@zip.js/zip.js 2.8.43 → 2.8.45

package/dist/zip-fs-core-external.js

@@ -62,6 +62,8 @@ const EXTRAFIELD_TYPE_UNICODE_COMMENT = 0x6375;
 const EXTRAFIELD_TYPE_USDZ = 0x1986;
 const EXTRAFIELD_TYPE_INFOZIP = 0x7875;
 const EXTRAFIELD_TYPE_UNIX = 0x7855;
+const EXTRAFIELD_TYPE_UNIX_TYPE1 = 0x5855;
+const EXTRAFIELD_TYPE_PKWARE_UNIX = 0x000d;
 
 const BITFLAG_ENCRYPTED = 0b1;
 const BITFLAG_LEVEL = 0b0110;
@@ -1396,6 +1398,7 @@ const GET_RANDOM_VALUES_SUPPORTED = typeof crypto != UNDEFINED_TYPE && typeof cr
 
 const ERR_INVALID_PASSWORD = "Invalid password";
 const ERR_INVALID_SIGNATURE = "Invalid signature";
+const ERR_INVALID_AUTHENTICATION_CODE = ERR_INVALID_SIGNATURE;
 const ERR_ABORT_CHECK_PASSWORD = "zipjs-abort-check-password";
 const ERR_UNSUPPORTED_CRYPTO_API = "Crypto API not supported";
 
@@ -1446,7 +1449,7 @@ const DERIVED_BITS_ALGORITHM = Object.assign({ iterations: 1000, hash: { name: H
 const DERIVED_BITS_USAGE = ["deriveBits"];
 const SALT_LENGTH = [8, 12, 16];
 const KEY_LENGTH = [16, 24, 32];
-const SIGNATURE_LENGTH = 10;
+const AUTHENTICATION_CODE_LENGTH = 10;
 const COUNTER_DEFAULT_VALUE = [0, 0, 0, 0];
 // deno-lint-ignore valid-typeof
 const CRYPTO_API_SUPPORTED = typeof crypto != UNDEFINED_TYPE;
@@ -1462,7 +1465,7 @@ let DERIVE_BITS_SUPPORTED = CRYPTO_API_SUPPORTED && SUBTLE_API_SUPPORTED && type
 
 class AESDecryptionStream extends TransformStream {
 
-	constructor({ password, rawPassword, encryptionStrength, checkPasswordOnly }) {
+	constructor({ password, rawPassword, encryptionStrength, checkPasswordOnly, checkAuthenticationCode = true }) {
 		super({
 			start() {
 				initAesCrypto(this, password, rawPassword, encryptionStrength);
@@ -1486,8 +1489,8 @@ class AESDecryptionStream extends TransformStream {
 				} else {
 					await ready;
 				}
-				const output = new Uint8Array(chunk.length - SIGNATURE_LENGTH - ((chunk.length - SIGNATURE_LENGTH) % BLOCK_LENGTH));
-				controller.enqueue(append(aesCrypto, chunk, output, 0, SIGNATURE_LENGTH, true));
+				const output = new Uint8Array(chunk.length - AUTHENTICATION_CODE_LENGTH - ((chunk.length - AUTHENTICATION_CODE_LENGTH) % BLOCK_LENGTH));
+				controller.enqueue(append(aesCrypto, chunk, output, 0, AUTHENTICATION_CODE_LENGTH, true));
 			},
 			async flush(controller) {
 				const {
@@ -1498,8 +1501,8 @@ class AESDecryptionStream extends TransformStream {
 				} = this;
 				if (hmac && ctr) {
 					await ready;
-					const chunkToDecrypt = subarray(pending, 0, pending.length - SIGNATURE_LENGTH);
-					const originalSignature = subarray(pending, pending.length - SIGNATURE_LENGTH);
+					const chunkToDecrypt = subarray(pending, 0, pending.length - AUTHENTICATION_CODE_LENGTH);
+					const originalAuthenticationCode = subarray(pending, pending.length - AUTHENTICATION_CODE_LENGTH);
 					let decryptedChunkArray = EMPTY_UINT8_ARRAY;
 					if (chunkToDecrypt.length) {
 						const encryptedChunk = toBits(codecBytes, chunkToDecrypt);
@@ -1507,13 +1510,13 @@ class AESDecryptionStream extends TransformStream {
 						const decryptedChunk = ctr.update(encryptedChunk);
 						decryptedChunkArray = fromBits(codecBytes, decryptedChunk);
 					}
-					const signature = subarray(fromBits(codecBytes, hmac.digest()), 0, SIGNATURE_LENGTH);
-					let invalidSignature = pending.length < SIGNATURE_LENGTH ? 1 : 0;
-					for (let indexSignature = 0; indexSignature < SIGNATURE_LENGTH; indexSignature++) {
-						invalidSignature |= signature[indexSignature] ^ originalSignature[indexSignature];
+					const authenticationCode = subarray(fromBits(codecBytes, hmac.digest()), 0, AUTHENTICATION_CODE_LENGTH);
+					let invalidAuthenticationCode = pending.length < AUTHENTICATION_CODE_LENGTH ? 1 : 0;
+					for (let indexByte = 0; indexByte < AUTHENTICATION_CODE_LENGTH; indexByte++) {
+						invalidAuthenticationCode |= authenticationCode[indexByte] ^ originalAuthenticationCode[indexByte];
 					}
-					if (invalidSignature) {
-						throw new Error(ERR_INVALID_SIGNATURE);
+					if (invalidAuthenticationCode && checkAuthenticationCode) {
+						throw new Error(ERR_INVALID_AUTHENTICATION_CODE);
 					}
 					controller.enqueue(decryptedChunkArray);
 				}
@@ -1525,8 +1528,6 @@ class AESDecryptionStream extends TransformStream {
 class AESEncryptionStream extends TransformStream {
 
 	constructor({ password, rawPassword, encryptionStrength }) {
-		// deno-lint-ignore prefer-const
-		let stream;
 		super({
 			start() {
 				initAesCrypto(this, password, rawPassword, encryptionStrength);
@@ -1565,12 +1566,11 @@ class AESEncryptionStream extends TransformStream {
 						hmac.update(encryptedChunk);
 						encryptedChunkArray = fromBits(codecBytes, encryptedChunk);
 					}
-					stream.signature = fromBits(codecBytes, hmac.digest()).slice(0, SIGNATURE_LENGTH);
-					controller.enqueue(concat(encryptedChunkArray, stream.signature));
+					const authenticationCode = fromBits(codecBytes, hmac.digest()).slice(0, AUTHENTICATION_CODE_LENGTH);
+					controller.enqueue(concat(encryptedChunkArray, authenticationCode));
 				}
 			}
 		});
-		stream = this;
 	}
 }
 
@@ -1583,7 +1583,7 @@ function initAesCrypto(aesCrypto, password, rawPassword, encryptionStrength) {
 	});
 }
 
-function append(aesCrypto, input, output, paddingStart, paddingEnd, verifySignature) {
+function append(aesCrypto, input, output, paddingStart, paddingEnd, verifyAuthenticationCode) {
 	const {
 		ctr,
 		hmac,
@@ -1597,11 +1597,11 @@ function append(aesCrypto, input, output, paddingStart, paddingEnd, verifySignat
 	let offset;
 	for (offset = 0; offset <= inputLength - BLOCK_LENGTH; offset += BLOCK_LENGTH) {
 		const inputChunk = toBits(codecBytes, subarray(input, offset, offset + BLOCK_LENGTH));
-		if (verifySignature) {
+		if (verifyAuthenticationCode) {
 			hmac.update(inputChunk);
 		}
 		const outputChunk = ctr.update(inputChunk);
-		if (!verifySignature) {
+		if (!verifyAuthenticationCode) {
 			hmac.update(outputChunk);
 		}
 		output.set(fromBits(codecBytes, outputChunk), offset + paddingStart);
@@ -1951,6 +1951,7 @@ function toCompatibleWritable(writable) {
 
 const ERR_INVALID_UNCOMPRESSED_SIZE = "Invalid uncompressed size";
 const ERR_INVALID_COMPRESSED_DATA = "Invalid compressed data";
+const ERR_INVALID_CRC32 = ERR_INVALID_SIGNATURE;
 const ERR_UNSUPPORTED_COMPRESSION$2 = "Compression method not supported";
 const FORMAT_DEFLATE_RAW = "deflate-raw";
 const FORMAT_DEFLATE64_RAW = "deflate64-raw";
@@ -1964,14 +1965,14 @@ class DeflateStream extends TransformStream {
 
 	constructor(options, { chunkSize, CompressionStreamZlib, CompressionStream }) {
 		super({});
-		const { compressed, encrypted, useCompressionStream, zipCrypto, signed, level, deflate64, format, compressionMethod } = options;
+		const { compressed, encrypted, useCompressionStream, zipCrypto, computeCrc32, level, deflate64, format, compressionMethod } = options;
 		const stream = this;
 		let crc32Stream, encryptionStream, gzipCrc32Stream;
 		let readable = super.readable;
 		const codecStreams = format && getCodecStreams(format);
-		const useGzipCrc32 = signed && compressed && !deflate64 && !codecStreams && (!encrypted || zipCrypto) &&
+		const useGzipCrc32 = computeCrc32 && compressed && !deflate64 && !codecStreams && (!encrypted || zipCrypto) &&
 			Boolean(useCompressionStream && CompressionStream);
-		if ((!encrypted || zipCrypto) && signed && !useGzipCrc32) {
+		if ((!encrypted || zipCrypto) && computeCrc32 && !useGzipCrc32) {
 			crc32Stream = new Crc32Stream();
 			readable = pipeThrough(readable, crc32Stream);
 		}
@@ -2006,14 +2007,9 @@ class DeflateStream extends TransformStream {
 			}
 		}
 		setReadable(stream, readable, () => {
-			let signature;
-			if (encrypted && !zipCrypto) {
-				signature = encryptionStream.signature;
+			if ((!encrypted || zipCrypto) && computeCrc32) {
+				stream.crc32 = useGzipCrc32 ? gzipCrc32Stream.crc32 : new DataView(crc32Stream.value.buffer).getUint32(0);
 			}
-			if ((!encrypted || zipCrypto) && signed) {
-				signature = useGzipCrc32 ? gzipCrc32Stream.signature : new DataView(crc32Stream.value.buffer).getUint32(0);
-			}
-			stream.signature = signature;
 		});
 	}
 }
@@ -2051,7 +2047,7 @@ class GzipToRawDeflateStream extends TransformStream {
 			},
 			flush() {
 				const dataView = getDataView(trailerCandidate);
-				stream.signature = dataView.getUint32(0, true);
+				stream.crc32 = dataView.getUint32(0, true);
 				stream.uncompressedSize = dataView.getUint32(4, true);
 			}
 		});
@@ -2133,7 +2129,7 @@ class InflateStream extends TransformStream {
 
 	constructor(options, { chunkSize, DecompressionStreamZlib, DecompressionStream }) {
 		super({});
-		const { zipCrypto, encrypted, signed, signature, compressed, useCompressionStream, deflate64, format, compressionMethod, rawBitFlag, outputSize } = options;
+		const { zipCrypto, encrypted, checkCrc32, crc32, compressed, useCompressionStream, deflate64, format, compressionMethod, rawBitFlag, outputSize } = options;
 		let crc32Stream, decryptionStream;
 		let readable = super.readable;
 		if (encrypted) {
@@ -2166,15 +2162,15 @@ class InflateStream extends TransformStream {
 			}
 			readable = mapInflateStreamError(readable);
 		}
-		if ((!encrypted || zipCrypto) && signed) {
+		if (checkCrc32) {
 			crc32Stream = new Crc32Stream();
 			readable = pipeThrough(readable, crc32Stream);
 		}
 		setReadable(this, readable, () => {
-			if ((!encrypted || zipCrypto) && signed) {
-				const dataViewSignature = new DataView(crc32Stream.value.buffer);
-				if (signature != dataViewSignature.getUint32(0, false)) {
-					throw new Error(ERR_INVALID_SIGNATURE);
+			if (checkCrc32) {
+				const computedCrc32View = new DataView(crc32Stream.value.buffer);
+				if (crc32 != computedCrc32View.getUint32(0, false)) {
+					throw new Error(ERR_INVALID_CRC32);
 				}
 			}
 		});
@@ -2398,9 +2394,9 @@ class CodecStream extends TransformStream {
 				}
 			},
 			flush() {
-				const { signature } = stream;
+				const { crc32 } = stream;
 				Object.assign(codec, {
-					signature,
+					crc32,
 					inputSize
 				});
 			}
@@ -2703,12 +2699,12 @@ async function runWorker$1({ options, readable, writable, onTaskFinished }, conf
 			.pipeThrough(new ChunkStream(getChunkSize(config)))
 			.pipeTo(writable, { preventClose: true, preventAbort: true });
 		const {
-			signature,
+			crc32,
 			inputSize,
 			outputSize
 		} = codecStream;
 		return {
-			signature,
+			crc32,
 			inputSize,
 			outputSize
 		};
@@ -3069,7 +3065,7 @@ let indexWorker = 0;
 
