Preview Encrypt PDF - Really Secure?

When you use the Preview app in OS X to encrypt a PDF is it really secure?
I haven't been able to find anything about the level of encryption used by Preview in OS X. What type of encryption does Preview use (40-bit, 128-bit)?
A quick search of the web and there are several products that claim they can remove the passwords from PDF files. If these work why would anyone consider encrypted PDF's secure?

Preview
CVE-ID: CVE-2008-0994
Available for: Mac OS X v10.5.2, Mac OS X Server v10.5.2
Impact: Saving to encrypted PDF in Preview produces files that may be read without the password
Description: When Preview saves a PDF file with encryption, it uses 40-bit RC4. This encryption algorithm may be broken with significant but readily available computing power. A person with access to the file may apply a brute-force technique to view it. This update enhances the encryption to 128-bit RC4.
About Security Update 2008-002

Similar Messages

  • Preserving filename when encrypting PDFs in Preview

    Dear All,
    When I encrypt PDFs using Preview in the normal way (Print -> PDF -> Set Security) everything works fine and the filename is preserved. However if I do this in Automator the filename gets given an alphanumeric name. I don't understand why this is. When I open that file, it asks for the password that I had originally set and it reveals the document.
    My workflow is like the following:
    Get Selected Finder Items (i am only selecting doc not docx)
    Convert Format of Word Documents (to pdfs)
    Encrypt PDF (Picked out from the Documet list)
    Move Finder Items (To desktop)
    Quit Application (Word in this case)
    All of the above seems to be just fine only that the filename gets converted to something else.
    On the system.log file I get the following entries (hope this helps!)
    Feb 1 12:07:10 Macintosh [0x0-0x300300].com.apple.Preview[17593]: Sun Feb 1 12:07:10 Macintosh.home Preview[17593] <Error>: CGCryptorProcessBytes: CCCryptorUpdate failed: error -4300.
    Feb 1 12:07:42: --- last message repeated 2 times ---
    Feb 1 12:09:38 Macintosh mdworker[17730]: (Error) Import: Importer force killed!
    Feb 1 12:09:38 Macintosh com.apple.launchd[1] (0x1004a0.mdworker[17730]): Exited with exit code: 1
    Feb 1 12:10:42 Macintosh /Applications/Microsoft Office 2008/Microsoft Word.app/Contents/MacOS/Microsoft Word[18057]: CPSGetProcessInfo(): This call is deprecated and should not be called anymore.
    Feb 1 12:10:42 Macintosh /Applications/Microsoft Office 2008/Microsoft Word.app/Contents/MacOS/Microsoft Word[18057]: CPSPBGetProcessInfo(): This call is deprecated and should not be called anymore.
    Feb 1 12:10:54 Macintosh /Applications/Automator.app/Contents/MacOS/Automator[4259]: setting security information: /Users/rjani5/Desktop/1zwCC1.pdf: Operation not permitted
    Many thanks in advance.
    Kind regards,
    Vnayak

    I played with the encrypt pdf action and it seems buggy. it can't replace the original (non-encrypted) pdf. instead it creates a temp file with a random alpha-numeric name and passes it to the next action. the way around it as i see it should be to first save the name of your word file in a text variable and after the encrypt action (or maybe after the move action) rename the resulting file. "rename finder items" doesn't seem to want to accept variables so you'll have to do the renaming via apple or shell script.

  • Conversion of postscript (converted from secure or encrypted pdf) to pdf

    I have a postscript file which has been created from secure or encrypted (opening restriction) pdf.
    Now when i use distiller to convert this postscript file to pdf then distiller cannot produce a pdf file.
    The log file contains following text:
    This PostScript file was created from an encrypted PDF file.
    Redistilling encrypted PDF is not permitted.
    %%[ Flushing: rest of job (to end-of-file) will be ignored ]%%
    %%[ Warning: PostScript error. No PDF file produced. ] %%
    1) Is there a way to convert this postscript file into pdf ?
    I have a limitation that i cannot remove security from secure pdf.
    2) Do distiller provide any settings which can be changed to convert
    this kind of ps(from secure pdf) to pdf.
    3) Can we provide password to distiller during process of conversion to
    pdf.
    4) If above methods do not work then is there a way we can
    programatically using Distiller Api's for conversion to pdf.
    Like methods 'FileToPdf' etc.
    Thanks in advance.

