everything. So what does the Master password actually do to the PDF file.  Is it stored somewhere in the file? It would have to be right? so a properly built viewer app could verify the password and respect the permission settings.
 
And then there is the Digital Signature.  Is this actually stored in the PDF doc as an encrypted attachment (allowed since v1.7 I think).
 
Thanks for any insight behind the scenes,
DaveH
 
 



Replies:
Posted By: AndrewC
Date Posted: 18 Dec 12 at 2:12AM

Dave,

The Open and Master password are technically considered equal and either one of them will allow you to decrypt the encrypted PDF data.  Without either password then the PDF cannot be read nor viewed.  It is up to the PDF viewer to respect the differences between the Open and Master password.

I am not up to speed with the Digital Signature but they is all fully documented in the PDF specifications which can by found via Google.

Andrew.


Posted By: DaveH
Date Posted: 18 Dec 12 at 1:41PM
Thanks for the reply Andrew,
 
I've been going through the spec but it's still unclear how they protect the "perms" area of the document.  So far, it doesn't look like it's actually encrypted.  It's just stored in the open, which kind of makes sense since the reader app needs to know the settings without prompting for the master password.  Whether the reader app respects the settings is up to the developer.
 
Still digging into encyrpted attachments...
 
DaveH
 


Posted By: Ingo
Date Posted: 18 Dec 12 at 10:52PM
Hi Dave!

You're looking on this password-case through the developer-glasses
and for a developer (you're right) the master password is worthless.
If the pdf is loaded into memory then it's unprotected.
With a user password it's different but very uncomfortable.

Cheers, Ingo



Print Page | Close Window

Forum Software by Web Wiz Forums® version 11.01 - http://www.webwizforums.com
Copyright ©2001-2014 Web Wiz Ltd. - http://www.webwiz.co.uk