[PDFBOX-3149] Failure to decrypt empty strings (AES 128)

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: Crypto, Parsing, PDModel
• Assignee: Tilman Hausherr
• Reporter: Jesse Long
• Created: 02/Dec/15 12:24
• Updated: 17/Mar/16 19:07
• Resolved: 03/Dec/15 19:55

Description

SecurityHandler fails to decrypt empty strings in a AES 128 encrypted PDF.

Strings like: <</Name ()>>

This is because it tries to read the first 16 bytes as the AES IV, failing which it throws IOException. Solution: if you cannot read any bytes from the stream, it is empty and so there is nothing to decrypt.