Portable Document Format
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Vulnerability Report Attacks Bypassing Confidentiality in Encrypted PDF
Vulnerability Report Attacks bypassing confidentiality in encrypted PDF Jens M¨uller1, Fabian Ising2, Vladislav Mladenov1, Christian Mainka1, Sebastian Schinzel2, J¨orgSchwenk1 May 16, 2019 1Chair for Network and Data Security 2FH M¨unsterUniversity of Applied Sciences Abstract In this report, we analyze PDF encryption and show two novel techniques for breaking the confidentiality of encrypted documents. Firstly, we abuse the PDF feature of partially encrypted documents to wrap the encrypted part of the document within attacker-controlled content and therefore, exfiltrate the plaintext once the document is opened by a legitimate user. Secondly, we abuse a flaw in the PDF encryption specification allowing an attacker to arbitrarily manipulate encrypted content without knowing the cor- responding key/password. The only requirement is one single block of known plaintext, which we show is fulfilled by design. By using exfiltration channels our attacks allow the recovery of the entire plaintext or parts of it within an encrypted document. The attacks rely only on standard compliant PDF features. We evaluated our attacks on 27 widely used PDF viewers and found all of them vulnerable. 1 Contents 1 Background4 1.1 Portable Document Format (PDF) . .4 1.2 PDF Encryption . .6 1.3 PDF Interactive Features . .7 2 Attacker Model8 3 PDF Encryption: Security Analysis9 3.1 Partial Encryption . .9 3.2 CBC Malleability . 10 3.3 PDF Interactive Features . 12 4 How To Break PDF Encryption 14 4.1 Direct Exfiltration (Attack A) . 14 4.1.1 Requirements . 15 4.1.2 Direct Exfiltration through PDF Forms (A1) . 15 4.1.3 Direct Exfiltration via Hyperlinks (A2) . -
2 Portable Document Format (Pdf)
ESCOLA TÈCNICA SUPERIOR D’ENGINYERIA ELECTRÒNICA I INFORMÀTICA LA SALLE PROJECTE FI DE CARRERA ENGINYERIA EN INFORMÀTICA PDFLab ALUMNE PROFESSOR PONENT Yuri González Azín Mª Antonia Mozota Coloma ACTA DE L'EXAMEN DEL PROJECTE FI DE CARRERA Reunit el Tribunal qualificador en el dia de la data, l'alumne D. Yuri González Azín va exposar el seu Projecte de Fi de Carrera, el qual va tractar sobre el tema següent: PDFLab Acabada l'exposició i contestades per part de l'alumne les objeccions formulades pels Srs. membres del tribunal, aquest valorà l'esmentat Projecte amb la qualificació de Barcelona, VOCAL DEL TRIBUNAL VOCAL DEL TRIBUNAL PRESIDENT DEL TRIBUNAL Abstract Este proyecto se ha encargado de desarrollar la herramienta PDFLab. PDFLab es una herramienta capaz de leer ficheros PDF y generar una estructura intermedia para implementar cualquier otro tipo de aplicaciones. En este documento se puede apreciar todo el estudio que ha sido necesario para desarrollar este proyecto. Así como, un estudio de las aplicaciones que existen en el mercado. Y documentación técnica sobre las etapas del desarrollo, tales como, Análisis, Diseño e Implementación. i A mi padre porque este trabajo es tanto suyo como mío. iii Resumen En este proyecto se ha desarrollado PDFLab, una herramienta capaz de leer ficheros PDF y generar una estructura intermedia para implementar cualquier otro tipo de aplicaciones. En el desarrollo se comprende el estudio de la estructura interna de los ficheros PDF, estudio de las técnicas de desarrollo, tanto metodológicas como de diseño, toma de requerimientos, análisis de requerimientos, diseño orientado a objetos, implementación, pruebas y mantenimiento. -
Adobe Indesign Introduction to Digital Humanities
Platform Study Adobe InDesign Introduction to Digital Humanities 2015 Matt Higgins Design is mind control. Introduction Modernist designers sought to find universal concepts within design. They wanted to know how visual elements affected human beings on a psychological level. This is why the works of Modernists such as Josef Müller-Brockmann, El Lissitzky, and Jan Tschichold, feature basic colors and shapes. They believed stripping design down to its most basic elements would remove any sentiment or bias that certain visuals could produce and allow for an objective study on how humans are affected by design. There have been