Zip attacks with reduced known plaintext

Abstract

Bihamand Kocher demonstrated that the PKZIP streamcipher was weak and presented an attack requiring thirteen bytes of plaintext. The deflate algorithm“zipp ers” now use to compress the plaintext before encryption makes it difficult to get known plaintext. We consider the problemof reducing the amount of known plaintext by finding other ways to filter key guesses. In most cases we can reduce the amount of known plaintext fromthe archived file to two or three bytes, depending on the zipper used and the number of files in the archive. For the most popular zippers on the Internet, there is a fast attack that does not require any information about the files in the archive; instead, it gets doubly-encrypted plaintext by exploiting a weakness in the pseudorandom-number generator.