Re: building compatible zip files "by hand" that are encrypted and compressed

Greg,

I didn't think there were variants of AES, other than
the key length and the block size.  It sounds like you
are saying either:

1) The actual AES encryption algorithms are different
between PKZip and WinZIP, or
2) PKZip and/or WinZIP use the same AES algorithm but
are somehow hashing or modifying the key (as specified
by the user), and the two don't use the same hashing
or modification? 

Are the actual differences between AES-encrypted ZIP
archives created by PKZip and WinZIP documented
anywhere?

ed
--- Greg Roelofs <[email protected]> wrote:
> > I do have a follow-up question for you.  Supposing
> I
> > do encrypt with AES and compress with (deflate?)
> on
> > the client before uploading.  I will then have a
> > collection of already compressed and already
> encrypted
> > files.
> 
> > Do you think, then, that I could simply ask the
> user,
> > then, before building their ZIP file, which format
> > they wanted it in?
> 
> No.  AES defines the format, and it's entirely
> possible that no zipping
> software in existence will understand whatever
> variant you've chosen.
> 
> Greg
> _______________________________________________
> Info-ZIP mailing list
> [email protected]
> http://lists.wku.edu/mailman/listinfo/info-zip


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com