Bakko wrote:


> AES is strong. But has Winzip incorporated AES into self-extracting
> files in a way that does not introduce weaknesses.
>
> ISTR that the early AES 256 Zip files created by Winzip had some sort of
> weakness due to the way it was implemented.


Your memories are corrupt, but presumably this has been fixed. According to
the latest documentation, analysis tell that there's no weakness lesser than
AES itself.

The big problem still is that the authentication only covers the archive
part, not the SFX part. The SFX part might be changed to do anything,