Name: Microsoft Office Encrypted Document
Version: 2007 Onwards
Description: A Microsoft Office - Word, Excel, or PowerPoint document, that has been encrypted.
The encrypted document conforms to the MS-OFFCRYPTO specification, as found here: http://msdn.microsoft.com/en-us/library/cc313071(v=office.12).aspx
The document is an OLE2 compound that contains a number of files:
EncryptionInfo - This file contains information used by the Office-compatible application to decrypt the encrypted package. There are multiple variants of this file, as described in 184.108.40.206, and 220.127.116.11 of the format specification.
EncryptedPackage - This file contains the whole of the encrypted document.
DataSpaces folder (and sub-files) - This structure associates protected content with data space definitions. The data space definition, in turn, describes the series of transforms that must be applied to that protected content to restore it to its original form.
Since the method of identifying and distinguishing specific types of OOXML documents relies on seeking and analysing specific elements within the document, and in the case of encryption this information is obfuscated, it does not currently seem possible to determine with any specificity whether an encrypted file is either an Excel, Word, or PowerPoint document, apart from the file extension.
sameAs : PRONOM: http://www.nationalarchives.gov.uk/PRONOM/fmt/494
Container Magic: true
Binary Magic: false
Signature Priority Over:
See Also (e.g. Wikidata, Library of Congress):
Software that can read the format: