PDFsharp & MigraDoc Foundation

PDFsharp - A .NET library for processing PDF & MigraDoc Foundation - Creating documents on the fly
It is currently Thu Mar 28, 2024 5:37 pm

All times are UTC


Forum rules


Please read this before posting on this forum: Forum Rules



Post new topic Reply to topic  [ 5 posts ] 
Author Message
PostPosted: Fri Jan 06, 2017 9:42 pm 
Offline

Joined: Fri Jan 06, 2017 9:36 pm
Posts: 3
I know understand that the PDFSharp.dll (v1.32) supports 128 bit encryption, but I need to determine if this is AES encryption for our security team. In addition to verification I need to try to find any documentation or weblink that states this.

Thanks in advanced for your help.
JTYoder


Top
 Profile  
Reply with quote  
PostPosted: Mon Jan 09, 2017 12:40 pm 
Offline
PDFsharp Guru
User avatar

Joined: Mon Oct 16, 2006 8:16 am
Posts: 3095
Location: Cologne, Germany
Hi!

See this Wikipedia page:
https://en.wikipedia.org/wiki/Portable_ ... monitoring

_________________
Regards
Thomas Hoevel
PDFsharp Team


Top
 Profile  
Reply with quote  
PostPosted: Mon Jan 09, 2017 4:31 pm 
Offline

Joined: Fri Jan 06, 2017 9:36 pm
Posts: 3
Thanks for that link. I don't see any reference in the link to if AES is utilized or not. But since this link is related to Adobe, I assume you are utilizing their encryption routines. Is that correct? If so, I can re-direct my inquiries towards Adobe.

thanks again for taking the time to respond to my inquiry.


Top
 Profile  
Reply with quote  
PostPosted: Thu Nov 16, 2017 3:54 pm 
Offline
User avatar

Joined: Thu Nov 16, 2017 3:17 pm
Posts: 1
Hi there Thomas

We are using PDFSharp version 1.38.2608.0.

Can you please indicate which encryption method is being applied?
I've searched quite a lot for the related information but was unable to find an answer to that.

Awaiting for your response.

Thanks in advance,
Joanna


Top
 Profile  
Reply with quote  
PostPosted: Thu Nov 16, 2017 4:36 pm 
Offline

Joined: Fri Jan 06, 2017 9:36 pm
Posts: 3
Hi Joanna,

We were stuck with version1.3 since this was the DLL utilized by the vendor's application. I discovered that it uses 128-bit RC4 encription, a routine that has been rendered insecure. Sorry I can't provide the link where I discovered the encryption method, like you I had a rough go finding this out, and apparently didn't document the location I discovered this at.

REF: https://en.wikipedia.org/wiki/RC4

Version 1.3 also has issues merging PDF files in Version 6 or later.
REF: http://forum.pdfsharp.net/viewtopic.php ... ef+streams

These were show-stoppers for us since we handle HIPAA information. I did some research and found a nice little cheap (but not free) application called Coherent PDF. We just needed to be able to call the DLL, for Merging and Encryption, and it works like a charm. Encryption is 256 AES, the same encryption utilized by the CDC, and exceeding HIPAA requirements.

You might want to check it out. Here is the URL for the website:
https://www.coherentpdf.com/
Server license was less than $500.

Best of luck!


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 148 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Privacy Policy, Data Protection Declaration, Impressum
Powered by phpBB® Forum Software © phpBB Group