    I am facing a similar problem.
    My workflow dictates that I convert the input PDF job initially to PS and finally back to PDF. If the input PDF file is secure (it's not encrypted - you will still be able to open the document), the redistillation of PS to PDF fails while using Normalizer 6.0 && 9.0 libraries. If I use Normalizer 505 library, the redistillation succeeds. I have checked with the same generated PS on both Distiller 6.0 && 9.0, and both the versions fail to reconvert as well. I am a little surprised that 6.0 and 9.0 will fail to do something that 505 library manages.
    Any suggestions?

  • How secure is an encrypted pdf file?

    I am using Acrobat XI Pro => Require a password to open document => use a password that is 'Best' with the 4 gray rectangles on the right lighting up green => Compatibility: Acrobat X and later, Encryption Level: 256-AES
    In other words, the above is the strongest security that Acrobat XI Pro has to offer by way of encryption. But just how secure is this strongest security? Any of the experts here care to give a lay person a feel for the level of security in case the encrypted pdf file gets in the wrong hands?

    It would be very hard (take a very long average amount of time) to crack the security with that password and encryption level, but both the "document open" and "change security" passwords should have the same high level of strength since both can be used to open the document. Be sure to use passwords that aren't susceptible to dictionary attacks.
    Check out this site: https://www.grc.com/haystack.htm
    but read the background information so you know what it's showing.

  • Print an Encrypted PDF

    IN Leopard I could choose the PDF option in the Print Window and select Save as Encrypted PDF. This is gone in Snow Leopard. Does anyone know how to make an encrypted PDF without additional software? Or to edit that menu to include the Encrypted PDF option.
    I did find you can do it in Preview via the Save As command, but I would like to maybe print a page from Firefox as have it become an encrypted PDF without going into Preview as a second step.
    x-.-x

    It allows you to assign a password for opening the document, but I do not see an encryption option. Maybe it is encrypted when using the password option. I am not sure.
    Thank you for pointing out the security options. Good to know those are there.
    x-.-x

  • Mac with Lion OX, in print preview with PDF, only page 1 comes correctly, the rest misses some portion rest not

    I have iMac desktop with Lion OS. I am using Firefox 6 web browser. Previously with Snowleopard OS I did not have any problems with printing, With Lion OS print commands have changed and when I click preview in PDF format for printing a web page, only page 1 of the document shows correctly. In second page, the text does not show all of the document and few lines at the boundary is missing and the font is different from page 1. I tried using Google Chrome browser and this does not have this problem. If I do not find a solution I may be forced to move to Google Chrome. I will really appreciate a response. Thanks.

    Why not reconstruct the pages in InDesign they way you want the double pages to appear. There may even be an imposition script available that will do the trick. You could then output to pdf all the pages you want the full spread on. Leave the original to create the pages you wanted left as is.
    You can ask in the ID forum about an imposition script. I know there was one with CS4, there may have been one with CS3.

  • Adobe 9.5.5 crashes on attempt to open encrypted pdf

    Quoting from online chat that was unsuccessful in resolving this(these) question(s)
    Fred: The sender said
      Fred: The senter of the document says "After all voting selections have been made to the ballot, CLICK on the red “Click Here to Finalize Selections” button located on the Ballot Image at the top or bottom right hand corner. By clicking the red “Click Here to Finalize Selections” button on the ballot image, it will generate a PDF of all needed materials which include your FPCA Voter Instructions, Declared Write-In candidates, if applicable, Security Envelope, Carrier Envelope and your personal Ballot. Note: you WILL NOT be able to get back into the program if you have already clicked to finalize your selections button. After clicking “Click Here to Finalize Selections” button, the generated PDF will ask you to click Open or Save, please CLICK Save As and then specify the save location onto your computer. "
      Fred: is there an online service I can use to do that?
    It should be noted that the system is 64 bit Linux (Mageia 3), and Arcobat 9.5.5 is the newest version available for that system.  Also, 9.5.5 seems to be able to handle "normal" pdf files without a problem, on this OS.
    Thank you in advance for any help you may be able to offer
    Regards
    Fred James

    OS: Mageia 3 64-bit, Adobe Acrobat Reader 9.5.5 (latest version available for this OS ... normally works for Adobe Acrobat PDF files (protable document files ... as in created by Adobe Acrobat)
    I was sent an encrypted PDF file, which I was instructed to
         download and save
         open the downloaded file
         fill in the file (mouse clicks)
         and "finalize" the file (mouse click)
         and when the option was offered, save the resulting file
    This is supposed to then generate some additional pages of information, also in PDF format.
    Problem ... attempting to open this downloaded, encrypted PDF, crashes the Acrobat Reader (9.5.5).  To be specific
         open Acrobat Reader
         File -> Open
         select the file in question
         click open
         Acrobat Reader closes/vanishes from the screen.

