src/ooxml/testcases/org/apache/poi/poifs/crypt/TestEncryptor.java - poi - Git at Google

 /* ====================================================================
    Licensed to the Apache Software Foundation (ASF) under one or more
    contributor license agreements.  See the NOTICE file distributed with
    this work for additional information regarding copyright ownership.
    The ASF licenses this file to You under the Apache License, Version 2.0
    (the "License"); you may not use this file except in compliance with
    the License.  You may obtain a copy of the License at

        http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
 ==================================================================== */
 package org.apache.poi.poifs.crypt;

 import static org.junit.Assert.assertArrayEquals;
 import static org.junit.Assert.assertEquals;
 import static org.junit.Assert.assertTrue;

 import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.File;
 import java.io.FileOutputStream;
 import java.io.IOException;
 import java.io.InputStream;
 import java.io.OutputStream;
 import java.util.Iterator;

 import javax.crypto.Cipher;

 import org.apache.poi.POIDataSamples;
 import org.apache.poi.poifs.crypt.agile.AgileEncryptionHeader;
 import org.apache.poi.poifs.filesystem.DirectoryNode;
 import org.apache.poi.poifs.filesystem.DocumentNode;
 import org.apache.poi.poifs.filesystem.Entry;
 import org.apache.poi.poifs.filesystem.NPOIFSFileSystem;
 import org.apache.poi.poifs.filesystem.POIFSFileSystem;
 import org.apache.poi.util.BoundedInputStream;
 import org.apache.poi.util.IOUtils;
 import org.apache.poi.util.TempFile;
 import org.apache.poi.xwpf.usermodel.XWPFDocument;
 import org.junit.Assume;
 import org.junit.Ignore;
 import org.junit.Test;

 public class TestEncryptor {
     @Test
     public void binaryRC4Encryption() throws Exception {
         // please contribute a real sample file, which is binary rc4 encrypted
         // ... at least the output can be opened in Excel Viewer
         String password = "pass";

         InputStream is = POIDataSamples.getSpreadSheetInstance().openResourceAsStream("SimpleMultiCell.xlsx");
         ByteArrayOutputStream payloadExpected = new ByteArrayOutputStream();
         IOUtils.copy(is, payloadExpected);
         is.close();

         POIFSFileSystem fs = new POIFSFileSystem();
         EncryptionInfo ei = new EncryptionInfo(EncryptionMode.binaryRC4);
         Encryptor enc = ei.getEncryptor();
         enc.confirmPassword(password);

         OutputStream os = enc.getDataStream(fs.getRoot());
         payloadExpected.writeTo(os);
         os.close();

         ByteArrayOutputStream bos = new ByteArrayOutputStream();
         fs.writeFilesystem(bos);

         fs = new POIFSFileSystem(new ByteArrayInputStream(bos.toByteArray()));
         ei = new EncryptionInfo(fs);
         Decryptor dec = ei.getDecryptor();
         boolean b = dec.verifyPassword(password);
         assertTrue(b);

         ByteArrayOutputStream payloadActual = new ByteArrayOutputStream();
         is = dec.getDataStream(fs.getRoot());
         IOUtils.copy(is,payloadActual);
         is.close();

         assertArrayEquals(payloadExpected.toByteArray(), payloadActual.toByteArray());
     }

     @Test
     public void agileEncryption() throws Exception {
         int maxKeyLen = Cipher.getMaxAllowedKeyLength("AES");
         Assume.assumeTrue("Please install JCE Unlimited Strength Jurisdiction Policy files for AES 256", maxKeyLen == 2147483647);

         File file = POIDataSamples.getDocumentInstance().getFile("bug53475-password-is-pass.docx");
         String pass = "pass";
         NPOIFSFileSystem nfs = new NPOIFSFileSystem(file);

         // Check the encryption details
         EncryptionInfo infoExpected = new EncryptionInfo(nfs);
         Decryptor decExpected = Decryptor.getInstance(infoExpected);
         boolean passed = decExpected.verifyPassword(pass);
         assertTrue("Unable to process: document is encrypted", passed);

