Does anyone know if the Legacy (Zip 2.0) requires same password to encrypt and decrypt? Or is the password hashed so there are multiple possible passwords that can decrypt the same content.
Because I remember that I used some .zip password breaking tool in summer of 2004 to decrypt one tutorial video. The tool gave a password (something like dabngrgj3) and it worked for that tutorial video. But it didn't work for other tutorial video .zip packages in that same site.
There is no hash. The zipping process at a high level works as follows ...
1) File(s) are compressed and a CRC32 is generated.The Checksum is placed in the header.
2) The file body is encrypted but the CRC32 is not.
3) A user tries to unzip and supplies a password. Irrespective of whether the password is correct or not the zip is decompressed and the Checksum is compared against the value in the header.
So there is no separate password for encryption/decryption like you ask.
Because I remember that I used some .zip password breaking tool in summer of 2004 to decrypt one tutorial video. The tool gave a password (something like dabngrgj3) and it worked for that tutorial video. But it didn't work for other tutorial video .zip packages in that same site.