Data Encryption | ZIP/390 Multi-Platform
Stacks Image 15031
AES Encryption
AES is the Advanced Encryption Standard, which is the result of a three-year competition sponsored by the U.S. Governments's National Institute of Standards (NIST). This encryption method, also known as Rijndael, has been adopted by NIST as a Federal Information Processing Standard. ZIP/390 supports AES encryption in three different strengths: 128-bit AES, 192-bit and 256-bit AES. These numbers refer to the size of the encryption keys that are used to encrypt the data. 256-bit AES is stronger than 192-bit and 128-bit AES, but each of them can provide significantly greater security than the standard Zip 2.0 method described below. An advantage of 128-bit AES is that it is slightly faster than 256-bit AES, that is, it takes less time to encrypt or decrypt a file.

The security of your data depends not only on the strength of the encryption method but also on the strength of your password, including factors such as length and composition of the password and the measures you take to ensure that your password is not disclosed to unauthorized third parties.
Standard Zip 2.0 Encryption
The old Zip 2.0 encryption format is known to be relatively weak, and cannot be expected to provide protection from individuals with access to specialized password recovery tools. If you have important security requirements for your data, ZIP/390's AES encryption, described above, should be used. In fact, data security regulations state that if data is encrypted, it must be strong encrypted.

The only advantage of Zip 2.0 encryption over the more secure AES encryption is that it is supported by most Zip file utilities, including earlier versions. Files that you encrypt using this technique can be extracted by anyone who knows the correct password and has access to almost any Zip file utility.
OpenPGP Encryption
ZIP/390 MP's support of GnuPG commands and parameters and ZIP/390 MP's application integration features make it easy to integrate OpenPGP functionality into ZIP/390 native and real-time cross-platform processes. GnuPG (GPG) is a complete and free implementation of the OpenPGP standard (also known as PGP). GnuPG allows users to encrypt and sign files, features a versatile key management system as well as access modules for all kinda of public key directories.

Application of ZIP/390's GPG Integration: