ODF Wholesome Encryption
2024-10-11, 09:30–10:00 (Europe/Luxembourg), Auditorium

Learn about the new password-based ODF package encryption that is enabled by default since LibreOffice 24.8 and will be standardized in upcoming ODF 1.5.


A new mode of password-based ODF encryption has been implemented, with the following advantages:
- more performant due to deriving a key only once per package
- more tamper-resistant with authenticated encryption (AES-GCM)
- better hiding of metadata to reduce information leaks
- higher resistance to brute forcing using memory-hard Argon2id key derivation function

See also: slides

Fixing bugs our customers need fixed in LibreOffice, employed by allotropia software GmbH.