 async function runWorker(stream, workerOptions) {
 	const { options, config } = workerOptions;
-	const { transferStreams, useWebWorkers, useCompressionStream, compressed, signed, encrypted, format, codecURI } = options;
+	const { transferStreams, useWebWorkers, useCompressionStream, compressed, checkCrc32, computeCrc32, encrypted, format, codecURI } = options;
 	const { workerURI, maxWorkers } = config;
 	if (format) {
 		if (codecURI) {
@@ -3078,7 +3074,7 @@ async function runWorker(stream, workerOptions) {
 		await ensureCodecStreams(format, options.codecURI);
 	}
 	workerOptions.transferStreams = transferStreams || (transferStreams === UNDEFINED_VALUE && config.transferStreams);
-	const streamCopy = !compressed && !signed && !encrypted;
+	const streamCopy = !compressed && !checkCrc32 && !computeCrc32 && !encrypted;
 	const workerSupported = format === UNDEFINED_VALUE || Boolean(options.codecURI);
 	workerOptions.useWebWorkers = !streamCopy && workerSupported && (useWebWorkers || (useWebWorkers === UNDEFINED_VALUE && config.useWebWorkers));
 	workerOptions.workerURI = workerOptions.useWebWorkers && workerURI ? workerURI : UNDEFINED_VALUE;
@@ -4302,9 +4298,12 @@ const PROPERTY_NAME_DIRECTORY = "directory";
 const PROPERTY_NAME_EXECUTABLE = "executable";
 const PROPERTY_NAME_COMPRESSION_METHOD = "compressionMethod";
 const PROPERTY_NAME_SIGNATURE = "signature";
+const PROPERTY_NAME_CRC32 = "crc32";
 const PROPERTY_NAME_EXTRA_FIELD = "extraField";
 const PROPERTY_NAME_EXTRA_FIELD_INFOZIP = "extraFieldInfoZip";
 const PROPERTY_NAME_EXTRA_FIELD_UNIX = "extraFieldUnix";
+const PROPERTY_NAME_EXTRA_FIELD_UNIX_TYPE1 = "extraFieldUnixType1";
+const PROPERTY_NAME_EXTRA_FIELD_PKWARE_UNIX = "extraFieldPkwareUnix";
 const PROPERTY_NAME_UID = "uid";
 const PROPERTY_NAME_GID = "gid";
 const PROPERTY_NAME_UNIX_MODE = "unixMode";
@@ -4321,6 +4320,7 @@ const PROPERTY_NAME_EXTRA_FIELD_UNICODE_COMMENT = "extraFieldUnicodeComment";
 const PROPERTY_NAME_EXTRA_FIELD_AES = "extraFieldAES";
 const PROPERTY_NAME_EXTRA_FIELD_NTFS = "extraFieldNTFS";
 const PROPERTY_NAME_EXTRA_FIELD_EXTENDED_TIMESTAMP = "extraFieldExtendedTimestamp";
+const PROPERTY_NAME_EXTRA_FIELD_USDZ = "extraFieldUSDZ";
 
 const PROPERTY_NAMES = [
 	PROPERTY_NAME_FILENAME,
@@ -4332,6 +4332,7 @@ const PROPERTY_NAMES = [
 	PROPERTY_NAME_COMMENT,
 	PROPERTY_NAME_RAW_COMMENT,
 	PROPERTY_NAME_LAST_ACCESS_DATE,
+	PROPERTY_NAME_RAW_LAST_ACCESS_DATE,
 	PROPERTY_NAME_CREATION_DATE,
 	PROPERTY_NAME_RAW_CREATION_DATE,
 	PROPERTY_NAME_OFFSET,
@@ -4350,9 +4351,12 @@ const PROPERTY_NAMES = [
 	PROPERTY_NAME_EXECUTABLE,
 	PROPERTY_NAME_COMPRESSION_METHOD,
 	PROPERTY_NAME_SIGNATURE,
+	PROPERTY_NAME_CRC32,
 	PROPERTY_NAME_EXTRA_FIELD,
 	PROPERTY_NAME_EXTRA_FIELD_UNIX,
 	PROPERTY_NAME_EXTRA_FIELD_INFOZIP,
+	PROPERTY_NAME_EXTRA_FIELD_UNIX_TYPE1,
+	PROPERTY_NAME_EXTRA_FIELD_PKWARE_UNIX,
 	PROPERTY_NAME_UID,
 	PROPERTY_NAME_GID,
 	PROPERTY_NAME_UNIX_MODE,
@@ -4368,7 +4372,8 @@ const PROPERTY_NAMES = [
 	PROPERTY_NAME_EXTRA_FIELD_UNICODE_COMMENT,
 	PROPERTY_NAME_EXTRA_FIELD_AES,
 	PROPERTY_NAME_EXTRA_FIELD_NTFS,
-	PROPERTY_NAME_EXTRA_FIELD_EXTENDED_TIMESTAMP
+	PROPERTY_NAME_EXTRA_FIELD_EXTENDED_TIMESTAMP,
+	PROPERTY_NAME_EXTRA_FIELD_USDZ
 ];
 
