1.3.3.4 ECMA-376 Document Encryption

Encrypted ECMA-376 documents [ECMA-376] use the data spaces functionality (section 1.3.1) to contain the entire document as a single stream (1) in an OLE compound file. All ECMA-376 documents [ECMA-376] adhere to the approaches specified in this document and do not require knowledge of application-specific behavior to perform encryption operations. The overall approach is very similar to that used by IRMDS (section 1.3.2).