2.5.2.4 idPackageObject Object Element

The idPackageObject element contains the following:

  • A Manifest element as specified in [XMLDSig], which contains Reference elements corresponding to each stream (1) that is signed. Except for streams (1) and storages enumerated later in this section, all streams (1) and storages MUST be included in the Manifest element. DigestMethod is provided by the application.<30>

  • A SignatureProperties element containing a SignatureProperty element with a time stamp, as specified in [ECMA-376] Part 2 Section 12.2.4.20.

When constructing the Manifest element, the following storages and any storages or streams (1) contained within listed storages MUST be excluded:

  • 0x05Bagaaqy23kudbhchAaq5u2chNd

  • 0x06DataSpaces

  • Xmlsignatures

  • MsoDataStore

The following streams (1) MUST also be excluded:

  • 0x09DRMContent

  • _signatures

  • 0x05SummaryInformation

  • 0x05DocumentSummaryInformation

If the document conforms to the details as specified in [MS-XLS], and the name of the stream (1) is Workbook, the stream (1) MUST be filtered as specified in [MS-XLS] section 2.1.7.21.

If the document conforms to the details as specified in [MS-PPT], the hash of the CurrentUser stream (1) MUST be calculated when verifying the signature as if the stream (1) were empty, which would be the result of hashing 0 bytes.