  • Changing Lion PDF default security settings

    After I create a document in Word or Pages, I save them as a pdf.  I then want to digitally sign them in Adobe Reader.  But the default security settting when saving as a pdf does not allow adding a digital signature.  Anyway to change the default OSX settings so that digital signatures are allowed by default?
    Preview just ignores digital signatures so I have not found any work arounds there.
    ...Bruce...

    I'm OK with how to remove the security settings from a document:  Documents > Properties (security tab; "No Security").
    What I'm looking for is the path to removing the security settings such that they are NOT applied when I convert a document to PDF. What is happening now is that when I convert a MS Word doc to PDF, the security settings are applied by default, which means I have to go the process, albeit a short one, of removing the security settings from the document - as referenced above.
    So again, if I simply launch Acorbat Pro 9 (without opening of a document), what is the correct path to removing (permenently) the security settings so that they are no longer applied to a converted document by default?
    Thanks in advance.

  • How do I print to "Adobe PDF" with an encrypted pdf?

    I've created a form in livecycle and I want the security to be set up as such:
    1) A password is required to edit the form in LiveCycle AND
    2) People can print the pdf to "Adobe PDF"
    I've been able to create livecycle password access, but when I put a password on the LiveCycle Access (currently: Printing Allowed: High resolution, Changes Allowed: Filling in form fields and signing existing signature fields), I get this error when I try to print it to PDF:
    %%[ ProductName: Distiller ]%%
    This PostScript file was created from an encrypted PDF file.
    Redistilling encrypted PDF is not permitted.
    %%[ Flushing: rest of job (to end-of-file) will be ignored ]%%
    %%[ Warning: PostScript error. No PDF file produced. ] %%
    How can I edit my form so I can do both.

    It´s quite some time I was solving this.. but as I already wrote and I can somehow remember(as far I´m not working on this platform for 3 years): printing 150dpi is one thing - it´s printing like a simple pic. Printing in hi-res works in completely different way - pdf must be redistilled with pdf distiller or how it was called. Means, there must be additional step before printing the pdf form. Cant remember the details.

  • This PostScript file was created from an encrypted PDF file.

    I have a postscript file which has been created from secure or encrypted (opening restriction) pdf.
    Now when i use distiller to convert this postscript file to pdf then distiller cannot produce a pdf file.
    The log file contains following text:
    This PostScript file was created from an encrypted PDF file.
    Redistilling encrypted PDF is not permitted.
    %%[ Flushing: rest of job (to end-of-file) will be ignored ]%%
    %%[ Warning: PostScript error. No PDF file produced. ] %%
    1) Is there a way to convert this postscript file into pdf ?
    I have a limitation that i cannot remove security from secure pdf.
    2) Do distiller provide any settings which can be changed to convert
    this kind of ps(from secure pdf) to pdf.
    3) Can we provide password to distiller during process of conversion to
    pdf.
    4) If above methods do not work then is there a way we can
    programatically use Distiller Api's for conversion of postscript (in case
    of postscript created from secure pdf) to pdf
    Like methods 'FileToPdf' etc.
    Thanks in advance.

    I am facing a similar problem.
    My workflow dictates that I convert the input PDF job initially to PS and finally back to PDF. If the input PDF file is secure (it's not encrypted - you will still be able to open the document), the redistillation of PS to PDF fails while using Normalizer 6.0 && 9.0 libraries. If I use Normalizer 505 library, the redistillation succeeds. I have checked with the same generated PS on both Distiller 6.0 && 9.0, and both the versions fail to reconvert as well. I am a little surprised that 6.0 and 9.0 will fail to do something that 505 library manages.
    Any suggestions?

