Re: SEEK: freeware to decrypt password-protected Winzip files
de Ari Silverstein 06/24/2006 12:03
On Fri, 23 Jun 2006 14:46:54 -0600, Luc The Perverse wrote:
> "Ari Silverstein" <abcarisilverstein@yahoo.comxyz> wrote in message
> news:1l4scis4h5c9v$.9leyg087pvoa.dlg@40tude.net...
>> On Tue, 20 Jun 2006 13:41:23 +0100, Franklin wrote:
>>
>>> On 20 Jun 2006, Terry<noemail@none.invalid> wrote:
>>>
>>>> On Tue, 20 Jun 2006 02:38:32 +0100, Franklin <franksays@nomail.com>
>>>> wrote:
>>>>
>>>>>I use Winzip ($$$ware) to encrypt personal files so that they are
>>>>>safe when transitted over the net.
>>>>>
>>>>>Some recipients cannot open these files even though they have the
>>>>>password.
>>>>>
>>>>>Which freeware which can open Winzip encypted files? And which
>>>>>method of encryption (performed by Winzip) can they decrypt?
>>>>>
>>>>>Winzip can encrypt using:
>>>>>(a) Zip 2.0
>>>>>(b) 128-bit AES
>>>>>(3) 256-bit AES.
>>>>
>>>> The only one of those that is generally supported is zip 2.0
>>>> encryption. Many (most?) freeware can open those.
>>>>
>>>> The AES encryption is pretty much Winzip only -- I don't know of
>>>> any freeware that will open them. Note that some of your recipients
>>>> may be opening these files using the builti in zip-file handling of
>>>> Windows XP. This will handle zip 2.0 passwords only, and they may
>>>> be reluctant to install any additional zip program, whether
>>>> freeware or not.
>>>
>>> I tried FILZIP which claims to be able to decrypt AES but it does not
>>> work well. These recipients are not computer-savvy and would
>>> struggle if the needed to massage the results.
>>>
>>>>
>>>> <OT>
>>>> Winzip can create self-extracting exe files, that use AES
>>>> encryption. This would let you use the stronger encryption, but not
>>>> require any zip program on the recipient's system. Essentially you
>>>> are sending them the decryption program along with your data.
>>>> </OT>
>>>
>>> Yes, I had been thinking about this but I get the feeling that
>>> getting my self-extracting EXE past the recipient's security might be
>>> hard. (I suppose I could, errr, zip up the EXE file!)
>>
>> If you user uses Gmail, Gmail won't take zipped files. If you user's email
>> or ISP dislikes .exe files, you're screwed again.
>>
>> You will need to find a solution that creates the file not as a zip or
>> .exe, imo.
>> --
>> Drop the alphabet for email
>
> My old work would recurse embedded zip files and find EXE files and delete
> them. Security through data destruction as the old adage goes - if you
> destroy all computers in the world there would be no viruses!
lol
What did they use to recurse?
> We found that password encrypting the outside zip file, while leaving the
> inside zip file alone allowed the file to pass by (which made sense, they
> couldn't decrypt it)
Workarounds, love 'em.
--
Drop the alphabet for email