[ms-xlsx]: Excel (. xlsx) Extensions to the Office Open xml spreadsheetml file Format Intellectual Property Rights Notice for Open Specifications Documentation

2632Security Considerations

2632.1Security Considerations for Implementers

The password verifier features available in the file format are used to prevent accidental modification, rather than being used as security features. It is possible to remove the passwords by removing the records containing the verifier values.

The translation of passwords from a double-byte Unicode string to a new character string in the ANSI code page of the current system converts any Unicode character that cannot be mapped to the ANSI code page of the current system to the 0x3F character in that code page, as described in [ISO/IEC29500-1:2012] section 18.2.29. Replacing these characters with "0x3F" when the hash is verified will generate positive hash value matches. In certain locales, this can be a significant portion of the everyday character set.

Further security considerations regarding the file encryption algorithms are described in [MS-OFFCRYPTO] section 4.3.

2632.2Index of Security Fields

None.

2633Appendix A: Full XML Schema

For ease of implementation, this section provides the full W3C XML schemas for the new elements, attributes, complex types, and simple types specified in the earlier sections. Any schema references to namespaces included in Office Open XML file formats as described in [ISO/IEC29500:2012] refer specifically to the transitional schemas as described in [ISO/IEC29500-4:2012].

For ease of implementation, the following sections provide the full XML schema for this protocol.

Schema name	Prefix	Section
http://schemas.microsoft.com/office/excel/2006/main		section 5.1
http://schemas.microsoft.com/office/drawing/2010/slicer		section 5.2
http://schemas.microsoft.com/office/spreadsheetml/2010/11/main		section 5.3
http://schemas.microsoft.com/office/spreadsheetml/2009/9/main		section 5.4
http://schemas.microsoft.com/office/spreadsheetml/2009/9/ac		section 5.5
http://schemas.microsoft.com/office/spreadsheetml/2011/1/ac		section 5.6
http://schemas.microsoft.com/office/drawing/2012/timeslicer		section 5.7
http://schemas.microsoft.com/office/excel/2010/spreadsheetDrawing		section 5.8
http://schemas.microsoft.com/office/spreadsheetml/2010/11/ac		section 5.9
http://schemas.microsoft.com/office/spreadsheetml/2014/11/main		section 5.10
http://schemas.microsoft.com/office/spreadsheetml/2015/02/main		section 5.11

2633.1http://schemas.microsoft.com/office/excel/2006/main Schema

2634

2635

2636

2637

2638

2639

2640

2641

2642

2643

2644

2645

2646

2647

2648

2649

2650

2651

2652

2653

2654

2655

2656

2657

2658

2659

2660

2661

2662

2663

2664