Hi Bear

sorry for the late reply.  My spare time is currently severly limited
but this should be getting better by the end of the month.

On 2015-09-05, Bear Giles wrote:

> I was just reminded of the risks of making assumptions. There's two
> separate implementations of AES strong encryption - WinZip AES and PKWare.
> I've been focused on the latter but we should recognize both types of
> headers.

IIRC WinZip AES works rather differently by using a separate
"compression method".  I haven't looked into the details so far, though.
It should be fine to start with just one implementation IMHO.

> I've pushed a bit more code that partially parses the PKWare headers. It's
> enough to identify the encryption and hash algorithms used but a lot is
> left unparsed.

Unless we really wanted to implement the crypto part this sounds
like a lot already.

Thanks

        Stefan


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org

Reply via email to