I looked for an answer for this question over here, yet all I could find were about cracking the password. So let's say I'm using PHP to generate a cryptographically secure random password:
echo "Password: " . bin2hex(openssl_random_pseudo_bytes(32, true));
Having this password, it seems like it would be easier to guess the hash itself and decrypt the files manually (so the attacker wouldn't have to waste time on hashing the password everytime to check if it is correct).
How hard will it be to hack the rar/zip, without hacking the password itself?