PDFsharp & MigraDoc Foundation
https://forum.pdfsharp.net/

Encryption Algorithm for PDFSharp DLL version 1.32
https://forum.pdfsharp.net/viewtopic.php?f=2&t=3522
Page 1 of 1

Author:  JTYoder [ Fri Jan 06, 2017 9:42 pm ]
Post subject:  Encryption Algorithm for PDFSharp DLL version 1.32

I know understand that the PDFSharp.dll (v1.32) supports 128 bit encryption, but I need to determine if this is AES encryption for our security team. In addition to verification I need to try to find any documentation or weblink that states this.

Thanks in advanced for your help.
JTYoder

Author:  Thomas Hoevel [ Mon Jan 09, 2017 12:40 pm ]
Post subject:  Re: Encryption Algorithm for PDFSharp DLL version 1.32

Hi!

See this Wikipedia page:
https://en.wikipedia.org/wiki/Portable_ ... monitoring

Author:  JTYoder [ Mon Jan 09, 2017 4:31 pm ]
Post subject:  Re: Encryption Algorithm for PDFSharp DLL version 1.32

Thanks for that link. I don't see any reference in the link to if AES is utilized or not. But since this link is related to Adobe, I assume you are utilizing their encryption routines. Is that correct? If so, I can re-direct my inquiries towards Adobe.

thanks again for taking the time to respond to my inquiry.

Author:  jdeme [ Thu Nov 16, 2017 3:54 pm ]
Post subject:  Re: Encryption Algorithm for PDFSharp DLL version 1.32

Hi there Thomas

We are using PDFSharp version 1.38.2608.0.

Can you please indicate which encryption method is being applied?
I've searched quite a lot for the related information but was unable to find an answer to that.

Awaiting for your response.

Thanks in advance,
Joanna

Author:  JTYoder [ Thu Nov 16, 2017 4:36 pm ]
Post subject:  Re: Encryption Algorithm for PDFSharp DLL version 1.32

Hi Joanna,

We were stuck with version1.3 since this was the DLL utilized by the vendor's application. I discovered that it uses 128-bit RC4 encription, a routine that has been rendered insecure. Sorry I can't provide the link where I discovered the encryption method, like you I had a rough go finding this out, and apparently didn't document the location I discovered this at.

REF: https://en.wikipedia.org/wiki/RC4

Version 1.3 also has issues merging PDF files in Version 6 or later.
REF: http://forum.pdfsharp.net/viewtopic.php ... ef+streams

These were show-stoppers for us since we handle HIPAA information. I did some research and found a nice little cheap (but not free) application called Coherent PDF. We just needed to be able to call the DLL, for Merging and Encryption, and it works like a charm. Encryption is 256 AES, the same encryption utilized by the CDC, and exceeding HIPAA requirements.

You might want to check it out. Here is the URL for the website:
https://www.coherentpdf.com/
Server license was less than $500.

Best of luck!

Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/