Function reconstructEncryptDict

src/security/encryption-generator.ts:188–250

(encryption: EncryptionDict)

 * @returns A PdfDict that can be written to the PDF
 */
export function reconstructEncryptDict(encryption: EncryptionDict): PdfDict {
  const dict = PdfDict.of({
    Filter: PdfName.of(encryption.filter),
    V: PdfNumber.of(encryption.version),
    R: PdfNumber.of(encryption.revision),
    Length: PdfNumber.of(encryption.keyLengthBits),
    O: PdfString.fromBytes(encryption.ownerHash),
    U: PdfString.fromBytes(encryption.userHash),
    P: PdfNumber.of(encryption.permissionsRaw),
  });

  // R5-R6 specific entries
  if (encryption.ownerEncryptionKey) {
    dict.set("OE", PdfString.fromBytes(encryption.ownerEncryptionKey));
  }

  if (encryption.userEncryptionKey) {
    dict.set("UE", PdfString.fromBytes(encryption.userEncryptionKey));
  }

  if (encryption.permsValue) {
    dict.set("Perms", PdfString.fromBytes(encryption.permsValue));
  }

  // Crypt filters (V4+)
  if (encryption.cryptFilters && encryption.cryptFilters.size > 0) {
    const cfDict = new PdfDict();

    for (const [name, filter] of encryption.cryptFilters) {
      const filterDict = PdfDict.of({
        CFM: PdfName.of(filter.cfm),
      });

      if (filter.authEvent) {
        filterDict.set("AuthEvent", PdfName.of(filter.authEvent));
      }

      if (filter.length !== undefined) {
        filterDict.set("Length", PdfNumber.of(filter.length));
      }

      cfDict.set(name, filterDict);
    }

    dict.set("CF", cfDict);
  }

  // Stream and string filters
  if (encryption.streamFilter) {
    dict.set("StmF", PdfName.of(encryption.streamFilter));
  }

  if (encryption.stringFilter) {
    dict.set("StrF", PdfName.of(encryption.stringFilter));
  }

  // EncryptMetadata (only if false, true is default)
  if (!encryption.encryptMetadata) {