countless movements like Modernism. They have invariably found their way into design. Many of those movements would reject the principles of Modernism and their universals. But it is plain to see, regardless of philosophy or ideology, that design affects human beings. If it did not, why would we continue designing? The nature of graphic design has always been to communicate. To affect people. Fresh Dialogue Sagmeister & Walsh This differentiates it from traditional fine arts. Certainly a We can think of design in terms of verbal conversation. What painting can communicate. The medium only matters in how it words are spoken is just as important as how the words are relates to the relaying of the message. But we tend to think of spoken. Then we take into account body language. From there fine art as a form of self expression. The artists is much more we can list a whole host of factors beyond the words spoken that involved in the work. -
4Typesetting, Viewing and Printing
Typesetting, viewing 4and printing We’ve now got far enough to typeset what you’ve entered. I’m assuming at this stage that you have typed some sample text in the format specified in the previous chapter, and you’ve saved it in a plain•text file with a filetype of .tex and a name of your own choosing. Picking suitable filenames Never, ever use directories (folders) or file names which contain spaces. Although your op• erating system probably supports them, some don’t, and they will only cause grief and tears with TEX. Make filenames as short or as long as you wish, but strictly avoid spaces. Stick to upper• and lower•case letters without accents (A–Z and a–z), the digits 0–9, the hyphen (-), and the full point or period (.), (similar to the conventions for a Web URI): it will let you refer to TEX files over the Web more easily and make your files more portable. Formatting information ✄ 63 ✂ ✁ CHAPTER 4. TYPESETTING, VIEWING AND PRINTING Exercise 4.1: Saving your file If you haven’t already saved your file, do so now (some editors and interfaces let you type• set the document without saving it!). Pick a sensible filename in a sensible directory. Names should be short enough to display and search for, but descriptive enough to make sense. See the panel ‘Picking suitable file• names’ above for more details. 4.1 Typesetting Typesetting your document is usually done by clicking on a button in a toolbar or an entry in a menu. Which one you click on depends on what output you want — there are two formats available: A f The standard (default) LTEX program produces a device•independent (DVI) file which can be used with any TEX previewer or printer driver on any make or model of computer. -
Indesign CC 2015 and Earlier
Adobe InDesign Help Legal notices Legal notices For legal notices, see http://help.adobe.com/en_US/legalnotices/index.html. Last updated 11/4/2019 iii Contents Chapter 1: Introduction to InDesign What's new in InDesign . .1 InDesign manual (PDF) . .7 InDesign system requirements . .7 What's New in InDesign . 10 Chapter 2: Workspace and workflow GPU Performance . 18 Properties panel . 20 Import PDF comments . 24 Sync Settings using Adobe Creative Cloud . 27 Default keyboard shortcuts . 31 Set preferences . 45 Create new documents | InDesign CC 2015 and earlier . 47 Touch workspace . 50 Convert QuarkXPress and PageMaker documents . 53 Work with files and templates . 57 Understand a basic managed-file workflow . 63 Toolbox . 69 Share content . 75 Customize menus and keyboard shortcuts . 81 Recovery and undo . 84 PageMaker menu commands . 85 Assignment packages . 91 Adjust your workflow . 94 Work with managed files . 97 View the workspace . 102 Save documents . 106 Chapter 3: Layout and design Create a table of contents . 112 Layout adjustment . 118 Create book files . 121 Add basic page numbering . 127 Generate QR codes . 128 Create text and text frames . 131 About pages and spreads . 137 Create new documents (Chinese, Japanese, and Korean only) . 140 Create an index . 144 Create documents . 156 Text variables . 159 Create type on a path . .. -
Apple Has Built a Solution Into Every Mac
