diff options
author | Jay Berkenbilt <ejb@ql.org> | 2022-04-30 22:05:28 +0200 |
---|---|---|
committer | Jay Berkenbilt <ejb@ql.org> | 2022-04-30 23:24:15 +0200 |
commit | 8ccd3a8a89d95ae0613679ba7b394a4f87699e12 (patch) | |
tree | 902a42a5bc972c66958ab6ce96260daf5957a78e /manual/cli.rst | |
parent | 2213ed0c3dd1bcc5a62725190cca4a6ad8eb9d7f (diff) | |
download | qpdf-8ccd3a8a89d95ae0613679ba7b394a4f87699e12.tar.zst |
Mark weak encryption with API changes (fixes #576)
Diffstat (limited to 'manual/cli.rst')
-rw-r--r-- | manual/cli.rst | 17 |
1 files changed, 13 insertions, 4 deletions
diff --git a/manual/cli.rst b/manual/cli.rst index 8dabaced..2f2b5108 100644 --- a/manual/cli.rst +++ b/manual/cli.rst @@ -470,12 +470,18 @@ Related Options option is necessary to create 40-bit files or 128-bit files that use RC4 encryption. - Starting with version 10.4, qpdf issues warnings when requested to - create files using RC4 encryption. This option suppresses those - warnings. In future versions of qpdf, qpdf will refuse to create - files with weak cryptography when this flag is not given. See + Encrypted PDF files using 40-bit keys or 128-bit keys without AES + use the insecure *RC4* encryption algorithm. Starting with version + 11.0, qpdf's default behavior is to refuse to write files using RC4 + encryption. Use this option to allow creation of such files. In + versions 10.4 through 10.6, attempting to create weak encrypted + files was a warning, rather than an error, without this flag. See :ref:`weak-crypto` for additional details. + No check is performed for weak crypto when preserving encryption + parameters from or copying encryption parameters from other files. + The rationale for this is discussed in :ref:`weak-crypto`. + .. qpdf:option:: --keep-files-open=[y|n] .. help: manage keeping multiple files open @@ -741,6 +747,9 @@ Related Options file without having to manual specify all the individual settings. See also :qpdf:ref:`--decrypt`. + Checks for weak cryptographic algorithms are intentionally not made + by this operation. See :ref:`weak-crypto` for the rationale. + .. qpdf:option:: --encryption-file-password=password .. help: supply password for --copy-encryption |