title: Looking for archive supporting Java and strong encryption
body: <p>I am looking for a "standard" archiver format (ZIP, 7ZIP, etc.) that is supported by a pure Java library and has strong (AES-128) encryption.</p>
  
  <p>I need a format that people can decrypt using off-the-shelf software for Windows and OsX.</p>
  
  <p>My understanding is that ZIP encryption prior to version PKZIP 9.0 (Zip 2.0) was very weak, and that PKWARE has never published the AES-256 file version.</p>
  
  <p>The format need only support secret-key encryption (public-key is not required or desired).</p>
  
  <p>I can't use BouncyCastle Open-PGP because their JAR files must be signed with their key and we need to also sign with our code-signing key for Java Web Start. Some of our customers are running old builds of Java 6 (&lt; 14) and can't upgrade. Builds of Java 6 prior to 14 did not support signing with multiple keys.</p>