         // extract the payload
         InputStream is = decExpected.getDataStream(nfs);
         byte payloadExpected[] = IOUtils.toByteArray(is);
         is.close();

         long decPackLenExpected = decExpected.getLength();
         assertEquals(decPackLenExpected, payloadExpected.length);

         is = nfs.getRoot().createDocumentInputStream("EncryptedPackage");
         is = new BoundedInputStream(is, is.available()-16); // ignore padding block
         byte encPackExpected[] = IOUtils.toByteArray(is);
         is.close();

         // listDir(nfs.getRoot(), "orig", "");

         nfs.close();

         // check that same verifier/salt lead to same hashes
         byte verifierSaltExpected[] = infoExpected.getVerifier().getSalt();
         byte verifierExpected[] = decExpected.getVerifier();
         byte keySalt[] = infoExpected.getHeader().getKeySalt();
         byte keySpec[] = decExpected.getSecretKey().getEncoded();
         byte integritySalt[] = decExpected.getIntegrityHmacKey();
         // the hmacs of the file always differ, as we use PKCS5-padding to pad the bytes
         // whereas office just uses random bytes
         // byte integrityHash[] = d.getIntegrityHmacValue();

         POIFSFileSystem fs = new POIFSFileSystem();
         EncryptionInfo infoActual = new EncryptionInfo(
               EncryptionMode.agile
             , infoExpected.getVerifier().getCipherAlgorithm()
             , infoExpected.getVerifier().getHashAlgorithm()
             , infoExpected.getHeader().getKeySize()
             , infoExpected.getHeader().getBlockSize()
             , infoExpected.getVerifier().getChainingMode()
         );

         Encryptor e = Encryptor.getInstance(infoActual);
         e.confirmPassword(pass, keySpec, keySalt, verifierExpected, verifierSaltExpected, integritySalt);

         OutputStream os = e.getDataStream(fs);
         IOUtils.copy(new ByteArrayInputStream(payloadExpected), os);
         os.close();

         ByteArrayOutputStream bos = new ByteArrayOutputStream();
         fs.writeFilesystem(bos);

         nfs = new NPOIFSFileSystem(new ByteArrayInputStream(bos.toByteArray()));
         infoActual = new EncryptionInfo(nfs.getRoot());
         Decryptor decActual = Decryptor.getInstance(infoActual);
         passed = decActual.verifyPassword(pass);
         assertTrue("Unable to process: document is encrypted", passed);

         // extract the payload
         is = decActual.getDataStream(nfs);
         byte payloadActual[] = IOUtils.toByteArray(is);
         is.close();

         long decPackLenActual = decActual.getLength();

         is = nfs.getRoot().createDocumentInputStream("EncryptedPackage");
         is = new BoundedInputStream(is, is.available()-16); // ignore padding block
         byte encPackActual[] = IOUtils.toByteArray(is);
         is.close();

         // listDir(nfs.getRoot(), "copy", "");

         nfs.close();

         AgileEncryptionHeader aehExpected = (AgileEncryptionHeader)infoExpected.getHeader();
         AgileEncryptionHeader aehActual = (AgileEncryptionHeader)infoActual.getHeader();
         assertArrayEquals(aehExpected.getEncryptedHmacKey(), aehActual.getEncryptedHmacKey());
         assertEquals(decPackLenExpected, decPackLenActual);
         assertArrayEquals(payloadExpected, payloadActual);
         assertArrayEquals(encPackExpected, encPackActual);
     }

     @Test
     public void standardEncryption() throws Exception {
         File file = POIDataSamples.getDocumentInstance().getFile("bug53475-password-is-solrcell.docx");
         String pass = "solrcell";

         NPOIFSFileSystem nfs = new NPOIFSFileSystem(file);

