On April 26, 2002 15:10, Marc Mutz wrote:

> > We could make quick hacks that do the job now, but let's not create a
> > hack that will have to stay in KDE [basically forever] because of
> > backwards compatibility, even if we come up with a good solution later.
>
> If you encrypt a given blob with AES, you will be able to decrypt it with
> any other AES implementation. Everything else is a bug in one of the AES
> implementations. No need there to worry about backwards compat.

  That's not the problem.  The API of the library is a problem, and the header 
on the file is a problem.

> Re: encrypting koffice files: Just wait for the XML-encryption framework to
> stableize and use that. XML-sig is already Candidate(?) Rec. No need to
> worry for backwards compat here, too.

   That's insufficient because KOffice documents don't contain just XML.  If 
you don't encrypt the outer layer, anyone can unzip it and see the structure 
of the document, as well as view images (for instance).




