Does libzip support "Central Directory Encryption"? about libzip HOT 6 CLOSED

No, it currently does not.

We would probably need a new variant of zip_open() to allow providing a password, and a new archive flag like ZIP_AFL_ENCRYPTED_CENTRAL_DIRCTORY. You could then check if it is encrypted with zip_get_archive_flag() and set whether to encrypt with zip_set_archive_flag().

from libzip.

How does the current libzip 1.10 react when faced with an encrypted central directory? Does it fails with ZIP_ER_NOZIP or another error code?

For context, around 2% of all the ZIP archives that are opened by the ChromeOS Files App fail with ZIP_ER_NOZIP. This percentage is stable over time, and it looks quite high. I'm wondering what could be causing that, and if the "central directory encryption" could play a role in that.

from libzip.

I think recognizing it as a ZIP archive might work (at least without the consistency check flag). The data in the central directory is zeroed out though, so it'll be useless (no file sizes etc.)
Do you have an example file for us?

from libzip.

Do you have an example file for us?

I wish I had one. Unfortunately, I don't even know how to create such a ZIP file with an encrypted central directory.

from libzip.

Thomas found that Central Directory Encryption is patented, accoring to PKWare developer Marius Volkhart, see https://stackoverflow.com/questions/58394110/pkware-zip-central-directory-encryption

Therefore, we can't implement it. If we can get an example zip archive, we'll make sure that it is recognised as a zip archive and that zip_open() returns an appropriate error code.

from libzip.

Interesting. That explains why such ZIPs aren't that common.

from libzip.