         // Check the encryption details
         EncryptionInfo infoExpected = new EncryptionInfo(nfs);
         Decryptor d = Decryptor.getInstance(infoExpected);
         boolean passed = d.verifyPassword(pass);
         assertTrue("Unable to process: document is encrypted", passed);

         // extract the payload
         ByteArrayOutputStream bos = new ByteArrayOutputStream();
         InputStream is = d.getDataStream(nfs);
         IOUtils.copy(is, bos);
         is.close();
         nfs.close();
         byte payloadExpected[] = bos.toByteArray();

         // check that same verifier/salt lead to same hashes
         byte verifierSaltExpected[] = infoExpected.getVerifier().getSalt();
         byte verifierExpected[] = d.getVerifier();
         byte keySpec[] = d.getSecretKey().getEncoded();
         byte keySalt[] = infoExpected.getHeader().getKeySalt();


         POIFSFileSystem fs = new POIFSFileSystem();
         EncryptionInfo infoActual = new EncryptionInfo(
               EncryptionMode.standard
             , infoExpected.getVerifier().getCipherAlgorithm()
             , infoExpected.getVerifier().getHashAlgorithm()
             , infoExpected.getHeader().getKeySize()
             , infoExpected.getHeader().getBlockSize()
             , infoExpected.getVerifier().getChainingMode()
         );

         Encryptor e = Encryptor.getInstance(infoActual);
         e.confirmPassword(pass, keySpec, keySalt, verifierExpected, verifierSaltExpected, null);

         assertArrayEquals(infoExpected.getVerifier().getEncryptedVerifier(), infoActual.getVerifier().getEncryptedVerifier());
         assertArrayEquals(infoExpected.getVerifier().getEncryptedVerifierHash(), infoActual.getVerifier().getEncryptedVerifierHash());

         // now we use a newly generated salt/verifier and check
         // if the file content is still the same

         fs = new POIFSFileSystem();
         infoActual = new EncryptionInfo(
               EncryptionMode.standard
             , infoExpected.getVerifier().getCipherAlgorithm()
             , infoExpected.getVerifier().getHashAlgorithm()
             , infoExpected.getHeader().getKeySize()
             , infoExpected.getHeader().getBlockSize()
             , infoExpected.getVerifier().getChainingMode()
         );

         e = Encryptor.getInstance(infoActual);
         e.confirmPassword(pass);

         OutputStream os = e.getDataStream(fs);
         IOUtils.copy(new ByteArrayInputStream(payloadExpected), os);
         os.close();

         bos.reset();
         fs.writeFilesystem(bos);

         ByteArrayInputStream bis = new ByteArrayInputStream(bos.toByteArray());

         // FileOutputStream fos = new FileOutputStream("encrypted.docx");
         // IOUtils.copy(bis, fos);
         // fos.close();
         // bis.reset();

         nfs = new NPOIFSFileSystem(bis);
         infoExpected = new EncryptionInfo(nfs);
         d = Decryptor.getInstance(infoExpected);
         passed = d.verifyPassword(pass);
         assertTrue("Unable to process: document is encrypted", passed);

         bos.reset();
         is = d.getDataStream(nfs);
         IOUtils.copy(is, bos);
         is.close();
         nfs.close();
         byte payloadActual[] = bos.toByteArray();

         assertArrayEquals(payloadExpected, payloadActual);
     }

     @Test
     @Ignore
     public void inPlaceRewrite() throws Exception {
         File f = TempFile.createTempFile("protected_agile", ".docx");
         // File f = new File("protected_agile.docx");
         FileOutputStream fos = new FileOutputStream(f);
         InputStream fis = POIDataSamples.getPOIFSInstance().openResourceAsStream("protected_agile.docx");
         IOUtils.copy(fis, fos);
         fis.close();
         fos.close();

         NPOIFSFileSystem fs = new NPOIFSFileSystem(f, false);

