Beefy Boxes and Bandwidth Generously Provided by pair Networks
"be consistent"
 
PerlMonks  

Re: Re: Encrypting Largish Files

by IndyZ (Friar)
on Sep 23, 2001 at 08:56 UTC ( [id://114139]=note: print w/replies, xml ) Need Help??


in reply to Re: Encrypting Largish Files
in thread Encrypting Largish Files

Zip file security is extremely weak. It won't even stop a 5 year old if he can download a few utilities off the net.

--
IndyZ

Replies are listed 'Best First'.
Re: Re: Re: Encrypting Largish Files
by suaveant (Parson) on Sep 23, 2001 at 09:11 UTC
    I was curious as to how well it encrypted... any other zippers have that function?

                    - Ant
                    - Some of my best work - Fish Dinner

      I think that zip file encryption started with pkzip (I'm not sure, but that's the first place that I saw it), and anybody that wanted to maintain compatibility had to add it to their zip software. If you want to encrypt a zip file, you should probably use a strong algorithm that comes in an encryption package such as GPG.

      --
      IndyZ
        Yes, PkZIP described encrypted entries. There is a simple flag for it, so there is no way to incorporate other algorithms and maintain file compatibility. You either mark it as encrypted and do something different (like CuteZip does, and that makes all other zip utilitites think you have a corrupted file; or use a non-standard extension to the file format, which has its own problems because the format is not really well designed.

        Some issues, and my musings and collected ideas for them, can be found here. In fact, I found a lot of bugs in early releases of Perl 5 with that!

        The encryption method has a known-plaintext attack, but the net utils are bascially password crackers and brute force engines.

        A brief discussion of where the encryption code came from is in the (very old) zip file format documentation from PK.

        —John

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://114139]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others perusing the Monastery: (5)
As of 2024-03-28 15:22 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found