 class Entry {
@@ -4421,6 +4426,8 @@ const OPTION_CHECK_OVERLAPPING_ENTRY_ONLY = "checkOverlappingEntryOnly";
 const OPTION_CHECK_OVERLAPPING_ENTRY = "checkOverlappingEntry";
 const OPTION_CHECK_AMBIGUITY = "checkAmbiguity";
 const OPTION_CHECK_SIGNATURE = "checkSignature";
+const OPTION_CHECK_CRC32 = "checkCrc32";
+const OPTION_CHECK_AUTHENTICATION_CODE = "checkAuthenticationCode";
 const OPTION_USE_WEB_WORKERS = "useWebWorkers";
 const OPTION_USE_COMPRESSION_STREAM = "useCompressionStream";
 const OPTION_TRANSFER_STREAMS = "transferStreams";
@@ -4440,6 +4447,7 @@ const OPTION_ENCODE_TEXT = "encodeText";
 const OPTION_OFFSET = "offset";
 const OPTION_USDZ = "usdz";
 const OPTION_UNIX_EXTRA_FIELD_TYPE = "unixExtraFieldType";
+const OPTION_LOCAL_EXTRA_FIELD = "localExtraField";
 const OPTION_STRICTNESS = "strictness";
 const OPTION_MAX_APPENDED_DATA_SIZE = "maxAppendedDataSize";
 const STRICTNESS_STRICT = "strict";
@@ -4492,6 +4500,7 @@ const CHARSET_UTF8 = "utf-8";
 const PROPERTY_NAME_UTF8_SUFFIX = "UTF8";
 const CHARSET_CP437 = "cp437";
 const BITFLAG_AMBIGUITY_MASK = BITFLAG_ENCRYPTED | BITFLAG_DATA_DESCRIPTOR | BITFLAG_LANG_ENCODING_FLAG;
+const VENDOR_VERSION_AE_1$1 = 1;
 const ZIP64_PROPERTIES = [
 	[PROPERTY_NAME_UNCOMPRESSED_SIZE, MAX_32_BITS],
 	[PROPERTY_NAME_COMPRESSED_SIZE, MAX_32_BITS],
@@ -4884,7 +4893,7 @@ let ZipEntry$1 = class ZipEntry {
 			config,
 			bitFlag,
 			rawBitFlag,
-			signature,
+			crc32,
 			rawLastModDate,
 			uncompressedSize,
 			compressedSize
@@ -4971,6 +4980,11 @@ let ZipEntry$1 = class ZipEntry {
 		if (deflate64) {
 			useCompressionStream = false;
 		}
+		const checkCrc32Option = getOptionValue$1(zipEntry, options, OPTION_CHECK_CRC32);
+		const checkCrc32 = (checkCrc32Option === UNDEFINED_VALUE ?
+			getOptionValue$1(zipEntry, options, OPTION_CHECK_SIGNATURE) :
+			checkCrc32Option) && !passThrough &&
+			(!encrypted || zipCrypto || (extraFieldAES && extraFieldAES.vendorVersion == VENDOR_VERSION_AE_1$1));
 		const workerOptions = {
 			options: {
 				codecType: CODEC_INFLATE,
@@ -4978,10 +4992,11 @@ let ZipEntry$1 = class ZipEntry {
 				rawPassword,
 				zipCrypto,
 				encryptionStrength: extraFieldAES && extraFieldAES.strength,
-				signed: getOptionValue$1(zipEntry, options, OPTION_CHECK_SIGNATURE) && !passThrough,
-				passwordVerification: zipCrypto && (dataDescriptor ? ((rawLastModDate >>> 8) & MAX_8_BITS) : ((signature >>> 24) & MAX_8_BITS)),
+				checkCrc32,
+				checkAuthenticationCode: getOptionValue$1(zipEntry, options, OPTION_CHECK_AUTHENTICATION_CODE),
+				passwordVerification: zipCrypto && (dataDescriptor ? ((rawLastModDate >>> 8) & MAX_8_BITS) : ((crc32 >>> 24) & MAX_8_BITS)),
 				outputSize: passThrough ? compressedSize : uncompressedSize,
-				signature,
+				crc32,
 				compressed: compressionMethod != 0 && !passThrough,
 				encrypted,
 				useWebWorkers: getOptionValue$1(zipEntry, options, OPTION_USE_WEB_WORKERS),
@@ -5003,7 +5018,7 @@ let ZipEntry$1 = class ZipEntry {
 				fileEntry,
 				index,
 				offset: localHeaderOffset,
-				signature,
+				crc32,
 				compressedSize,
 				uncompressedSize,
 				dataOffset,
@@ -5094,6 +5109,7 @@ function readCommonFooter(fileEntry, directory, dataView, offset, localDirectory
 	const compressionMethod = getUint16(dataView, offset + 4);
 	Object.assign(directory, {
 		signature: getUint32(dataView, offset + HEADER_OFFSET_SIGNATURE),
+		crc32: getUint32(dataView, offset + HEADER_OFFSET_SIGNATURE),
 		compressedSize: getUint32(dataView, offset + HEADER_OFFSET_COMPRESSED_SIZE),
 		uncompressedSize: getUint32(dataView, offset + HEADER_OFFSET_UNCOMPRESSED_SIZE)
 	});
@@ -5119,6 +5135,16 @@ function readCommonFooter(fileEntry, directory, dataView, offset, localDirectory
 	} else {
 		directory.compressionMethod = compressionMethod;
 	}
+	const extraFieldPkwareUnix = extraField.get(EXTRAFIELD_TYPE_PKWARE_UNIX);
+	if (extraFieldPkwareUnix) {
+		readExtraFieldUnixDates(extraFieldPkwareUnix, directory);
+		directory.extraFieldPkwareUnix = extraFieldPkwareUnix;
+	}
+	const extraFieldUnixType1 = extraField.get(EXTRAFIELD_TYPE_UNIX_TYPE1);
+	if (extraFieldUnixType1) {
+		readExtraFieldUnixDates(extraFieldUnixType1, directory);
+		directory.extraFieldUnixType1 = extraFieldUnixType1;
+	}
 	const extraFieldNTFS = extraField.get(EXTRAFIELD_TYPE_NTFS);
 	if (extraFieldNTFS) {
 		readExtraFieldNTFS(extraFieldNTFS, directory);
@@ -5168,15 +5194,15 @@ function readExtraFieldUnicode(extraFieldUnicode, propertyName, rawPropertyName,
 		return;
 	}
 	const extraFieldView = getDataView(extraFieldUnicode.data);
-	const crc32 = new Crc32();
-	crc32.append(fileEntry[rawPropertyName]);
-	const dataViewSignature = getDataView(new Uint8Array(4));
-	dataViewSignature.setUint32(0, crc32.get(), true);
-	const signature = getUint32(extraFieldView, 1);
+	const computedCrc32 = new Crc32();
+	computedCrc32.append(fileEntry[rawPropertyName]);
+	const computedCrc32View = getDataView(new Uint8Array(4));
+	computedCrc32View.setUint32(0, computedCrc32.get(), true);
+	const nameCrc32 = getUint32(extraFieldView, 1);
 	Object.assign(extraFieldUnicode, {
 		version: getUint8(extraFieldView, 0),
 		[propertyName]: decodeText(extraFieldUnicode.data.subarray(5)),
-		valid: !fileEntry.bitFlag.languageEncodingFlag && signature == getUint32(dataViewSignature, 0)
+		valid: !fileEntry.bitFlag.languageEncodingFlag && nameCrc32 == getUint32(computedCrc32View, 0)
 	});
 	if (extraFieldUnicode.valid) {
 		directory[propertyName] = extraFieldUnicode[propertyName];
@@ -5195,6 +5221,9 @@ function readExtraFieldAES(extraFieldAES, directory, compressionMethod) {
 		compressionMethod: getUint16(extraFieldView, 5)
 	});
 	directory.compressionMethod = extraFieldAES.compressionMethod;
+	if (extraFieldAES.vendorVersion != VENDOR_VERSION_AE_1$1) {
+		directory.crc32 = UNDEFINED_VALUE;
+	}
 }
 