         // decrypt the protected file - in this case it was encrypted with the default password
         EncryptionInfo encInfo = new EncryptionInfo(fs);
         Decryptor d = encInfo.getDecryptor();
         boolean b = d.verifyPassword(Decryptor.DEFAULT_PASSWORD);
         assertTrue(b);

         // do some strange things with it ;)
         XWPFDocument docx = new XWPFDocument(d.getDataStream(fs));
         docx.getParagraphArray(0).insertNewRun(0).setText("POI was here! All your base are belong to us!");
         docx.getParagraphArray(0).insertNewRun(1).addBreak();

         // and encrypt it again
         Encryptor e = encInfo.getEncryptor();
         e.confirmPassword("AYBABTU");
         docx.write(e.getDataStream(fs));

         fs.close();
     }


     private void listEntry(DocumentNode de, String ext, String path) throws IOException {
         path += "\\" + de.getName().replaceAll("[\\p{Cntrl}]", "_");
         System.out.println(ext+": "+path+" ("+de.getSize()+" bytes)");

         String name = de.getName().replaceAll("[\\p{Cntrl}]", "_");

         InputStream is = ((DirectoryNode)de.getParent()).createDocumentInputStream(de);
         FileOutputStream fos = new FileOutputStream("solr."+name+"."+ext);
         IOUtils.copy(is, fos);
         fos.close();
         is.close();
     }

     @SuppressWarnings("unused")
     private void listDir(DirectoryNode dn, String ext, String path) throws IOException {
         path += "\\" + dn.getName().replace('\u0006', '_');
         System.out.println(ext+": "+path+" ("+dn.getStorageClsid()+")");

         Iterator<Entry> iter = dn.getEntries();
         while (iter.hasNext()) {
             Entry ent = iter.next();
             if (ent instanceof DirectoryNode) {
                 listDir((DirectoryNode)ent, ext, path);
             } else {
                 listEntry((DocumentNode)ent, ext, path);
             }
         }
     }
 }
	/* ====================================================================
	Licensed to the Apache Software Foundation (ASF) under one or more
	contributor license agreements. See the NOTICE file distributed with
	this work for additional information regarding copyright ownership.
	The ASF licenses this file to You under the Apache License, Version 2.0
	(the "License"); you may not use this file except in compliance with
	the License. You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0

	Unless required by applicable law or agreed to in writing, software
	distributed under the License is distributed on an "AS IS" BASIS,
	WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	See the License for the specific language governing permissions and
	limitations under the License.
	==================================================================== */
	package org.apache.poi.poifs.crypt;

	import static org.junit.Assert.assertArrayEquals;
	import static org.junit.Assert.assertEquals;
	import static org.junit.Assert.assertTrue;

	import java.io.ByteArrayInputStream;
	import java.io.ByteArrayOutputStream;
	import java.io.File;
	import java.io.FileOutputStream;
	import java.io.IOException;
	import java.io.InputStream;
	import java.io.OutputStream;
	import java.util.Iterator;

	import javax.crypto.Cipher;

	import org.apache.poi.POIDataSamples;
	import org.apache.poi.poifs.crypt.agile.AgileEncryptionHeader;
	import org.apache.poi.poifs.filesystem.DirectoryNode;
	import org.apache.poi.poifs.filesystem.DocumentNode;
	import org.apache.poi.poifs.filesystem.Entry;
	import org.apache.poi.poifs.filesystem.NPOIFSFileSystem;
	import org.apache.poi.poifs.filesystem.POIFSFileSystem;
	import org.apache.poi.util.BoundedInputStream;
	import org.apache.poi.util.IOUtils;
	import org.apache.poi.util.TempFile;
	import org.apache.poi.xwpf.usermodel.XWPFDocument;
	import org.junit.Assume;
	import org.junit.Ignore;
	import org.junit.Test;

	public class TestEncryptor {
	@Test
	public void binaryRC4Encryption() throws Exception {
	// please contribute a real sample file, which is binary rc4 encrypted
	// ... at least the output can be opened in Excel Viewer
	String password = "pass";

