提供从网站的自解压加密下载
我正在开发的网站目前为用户提供了一个选项，可以以加密的 zip 文件形式下载数据。标准 zip 文件加密几乎毫无价值（所以我读过），因此我希望将其替换为使用 AES 加密但仍具有自解压格式的内容。这样做有几个问题，我相信以前有人已经解决过：
- 我不知道用户使用的是什么平台（Mac、Windows 或 Linux），所以我不能只制作一个自解压的 . exe 文件并假设它可以工作。我想我需要问一下。 （我已经要求输入密码。）
- 我的网站在 Linux 上运行，我怀疑大多数生成自解压加密 .exe 文件的程序都希望在 Windows 计算机上运行（以生成 .exe）。我想我可以设置一个运行 Windows 的虚拟机，然后让我的 Linux 服务器向该虚拟机发送请求（和数据）以生成 .exe，但这听起来很复杂。
The web site I'm working on currently provides an option for the user to download their data in an encrypted zip file. Standard zip file encryption is nearly worthless (so I've read), so I'm looking to replace that with something that uses AES encryption but still has a self-extracting format. There are a couple of issues with doing this, which I am sure someone has worked through before:
- I don't know what platform the user is on (Mac or Windows or Linux) so I can't just make a self-extracting .exe file and assume that will work. I suppose I will need to ask. (I am already asking for a password.)
- My web site is running on Linux, and I suspect that most programs that produce self-extracting encrypted .exe files expect to be run (to make the .exe) on a Windows machine. I suppose I could set up a virtual machine running Windows, and have my Linux server send that virtual machine a request (and the data) to make the .exe, but that sounds complicated.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
ZIP 加密是否垃圾的争议由来已久（请参阅此处 ）。 ZIP 加密的主要问题是，尽管它使用 128 位 AES 密码，但它仍然需要用户输入密码。攻击者已经确定了 ZIP 程序如何从密码生成密钥，因此当用户输入的密码包含低熵（即简单密码）时，就可以很容易地暴力破解密钥并打开文件。如果您分配一个大且非常随机的密码，则被认为非常安全。
The ZIP encryption being rubbish controversy was from a long time ago (see here). The main issue with ZIP encryption is that although it uses a 128 bit AES cypher it still requires a password from the user. Attackers have already determined how the ZIP program generates a key from the password so when a user entered password contains low entropy (i.e. a simple password) then it becomes very easy to brute force the key and open the file. If you assign a large very random password it is considered very secure.