What's New in SecureZIP
®
Server
SecureZIP Server
contains the following changes and new
features, listed by release:
Version 14
- Create and Extract OpenPGP files. Some organizations use encryption tools based on the OpenPGP standard, rather than X.509. SecureZIP
extracts and decrypts files that comply with the OpenPGP standard, RFC
4880. SecureZIP can also create and sign OpenPGP-compliant files. You
can also use OpenPGP keys to encrypt and decrypt data within ZIP
archives.
- Message Digest Display. Display
the hash value (also called a "message digest") and CRC checksum for a
file using the messagedigest command.
This feature will help meet ONC Meaningful Use requirements.
- Digital Time Stamping for signed archives. When
you need to establish not only who is responsible for a file or set of
files, but also when it was created, digital time stamping is a
critical service. With SecureZIP’s support for digital time-stamping,
you can add a timestamp to any signed archive. SecureZIP will also
verify existing time stamps.
- FastAES. Support for Intel®
processors that implement AES-NI. Other processors may
also gain from using a more optimized Advanced Encryption Standard
algorithm. FastAES is not available when using FIPS 140 mode.
- Installer for Ubuntu Linux. SecureZIP Server now runs on Ubuntu Linux, along with Red Hat Enterprise Linux and SUSE Linux Enterprise Server.
- Extract 7-Zip files and CD/DVD Data Image files. SecureZIP now extracts 7-Zip and three types of files typically associated with CD and DVD data images: CDR, ISO, and IMG.
Version 12, Maintenance Release 5
-
Extract WavPack files within ZIP archives.
Open audio files compressed with this algorithm.
-
Extract files from archives created on IBM z/OS using hardware compression tools.
SecureZIP Server can extract these files without special hardware.
-
Changes in FIPS Mode.
With FIPS mode selected, files must be signed with the SHA-256
algorithm (or higher). Also will not extract files encrypted with
112-bit (two-key) 3DES. These algorithms are still available outside
FIPS mode.
Version 12, Maintenance Release 4
-
Full support for opening and extracting files with the .zipx extension.
SecureZIP will work with ZIP archives with the *.zipx extension.
-
Improved retrieval of digital certificates from LDAP providers.
Status messages are reported better when a Lightweight Directory Access
Protocol (LDAP) query fails to return any certificates. You can now
retrieve digital signatures from Korean LDAP providers.
Version 12
-
Version command updated.
Theversion
command has a new product
suboption and now lists major, minor, and step version numbers of theprogram
and lists major and minor version numbers and the build
number of the product.
-
.Z archive extraction.
SecureZIP Server can now
extract .Z archives.
-
Extract path substitution.
The substitution
option can now be used withextract
to extract multiple archives each into its own
directory.
-
LZMA and PPMd compression.
New lzma
and ppmd
options are added to support LZMA and PPMd
compression methods.
-
New PKCertTool options.
New options are added to
make it easier to view and select specific types of certificates.
-
Option to specify user (UID) and/or group (GID) for archived
files.
A new owner
option enables a user to set
UID and/or GID when adding files to an archive. The super user can use
the option when extracting files as well.
-
Options to support application integration.
Newstream
and rename
options make it
possible to stream data to an archive from STDIN or special files such as
named pipes and UNIX sockets. Data can also be streamed to STDOUT or
special files on extraction.
-
ZDW extraction support.
Thetranslate
option has new suboptions for EBCDIC
line-ending translation to support extraction of mainframe data
compressed using the SecureZIP for z/OS
Zip Descriptor Word
(ZDW) option to preserve variable length records.
-
FIPS 140 compliant SFX engines.
An SFX
(self-extracting) archive created in FIPS mode now remembers that it is a
FIPS SFX and applies FIPS-mode constraints when its files are
extracted.
-
Path performance improvements.
Thedirectories
option now does pattern-matching on file
names in a way that's faster and more consistent with releases prior to
version 8.4. When processing a file specification that includes a path
component, SecureZIP looks only within the specified folder for the
pattern to match. Versions 8.4 - 8.7 look for the entire file
specification in all subfolders of the current folder. To perform an
8.4-style search, prefix the file specification with an asterisk
"*".
Version 8 Maintenance Release 7
-
FIPS mode option.
A new fipsmode
option causes SecureZIP to use only FIPS-validated algorithms to encrypt
or decrypt files or to apply or authenticate signatures. FIPS
is an abbreviation for Federal Information Processing Standards, a
set of standards for information processing in federal agencies.
-
SHA-2 hashing algorithms.
SecureZIP adds support for
SHA-2 hashing algorithms SHA-256, SHA-384 and SHA-512. Each is stronger
than the already supported SHA-1. Federal agencies are to completely
phase out use of SHA-1 after 2010 for digital signatures and
encryption.
-
List hashing algorithms.
A new ListHashAlgorithms
command lists hashing
algorithms that SecureZIP can use on your system to apply or authenticate
signatures. Used with the fipsmode
option on, the command lists only FIPS-validated algorithms.
Version 8 Maintenance Release 6
-
Preserve international characters in file names and
comments.
A new utf8
option enables UTF-8
characters in file names and file comments to be correctly displayed when
an archive's contents are viewed or extracted in compatible non-UTF-8
locales.
Version 8 Maintenance Release 5
-
Streaming archive creation/extraction.
Theadd
command can write archives to special files such as
named pipes and (UNIX) domain sockets. Similarly, theextract, test, andview
commands can read archives from these same sources
and from STDIN.
-
Trusted extraction.
A newverifySigner
option constrains PKZIP to extract only
archives signed using a certificate specified with the option. The option
protects against being fooled by a valid signature made using a different
certificate from the one that actually belongs to your expected
correspondent.