 function readExtraFieldNTFS(extraFieldNTFS, directory) {
@@ -5213,29 +5242,41 @@ function readExtraFieldNTFS(extraFieldNTFS, directory) {
 	} catch {
 		// ignored
 	}
-	try {
-		if (tag1Data && tag1Data.length == 24) {
-			const tag1View = getDataView(tag1Data);
-			const rawLastModDate = tag1View.getBigUint64(0, true);
-			const rawLastAccessDate = tag1View.getBigUint64(8, true);
-			const rawCreationDate = tag1View.getBigUint64(16, true);
-			Object.assign(extraFieldNTFS, {
-				rawLastModDate,
-				rawLastAccessDate,
-				rawCreationDate
-			});
-			const lastModDate = getDateNTFS(rawLastModDate);
-			const lastAccessDate = getDateNTFS(rawLastAccessDate);
-			const creationDate = getDateNTFS(rawCreationDate);
-			const extraFieldData = { lastModDate, lastAccessDate, creationDate };
-			Object.assign(extraFieldNTFS, extraFieldData);
-			Object.assign(directory, extraFieldData);
-		}
-	} catch {
-		// ignored
+	if (tag1Data && tag1Data.length == 24) {
+		const tag1View = getDataView(tag1Data);
+		const rawLastModDate = tag1View.getBigUint64(0, true);
+		const rawLastAccessDate = tag1View.getBigUint64(8, true);
+		const rawCreationDate = tag1View.getBigUint64(16, true);
+		Object.assign(extraFieldNTFS, {
+			rawLastModDate,
+			rawLastAccessDate,
+			rawCreationDate
+		});
+		const lastModDate = getDateNTFS(rawLastModDate);
+		const lastAccessDate = getDateNTFS(rawLastAccessDate);
+		const creationDate = getDateNTFS(rawCreationDate);
+		const extraFieldData = { lastModDate, lastAccessDate, creationDate };
+		Object.assign(extraFieldNTFS, extraFieldData);
+		Object.assign(directory, extraFieldData);
 	}
 }
 
+function readExtraFieldUnixDates(extraField, directory) {
+	if (extraField.data.length < 8) {
+		return;
+	}
+	const extraFieldView = getDataView(extraField.data);
+	const lastAccessDate = new Date(getUint32(extraFieldView, 0) * 1000);
+	const lastModDate = new Date(getUint32(extraFieldView, 4) * 1000);
+	const extraFieldData = { lastAccessDate, lastModDate };
+	if (extraField.data.length >= 12) {
+		extraFieldData.uid = getUint16(extraFieldView, 8);
+		extraFieldData.gid = getUint16(extraFieldView, 10);
+	}
+	Object.assign(extraField, extraFieldData);
+	Object.assign(directory, extraFieldData);
+}
+
 function readExtraFieldUnix(extraField, directory, isInfoZip) {
 	try {
 		const view = getDataView(extraField.data);
@@ -5314,7 +5355,7 @@ async function detectOverlappingEntry({
 	fileEntry,
 	index,
 	offset,
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	dataOffset,
@@ -5335,7 +5376,7 @@ async function detectOverlappingEntry({
 		const dataDescriptorSignature = dataDescriptorArray.length == dataDescriptorLength + DATA_DESCRIPTOR_RECORD_SIGNATURE_LENGTH &&
 			getUint32(getDataView(dataDescriptorArray), 0) == DATA_DESCRIPTOR_RECORD_SIGNATURE;
 		if (dataDescriptorSignature) {
-			const readSignature = getUint32(getDataView(dataDescriptorArray), 4);
+			const readCrc32 = getUint32(getDataView(dataDescriptorArray), 4);
 			let readCompressedSize;
 			let readUncompressedSize;
 			if (extraFieldZip64) {
@@ -5345,8 +5386,8 @@ async function detectOverlappingEntry({
 				readCompressedSize = getUint32(getDataView(dataDescriptorArray), 8);
 				readUncompressedSize = getUint32(getDataView(dataDescriptorArray), 12);
 			}
-			const matchSignature = (fileEntry.encrypted && !fileEntry.zipCrypto) || readSignature == signature;
-			if (matchSignature &&
+			const matchCrc32 = (fileEntry.encrypted && !fileEntry.zipCrypto) || readCrc32 == crc32;
+			if (matchCrc32 &&
 				readCompressedSize == compressedSize &&
 				readUncompressedSize == uncompressedSize) {
 				dataDescriptorLength += DATA_DESCRIPTOR_RECORD_SIGNATURE_LENGTH;
@@ -5515,11 +5556,11 @@ function checkLocalDirectory(zipEntry, localDirectory, rawLocalFilename) {
 		throwAmbiguousArchive("mismatched local file header (compression method)");
 	}
 	if (!localDirectory.bitFlag.dataDescriptor &&
-		(localDirectory.signature || localDirectory.compressedSize || localDirectory.uncompressedSize) &&
-		(localDirectory.signature != zipEntry.signature ||
+		(localDirectory.crc32 || localDirectory.compressedSize || localDirectory.uncompressedSize) &&
+		(localDirectory.crc32 != zipEntry.crc32 ||
 			localDirectory.compressedSize != zipEntry.compressedSize ||
 			localDirectory.uncompressedSize != zipEntry.uncompressedSize)) {
-		throwAmbiguousArchive("mismatched local file header (signature or sizes)");
+		throwAmbiguousArchive("mismatched local file header (crc32 or sizes)");
 	}
 }
 
