-
-
Notifications
You must be signed in to change notification settings - Fork 251
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Encrypted ZIP shows contents structure #592
Comments
@artincube encrypted ZIP files have the contents structure (filenames) unencrypted by design. That's why you can see the structure of the file without needing the password. You can't extract them without the password in any case. If you want to also encrypt the filenames I suggest you use 7Z with the "Encrypt filenames" option enabled. Hope this helps :) |
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. |
Can this be a feature request for Keka? I think it would greatly add to the security of protecting an archive. |
@wkhan69 this is something that must be implemented in the ZIP standard, not directly in Keka, otherwise it will break compatibility. I strongly recommend you use 7Z instead when that level of encryption is required. It is more and more supported natively (Mac and Linux). |
This sounds great, but upon looking at the 7-zip source-forge discussion, I see that Keka is a 7-zip port to Mac (with a GUI) (made by yourself -Great job!!!!). So, if Keka is a 7-zip MacOS port, is this filename encryption a feature of 7-zip that cannot or will not be part of Keka? |
I think we are missing something here 😅
So that 7-Zip feature is also available in Keka but is a feature for the 7Z format, not for the ZIP format. See the difference? |
Hi - you are indeed correct. When I save the archive as .7z, and click the "encrypt filenames", it indeed works fine. ie: I cannot look at the file names in windows, or mac using any archive extractor without entering the password. Thanks for clarifying! |
Possible Security Issue
Configuration
Keka version: Version 1.1.30 (3477)
macOS version: macOS 10.14.6 (18G6020)
Describe the bug
Create a zip with a password and 256 encryption. I upload these to Google Drive (web interface) and without password I can see the content of one of the zips, in Google Drive. I repeated with that folder, same result. This is quite a security issue if I don't miss a step.
To Reproduce
Steps to reproduce the behavior:
The text was updated successfully, but these errors were encountered: