see https://twitter.com/BouncyHat/status/1308896366782042113 MS reference: https://docs.microsoft.com/en-us/openspecs/office_file_formats/ms-offcrypto/57fc02f0-c1de-4fc6-908f-d146104662f5