-
Embed a timestamp in archive names.
A newsubstitution
option works with the add
command to embed a timestamp in the name of a new or updated archive. You
construct the timestamp using tokens for such elements as day, month,
year. The tokens are replaced by values when the command line is
run.
-
Wipe option renamed shred.
Thewipe
option for securely overwriting deleted files is
renamed shred
and has a new dod5220
sub-option that overwrites files three times, to the DOD 5220.22-M
specification.
-
Set timeout period for working with archives on special files
(UNIX).
A new timeout
option enables you to set
a number of seconds for PKZIP to wait for another process to send or be
ready to receive on a named pipe, socket, or block device.
Version 8 Maintenance Release 4
-
Contingency keys.
An administrator can now
automatically include contingent recipient keys in the recipient list
whenever PKZIP does strong encryption. Such contingency keys
ensure that an organization does not lose access to its encrypted data.Note:
Users upgrading to the current version of
SecureZIP Server must get new license keys to activate the contingency
key feature.
-
Create archives to STDOUT.
The add
command can now output archives to STDOUT instead of to a file.
-
Translate line endings when adding.
Thetranslate
option can now be used when adding to an
archive as well as when extracting, to translate line endings for a
specified platform.
-
Create multiple, respective archives.
A newarchiveeach
option creates and names a separate archive
for each of multiple files specified in a single command line.
-
Behavior change for newer andolder.
These options now behave as in version 6.0 when
using a time unit of days: They now measure the interval (for example,
five days) from the beginning of the current day (midnight) instead of
from the current time.
-
Must run as root to enter license keys.
Now only the
superuser can run the enterlicensekey
command. Licenses
are no longer read in users' home directories.
-
Embedded wildcard characters.
PKZIP now handles
wildcard characters embedded in filenames.
-
Behavior change for configuring silent option.
Configuring the silent
option no longer
produces an interactive confirmation message. The change makes it easier
to configure silent
in scripts.
-
New silent suboption for configuration command.
The configuration
command now has asilent
suboption to suppress default display of the list
of configuration settings when the command is used.
Version 8 Maintenance Release 3
-
New crl option.
Warns if a certificate appears on an
accessible list of revoked certificates.
-
PKCertTool enhanced.
The PKCertTool utility for
setting up certificate stores on UNIX/Linux systems has newexport
and view
commands. Other
commands have a new option for working with certificate revocation
lists.
-
New strict option.
Uses only certificates that are
valid and designated for the purpose at hand (encryption or
signing).
-
Listcertificates enhanced.
The command now lists
certificates in a specified store.
-
TAR file processing.
Several problems with
processing TAR files corrected.
Version 8 Maintenance Release 1
-
Bug fixes:
-
-
PKZIP could not extract some archives containing
encrypted file names
-
Problem with display of language strings could result
in incorrect message display or crash
-
PKZIP tried to create an archive whenpreview
option used with add
command
-
Was possible to create self-extracting (SFX) archives
having smaller segments than target platform supported
-
On Windows 98, the log
option could
crash the program
Version 8
-
SNMP traps.
You can use a newsnmpTrapHost
option to specify an SNMP host to receive
SNMP traps. SecureZIP can send traps to report application startup,
shutdown, error and warning conditions, or results of normal
operations.
-
Set execution priority.
A newpriority
option enables you to change the priority of
execution of SecureZIP relative to other applications.
-
Date/time display format.
New sub-options make thelocale
option easier to configure and use.
-
Certificate store facility.
A utility program
PKCertTool is supplied free for use on UNIX/Linux to set up stores for
digital certificates for SecureZIP Server to use. The program creates and
maintains certificate store databases and copies your certificates into
the stores.
-
FTP integration.
A new ftp
option
transfers a new or existing archive to another system by FTP.
-
E-mail integration.
New mail…
options transfer a new or existing archive to other people by email.
-
New options for self-extracting ZIP files.
Several
new options—SFXDestination, SFXDirectories, SFXOverwrite, and
SFXUIType— give you more control over the type and behavior of
self-extracting (SFX) ZIP files you create. (Requires the optional
Enhanced Data Processing Module.)
-
Antivirus integration.
New avscan
and avargs
options enable you to run an external
antivirus program when you extract files to scan for viruses in the
destination folder and its subfolders.
-
Syslog integration.
New optionsErrorLog, JobID, Log,
and LogOptions
enable you to log records of warnings,
errors, and normal operations to STDOUT, STDERR, the native system
logging facility (syslog) for your platform, or to a file.
-
Encrypt file names.
A new cd
option
can be used to encrypt file names in an archive. The option strongly
encrypts an archive's central directory, where file names and virtually
all other metadata about the archive is stored.
-
Alternate configuration file.
A newaltconfig
option enables you to use an alternate
configuration file for special purposes. Specify the file in a command
line to temporarily apply special default command or option settings for
the current command.
-
Movearchive option.
A newmovearchive
option deletes unwanted intermediate
archives when you encode an archive to a different type—for
example, a TAR archive to a GZIP archive—or transfer an archive by
FTP.
PKWARE, the PKWARE logo, the "Zipper Design", PKZIP, PKUNZIP,
PKSFX, PKLITE, PKLITE Professional, SecureZIP, and PKWARE Data Compression
Library are registered trademarks of PKWARE, Inc. PKZFIND, PKZOOM,
Deflate64, EasySFX, AutoSFX, RegularSFX, and ZIP2EXE are trademarks of
PKWARE, Inc. Microsoft, Outlook, Windows, and Windows NT are registered
trademarks or trademarks of Microsoft Corporation. Trademarks of other
companies mentioned appear for identification purposes only and are
property of their respective companies.