Overview Mac OS X iPhone iPod + iTunes Resources Vision Mac OS X solutions VoiceOver from third parties. Browse the wide variety of To make it easier for the blind and those with low-vision to use a accessibility solutions supported computer, Apple has built a solution into every Mac. Called VoiceOver, by Mac OS X. Learn more it’s reliable, simple to learn, and enjoyable to use. In Depth Device Support Application Support Downloads VoiceOver Application Support VoiceOver. A unique solution for the vision-impaired. Every new Mac comes with Mac OS X and VoiceOver installed and includes a variety of accessible More than 50 reasons to use applications. You can also purchase additional Apple and third-party applications to use with VoiceOver. VoiceOver. Learn more While this page lists a few of the most popular applications, many more are available. If you use an application with VoiceOver that’s not on this list, and you would like to have it added, send email to [email protected]. Unlike traditional screen readers, VoiceOver is integrated into the operating system, so you can start using new accessible applications right away. You don’t need to buy an update to VoiceOver, install a new copy, or add the application to a “white list.” Moreover, VoiceOver commands work the same way in every application, so once you learn how to use them, you’ll be able to apply what you know to any accessible application. Apple provides developers with a Cocoa framework that contains common, reusable application components (such as menus, text fields, buttons, and sliders), so developers don’t have to re-create these elements each time they write a new application. -
EDTA Conference: Part 1
EDTA, iText and INBATEK Conference Bangkok, July 27, 2017 © 2015, iText Group NV, iText Software Corp., iText Software BVBA How standards drive business . History of PDF . Umbrella of standards . Focus on: PDF/A, PDF/UA, PAdES, PDF 2.0, next-generation PDF © 2015, iText Group NV, iText Software Corp., iText Software BVBA Speaking the same language Not being able to understand each other is a punishment, NOT a business model! Standards are about speaking the same language! 3 How standards drive business © 2015, iText Group NV, iText Software Corp., iText Software BVBA History of PDF Version Date # pages Content Adobe PDF 1.0 June 1993 230 43 tables, 42 figures Adobe PDF 1.1 23 January 1996 302 20 references Adobe PDF 1.2 12 November 1996 394 137 tables, 86 examples Adobe PDF 1.3 July 2000 696 223 tables, 73 figures Adobe PDF 1.4 December 2001 978 277 tables, 20 color plates Adobe PDF 1.5 August 2003 1172 333 tables, 70 figures Adobe PDF 1.6 November 2004 1236 370 tables, 80 figures Adobe PDF 1.7 October 2006 1310 389 tables, 98 figures ISO 32000-1:2008 (PDF 1.7) 1 July 2008 756 (A4) 78 Normative References ISO 32000-2:2017 (PDF 2.0) 2017 970 (A4) 5836 “shall”, 411 “should” 4 How standards drive business © 2015, iText Group NV, iText Software Corp., iText Software BVBA PDF: an umbrella of standards PDF Portable Document Format First released by Adobe in 1993 ISO Standard since 2008 ISO 32000 PDF/X PDF/A PDF/E PDF/VT PDF/UA Related: graphic arts archive engineering printing accessibility • EcmaScript (ISO) • PRC (ISO) Since 2001 Since 2005 Since 2008 Since 2010 Since 2012 • PAdES (ETSI) ISO 15930 ISO 19005 ISO 24517 ISO 16612 ISO 14289 • ZUGFeRD (DIN) 5 How standards drive business © 2015, iText Group NV, iText Software Corp., iText Software BVBA PDF/A ISO 19005: long-term preservation © 2015, iText Group NV, iText Software Corp., iText Software BVBA Goals and concept ISO-19005, Long-term preservation of documents, Approved parts will never become invalid, Individual parts define new, useful features. -
Serif Launches Pageplus X2 Submitted By: Serif Europe Monday, 19 February 2007