  • No printer in preview or pdf after downloading Tune Up my Mac

    After downlading Avast and Tune Up my Mac, I can no loger print from Preview or PDF function from a downloaded file, such as a bank statement.  I have a Mac mini Mid 2010 using lion 10.7.5.  When I go to add printer from the print window that pops up, there is no printer available, however I can print from a regular "Pages" document without a problem.  Most annoying.

    That's because "Avast" and "Tune Up" are both scams, and they wrecked your system.
    "Avast" is perhaps the worst of the whole wretched lot of commercial "security" products for the Mac. Not only does it fail to protect you from any real danger, it throws false warnings, destabilizes and slows down the computer, and sometimes or always corrupts the network settings and the permissions of files in your home folder. Removing it may not repair all the damage, and neither will Disk Utility or even reinstalling OS X.
    Back up all data, then remove "Avast" according to the developer's instructions. Restart.
    If you tried to remove Avast by dragging an application to the Trash, you'll have to reinstall it and then follow the instructions linked above.
    Remove "Tune Up" as well.
    Any third-party software that doesn't install by drag-and-drop into the Applications folder, and uninstall by drag-and-drop to the Trash, is a system modification.
    Whenever you remove system modifications, they must be removed completely, and the only way to do that is to use the uninstallation tool, if any, provided by the developers, or to follow their instructions. If the software has been incompletely removed, you may have to re-download or even reinstall it in order to finish the job.
    I never install system modifications myself, and (unless otherwise specified in this comment) I don't know how to uninstall them. You'll have to do your own research to find that information.
    Here are some general guidelines to get you started. Suppose you want to remove something called “BrickMyMac” (a hypothetical example.) First, consult the product's Help menu, if there is one, for instructions. Finding none there, look on the developer's website, say www.brickmymac.com. (That may not be the actual name of the site; if necessary, search the Web for the product name.) If you don’t find anything on the website or in your search, contact the developer. While you're waiting for a response, download BrickMyMac.dmg and open it. There may be an application in there such as “Uninstall BrickMyMac.” If not, open “BrickMyMac.pkg” and look for an Uninstall button. The uninstaller might also be accessed by clicking the Customize button, if there is one.
    Back up all data before making any changes.
    You will generally have to restart the computer in order to complete an uninstallation. Until you do that, there may be no effect, or unpredictable effects.
    If you can’t remove software in any other way, you’ll have to erase and install OS X. Never install any third-party software unless you're sure you know how to uninstall it; otherwise you may create problems that are very hard to solve.
    WARNING: Trying to remove complex system modifications by hunting for files by name often will not work and may make the problem worse. The same goes for "utilities" such as "AppCleaner" and the like that purport to remove software.

  • Index/catalog & encrypt PDF files

    Hi,
    I wish to archive thousands of PDF invoices. I can do this quite easily by putting them on a CD or DVD and creating a catalog Index... however I also wish to encrypt each document and password protect it. Again this is easily achieved by creating a batch process to add Security. When I have done this the catalogue index does not work anymore - it doesn't work either when I select "Encrypt all documents except metadata (acrobat 6 and later compatible)".
    Does anyone know how to index/catalog & encrypt PDF files?
    I use Vista SP1 & Acrobat pro Extended 9.0.0
    Thanks.
    Elfed.

    Right of course, I'm a little tired this morning.
    I copied over my new js file(s) to the C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Javascripts folder.
    Now that I have done that, I run the following code and get the error shown at the bottom:
     Type AcrobatCAcroAppType;AcrobatCAcroAppType =
    Type.GetTypeFromProgID("AcroExch.AVDoc"); 
    CAcroAVDoc avDoc = (Acrobat.CAcroAVDoc)Activator.CreateInstance(AcrobatCAcroAppType); 
    Type AcrobatPDDocType;AcrobatPDDocType =
    Type.GetTypeFromProgID("AcroExch.PDDoc"); 
    CAcroPDDoc pdDoc = (Acrobat.CAcroPDDoc)Activator.CreateInstance(AcrobatPDDocType); 
    try
     if (avDoc.Open(fileName, "")) //open the PDF
    pdDoc = (CAcroPDDoc)avDoc.GetPDDoc(); 
    Object jsAcroObj = pdDoc.GetJSObject(); 
    Type T = jsAcroObj.GetType(); 
    object[] saveAsParam = { "test" };T.InvokeMember(
    "TestFunction", BindingFlags.InvokeMethod | BindingFlags.Public | BindingFlags.Instance, null, jsAcroObj, saveAsParam); 
    Console.WriteLine("\tExport complete."); 
    if (avDoc.Close(1) != true) avDoc.Close(1);}
    else Console.WriteLine("Cannot open: " + fileName);}
    catch (Exception ex){
    Console.WriteLine(ex);}
    Code fails at
    T.InvokeMember line with the following error:
    System.Runtime.InteropServices.COMException (0x80020006): Unknown name. (Exception from HRESULT: 0x80020006 (DISP_E_UNKNOWNNAME))

  • Why do encrypted PDfs now appear as blank pages?

