{"id":"https://openalex.org/W2002355725","doi":"https://doi.org/10.1145/1030083.1030095","title":"Attacking and repairing the winZip encryption scheme","display_name":"Attacking and repairing the winZip encryption scheme","publication_year":2004,"publication_date":"2004-10-25","ids":{"openalex":"https://openalex.org/W2002355725","doi":"https://doi.org/10.1145/1030083.1030095","mag":"2002355725"},"language":"en","primary_location":{"id":"doi:10.1145/1030083.1030095","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1030083.1030095","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026130910","display_name":"Tadayoshi Kohno","orcid":"https://orcid.org/0000-0002-4899-226X"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California, San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Tadayoshi Kohno","raw_affiliation_strings":["University of California at San Diego"],"affiliations":[{"raw_affiliation_string":"University of California at San Diego","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5026130910"],"corresponding_institution_ids":["https://openalex.org/I36258959"],"apc_list":null,"apc_paid":null,"fwci":3.1479,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":{"value":0.91800425,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"72","last_page":"81"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.8520269393920898},{"id":"https://openalex.org/keywords/56-bit-encryption","display_name":"56-bit encryption","score":0.7239069938659668},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7179583311080933},{"id":"https://openalex.org/keywords/40-bit-encryption","display_name":"40-bit encryption","score":0.6519841551780701},{"id":"https://openalex.org/keywords/on-the-fly-encryption","display_name":"On-the-fly encryption","score":0.6048961281776428},{"id":"https://openalex.org/keywords/multiple-encryption","display_name":"Multiple encryption","score":0.5795333385467529},{"id":"https://openalex.org/keywords/probabilistic-encryption","display_name":"Probabilistic encryption","score":0.546276330947876},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5433881282806396},{"id":"https://openalex.org/keywords/filesystem-level-encryption","display_name":"Filesystem-level encryption","score":0.49484914541244507},{"id":"https://openalex.org/keywords/disk-encryption","display_name":"Disk encryption","score":0.47265899181365967},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.45464855432510376},{"id":"https://openalex.org/keywords/encryption-software","display_name":"Encryption software","score":0.44293391704559326},{"id":"https://openalex.org/keywords/advanced-encryption-standard","display_name":"Advanced Encryption Standard","score":0.4379122257232666},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07692500948905945}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.8520269393920898},{"id":"https://openalex.org/C46905813","wikidata":"https://www.wikidata.org/wiki/Q4640678","display_name":"56-bit encryption","level":4,"score":0.7239069938659668},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7179583311080933},{"id":"https://openalex.org/C158215988","wikidata":"https://www.wikidata.org/wiki/Q4637271","display_name":"40-bit encryption","level":3,"score":0.6519841551780701},{"id":"https://openalex.org/C147977885","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"On-the-fly encryption","level":3,"score":0.6048961281776428},{"id":"https://openalex.org/C184685986","wikidata":"https://www.wikidata.org/wiki/Q3505167","display_name":"Multiple encryption","level":3,"score":0.5795333385467529},{"id":"https://openalex.org/C54569210","wikidata":"https://www.wikidata.org/wiki/Q7246854","display_name":"Probabilistic encryption","level":3,"score":0.546276330947876},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5433881282806396},{"id":"https://openalex.org/C18319499","wikidata":"https://www.wikidata.org/wiki/Q5448402","display_name":"Filesystem-level encryption","level":4,"score":0.49484914541244507},{"id":"https://openalex.org/C9368797","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"Disk encryption","level":4,"score":0.47265899181365967},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.45464855432510376},{"id":"https://openalex.org/C158104961","wikidata":"https://www.wikidata.org/wiki/Q5375622","display_name":"Encryption software","level":5,"score":0.44293391704559326},{"id":"https://openalex.org/C94520183","wikidata":"https://www.wikidata.org/wiki/Q190746","display_name":"Advanced Encryption Standard","level":3,"score":0.4379122257232666},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07692500948905945},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1030083.1030095","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1030083.1030095","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th ACM conference on Computer and communications security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.103.4058","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.103.4058","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.washington.edu/homes/yoshi/papers/WinZip/winzip.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320333566","display_name":"National Defense Science and Engineering Graduate","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W156706870","https://openalex.org/W189766157","https://openalex.org/W1551910192","https://openalex.org/W1571203384","https://openalex.org/W1572300106","https://openalex.org/W1656028867","https://openalex.org/W1697947684","https://openalex.org/W1746848557","https://openalex.org/W1892002809","https://openalex.org/W1925495923","https://openalex.org/W1964776377","https://openalex.org/W1996182770","https://openalex.org/W2072994259","https://openalex.org/W2104578476","https://openalex.org/W2153281696","https://openalex.org/W2165214731","https://openalex.org/W2504194767","https://openalex.org/W2561675875","https://openalex.org/W2602645338","https://openalex.org/W4285719527","https://openalex.org/W6632109726","https://openalex.org/W6669086962"],"related_works":["https://openalex.org/W2381892741","https://openalex.org/W2111426419","https://openalex.org/W2376666149","https://openalex.org/W2188276378","https://openalex.org/W2396533199","https://openalex.org/W2144246620","https://openalex.org/W4365503042","https://openalex.org/W2339830228","https://openalex.org/W4308992061","https://openalex.org/W2531713633"],"abstract_inverted_index":{"WinZip":[0,55,83],"is":[1,15,62],"a":[2,50,89],"popular":[3],"compression":[4],"utility":[5],"for":[6],"Microsoft":[7],"Windows":[8],"computers,":[9],"the":[10,53,80,103],"latest":[11],"version":[12,41],"of":[13,72,79,105],"which":[14],"advertised":[16],"as":[17],"having":[18],"\"easy-to-use":[19],"AES":[20],"encryption":[21,34,56,96],"to":[22,87],"protect":[23],"your":[24],"sensitive":[25],"data.\"":[26],"We":[27,43],"exhibit":[28],"several":[29],"attacks":[30,74,100],"against":[31],"WinZip's":[32],"new":[33],"method,":[35],"dubbed":[36],"\"AE-2\"":[37],"or":[38],"\"Advanced":[39],"Encryption,":[40],"two.\"":[42],"then":[44],"discuss":[45],"secure":[46,59,108],"alternatives.":[47],"Since":[48],"at":[49],"high":[51],"level":[52],"underlying":[54],"method":[57,97],"appears":[58],"(the":[60],"core":[61],"exactly":[63],"Encrypt-then-Authenticate":[64],"using":[65],"AES-CTR":[66],"and":[67,69],"HMAC-SHA1),":[68],"since":[70],"one":[71],"our":[73,99],"was":[75],"made":[76],"possible":[77],"because":[78],"way":[81],"that":[82],"Computing,":[84],"Inc.":[85],"decided":[86],"fix":[88],"different":[90],"security":[91],"problem":[92],"with":[93],"its":[94],"previous":[95],"AE-1,":[98],"further":[101],"underscore":[102],"subtlety":[104],"designing":[106],"cryptographically":[107],"software.":[109]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":2},{"year":2012,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