Serif Launches PagePlus X2 Submitted by: Serif Europe Monday, 19 February 2007 <strong>New Windows Vista™ certified version offers PDF slideshows, HTML email options and more</strong> <strong>Serif (Europe) Ltd (http://www.serif.com)</strong>, the UK’s leading independent desktop publishing, design and graphics software (http://www.serif.com) developer, is delighted to announce the release of PagePlus X2. <strong>PagePlus X2 (http://www.serif.com/pageplus/pageplusx2)</strong> (List Price £99.99; upgrade prices available*) is the first, Microsoft® Windows Vista™ certified, version of Serif’s multi-award winning desktop publishing (http://www.serif.com/pageplus/pageplusx2) program. Repeatedly praised for offering powerful, yet easy-to-use and affordable, desktop publishing tools for every level of user, this latest version promises even greater flexibility for anyone looking to create outstanding designs. PagePlus X2 has become one of the very first non-Microsoft applications to be awarded the full ‘Certified for Windows Vista’ logo, a great achievement that bears testament to Serif's development expertise and its dedication to making the latest functionality available to the widest possible audience. Windows Vista users can now easily identify their PagePlus (http://www.serif.com/pageplus/pageplusx2) documents within Vista windows from scalable document previews. Publications can also be easily found with Vista’s new Advanced Search feature, which searches document content as well as filenames, and from within PagePlus X2 itself. Designers who don’t switch to Windows Vista will find that PagePlus X2 still looks great and works more efficiently than ever for them too. PagePlus X2 offers a range of fantastic new ways for designers to share their documents. -
(A/V Codecs) REDCODE RAW (.R3D) ARRIRAW
What is a Codec? Codec is a portmanteau of either "Compressor-Decompressor" or "Coder-Decoder," which describes a device or program capable of performing transformations on a data stream or signal. Codecs encode a stream or signal for transmission, storage or encryption and decode it for viewing or editing. Codecs are often used in videoconferencing and streaming media solutions. A video codec converts analog video signals from a video camera into digital signals for transmission. It then converts the digital signals back to analog for display. An audio codec converts analog audio signals from a microphone into digital signals for transmission. It then converts the digital signals back to analog for playing. The raw encoded form of audio and video data is often called essence, to distinguish it from the metadata information that together make up the information content of the stream and any "wrapper" data that is then added to aid access to or improve the robustness of the stream. Most codecs are lossy, in order to get a reasonably small file size. There are lossless codecs as well, but for most purposes the almost imperceptible increase in quality is not worth the considerable increase in data size. The main exception is if the data will undergo more processing in the future, in which case the repeated lossy encoding would damage the eventual quality too much. Many multimedia data streams need to contain both audio and video data, and often some form of metadata that permits synchronization of the audio and video. Each of these three streams may be handled by different programs, processes, or hardware; but for the multimedia data stream to be useful in stored or transmitted form, they must be encapsulated together in a container format. -
“Real” Page Numbers to a Reflowable Kindle Textbook
How to Use Adobe InDesign CC to Add “Real” Page Numbers to a Reflowable Kindle Textbook with an Index, so that Index Entries Correspond to Print Edition Page Numbers, and Link to the Specific Text relevant to the Given Entry Topic Why do textbook authors/publishers require “real page numbers”? So readers can know what page they are on, so scholars can cite the page in academic papers, and students be sure they are reading the class assignments. Note that since a “page” in a book translates into multiple “locations” in a reflowable eBook like the E-ink Kindles, the page numbers in an index topic entry are not actually linked to the page number (whether visible or invisible) in the eBook. They are linked to the topic material - the index marker embedded by InDesign at a specific word. The fact that this link may go to a position in the text that is a few “locations” from the actual page number is not a bug, it’s a feature. Links go to “relevant paragraphs,” not page numbers, as Amazon requires. Kindle Digital Publishing Guidelines strongly recommend that the publisher remove some page numbers from reflowable E-ink Kindles, specifically those in the Table of Contents. This is because the typical mobi eBook does not have page numbers. When they do have page numbers, Amazon should support them in the ToC, as they do in the Index. Unfortunately, communication with KDP support is poor. KDP’s own conversion process now removes page numbers from the Table of Contents even though the publisher leaves them in and requests the Kindle Real Page Numbers feature, which supports the Go to Page feature and “page-flips” with page numbers. -
