01-22-2020, 06:14 PM
So usually anything encrypted like this has two bits. Firstly, the encryption password, e.g. "fubar", needs to be turned into an encryption key suitable for AES. This uses a Key Derivation Function, such as PBKDF2 ( https://en.wikipedia.org/wiki/PBKDF2 ) which can definitely be based around SHA256, but is different to a straight sha256("fubar").
The result of PBKDF2-SHA256 ("fubar") is a key which is used for the encryption or decryption with AES.
I haven't looked at 7-zip in particular, so I don't the exact way it does it, but in general the password needs to be turned into a key before the encryption.
The result of PBKDF2-SHA256 ("fubar") is a key which is used for the encryption or decryption with AES.
I haven't looked at 7-zip in particular, so I don't the exact way it does it, but in general the password needs to be turned into a key before the encryption.