	InputStream is = POIDataSamples.getSpreadSheetInstance().openResourceAsStream("SimpleMultiCell.xlsx");
	ByteArrayOutputStream payloadExpected = new ByteArrayOutputStream();
	IOUtils.copy(is, payloadExpected);
	is.close();

	POIFSFileSystem fs = new POIFSFileSystem();
	EncryptionInfo ei = new EncryptionInfo(EncryptionMode.binaryRC4);
	Encryptor enc = ei.getEncryptor();
	enc.confirmPassword(password);

	OutputStream os = enc.getDataStream(fs.getRoot());
	payloadExpected.writeTo(os);
	os.close();

	ByteArrayOutputStream bos = new ByteArrayOutputStream();
	fs.writeFilesystem(bos);

	fs = new POIFSFileSystem(new ByteArrayInputStream(bos.toByteArray()));
	ei = new EncryptionInfo(fs);
	Decryptor dec = ei.getDecryptor();
	boolean b = dec.verifyPassword(password);
	assertTrue(b);

	ByteArrayOutputStream payloadActual = new ByteArrayOutputStream();
	is = dec.getDataStream(fs.getRoot());
	IOUtils.copy(is,payloadActual);
	is.close();

	assertArrayEquals(payloadExpected.toByteArray(), payloadActual.toByteArray());
	}

	@Test
	public void agileEncryption() throws Exception {
	int maxKeyLen = Cipher.getMaxAllowedKeyLength("AES");
	Assume.assumeTrue("Please install JCE Unlimited Strength Jurisdiction Policy files for AES 256", maxKeyLen == 2147483647);

	File file = POIDataSamples.getDocumentInstance().getFile("bug53475-password-is-pass.docx");
	String pass = "pass";
	NPOIFSFileSystem nfs = new NPOIFSFileSystem(file);

	// Check the encryption details
	EncryptionInfo infoExpected = new EncryptionInfo(nfs);
	Decryptor decExpected = Decryptor.getInstance(infoExpected);
	boolean passed = decExpected.verifyPassword(pass);
	assertTrue("Unable to process: document is encrypted", passed);

	// extract the payload
	InputStream is = decExpected.getDataStream(nfs);
	byte payloadExpected[] = IOUtils.toByteArray(is);
	is.close();

	long decPackLenExpected = decExpected.getLength();
	assertEquals(decPackLenExpected, payloadExpected.length);

	is = nfs.getRoot().createDocumentInputStream("EncryptedPackage");
	is = new BoundedInputStream(is, is.available()-16); // ignore padding block
	byte encPackExpected[] = IOUtils.toByteArray(is);
	is.close();

	// listDir(nfs.getRoot(), "orig", "");

	nfs.close();

	// check that same verifier/salt lead to same hashes
	byte verifierSaltExpected[] = infoExpected.getVerifier().getSalt();
	byte verifierExpected[] = decExpected.getVerifier();
	byte keySalt[] = infoExpected.getHeader().getKeySalt();
	byte keySpec[] = decExpected.getSecretKey().getEncoded();
	byte integritySalt[] = decExpected.getIntegrityHmacKey();
	// the hmacs of the file always differ, as we use PKCS5-padding to pad the bytes
	// whereas office just uses random bytes
	// byte integrityHash[] = d.getIntegrityHmacValue();

	POIFSFileSystem fs = new POIFSFileSystem();
	EncryptionInfo infoActual = new EncryptionInfo(
	EncryptionMode.agile
	, infoExpected.getVerifier().getCipherAlgorithm()
	, infoExpected.getVerifier().getHashAlgorithm()
	, infoExpected.getHeader().getKeySize()
	, infoExpected.getHeader().getBlockSize()
	, infoExpected.getVerifier().getChainingMode()
	);

	Encryptor e = Encryptor.getInstance(infoActual);
	e.confirmPassword(pass, keySpec, keySalt, verifierExpected, verifierSaltExpected, integritySalt);

	OutputStream os = e.getDataStream(fs);
	IOUtils.copy(new ByteArrayInputStream(payloadExpected), os);
	os.close();

	ByteArrayOutputStream bos = new ByteArrayOutputStream();
	fs.writeFilesystem(bos);

	nfs = new NPOIFSFileSystem(new ByteArrayInputStream(bos.toByteArray()));
	infoActual = new EncryptionInfo(nfs.getRoot());
	Decryptor decActual = Decryptor.getInstance(infoActual);
	passed = decActual.verifyPassword(pass);
	assertTrue("Unable to process: document is encrypted", passed);

	// extract the payload
	is = decActual.getDataStream(nfs);
	byte payloadActual[] = IOUtils.toByteArray(is);
	is.close();

	long decPackLenActual = decActual.getLength();

	is = nfs.getRoot().createDocumentInputStream("EncryptedPackage");
	is = new BoundedInputStream(is, is.available()-16); // ignore padding block
	byte encPackActual[] = IOUtils.toByteArray(is);
	is.close();

	// listDir(nfs.getRoot(), "copy", "");

	nfs.close();

	AgileEncryptionHeader aehExpected = (AgileEncryptionHeader)infoExpected.getHeader();
	AgileEncryptionHeader aehActual = (AgileEncryptionHeader)infoActual.getHeader();
	assertArrayEquals(aehExpected.getEncryptedHmacKey(), aehActual.getEncryptedHmacKey());
	assertEquals(decPackLenExpected, decPackLenActual);
	assertArrayEquals(payloadExpected, payloadActual);
	assertArrayEquals(encPackExpected, encPackActual);
	}

	@Test
	public void standardEncryption() throws Exception {
	File file = POIDataSamples.getDocumentInstance().getFile("bug53475-password-is-solrcell.docx");
	String pass = "solrcell";

	NPOIFSFileSystem nfs = new NPOIFSFileSystem(file);

	// Check the encryption details
	EncryptionInfo infoExpected = new EncryptionInfo(nfs);
	Decryptor d = Decryptor.getInstance(infoExpected);
	boolean passed = d.verifyPassword(pass);
	assertTrue("Unable to process: document is encrypted", passed);

	// extract the payload
	ByteArrayOutputStream bos = new ByteArrayOutputStream();
	InputStream is = d.getDataStream(nfs);
	IOUtils.copy(is, bos);
	is.close();
	nfs.close();
	byte payloadExpected[] = bos.toByteArray();

	// check that same verifier/salt lead to same hashes
	byte verifierSaltExpected[] = infoExpected.getVerifier().getSalt();
	byte verifierExpected[] = d.getVerifier();
	byte keySpec[] = d.getSecretKey().getEncoded();
	byte keySalt[] = infoExpected.getHeader().getKeySalt();


	POIFSFileSystem fs = new POIFSFileSystem();
	EncryptionInfo infoActual = new EncryptionInfo(
	EncryptionMode.standard
	, infoExpected.getVerifier().getCipherAlgorithm()
	, infoExpected.getVerifier().getHashAlgorithm()
	, infoExpected.getHeader().getKeySize()
	, infoExpected.getHeader().getBlockSize()
	, infoExpected.getVerifier().getChainingMode()
	);

	Encryptor e = Encryptor.getInstance(infoActual);
	e.confirmPassword(pass, keySpec, keySalt, verifierExpected, verifierSaltExpected, null);

	assertArrayEquals(infoExpected.getVerifier().getEncryptedVerifier(), infoActual.getVerifier().getEncryptedVerifier());
	assertArrayEquals(infoExpected.getVerifier().getEncryptedVerifierHash(), infoActual.getVerifier().getEncryptedVerifierHash());

