Skip to content

Add XChaCha20 algorithm, using a 64-bit counter to support large files.#215

Open
fzxx wants to merge 5 commits into
ip7z:mainfrom
fzxx:main
Open

Add XChaCha20 algorithm, using a 64-bit counter to support large files.#215
fzxx wants to merge 5 commits into
ip7z:mainfrom
fzxx:main

Conversation

@fzxx
Copy link
Copy Markdown

@fzxx fzxx commented May 11, 2026

  • The key derivation method is consistent with AES-256.
  • The registry records the XChaCha20 option.
  • Use a 64-bit counter to support very large files.
# AES-256 encryption + encrypt filenames
7z a -ppassword -mhe=on archive.7z

# XChaCha20 encryption + encrypt filenames
7z a -ppassword -mhe=on -mem=xchacha20 archive.7z

@fzxx
Copy link
Copy Markdown
Author

fzxx commented May 11, 2026

I noticed that the 7z password derivation does not use a random salt. This is a security issue, and I wonder why. If it's because of speed, I suggest using the standard PBKDF2, which also makes it easy to add a salt. If anyone has a need for MAC, I can also add XChaCha20-Poly1305. @ip7z

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant