Is this a zip encryption bug?











up vote
1
down vote

favorite
1












I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password:



#zip --encrypt encrypted.zip -r dir1/



The above will prompt the user to enter a new password. Is there something I'm missing, or is this a known issue?






encryption zip







share|improve this question







New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • Have you found a way to read the data in the original zip file?
    – ctrl-alt-delor
    2 hours ago










  • @ctrl-alt-delor yes I didn't forget my password, I realised this by accident
    – lamino
    2 hours ago






  • 1




    Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
    – ctrl-alt-delor
    2 hours ago















up vote
1
down vote

favorite
1












I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password:



#zip --encrypt encrypted.zip -r dir1/



The above will prompt the user to enter a new password. Is there something I'm missing, or is this a known issue?






encryption zip







share|improve this question







New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




















  • Have you found a way to read the data in the original zip file?
    – ctrl-alt-delor
    2 hours ago










  • @ctrl-alt-delor yes I didn't forget my password, I realised this by accident
    – lamino
    2 hours ago






  • 1




    Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
    – ctrl-alt-delor
    2 hours ago













up vote
1
down vote

favorite
1









up vote
1
down vote

favorite
1






1





I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password:



#zip --encrypt encrypted.zip -r dir1/



The above will prompt the user to enter a new password. Is there something I'm missing, or is this a known issue?






encryption zip







share|improve this question







New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











I have recently discovered an exploit, where I(or assuming anyone) can re-encrypt my encrypted zip file without having to know the password:



#zip --encrypt encrypted.zip -r dir1/



The above will prompt the user to enter a new password. Is there something I'm missing, or is this a known issue?






encryption zip




encryption zip






share|improve this question







New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.











share|improve this question







New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









share|improve this question




share|improve this question






New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.









asked 3 hours ago









lamino

113




113




New contributor




lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.





New contributor





lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






lamino is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.












  • Have you found a way to read the data in the original zip file?
    – ctrl-alt-delor
    2 hours ago










  • @ctrl-alt-delor yes I didn't forget my password, I realised this by accident
    – lamino
    2 hours ago






  • 1




    Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
    – ctrl-alt-delor
    2 hours ago


















  • Have you found a way to read the data in the original zip file?
    – ctrl-alt-delor
    2 hours ago










  • @ctrl-alt-delor yes I didn't forget my password, I realised this by accident
    – lamino
    2 hours ago






  • 1




    Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
    – ctrl-alt-delor
    2 hours ago
















Have you found a way to read the data in the original zip file?
– ctrl-alt-delor
2 hours ago




Have you found a way to read the data in the original zip file?
– ctrl-alt-delor
2 hours ago












@ctrl-alt-delor yes I didn't forget my password, I realised this by accident
– lamino
2 hours ago




@ctrl-alt-delor yes I didn't forget my password, I realised this by accident
– lamino
2 hours ago




1




1




Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
– ctrl-alt-delor
2 hours ago




Sorry I meant, Have you found a way to read the data in the original zip file, without knowing the password?
– ctrl-alt-delor
2 hours ago










1 Answer
1






active

oldest

votes

















up vote
5
down vote



accepted










Zip archives can have multiple passwords for different contained files. Files within an archive are essentially independent of each other - they are compressed without regard for other files, and they are encrypted in the same fashion. Your encrypted.zip will have two (or more) encrypted segments, one with your original password and one with the new one.



Trying to unzip the file would prompt for both passwords:



$ unzip ../test.zip

Archive:  ../test.zip

[../test.zip] file1 password:

  inflating: file1

  inflating: file2

[../test.zip] newfile password:

  inflating: newfile


The directory, the listing of file names, is not encrypted. This is not a bug, though it can be confusing and not all zip tools handle the situation well (particularly graphical tools).






share|improve this answer





















  • Counter-intuitive but Interesting feature. Thanks for clarifying
    – lamino
    2 hours ago











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "106"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});






lamino is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f489757%2fis-this-a-zip-encryption-bug%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
5
down vote



accepted










Zip archives can have multiple passwords for different contained files. Files within an archive are essentially independent of each other - they are compressed without regard for other files, and they are encrypted in the same fashion. Your encrypted.zip will have two (or more) encrypted segments, one with your original password and one with the new one.



Trying to unzip the file would prompt for both passwords:



$ unzip ../test.zip

Archive:  ../test.zip

[../test.zip] file1 password:

  inflating: file1

  inflating: file2

[../test.zip] newfile password:

  inflating: newfile


The directory, the listing of file names, is not encrypted. This is not a bug, though it can be confusing and not all zip tools handle the situation well (particularly graphical tools).






share|improve this answer





















  • Counter-intuitive but Interesting feature. Thanks for clarifying
    – lamino
    2 hours ago















up vote
5
down vote



accepted










Zip archives can have multiple passwords for different contained files. Files within an archive are essentially independent of each other - they are compressed without regard for other files, and they are encrypted in the same fashion. Your encrypted.zip will have two (or more) encrypted segments, one with your original password and one with the new one.



Trying to unzip the file would prompt for both passwords:



$ unzip ../test.zip

Archive:  ../test.zip

[../test.zip] file1 password:

  inflating: file1

  inflating: file2

[../test.zip] newfile password:

  inflating: newfile


The directory, the listing of file names, is not encrypted. This is not a bug, though it can be confusing and not all zip tools handle the situation well (particularly graphical tools).






share|improve this answer





















  • Counter-intuitive but Interesting feature. Thanks for clarifying
    – lamino
    2 hours ago













up vote
5
down vote



accepted







up vote
5
down vote



accepted






Zip archives can have multiple passwords for different contained files. Files within an archive are essentially independent of each other - they are compressed without regard for other files, and they are encrypted in the same fashion. Your encrypted.zip will have two (or more) encrypted segments, one with your original password and one with the new one.



