7-Zip 9.29 Alpha security questions

Help
Mark377
2012-09-24
2012-12-07
  • Mark377

    Mark377 - 2012-09-24

    Once you encrypt a file with 7-Zip, is there a password reset if you forget your password?
    Also, is there any backdoor in 7-Zip?

    Would a developer answer these questions. Thanks much.

    -Mark

     
  • dos386

    dos386 - 2012-09-25

    > Once you encrypt a file with 7-Zip, is there a password reset if you forget your password?

    NO (RTFM)

    > Also, is there any backdoor in 7-Zip?

    NO (RTFS)

    > Would a developer answer these questions

    NO (I'm not the developer of 7-ZIP)

    Conclusion: don't use the encryption feature of 7-ZIP :-)

     
  • Igor Pavlov

    Igor Pavlov - 2012-09-25

    7-Zip supports 3 ways for encryption:
    1) 7z encryption (AES-256)
    2) zip encryption (AES-256)
    2) old zip encryption (ZipCrypto).

    ZipCrypto probably is not too safe.
    7-Zip's AES-256 encryption is pretty safe, if password is long.
    With my estimation, if you use 20 letters (random latin letters) password for AES-256, nobody will be able to read your data in nearest 50 years.

    If password is short

     
  • Igor Pavlov

    Igor Pavlov - 2012-09-25

    Short passwords can be recovered.
    Probably GPUs with fast SHA-256 calculation can help there.
    For example, 8-letters password can be recovered in one year with $2000 hardware.

     
  • Mark377

    Mark377 - 2012-09-25

    Thanks for the informative replies.
    I'm going to use the encryption feature for some of my files protected with a strong password like you suggested.

    -Mark

     

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks