To check which encryption algorithm is used you can use 7z: $ 7z l -slt archive.zip | grep Method It is also possible if the archive use ZipCrypto Deflate but it is harder since files are compressed before encryption. Older encrypted ZIP archives can suffer from Biham and Kocher plaintext attack if they use the ZipCrypto Store encryption method. Note: This article is also available in french 🇫🇷. This is because the Microsoft Windows operating system does not allow to generate (without installing a third party software) encrypted Zip files and can only decrypt Zip archives using ZipCrypto, which makes this old and depreciated encryption method still used today. While most of the software use only AES encrypted ZIPs (or use AES encryption by default), some software still generate ZipCrypto encrypted archives by default. Using classic wordlist attack on other encrypted archives: Zip archives (WinZip) using encryption method AES (128,192,256), 7-Zip and RAR.

Using Biham and Kocher plaintext attack on Zip archives (PKZIP) using encryption method ZipCrypto Store (can be extended to ZipCrypto Deflate).In this article we’ll see how to crack encrypted archive protected with a password:

Win zip 7