Trying to unzip the file would prompt for both passwords:



$ unzip ../test.zip

Archive:  ../test.zip

[../test.zip] file1 password:

  inflating: file1

  inflating: file2

[../test.zip] newfile password:

  inflating: newfile


The directory, the listing of file names, is not encrypted. This is not a bug, though it can be confusing and not all zip tools handle the situation well (particularly graphical tools).






share|improve this answer












Zip archives can have multiple passwords for different contained files. Files within an archive are essentially independent of each other - they are compressed without regard for other files, and they are encrypted in the same fashion. Your encrypted.zip will have two (or more) encrypted segments, one with your original password and one with the new one.



Trying to unzip the file would prompt for both passwords:



$ unzip ../test.zip

Archive:  ../test.zip

[../test.zip] file1 password:

  inflating: file1

  inflating: file2

[../test.zip] newfile password:

  inflating: newfile


The directory, the listing of file names, is not encrypted. This is not a bug, though it can be confusing and not all zip tools handle the situation well (particularly graphical tools).







share|improve this answer












share|improve this answer



share|improve this answer










answered 3 hours ago









Michael Homer

45.2k7119159




45.2k7119159












  • Counter-intuitive but Interesting feature. Thanks for clarifying
    – lamino
    2 hours ago


















  • Counter-intuitive but Interesting feature. Thanks for clarifying
    – lamino
    2 hours ago
















Counter-intuitive but Interesting feature. Thanks for clarifying
– lamino
2 hours ago




Counter-intuitive but Interesting feature. Thanks for clarifying
– lamino
2 hours ago










lamino is a new contributor. Be nice, and check out our Code of Conduct.










draft saved

draft discarded


















lamino is a new contributor. Be nice, and check out our Code of Conduct.













lamino is a new contributor. Be nice, and check out our Code of Conduct.












lamino is a new contributor. Be nice, and check out our Code of Conduct.
















Thanks for contributing an answer to Unix & Linux Stack Exchange!


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid …



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f489757%2fis-this-a-zip-encryption-bug%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

Costa Masnaga

Image
.mw-parser-output .avviso .mbox-text-div>div,.mw-parser-output .avviso .mbox-text-full-div>div{font-size:90%}.mw-parser-output .avviso .mbox-image div{width:52px}.mw-parser-output .avviso .mbox-text-full-div .hide-when-compact{display:block} Questa voce o sezione sull'argomento Lombardia non cita le fonti necessarie o quelle presenti sono insufficienti . Puoi migliorare questa voce aggiungendo citazioni da fonti attendibili secondo le linee guida sull'uso delle fonti. Segui i suggerimenti del progetto di riferimento. Costa Masnaga comune Localizzazione Stato   Italia Regione Lombardia Provincia Lecco Amministrazione Sindaco Sabina Panzeri (Al centro il cittadino) dall'08/06/2009 Territorio Coordinate 45°46′N 9°17′E  /  45.766667°N 9.283333°E 45.766667; 9.283333  ( Costa Masnaga ) Coordinate: 45°46′N 9°17′E  /  45.766667°N 9.283333°E 45.766667; 9.283333  ( Costa Masnaga ) Altitudine 318 m s.l.m...
Read more

Fotorealismo

Image
Guerrino Boatto, Venice's St. Barnaba Church and canal Il fotorealismo è un genere di pittura basato sull'uso di una o più fotografie dalle quali l'artista prende le informazioni necessarie da utilizzare poi nel processo della creazione dell'opera, in genere ad olio o ad acrilico, al fine di avere un aspetto finale il più simile possibile alla fotografia. Indice 1 Storia 2 Lista dei fotorealisti 3 Note 4 Voci correlate 5 Altri progetti Storia | Il fotorealismo è un movimento che nasce negli Stati Uniti d'America alla fine degli anni sessanta [1] sulla scia della Pop Art [2] [3] [4] , e insieme condividono il carattere reazionario verso la travolgente ascesa dei media, che alla metà del ventesimo secolo si trasforma in un fenomeno di massa talmente imponente da minacciare il valore dell'immagine nell'arte. [5] [6] Ne consegue così che, colto il gesto d'inizio che fu della Pop Art, i fotorealisti aprono ad un ...
Read more

Sidney Franklin

Image
Questa voce sull'argomento registi statunitensi è solo un abbozzo . Contribuisci a migliorarla secondo le convenzioni di Wikipedia. Sidney Franklin, foto di Carl Van Vechten Oscar alla memoria Irving G. Thalberg 1943 Sidney Franklin , all'anagrafe Sidney Arnold Franklin , (San Francisco, 21 marzo 1893 – Santa Monica, 18 maggio 1972), è stato un regista, produttore cinematografico e attore statunitense. Il 20 giugno 1963, si sposò con l'attrice australiana Enid Bennett. Il matrimonio durò fino alla morte dell'attrice, il 14 maggio 1969 [1] Indice 1 Filmografia 1.1 Regista 1.2 Aiuto regia (parziale) 1.3 Produttore 1.4 Attore (parziale) 2 Note 3 Altri progetti 4 Collegamenti esterni Filmografia | Regista | The Baby , co-regia Chester M. Franklin (1915) The Rivals , co-regia Chester M. Franklin (1915) Little Dick's First Case , co-regia Chester M. Franklin (1915) Her Filmland Hero , co-...
Read more