Winzip and Due Diligence

[Matthew Webster <awakenings () mindspring com>]

Folks,

   I was poking around on Google and noticed there are some tools for cracking WinZip passwords.  Does anyone know 
whether or not these tools also work on AES-256 encryption.  My question is academic from a due diligence standpoint.  
Technically WinZip is FIPS compliant, but if it can be cracked easily, is this something we should really be 
recommending?

Thanks,

Matt



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------