Processing pipeline
- EnumerateIdentify the format and list the entries before extracting.
- ValidateCheck paths, conflicts and operation limits.
- StageProcess files in a staging directory under process supervision.
- CommitVerify the output and move accepted files to the destination.
When extraction needs tighter control
File Explorer handles common archives supported by Windows. KK-RAR builds on 7-Zip with entry checks before writing, extraction into a staging folder, and output validation.
The separate secure container offers authenticated encryption for sensitive data. Choose a strong password and share it only with recipients who have compatible software.
Archive engine and write boundary
KK-RAR ships with the 7-Zip engine. The UI and command line share archive operations. Extraction screens entries before writing, supervises the process and checks the staged result. On NTFS it attempts to propagate Mark of the Web to extracted files where applicable.
Reading and creating formats depend on the engine. KK-RAR can open and extract RAR; use a creation format offered by the app, such as 7z or ZIP. A successful extraction does not establish that the extracted contents are safe to execute.
Encryption and integrity
The separate secure container format v1 uses AES-256-GCM with PBKDF2-HMAC-SHA-256 at 600,000 iterations and a random salt and nonce. The app authenticates data before accepting the result. This describes the secure container, not the encryption behavior of every archive format.
Weak passwords still make guessing cheaper. The distribution verifies resources and licenses according to the edition policy. Trial activation uses a separate KK-SOFT signature while commercial update channels remain edition-specific.
Editions
| Edition | Current installer | Channel |
|---|---|---|
| Annual 3.1.0 | Windows x64; commercial MSI. | Annual channel with entitlement-based update conditions. |
| Lifetime 3.0.0 | Windows x64; commercial MSI. | Separate Lifetime channel; the trial EXE still expires after 30 days. |
Verification protocol
- Path safety
Exercise absolute paths, parent-directory entries, Windows device names and collisions. Confirm no output escapes the destination.
- Container integrity
Modify a byte in a test container. Confirm authentication fails and unverified output is not published.
- Performance
Record compression time, size and peak memory for small files, already compressed data and large files. Record the engine, format and level.
Evidence and limits
This architecture was reviewed against the archive operation, process supervision, secure container and release verification modules. Trial payloads and edition configurations were verified. No comparative compression numbers or independent cryptographic audit have been published.