Re: [cti-cybox] File/Artifact Encryption & Archive Properties

[John-Mark Gurney <jmg@newcontext.com>]

Trey Darley wrote this message on Wed, Oct 04, 2017 at 14:43 +0000:
> On 28.09.2017 17:17:01, John-Mark Gurney wrote:
> > Jason Keirstead wrote this message on Mon, Sep 25, 2017 at 10:43 -0300:
> > > ... But that is the problem I am pointing out.
> > > 
> > > Having a blob of bytes and knowing it is encrypted with AES-256 is
> > > not sufficient to open it. I have to know that it is encrypted
> > > using Zip encryption with AES-256, or 7zip encryption with
> > > AES-256, as these are different things.
> > 
> 
> Hey, y'all -
> 
> If you put `mime_type: "x-7z-compressed"` and `encryption_algorithm:
> "AES-256"` on the example Artifact being discussed, what's the
> problem?

What do you specify if you encrypt the 7z archive w/ AES-256, but not
use 7z's archive encryption?  How do you tell the difference between
the two?

-- 
John-Mark