@@ -5535,11 +5576,7 @@ function getOptionValue$1(zipReader, options, name) {
 
 function getDate(timeRaw) {
 	const date = (timeRaw & 0xffff0000) >> 16, time = timeRaw & MAX_16_BITS;
-	try {
-		return new Date(1980 + ((date & 0xFE00) >> 9), ((date & 0x01E0) >> 5) - 1, date & 0x001F, (time & 0xF800) >> 11, (time & 0x07E0) >> 5, (time & 0x001F) * 2, 0);
-	} catch {
-		// ignored
-	}
+	return new Date(1980 + ((date & 0xFE00) >> 9), ((date & 0x01E0) >> 5) - 1, date & 0x001F, (time & 0xF800) >> 11, (time & 0x07E0) >> 5, (time & 0x001F) * 2, 0);
 }
 
 function getDateNTFS(timeRaw) {
@@ -5572,7 +5609,9 @@ var zipReader = /*#__PURE__*/Object.freeze({
 	ERR_EOCDR_LOCATOR_ZIP64_NOT_FOUND: ERR_EOCDR_LOCATOR_ZIP64_NOT_FOUND,
 	ERR_EOCDR_NOT_FOUND: ERR_EOCDR_NOT_FOUND,
 	ERR_EXTRAFIELD_ZIP64_NOT_FOUND: ERR_EXTRAFIELD_ZIP64_NOT_FOUND,
+	ERR_INVALID_AUTHENTICATION_CODE: ERR_INVALID_AUTHENTICATION_CODE,
 	ERR_INVALID_COMPRESSED_DATA: ERR_INVALID_COMPRESSED_DATA,
+	ERR_INVALID_CRC32: ERR_INVALID_CRC32,
 	ERR_INVALID_PASSWORD: ERR_INVALID_PASSWORD,
 	ERR_INVALID_SIGNATURE: ERR_INVALID_SIGNATURE,
 	ERR_INVALID_UNCOMPRESSED_SIZE: ERR_INVALID_UNCOMPRESSED_SIZE,
@@ -5626,6 +5665,8 @@ const ERR_INVALID_EXTRAFIELD_DATA = "Extra field data exceeds 64KB";
 const ERR_UNSUPPORTED_COMPRESSION = "Compression method not supported";
 const MIN_UNIX_TIME = -2147483648;
 const MAX_UNIX_TIME = 2147483647;
+const MIN_NTFS_TIME = BigInt(0);
+const MAX_NTFS_TIME = BigInt("0x7fffffffffffffff");
 const ERR_UNSUPPORTED_FORMAT = "Zip64 is not supported (set the 'zip64' option to 'true')";
 const ERR_UNDEFINED_UNCOMPRESSED_SIZE = "Undefined uncompressed size";
 const ERR_UNDEFINED_READER = "Undefined reader";
@@ -5639,7 +5680,9 @@ const ERR_INVALID_MSDOS_ATTRIBUTES = "Invalid msdosAttributesRaw (must be intege
 const ERR_INVALID_MSDOS_DATA = "Invalid msdosAttributes (must be an object with boolean flags)";
 
 const EXTRAFIELD_DATA_AES = new Uint8Array([0x07, 0x00, 0x02, 0x00, 0x41, 0x45, 0x03, 0x00, 0x00]);
-const INFOZIP_EXTRA_FIELD_TYPE = "infozip";
+const EXTRAFIELD_OFFSET_AES_VENDOR_VERSION = 4;
+const VENDOR_VERSION_AE_1 = 1;
+const INFOZIP_EXTRA_FIELD_TYPE$1 = "infozip";
 const UNIX_EXTRA_FIELD_TYPE = "unix";
 
 let workers = 0;
@@ -5733,9 +5776,9 @@ class ZipWriter {
 				zip64UncompressedSize,
 				extraFieldLength
 			});
-			const { signature } = entry;
-			if (signature !== UNDEFINED_VALUE) {
-				setUint32(headerView, HEADER_OFFSET_SIGNATURE, signature);
+			const { crc32 } = entry;
+			if (crc32 !== UNDEFINED_VALUE) {
+				setUint32(headerView, HEADER_OFFSET_SIGNATURE, crc32);
 			}
 			Object.assign(entry, {
 				zip64UncompressedSize,
@@ -5920,6 +5963,7 @@ async function addFile(zipWriter, name, reader, options) {
 			internalFileAttribute: metadataInfo.resolvedOptions.internalFileAttributes,
 			externalFileAttribute: attributesInfo.resolvedOptions.externalFileAttributes,
 			signature: options[PROPERTY_NAME_SIGNATURE],
+			crc32: options.crc32 === UNDEFINED_VALUE ? options[PROPERTY_NAME_SIGNATURE] : options.crc32,
 			offset: zipWriter.offset - diskOffset,
 			diskNumberStart: diskNumber
 		});
@@ -5956,7 +6000,7 @@ function resolveAttributes(zipWriter, name, options) {
 	if (unixMode !== UNDEFINED_VALUE && (unixMode < 0 || unixMode > MAX_16_BITS)) {
 		throw new Error(ERR_INVALID_UNIX_MODE);
 	}
-	if (unixExtraFieldType !== UNDEFINED_VALUE && unixExtraFieldType !== INFOZIP_EXTRA_FIELD_TYPE && unixExtraFieldType !== UNIX_EXTRA_FIELD_TYPE) {
+	if (unixExtraFieldType !== UNDEFINED_VALUE && unixExtraFieldType !== INFOZIP_EXTRA_FIELD_TYPE$1 && unixExtraFieldType !== UNIX_EXTRA_FIELD_TYPE) {
 		throw new Error(ERR_INVALID_UNIX_EXTRA_FIELD_TYPE);
 	}
 	if (unixExtraFieldType === UNIX_EXTRA_FIELD_TYPE &&
@@ -5964,7 +6008,7 @@ function resolveAttributes(zipWriter, name, options) {
 		throw new Error(ERR_INVALID_UNIX_ID_SIZE);
 	}
 	if (unixExtraFieldType === UNDEFINED_VALUE && (uid !== UNDEFINED_VALUE || gid !== UNDEFINED_VALUE)) {
-		unixExtraFieldType = INFOZIP_EXTRA_FIELD_TYPE;
+		unixExtraFieldType = INFOZIP_EXTRA_FIELD_TYPE$1;
 	}
 	let msdosAttributesRaw = getOptionValue(zipWriter, options, PROPERTY_NAME_MSDOS_ATTRIBUTES_RAW);
 	let msdosAttributes = getOptionValue(zipWriter, options, PROPERTY_NAME_MSDOS_ATTRIBUTES);
@@ -6136,27 +6180,8 @@ function resolveMetadata(zipWriter, name, options) {
 	if (!zipCrypto && (password !== UNDEFINED_VALUE || rawPassword !== UNDEFINED_VALUE) && !(encryptionStrength >= 1 && encryptionStrength <= 3)) {
 		throw new Error(ERR_INVALID_ENCRYPTION_STRENGTH);
 	}
-	let rawExtraField = EMPTY_UINT8_ARRAY;
-	const extraField = options[PROPERTY_NAME_EXTRA_FIELD];
-	if (extraField) {
-		let extraFieldSize = 0;
-		let offset = 0;
-		extraField.forEach(data => extraFieldSize += 4 + getLength(data));
-		rawExtraField = new Uint8Array(extraFieldSize);
-		const rawExtraFieldView = getDataView(rawExtraField);
-		extraField.forEach((data, type) => {
-			if (type > MAX_16_BITS) {
-				throw new Error(ERR_INVALID_EXTRAFIELD_TYPE);
-			}
-			if (getLength(data) > MAX_16_BITS) {
-				throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
-			}
-			setUint16(rawExtraFieldView, offset, type);
-			setUint16(rawExtraFieldView, offset + 2, getLength(data));
-			arraySet(rawExtraField, data, offset + 4);
-			offset += 4 + getLength(data);
-		});
-	}
+	const rawExtraField = serializeExtraField(options[PROPERTY_NAME_EXTRA_FIELD]);
+	const rawLocalExtraField = serializeExtraField(options[OPTION_LOCAL_EXTRA_FIELD]);
 	return {
 		comment,
 		resolvedOptions: {
@@ -6190,11 +6215,36 @@ function resolveMetadata(zipWriter, name, options) {
 			useCompressionStream,
 			dataDescriptor,
 			zip64,
-			rawExtraField
+			rawExtraField,
+			rawLocalExtraField
 		}
 	};
 }
 
