PING: RFR: JDK-4347142: Need method to set Password protection to Zip entries

[Yasumasa Suenaga]

Hi Andrew,

Thank you for your comment.

We will not modify ZIP file format, so I think we do not need to negotiate
for ZIP file format.

We want to propose to JEP as below:


   1. We do not need to modify current java.util.zip implementation for
      unencrypted data.

   2. We think that we can apply AE-1 and AE-2 format from WinZip [1].
      This format uses extra data field in standard ZIP file format for
      encryption header.
      Thus we can handle encrypted/unencrypted ZIP archive with keeping
      compatibility.

   3. For extensibility, the encryption engine should be pluggable like
      Java Cryptography Architecture (JCA).
      If so, any Java developer can add custom encryption engine.
      (e.g. traditional ZIP encryption engine)


Thanks,

Yasumasa


[1] http://www.winzip.com/aes_info.htm


On 2016/05/31 5:17, Andrew Haley wrote:
> On 30/05/16 13:44, Yasumasa Suenaga wrote:
>> We had aimed to handle *traditional* zip encryption at first.
>> However, we also want to handle *strong* zip encryption. (e.g. AES)
>
> OpenJDK does not control the format of a zip file.  To make
> such a change we'd have to negotiate with the other users of
> the .ZIP format.
>
> Andrew.
>
>