Hi Andrew,
Thank you for your comment.
We will not modify ZIP file format, so I think we do not need to negotiate
for ZIP file format.
We want to propose to JEP as below:
1. We do not need to modify current java.util.zip implementation for
unencrypted data.
2. We think that we can apply AE-1 and AE-2 format from WinZip [1].
This format uses extra data field in standard ZIP file format for
encryption header.
Thus we can handle encrypted/unencrypted ZIP archive with keeping
compatibility.
3. For extensibility, the encryption engine should be pluggable like
Java Cryptography Architecture (JCA).
If so, any Java developer can add custom encryption engine.
(e.g. traditional ZIP encryption engine)
Thanks,
Yasumasa
[1] http://www.winzip.com/aes_info.htm
On 2016/05/31 5:17, Andrew Haley wrote:
On 30/05/16 13:44, Yasumasa Suenaga wrote:
We had aimed to handle *traditional* zip encryption at first.
However, we also want to handle *strong* zip encryption. (e.g. AES)
OpenJDK does not control the format of a zip file. To make
such a change we'd have to negotiate with the other users of
the .ZIP format.
Andrew.