+function serializeExtraField(extraField) {
+	if (!extraField) {
+		return EMPTY_UINT8_ARRAY;
+	}
+	let extraFieldSize = 0;
+	let offset = 0;
+	extraField.forEach(data => extraFieldSize += 4 + getLength(data));
+	const rawExtraField = new Uint8Array(extraFieldSize);
+	const rawExtraFieldView = getDataView(rawExtraField);
+	extraField.forEach((data, type) => {
+		if (type > MAX_16_BITS) {
+			throw new Error(ERR_INVALID_EXTRAFIELD_TYPE);
+		}
+		if (getLength(data) > MAX_16_BITS) {
+			throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
+		}
+		setUint16(rawExtraFieldView, offset, type);
+		setUint16(rawExtraFieldView, offset + 2, getLength(data));
+		arraySet(rawExtraField, data, offset + 4);
+		offset += 4 + getLength(data);
+	});
+	return rawExtraField;
+}
+
 async function resolveSizes(zipWriter, reader, { resolvedOptions: metadata }, options) {
 	const { passThrough, zipCrypto, password, rawPassword, encryptionStrength } = metadata;
 	let { dataDescriptor, zip64, level, compressionMethod } = metadata;
@@ -6519,7 +6569,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 		msdosAttributes
 	};
 	let {
-		signature,
+		crc32,
 		uncompressedSize
 	} = options;
 	let compressedSize = 0;
@@ -6539,7 +6589,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 				encryptionStrength,
 				zipCrypto: encrypted && zipCrypto,
 				passwordVerification: encrypted && zipCrypto && (rawLastModDate >> 8) & MAX_8_BITS,
-				signed: !passThrough,
+				computeCrc32: !passThrough,
 				compressed: compressed && !passThrough,
 				encrypted: encrypted && !passThrough,
 				useWebWorkers,
@@ -6558,7 +6608,9 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 			writer.size += compressedSize;
 			if (!passThrough) {
 				uncompressedSize = result.inputSize;
-				signature = result.signature;
+				if (!encrypted || zipCrypto) {
+					crc32 = result.crc32;
+				}
 			}
 			if ((!zip64CompressedSize && compressedSize >= MAX_32_BITS) ||
 				(!zip64UncompressedSize && uncompressedSize >= MAX_32_BITS)) {
@@ -6573,7 +6625,7 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 
 	}
 	setEntryInfo({
-		signature,
+		crc32,
 		compressedSize,
 		uncompressedSize,
 		headerInfo,
@@ -6596,7 +6648,8 @@ async function createFileEntry(reader, writer, { diskNumberStart, lock }, entryI
 		version,
 		headerArray,
 		headerView,
-		signature,
+		signature: crc32,
+		crc32: encrypted && !zipCrypto && !passThrough ? UNDEFINED_VALUE : crc32,
 		extraFieldExtendedTimestampFlag,
 		zip64UncompressedSize,
 		zip64CompressedSize
@@ -6617,6 +6670,7 @@ function getHeaderInfo(options) {
 		dataDescriptor,
 		directory,
 		rawExtraField,
+		rawLocalExtraField,
 		encryptionStrength,
 		extendedTimestamp,
 		ntfsTimestamp,
@@ -6624,7 +6678,8 @@ function getHeaderInfo(options) {
 		encrypted,
 		zip64UncompressedSize,
 		zip64CompressedSize,
-		uncompressedSize
+		uncompressedSize,
+		crc32
 	} = options;
 	let { version, compressionMethod } = options;
 	const compressed = !directory && (compressionMethod === UNDEFINED_VALUE
@@ -6697,8 +6752,8 @@ function getHeaderInfo(options) {
 				extraFieldNTFS.uint16(EXTRAFIELD_TYPE_NTFS_TAG1);
 				extraFieldNTFS.uint16(24);
 				extraFieldNTFS.uint64(lastModTimeNTFS);
-				extraFieldNTFS.uint64(getTimeNTFS(lastAccessDate) || lastModTimeNTFS);
-				extraFieldNTFS.uint64(getTimeNTFS(creationDate) || lastModTimeNTFS);
+				extraFieldNTFS.uint64(lastAccessDate ? getTimeNTFS(lastAccessDate) : lastModTimeNTFS);
+				extraFieldNTFS.uint64(creationDate ? getTimeNTFS(creationDate) : lastModTimeNTFS);
 				rawExtraFieldNTFS = extraFieldNTFS.array;
 			} catch {
 				rawExtraFieldNTFS = EMPTY_UINT8_ARRAY;
@@ -6712,7 +6767,7 @@ function getHeaderInfo(options) {
 	let rawExtraFieldUnix;
 	try {
 		const { uid, gid, unixExtraFieldType } = options;
-		if (unixExtraFieldType == INFOZIP_EXTRA_FIELD_TYPE && (uid !== UNDEFINED_VALUE || gid !== UNDEFINED_VALUE)) {
+		if (unixExtraFieldType == INFOZIP_EXTRA_FIELD_TYPE$1 && (uid !== UNDEFINED_VALUE || gid !== UNDEFINED_VALUE)) {
 			const uidBytes = packUnixId(uid);
 			const gidBytes = packUnixId(gid);
 			const payloadLength = 3 + uidBytes.length + gidBytes.length;
@@ -6750,15 +6805,18 @@ function getHeaderInfo(options) {
 	}
 	if (encrypted && !zipCrypto) {
 		version = version > VERSION_AES ? version : VERSION_AES;
+		if (passThrough && crc32 !== UNDEFINED_VALUE) {
+			rawExtraFieldAES[EXTRAFIELD_OFFSET_AES_VENDOR_VERSION] = VENDOR_VERSION_AE_1;
+		}
 		rawExtraFieldAES[9] = compressionMethod;
 		compressionMethod = COMPRESSION_METHOD_AES;
 	}
 	const localExtraFieldZip64Length = writeLocalExtraFieldZip64 ? getLength(rawLocalExtraFieldZip64) : 0;
-	const extraFieldLength = localExtraFieldZip64Length + getLength(rawExtraFieldAES, rawExtraFieldExtendedTimestamp, rawExtraFieldNTFS, rawExtraFieldUnix, rawExtraField);
+	const extraFieldLength = localExtraFieldZip64Length + getLength(rawExtraFieldAES, rawExtraFieldExtendedTimestamp, rawExtraFieldNTFS, rawExtraFieldUnix, rawExtraField, rawLocalExtraField);
 	if (extraFieldLength > MAX_16_BITS) {
 		throw new Error(ERR_INVALID_EXTRAFIELD_DATA);
 	}
-	const dosLastModDate = new Date(Math.ceil(lastModDate.getTime() / 2000) * 2000);
+	const dosLastModDate = new Date(Math.ceil(Math.floor(lastModDate.getTime() / 1000) / 2) * 2000);
 	const {
 		headerArray,
 		headerView,
@@ -6788,6 +6846,7 @@ function getHeaderInfo(options) {
 	localHeader.bytes(rawExtraFieldNTFS);
 	localHeader.bytes(rawExtraFieldUnix);
 	localHeader.bytes(rawExtraField);
+	localHeader.bytes(rawLocalExtraField);
 	if (dataDescriptor) {
 		if (!zip64CompressedSize) {
 			setUint32(localHeaderView, HEADER_OFFSET_COMPRESSED_SIZE + LOCAL_HEADER_COMMON_OFFSET, 0);
@@ -6906,7 +6965,7 @@ function getDataDescriptorInfo({
 }
 
