[PDFBOX-4466] Signature without /Type /Sig can't be read

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.8.16, 2.0.13
• Fix Version/s: 1.8.17, 2.0.14, 3.0.0 PDFBox
• Component/s: Crypto, Signing
• External issue URL: https://ec.europa.eu/cefdigital/tracker/browse/DSS-1538
• Assignee: Tilman Hausherr
• Reporter: Tilman Hausherr
• Created: 17/Feb/19 14:49
• Updated: 28/Feb/19 17:44
• Resolved: 17/Feb/19 15:02

Description

Signatures are not to be decrypted, and currently decryption is skipped when their type is detected. However the type is optional, so in the attached file where the type is missing it is "decrypted". See at the end of PDFBOX-4453 and in the linked issue of the European commission DSS project. Thanks mkl for pointing me to this one.

Issue Links

• relates to: PDFBOX-4453 Encrypted string not decrypted