zip password security

Believe it or not, I think I have some old BlitzBasic? code that implements this..! (At least for decompression)

I'm not sure this is a good idea. I never bothered with the encryption sections of the zip spec, but I know from practical experience that zip password-protection is utterly worthless. Any archive can be cracked open in a few minutes.

I don't think we should support something that gives users the belief that their data is secure when really it isn't at all.

I vaguely remember something mentioned AES in the spec, though. If that's distinct from the conventional password security, it might be OK. But I don't have the time right now to address the existing problems with the zip modules, let alone implementing encryption!

I'm currently going over the ZIP spec again, and thought I'd give an update of my position on this:

1. We absolutely should not implement "traditional" ZIP encryption. As stated previously, it is trivially broken on today's computers. Traditional ZIP decryption would be a reasonable enhancement, but a very low-priority one.

2. We more than likely should not support "strong" ZIP encryption or decryption. According to APPNOTE, PKWARE holds patents on the strong encryption system used in ZIP.

Marking WONTFIX for previously stated reasons.