Winzip's 256bit-AES encryption & self-extracting files

Winzip's 256bit-AES encryption & self-extracting files

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Winzip's 256bit-AES encryption & self-extracting files Bakko 12-29-2007
Posted by Volker Birk on January 4, 2008, 3:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Is the security of an AES 256 self-extracting
> zip .EXE as good as an AES 256 .ZIP file?

Security in what way?

The "self-extracting" code can be modified i.e. in an MITM attack, and
so can malware code injected and run on the target machine.

For example.

Yours,
VB.
--
The file name of an indirect node file is the string "iNode" immediately
followed by the link reference converted to decimal text, with no leading
zeroes. For example, an indirect node file with link reference 123 would
have the name "iNode123". - HFS Plus Volume Format, MacOS X

Posted by Bakko on January 13, 2008, 12:45 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

>> Is the security of an AES 256 self-extracting
>> zip .EXE as good as an AES 256 .ZIP file?
>
> Security in what way?
>
> The "self-extracting" code can be modified i.e. in an MITM attack, and
> so can malware code injected and run on the target machine.
>
> VB.

Perhaps you haven't read my original post in this thread?

Posted by Sebastian G. on January 13, 2008, 2:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Bakko wrote:


>> The "self-extracting" code can be modified i.e. in an MITM attack, and
>> so can malware code injected and run on the target machine.
>>
>> VB.
>
> Perhaps you haven't read my original post in this thread?


Perhaps you didn't read it yourself? Telling that you want to send your data
via transfer of a physical media only came up later, and it doesn't mitigate
this thread at all (since the attacker can read out the physical media,
modify the data and write them to a new media).

And you never ever bothered about verifying its integrity via any means, so
this attack should be considered seriously.

Posted by Chris Cheney on December 31, 2007, 5:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Sun, 30 Dec 2007 17:49:15 GMT, Bakko wrote:

> Although the data is sensitive it has no real value. The data is a
> bit like someone's medical data. No one else has any use for it.

WTF?
--
621 NW 53RD ST - STE 240; Boca Raton, FL. 33487
www.QualifyMe123.com We finance *anyone* 110%
"The trick is in tricking the Lender; we're the best !! "
954-242-5638; 561-995-1469 x 322; 561-995-1489

Posted by zipeg on December 30, 2007, 12:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

it does not matter if it is self extracting or normal archive. AES is
strong encryption. However a lot of mail servers/clients will be unhappy
about .exe as an attachment. It is better to send just normal encrypted
zip file and advise your recipients to use freeware like 7-zip or Zipeg
'Zipeg - Got pictures? Zip thru JPEG photo archives'
(http://www.zipeg.com) to unpack them.

Regards


------------------------------------------------------------------------
View this thread: http://www.wirelessforums.org/showthread.php?t=35510
http://www.wirelessforums.org


Similar ThreadsPosted
What is the earliest version with full harddisk encryption (not only files) ? July 27, 2005, 9:05 am
Searching tool for FULL disc encryption (not only volume files) July 28, 2005, 11:06 am
SSL/https De-encryption July 6, 2004, 9:15 am
NTFS Encryption April 26, 2005, 6:31 pm
Encryption Key Storage August 25, 2005, 8:09 am
Email Encryption September 17, 2005, 12:20 am
Encryption size October 25, 2005, 3:13 am
Determine what encryption was used April 18, 2006, 8:52 am
Determine what encryption was used April 28, 2006, 4:50 am
Encryption for Powerpoint? May 19, 2006, 11:34 pm

The site map in XML format XML site map

Contact Us | Privacy Policy