Support for Zip files with password

Issue #21 new
Former user created an issue

Originally reported on Google Code with ID 21

What steps will reproduce the problem?
1. Create a zip file with password.
2. mount this zip file 
3. try to open files inside this mount point.
4. fuse-zip -V don't work, too


What is the expected output? What do you see instead?
Expect get a prompt to type password, I see error

What version of the product are you using? On what operating system?
from 18 November 2009, I'm using Ubuntu 9.10

Please provide any additional information below.

Reported by djalmaoliveira on 2010-01-07 16:52:25

Comments (8)

  1. Former user Account Deleted

    ``` Currently fuse-zip does not supports encrypted zipfiles.

    Issue 22 created to track -V switch absence. ```

    Reported by `alexander.galanin` on 2010-01-07 16:58:24 - Labels added: Type-Enhancement

  2. Former user Account Deleted

    ``` i would have really good use for this -- bump! ```

    Reported by `philipkthompson` on 2010-09-01 16:06:02

  3. Chris Graham

    Here's a patch that adds a parameter, with support for passing password directly within parameter, passing via mount options, and passing via stdin. Works for both read and write, and uses AES-256.

    For my reference, here's how the password parameter flows through the code: main --> initFuseZip --> new FuseZipData (stores it in FuseZipData) --> (ref to FuseZipData ends up going to "fuse_setup" as data) ... fusezip_destroy (with reference to FuseZipData) --> FuseZipData::save -> FileNode::save --> saveToZip

  4. Alexander Galanin repo owner

    Unfortunately zip archive can contain files encrypted with a different passwords. So fuse-zip need to interact with user or password agent (like GNOME keyring or KWallet) to request passwords on demand.

  5. Chris Graham

    That is possible, but unlikely, and controllable if the user is the one who makes the archives.

    The behavior right now is to give a generic filesystem error whenever accessing a passworded file. So in the worst case, if the given password doesn’t match it will fall back to what is happening already.

    I think my patch is a whole lot better than nothing, and I’m currently actively using it with great success. It allows using zip files as cross-platform managers for passwords and other sensitive information.

  6. Log in to comment