2.5.2.4 idPackageObject Object Element
The idPackageObject element contains the following:
A Manifest element as specified in [XMLDSig], which contains Reference elements corresponding to each stream (1) that is signed. Except for streams (1) and storages enumerated later in this section, all streams (1) and storages MUST be included in the Manifest element. DigestMethod is provided by the application.<30>
A SignatureProperties element containing a SignatureProperty element with a time stamp, as specified in [ECMA-376] Part 2 Section 12.2.4.20.
When constructing the Manifest element, the following storages and any storages or streams (1) contained within listed storages MUST be excluded:
0x05Bagaaqy23kudbhchAaq5u2chNd
0x06DataSpaces
Xmlsignatures
MsoDataStore
The following streams (1) MUST also be excluded:
0x09DRMContent
_signatures
0x05SummaryInformation
0x05DocumentSummaryInformation
If the document conforms to the details as specified in [MS-XLS], and the name of the stream (1) is Workbook, the stream (1) MUST be filtered as specified in [MS-XLS] section 2.1.7.21.
If the document conforms to the details as specified in [MS-PPT], the hash of the CurrentUser stream (1) MUST be calculated when verifying the signature as if the stream (1) were empty, which would be the result of hashing 0 bytes.