Re: Winzip's 256bit-AES encryption & self-extracting files

On Fri 04 Jan 2008 08:18:43, Volker Birk <bumens@xxxxxxxxxxx> wrote:

Bakko <nope@xxxxxxxxxxxxxx> wrote:
Is the security of an AES 256 self-extracting
zip .EXE as good as an AES 256 .ZIP file?

Security in what way?

The "self-extracting" code can be modified i.e. in an MITM attack, and
so can malware code injected and run on the target machine.

VB.

Perhaps you haven't read my original post in this thread?
.

Relevant Pages

  • [fw-wiz] Help- Nat-t
    ... Security of HTTPS ... > Is there some possibility of a MITM attack? ... HTTPS relies on SSL / TLS. ...
    (Firewall-Wizards)
  • Re: is this double CBC?
    ... datatype of storage the algorithm can remain the same. ... going on to directly contradict yourself. ... if it was designed to work in place of a cypher, i wouldn't be using AES now ... Good to know your intention is to weaken security, ...
    (sci.crypt)
  • Re: is this double CBC?
    ... understand the difference between algorithm and implementation. ... the place of a cipher, and that it fails to meet the security requirements, therefore it is weak. ... if it was designed to work in place of a cypher, i wouldn't be using AES now would i. once again i will state, i didn't code the AES module, someone who knows cryptography better than i do coded it. ... You designed something that is not supposed to add to security, instead it is designed to consume entropy, and so significantly weakens security. ...
    (sci.crypt)
  • Re: "Rule 30" CA encryption implementation
    ... give good security and do NOT constitute ... crypto-algorithm is correct. ... the fact that a program uses AES to encrypt files says *NOTHING* ...
    (sci.crypt)
  • Re: Rijndael/AES implementations
    ... > Are there significant performance/implementation differences in the ... AES CSP is little-endian and the RijndaelManaged ... > of Rijndael to recommend going ahead with architecture using Rijndael for ... Apparently WinZip used the code of a security researcher, ...
    (microsoft.public.platformsdk.security)