On the security of the WinRAR encryption method

Authors:
Gary S. -W. Yeo;Raphael C. -W. Phan
Affiliations:
Information Security Research (iSECURES) Lab, Swinburne University of Technology (Sarawak Campus), Kuching, Sarawak, Malaysia;Information Security Research (iSECURES) Lab, Swinburne University of Technology (Sarawak Campus), Kuching, Sarawak, Malaysia
Venue:
ISC'05 Proceedings of the 8th international conference on Information Security
Year:
2005

Citing 7
Cited 0

Data compression via textual substitution

Journal of the ACM (JACM)
Security Engineering: A Guide to Building Dependable Distributed Systems

Security Engineering: A Guide to Building Dependable Distributed Systems
Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm

ASIACRYPT '00 Proceedings of the 6th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Protocol Interactions and the Chosen Protocol Attack

Proceedings of the 5th International Workshop on Security Protocols
ZIP Attacks with Reduced Known Plaintext

FSE '01 Revised Papers from the 8th International Workshop on Fast Software Encryption
Compression and Information Leakage of Plaintext

FSE '02 Revised Papers from the 9th International Workshop on Fast Software Encryption
Attacking and repairing the winZip encryption scheme

Proceedings of the 11th ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present several attacks on the WinRAR encryption method. These attacks are possible due to the subtlety in developing security software based on the integration of multiple cryptographic primitives. No matter how securely designed each primitive is, using them especially in association with other primitives does not guarantee secure systems. Instead, time and again such a practice has resulted in flawed systems. Our results, compared to recent attacks on WinZip, show that WinRAR appears to offer slightly better security features.