Xref: utzoo comp.compression:200 sci.crypt:4415
Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!bellcore!epic!karn
From: karn@epic.bellcore.com (Phil R. Karn)
Newsgroups: comp.compression,sci.crypt
Subject: Re: Security of PKZIP's encryption
Message-ID: <1991Apr3.041950.20991@bellcore.bellcore.com>
Date: 3 Apr 91 04:19:50 GMT
References: <1991Mar26.150049.20882@athena.cs.uga.edu> <1991Apr2.070810.10812@maverick.ksu.ksu.edu>
Sender: usenet@bellcore.bellcore.com (Poster of News)
Reply-To: karn@thumper.bellcore.com
Organization: Packet Communications Research Group (Bellcore)
Lines: 10

In article <1991Apr2.070810.10812@maverick.ksu.ksu.edu>,
parsons@matt.ksu.ksu.edu (Ghost in the Machine) describes the PKZIP
encryption algorithm.

At first glance, it doesn't look all that strong to me since all of
the operations appear to be linear. Although the PKZIP feature is fast
and convenient, when I want real security I encrypt the entire .ZIP
archive with DES.

Phil