Standard ISO 32000-1 Document Guidelines
Cryptographic Standards in Modern PDF Security
1.PDF Encryption Handshakes & Filter Dictionaries
PDF document security is specified through the /Encrypt dictionary in the trailer. Modern implementations utilize Cryptographic Service Providers (Standard Security Handler Revision 6) incorporating AES-256 in CBC or GCM mode.
When applying protection, an Encryption Key is derived using SHA-256 hashes of the user password salted with document metadata. This ensures brute-force attacks remain computationally infeasible.