Microsoft Office Encrypted Document

Name: Microsoft Office Encrypted Document

Version: 2007 Onwards

Description: A Microsoft Office - Word, Excel, or PowerPoint document, that has been encrypted.

The encrypted document conforms to the MS-OFFCRYPTO specification, as found here:

The document is an OLE2 compound that contains a number of files:

EncryptionInfo - This file contains information used by the Office-compatible application to decrypt the encrypted package. There are multiple variants of this file, as described in, and of the format specification.

EncryptedPackage - This file contains the whole of the encrypted document.

DataSpaces folder (and sub-files) - This structure associates protected content with data space definitions. The data space definition, in turn, describes the series of transforms that must be applied to that protected content to restore it to its original form.

Since the method of identifying and distinguishing specific types of OOXML documents relies on seeking and analysing specific elements within the document, and in the case of encryption this information is obfuscated, it does not currently seem possible to determine with any specificity whether an encrypted file is either an Excel, Word, or PowerPoint document, apart from the file extension.

Deprecated: false


PUID: fmt/494

sameAs : PRONOM:

Extension: xlsx

Magic: true

Container Magic: true

Binary Magic: false

Signature Priority Over:

See Also (e.g. Wikidata, Library of Congress):

Software that can read the format: