Encryption for Password-Protected "Compressed (zipped) Folders"?

[robkoehl]

Does anyone have any idea how Microsoft encrypts zip files that are
protected with a password (if at all) in Windows XP/Me?

I can find a ton of documentation on how to do it (via the File-->Add a
Password... option), but I can't figure out if it's secure enough to
send potentially sensitive information to a client in an email
attachment. My client would prefer not to install a new application on
his PC, but if the built-in encryption is not strong enough, then he
will have to do that.

I do use a strong password, so I'm not so worried about the password
being cracked, but I would like to make sure that the encryption is
strong enough.

Anyone have any idea?

Thanks in advance!

Rob

 

[Rick \Nutcase\ Rogers]

Hi,

You are confusing two different things. Encryption, or EFS, is a manner of
securing data on the hard drive so that not only is it only accessible to
selected users, it is also not available to anyone who might gain access to
the file through theft of the system or other means (like copying it from
another logon). This is a very strong encryption, and is quite secure, and
is not meant for passing files to others. If you did, you'd also have to
pass them the encryption certificate for them to read it.

Passwording a zip file is not encryption. It simply provides a means of
giving some small amount of security to a folder. It will keep out most of
the unwanted riff-raff and honest thieves, but it can be cracked by some
tools commonly available on the net.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[Rick \Nutcase\ Rogers]

Here is one example of a utility to crack .zip passwords:
http://www.crackpassword.com/products/prs/archives/zip/

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org

 

[Don Taylor]

Does anyone have any idea how Microsoft encrypts zip files that are
protected with a password (if at all) in Windows XP/Me?

I can find a ton of documentation on how to do it (via the File-->Add a
Password... option), but I can't figure out if it's secure enough to
send potentially sensitive information to a client in an email
attachment. My client would prefer not to install a new application on
his PC, but if the built-in encryption is not strong enough, then he
will have to do that.

I do use a strong password, so I'm not so worried about the password
being cracked, but I would like to make sure that the encryption is
strong enough.

Anyone have any idea?

www.pgp.com