Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

This question already has an answer here:

I have an old PDF.zip file that is password secured. Naturally I can't remember it. Is there a way to change it or disable it?

share|improve this question

marked as duplicate by Xander, schroeder, Steve, TildalWave, D.W. Jul 28 at 22:14

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
The other answer is only for Zip archive using AES, which might not be the case here. –  Thomas Pornin Jul 28 at 18:31
    
True. security.stackexchange.com/q/5447/971 might be relevant if it isn't encrypted with AES. If their question is not covered by either of those two links, the author can post a new question (or edit this one) with the details of their specific zip file. In particular, they should tell us what it was encrypted with, if it wasn't AES and wasn't the weak "standard" encryption. –  D.W. Jul 28 at 22:16

1 Answer 1

Some Zip archives use the old PKZIP encryption, which uses a weak homemade stream cipher. The attack is described here (implementing it is a nice exercise for crypto students, by the way). Tools which apply that attack exist (use Google to find some). Windows XP inherent abilities at "Zip password protection" use this weak algorithm; see this answer for some details.

Other Zip-aware tools rely on AES encryption, which won't be as easily broken. If that is the case, then your only hope is to try some brute force on the password, in case it was chosen by a human being and thus possibly in range of a dictionary attack. This may fail if the password is strong enough.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.