PKWare Files a Patent Application for Secure .zip

prostoalex writes "The battle of ZIP formats might intensify as PKWare filed an application with USPTO to obtain a patent on its Secure Zip technology, which pretty much involves archiving with strong cryptography. If the patent gets granted, PKWare will license its algorithms for other software manufacturers. A representative of Aladdin Systems summed it up: "The good thing about the .zip file format was that you knew you could send it to everyone. Now that's getting broke.""

Comments

That's fine and all....

[flewp]

but I want a secure zipper. So many people are trying to get into my pants it's outrageous.

Re:Use PGP

[Nathan Ramella]

Doesn't PGP already compress things before it encrypts? (Adds to the difficulty in decyphering it..)

Text compression

[smeenz]

It's good to see Aladdin Systems are demonstrating their lossy text compression technology by saying that the ZIP format is "getting broke" rather than "getting broken"

</tongue>

Re:Use PGP

[FrankoBoy]

Indeed.

just another example...

[Satan's Librarian]

of a a company going to hell after its founder is gone, it can't innovate anymore, and it starts getting beaten to a pulp by its competitors.

seems like a familiar story to me.

WinZip Publishes AES Encryption Standard

[----]

With the WinZip 9.0 Beta announcement there is this little tidbit ...

"Advanced encryption
WinZip 9.0 supports 128- and 256-bit key AES encryption, which provide much greater cryptographic security than the traditional Zip 2.0 encryption method used in earlier versions of WinZip.

WinZip 9.0's advanced encryption (FIPS-197 certified) uses the Rijndael cryptographic algorithm which, in 2001, was specified by the National Institute of Standards and Technology (NIST) in Federal Information Processing Standards (FIPS) Publication 197 as the Advanced Encryption Standard (AES).

After a three-year competition, the AES was announced by NIST as an approved encryption technique for use by the U.S. government, private businesses, and individuals. When properly implemented as a key component of an overall security protocol, the AES permits a very high degree of cryptographic security, yet is fast and efficient in operation.

WinZip's AES encryption is just as easy to use as traditional Zip 2.0 encryption: all you have to do is select the encryption strength and specify your password.

Note: recipients to whom you send AES-encrypted Zip files must have a compatible Zip file utility in order to decrypt the files. At this time, WinZip 9.0 is required. We have, however, published the full specification for creating WinZip-compatible AES-encrypted Zip files, and we expect that other Zip file utility vendors will provide support for the format. "

Funny, it sounds like either they already reverse engineered the pkware zip encryption, or established their own encryption.

I wonder how many times users will complain to company xyz (that is using pkware encryption for their products) about their files not working in winzip, before company xyz will drop their pkware proprietary encryption in favor of winzip's published (and functional) encryption.

/* ---- */

Re:7-zip

[pla]

Everybody, start using the (open source) 7-zip instead.

No kidding. It amazes me that a lot more people don't use this - It handles all the major formats (zip, tar, gz, bz2, cab, no "sit", though) better than the "native" program for them does, and hey, open source to boot. And, its "7z" format really does get 10-30% better compression than even bzip2.


Gotta agree with the other response to you, though - the interface needs MAJOR work. It doesn't "look" bad, but feels very counterintuitive. Hell, if they totally eliminated the psuedo-explorer-esque look and just let me drag-and-drop, I'd consider it perfect.

Re:Ironic quote from Aladdin Systems

[innate]

You're partly right. StuffIt was the main compression format until OS X came along, but it's not the only format that preserves resource forks.

Today you'll mainly see .dmg (disk image) format, which features compression, optional encryption, and preserves resource forks. Also common are .pkg (a compressed installer, which can include files with resource forks) and .tar.gz files (I don't think they preserve resource forks).

And some folks still use Stuffit .sit files.