Archiving Security

ZipV2 vs AES Encryption

The original ZipV2 encryption algorithm is the most secure encryption method for archiving. Period. We've recently incorporated the AES (the Rijndael algorithm) into the ZipTV components. Not because it adds any level of security to password protected compressed data (because it doesn't) over it's predecessor, but to support the current zip standards.

The new AES encryption includes the same security hole that the original ZipV2 algorithm did. Instead of fixing the hole, other equally or less secure (freeware) encryption methods were sought to replace it. These developers have demonstrated their absolute lack of knowledge of encryption! In testing, we've broken the AES encryption using the same brute force method as we did ZipV2, by exploiting the same hole present in both algorithms. The only thing increased by adding additional encryption algorithms into compression applications is the users feeling of security.. that all.

For decades now, the ZipV2 algorithm has used the same 3 seed keys values. Their hard-coded into ALL compression applications. End users have never known the existance of these hard-coded values, thus not ever having the ability to change them. By changing the value of these 3 seed keys, the hole closes and the ZpV2 algorithm becomes the absolute most secure encryption possible for compressed data. The brute force method of retrieving a password from an archive is no longer valid.

Sure, there is a negative to revising these keys. You have to store the key values somewhere secure. I agree, this is no simple task. These additional measures are the strength of unbreakable security. The convience of, and the increased speed in decrypting data are the two major eroding factors of secure data. Both of which have always been major caveats for archiving applications.