Breaking PDF Encryption
Practical Decryption exFiltration: Breaking PDF Encryption Jens Müller Fabian Ising Vladislav Mladenov [email protected] [email protected] [email protected] Ruhr University Bochum, Chair for Münster University of Applied Ruhr University Bochum, Chair for Network and Data Security Sciences Network and Data Security Christian Mainka Sebastian Schinzel Jörg Schwenk [email protected] [email protected] [email protected] Ruhr University Bochum, Chair for Münster University of Applied Ruhr University Bochum, Chair for Network and Data Security Sciences Network and Data Security ABSTRACT Home/Trusted Environment The Portable Document Format, better known as PDF, is one of the Decrypted Document 1. Victim opens 2. Exfiltrating Tax Declaration decrypted content most widely used document formats worldwide, and in order to en- an encrypted PDF file Scrooge McDuck with their password via the Internet sure information confidentiality, this file format supports document TOP SECRET Victim encryption. In this paper, we analyze PDF encryption and show Attacker two novel techniques for breaking the confidentiality of encrypted Victim’s PC documents. First, we abuse the PDF feature of partially encrypted documents to wrap the encrypted part of the document within Figure 1: An overview of the attack scenario: The victim attacker-controlled content and therefore, exfiltrate the plaintext opens an encrypted PDF document and unintentionally once the document is opened by a legitimate user. Second, we abuse leaks the decrypted content to an attacker-controlled server. a flaw in the PDF encryption specification to arbitrarily manipulate The encrypted PDF file was manipulated by the attacker be- encrypted content. -
Sparking Creativity and Synergy with Adobe® Creative Cloud™ for Teams
Adobe Customer Story Sparking Creativity and Synergy with Adobe® Creative Cloud™ for Teams HeterMedia Group, a leading corporate content solution provider headquartered in Hong Kong, embraces Adobe’s cutting-edge solutions to flexibly respond to time-sensitive work demands “Creative Cloud is so much more than a tool; it is an indispensable part of our work environment. Without it, we just cannot imagine how we can get tasks done with this level of efficiency and serve our clients in a professional manner.” Charles Ho, Design Manager, HeterMedia Group SOLUTION RESULTS Adobe Creative Cloud for teams BETTER COLLABORATION OUTSTANDING SERVICE INCREASE EFFICIENCY MOBILE SUPPORT Estimated 20% of employee Able to deliver excellent Team morale and productivity Able to provide on-site time saved by simplifying customer experience have been boosted demonstrations to client using access and sharing of work tablet devices Adobe Customer Story HeterMedia Group An Adobe software user for more than 18 years, HeterMedia Group is a renowned one-stop content management solutions company providing services such as financial document printing and hosting, initial Established in 1992 public offerings, EDGAR services, e-book solutions and webcasts, and comprehensive design and language HKSAR, China services. The Hong Kong based company decided it was time to reap the benefits of better workflow efficiency http://hetermedia.com/eng/ in its operations and adopted Adobe Creative Cloud for Teams, a subscription-based licensing application. Around 60 percent of employees, mostly desktop publishing staff and designers, are now active Creative Cloud users and they’ve found the new applications beneficial in many ways. One very important feature, is the way Adobe Creative Cloud seamlessly supports design across multiple devices.