On Wed, 18 Jan 2012, Devin Han wrote: > We plan to add document encryption/decryption, and digital > signature(optional) in next release. > Follow the newest ODF specification[1], most of the function can be > realized by JDK, no need other crypto product. > For document encryption/decryption, JDK5 is enough. For digital signature, > we need JDK6's XML security API. I think that this is covered by "Software specially designed .... for the development, production or use of any of the other software of this list" However, Java itself is a 5D992.c product, whereas the ASF stuff all deals with 5D002. I'll check with the Apache legal team on this Nick