7zip ... not so good under the covers?

Jim Cheetham jim at gonzul.net
Sun Feb 3 20:44:48 GMT 2019


https://threadreaderapp.com/thread/1087848040583626753.html

"So I wanted to encrypt some files. Thought about using 7z+password.
Stackexchange folks said "Didn't review it but it should be fine. You can
browse the code yourself". So I did. After a few mins I noticed they use
8byte "random" IV. Yes, half of IV is zeroes. But it gets worse."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ourshack.com/pipermail/discuss/attachments/20190204/b8bd204c/attachment.html>


More information about the Discuss mailing list