	// now we use a newly generated salt/verifier and check
	// if the file content is still the same

	fs = new POIFSFileSystem();
	infoActual = new EncryptionInfo(
	EncryptionMode.standard
	, infoExpected.getVerifier().getCipherAlgorithm()
	, infoExpected.getVerifier().getHashAlgorithm()
	, infoExpected.getHeader().getKeySize()
	, infoExpected.getHeader().getBlockSize()
	, infoExpected.getVerifier().getChainingMode()
	);

	e = Encryptor.getInstance(infoActual);
	e.confirmPassword(pass);

	OutputStream os = e.getDataStream(fs);
	IOUtils.copy(new ByteArrayInputStream(payloadExpected), os);
	os.close();

	bos.reset();
	fs.writeFilesystem(bos);

	ByteArrayInputStream bis = new ByteArrayInputStream(bos.toByteArray());

	// FileOutputStream fos = new FileOutputStream("encrypted.docx");
	// IOUtils.copy(bis, fos);
	// fos.close();
	// bis.reset();

	nfs = new NPOIFSFileSystem(bis);
	infoExpected = new EncryptionInfo(nfs);
	d = Decryptor.getInstance(infoExpected);
	passed = d.verifyPassword(pass);
	assertTrue("Unable to process: document is encrypted", passed);

	bos.reset();
	is = d.getDataStream(nfs);
	IOUtils.copy(is, bos);
	is.close();
	nfs.close();
	byte payloadActual[] = bos.toByteArray();

	assertArrayEquals(payloadExpected, payloadActual);
	}

	@Test
	@Ignore
	public void inPlaceRewrite() throws Exception {
	File f = TempFile.createTempFile("protected_agile", ".docx");
	// File f = new File("protected_agile.docx");
	FileOutputStream fos = new FileOutputStream(f);
	InputStream fis = POIDataSamples.getPOIFSInstance().openResourceAsStream("protected_agile.docx");
	IOUtils.copy(fis, fos);
	fis.close();
	fos.close();

	NPOIFSFileSystem fs = new NPOIFSFileSystem(f, false);

	// decrypt the protected file - in this case it was encrypted with the default password
	EncryptionInfo encInfo = new EncryptionInfo(fs);
	Decryptor d = encInfo.getDecryptor();
	boolean b = d.verifyPassword(Decryptor.DEFAULT_PASSWORD);
	assertTrue(b);

	// do some strange things with it ;)
	XWPFDocument docx = new XWPFDocument(d.getDataStream(fs));
	docx.getParagraphArray(0).insertNewRun(0).setText("POI was here! All your base are belong to us!");
	docx.getParagraphArray(0).insertNewRun(1).addBreak();

	// and encrypt it again
	Encryptor e = encInfo.getEncryptor();
	e.confirmPassword("AYBABTU");
	docx.write(e.getDataStream(fs));

	fs.close();
	}


	private void listEntry(DocumentNode de, String ext, String path) throws IOException {
	path += "\\" + de.getName().replaceAll("[\\p{Cntrl}]", "_");
	System.out.println(ext+": "+path+" ("+de.getSize()+" bytes)");

	String name = de.getName().replaceAll("[\\p{Cntrl}]", "_");

	InputStream is = ((DirectoryNode)de.getParent()).createDocumentInputStream(de);
	FileOutputStream fos = new FileOutputStream("solr."+name+"."+ext);
	IOUtils.copy(is, fos);
	fos.close();
	is.close();
	}

	@SuppressWarnings("unused")
	private void listDir(DirectoryNode dn, String ext, String path) throws IOException {
	path += "\\" + dn.getName().replace('\u0006', '_');
	System.out.println(ext+": "+path+" ("+dn.getStorageClsid()+")");

	Iterator<Entry> iter = dn.getEntries();
	while (iter.hasNext()) {
	Entry ent = iter.next();
	if (ent instanceof DirectoryNode) {
	listDir((DirectoryNode)ent, ext, path);
	} else {
	listEntry((DocumentNode)ent, ext, path);
	}
	}
	}
	}