Re: Winzip's 256bit-AES encryption & self-extracting files
- From: "Sebastian G." <seppi@xxxxxxxxx>
- Date: Sun, 30 Dec 2007 22:32:12 +0100
zipeg wrote:
it does not matter if it is self extracting or normal archive. AES is
strong encryption.
Who cares if it's strong? Since nothing authenticates the SFX module, the attacker can replace it with his own one, which, in addition to decrypting the archive, sends him the entered password.
.
- References:
- Prev by Date: Re: Winzip's 256bit-AES encryption & self-extracting files
- Next by Date: Re: Australia Joins China In Censoring The Internet.
- Previous by thread: Re: Winzip's 256bit-AES encryption & self-extracting files
- Next by thread: Re: Australia Joins China In Censoring The Internet.
- Index(es):
