You are here

7-Zip: 7zip-archive with password .... is it really safe ?

17 posts / 0 new
Last post
peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
7-Zip: 7zip-archive with password .... is it really safe ?

7zip offers a function of protecting an archive with a password.

Is that a - really - secure way of protecting files ?

MarkoMLM
MarkoMLM's picture
Offline
Last seen: 9 years 4 months ago
DeveloperTranslator
Joined: 2006-01-16 04:08
No it is :-(

... cause You could open the archive without 7-zip with other tools without a password or simply with 7-zip over Open-intern.

A password on a archiv is never secure, the only a way to have it secure is to encrypt it (with a passord for decryption)

Regards
Marko

Paid for Software more or less?
What You need is OSS!

peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
tool for encryption ?

Thanks for that answer !
I expected that answer .... Sad

Is there a - preferable portable - tool to encrypt just one or more files without the need to encrypt the hole folder or drive ?

MarkoMLM
MarkoMLM's picture
Offline
Last seen: 9 years 4 months ago
DeveloperTranslator
Joined: 2006-01-16 04:08
axcrypt2go beta

Paid for Software more or less?
What You need is OSS!

peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
that is not portable !

That tool is not portable !

John T. Haller
John T. Haller's picture
Online
Last seen: 5 min 37 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
You Sure?

I'm pretty sure that 7z files encrypt the entire file using AES encryption.

Sometimes, the impossible can become possible, if you're awesome!

MarkoMLM
MarkoMLM's picture
Offline
Last seen: 9 years 4 months ago
DeveloperTranslator
Joined: 2006-01-16 04:08
Could be that I'm wrong ...

... but it only works with the option "encrypt filenames" and the format 7z.
Without this option or with another format like zip it don't work.

That's not really secure, cause the user could not see any hint, that only 7z with the "encrypt filename" option will protect the archiv.
The Password-Option is for the other formats active too but useless.

Regards
Marko

Paid for Software more or less?
What You need is OSS!

John T. Haller
John T. Haller's picture
Online
Last seen: 5 min 37 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
7z without

I think that 7z without encrypt filenames still encrypts all the files... you can just see the names of them.

Sometimes, the impossible can become possible, if you're awesome!

peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
sounds good :-)

Thanks, that sound good !

And it fits perfect to my personal needs !

MarkoMLM
MarkoMLM's picture
Offline
Last seen: 9 years 4 months ago
DeveloperTranslator
Joined: 2006-01-16 04:08
PLEASE...

...try it out!

Without "encrypt filenames" You are able to open any !!!(the 7z an selfextracting exe too!) archiv without asking for the given password!

Is that secure? That's nonsens! (Pardon me)

Once again: Without "encrypt filenames" the given password will never protect Your archiv (tested with the last version of 7-Zipportable)

Regards
marko

Paid for Software more or less?
What You need is OSS!

John T. Haller
John T. Haller's picture
Online
Last seen: 5 min 37 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Ummm

I don't think so. Just because you are able to see the filenames does *NOT* mean you are able to actually extract them. You *ARE* able to see the list of file name within a tool like 7-Zip or by running the self extractor... but you're SUPPOSED to be able to... unless of course you select to encrypt filenames. You just can't open or extract ANY of the files.

Just because you can see the file listings does not mean you can open the archive. They are two entirely different things.

Sometimes, the impossible can become possible, if you're awesome!

MarkoMLM
MarkoMLM's picture
Offline
Last seen: 9 years 4 months ago
DeveloperTranslator
Joined: 2006-01-16 04:08
Sorry, You're right!

I didn't klick of the extract button :-(.
If I did it I had seen the question for the password.

Pardon me John!
YOU ARE RIGHT!

Sometimes it seems better to sleep about a problem...

Regards
Marko

Paid for Software more or less?
What You need is OSS!

peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
... 7z - selfextracting-file ?

does the encryption work with the 7z - selfextracting - file-format (*.exe) ?

John T. Haller
John T. Haller's picture
Online
Last seen: 5 min 37 sec ago
AdminDeveloperModeratorTranslator
Joined: 2005-11-28 22:21
Yea

Yea

Sometimes, the impossible can become possible, if you're awesome!

peter_g
Offline
Last seen: 12 years 7 months ago
Joined: 2006-09-09 05:54
perfect !

Smile

(.. thanks !)

RMB Fixed
Offline
Last seen: 15 years 2 months ago
Joined: 2006-10-24 10:30
not only AES ...

but 256 bit AES .
good luck cracking that if a secure password is used ..

zikarus
Offline
Last seen: 13 years 5 months ago
Joined: 2006-10-10 16:32
And the encryption got even

And the encryption got even better and faster beginning with v 4.48. The latest beta might be used with the 4.42 launcher till the next final will be released...

Log in or register to post comments