4 ms·
It was an interesting time. I forget the person's name, but I talked briefly with the guy who implemented the crc32 and encryption algorithms for ZIP, and he (
by 13of40 3y ago
It was an interesting time. I forget the person's name, but I talked briefly with the guy who implemented the crc32 and encryption algorithms for ZIP, and he (almost apologetically) said the encryption was designed to be exportable under those laws. It's still not trivial to break, but you can test millions of passwords on a ZIP archive entry in the time it takes to try one on a modern Office document.
- fullspectrumdev 3y agoPartial known plaintext attacks are very, very useful when cracking ZIP “encryption”. I’ve mostly used this to unpack ZyXEL firmware updates (reference below to this), but it also works on a lot of other stuff if you can get a partial plaintext. Some file formats headers might work. https://www.fullspectrum.dev/the-hunt-for-cve-2023-28771-part-1/ https://www.fullspectrum.dev/the-hunt-for-cve-2023-28771-par...