    Since installing Snow Leopard all of my encrypted PDFs appear as blank pages once I type in the password. I was wondering if anyone knew how and if this can be fixed.

    I'm sorry, but in what way?
    Do you mean the encrypted document you want to view shows nothing but a blank page when you give the password?
    Or do you mean the icon for the PDF is blank and doesn't show a preview? I'd imagine that's because it's encrypted and so probably assumes a preview shouldn't be shown.
    Or do you mean encrypting the PDF document causes the document to initially appear blank? Is it still blank once you close it, reopen it and provide the password?
    Maybe some steps of what you are doing so it can be replicated by others to try out, too.

  • Encrypt PDF missing from menu?

    Hello all. I'm having a slight problem here. When I go to the print screen in any application, and go to the PDF menu, The option to Encrypt PDF is missing. I have Yojimbo installed (http://www.barebones.com/products/yojimbo/), and in the menu is "Send PDF to Yojimbo". Did Yojimbo possibly remove these items? Can't see why it would. Anyone know how I can get these back? Any help would be greatly appreciated. Thanks.
    Brett

    Could be system corruption. You could try doing an Archive and Install:
    How to Perform an Archive and Install
    1. Be sure to use Disk Utility first to repair the disk before performing the Archive and Install.
    Repairing the Hard Drive and Permissions
    Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Installer menu (Utilities menu for Tiger.) After DU loads select your hard drive entry (mfgr.'s ID and drive size) from the the left side list. In the DU status area you will see an entry for the S.M.A.R.T. status of the hard drive. If it does not say "Verified" then the hard drive is failing or failed. (SMART status is not reported on external Firewire or USB drives.) If the drive is "Verified" then select your OS X volume from the list on the left (sub-entry below the drive entry,) click on the First Aid tab, then click on the Repair Disk button. If DU reports any errors that have been fixed, then re-run Repair Disk until no errors are reported. If no errors are reported, then quit DU and return to the installer.
    If DU reports errors it cannot fix, then you will need Disk Warrior (4.0 for Tiger) and/or TechTool Pro (4.5.2 for Tiger) to repair the drive. If you don't have either of them or if neither of them can fix the drive, then you will need to reformat the drive and reinstall OS X.
    2. Do not proceed with an Archive and Install if DU reports errors it cannot fix. In that case use Disk Warrior and/or TechTool Pro to repair the hard drive. If neither can repair the drive, then you will have to erase the drive and reinstall from scratch.
    3. Boot from your OS X Installer disc. After the installer loads select your language and click on the Continue button. When you reach the screen to select a destination drive click once on the destination drive then click on the Option button. Select the Archive and Install option. You have an option to preserve users and network preferences. Only select this option if you are sure you have no corrupted files in your user accounts. Otherwise leave this option unchecked. Click on the OK button and continue with the OS X Installation.
    4. Upon completion of the Archive and Install you will have a Previous System Folder in the root directory. You should retain the PSF until you are sure you do not need to manually transfer any items from the PSF to your newly installed system.
    5. After moving any items you want to keep from the PSF you should delete it. You can back it up if you prefer, but you must delete it from the hard drive.
    6. You can now download a Combo Updater directly from Apple's download site to update your new system to the desired version as well as install any security or other updates. You can also do this using Software Update.

  • How do I encrypt pdf form on Submit by email

    Hi,
    Is there anyway to encrypt the pdf form after the user clicks on the "Submit by Email" button?
    I have Acrobat 9.

    Though an encrypted PDF (i.e. one with security settings) does nothing to protect your data in transit. The PDF can still be opened by anyone who intercepts the mail.
    If data is sensitive email isn't suitable. You need to submit to a web site, using the secure https protocol.

Maybe you are looking for