 function setEntryInfo({
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	headerInfo,
@@ -6914,6 +6973,7 @@ function setEntryInfo({
 }, {
 	zip64,
 	zipCrypto,
+	passThrough,
 	dataDescriptor
 }) {
 	const {
@@ -6924,10 +6984,10 @@ function setEntryInfo({
 		dataDescriptorView,
 		dataDescriptorOffset
 	} = dataDescriptorInfo;
-	if ((!encrypted || zipCrypto) && signature !== UNDEFINED_VALUE) {
-		setUint32(headerView, HEADER_OFFSET_SIGNATURE, signature);
+	if ((!encrypted || zipCrypto || passThrough) && crc32 !== UNDEFINED_VALUE) {
+		setUint32(headerView, HEADER_OFFSET_SIGNATURE, crc32);
 		if (dataDescriptor) {
-			setUint32(dataDescriptorView, dataDescriptorOffset, signature);
+			setUint32(dataDescriptorView, dataDescriptorOffset, crc32);
 		}
 	}
 	if (zip64) {
@@ -6950,15 +7010,15 @@ function updateLocalHeader({
 	encrypted,
 	zip64,
 	localExtraFieldZip64Length,
-	signature,
+	crc32,
 	compressedSize,
 	uncompressedSize,
 	zip64UncompressedSize,
 	zip64CompressedSize
-}, localHeaderView, { dataDescriptor }) {
+}, localHeaderView, { dataDescriptor, passThrough }) {
 	if (!dataDescriptor) {
-		if (!encrypted) {
-			setUint32(localHeaderView, HEADER_OFFSET_SIGNATURE + LOCAL_HEADER_COMMON_OFFSET, signature);
+		if (!encrypted || (passThrough && crc32 !== UNDEFINED_VALUE)) {
+			setUint32(localHeaderView, HEADER_OFFSET_SIGNATURE + LOCAL_HEADER_COMMON_OFFSET, crc32);
 		}
 		if (!zip64CompressedSize) {
 			setUint32(localHeaderView, HEADER_OFFSET_COMPRESSED_SIZE + LOCAL_HEADER_COMMON_OFFSET, compressedSize);
@@ -7267,7 +7327,8 @@ async function flushBufferedData(readable, writer, signal, onChunkWritten) {
 
 function getTimeNTFS(date) {
 	if (date) {
-		return ((BigInt(date.getTime()) + BigInt(11644473600000)) * BigInt(10000));
+		const timeNTFS = ((BigInt(date.getTime()) + BigInt(11644473600000)) * BigInt(10000));
+		return timeNTFS < MIN_NTFS_TIME ? MIN_NTFS_TIME : timeNTFS > MAX_NTFS_TIME ? MAX_NTFS_TIME : timeNTFS;
 	}
 }
 
@@ -8227,33 +8288,7 @@ function terminateWorkersAndModule() {
 	resetWasmModule();
 }
 
-/*
- Copyright (c) 2025 Gildas Lormeau. All rights reserved.
-
- Redistribution and use in source and binary forms, with or without
- modification, are permitted provided that the following conditions are met:
-
- 1. Redistributions of source code must retain the above copyright notice,
- this list of conditions and the following disclaimer.
-
- 2. Redistributions in binary form must reproduce the above copyright
- notice, this list of conditions and the following disclaimer in
- the documentation and/or other materials provided with the distribution.
-
- 3. The names of the authors may not be used to endorse or promote products
- derived from this software without specific prior written permission.
-
- THIS SOFTWARE IS PROVIDED ''AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES,
- INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
- FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL JCRAFT,
- INC. OR ANY CONTRIBUTORS TO THIS SOFTWARE BE LIABLE FOR ANY DIRECT, INDIRECT,
- INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA,
- OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
- LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
- NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
- EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- */
+/// <reference types="../index.d.ts" />
 
 
 configureExternalAssets();
@@ -8289,6 +8324,20 @@ configureExternalAssets();
 
 const ERR_ENTRY_EXISTS = "Entry filename already exists";
 const ERR_READABLE_CONSUMED = "Readable stream already consumed";
+const INFOZIP_EXTRA_FIELD_TYPE = "infozip";
+const INTERPRETED_EXTRA_FIELD_TYPES = new Set([
+	EXTRAFIELD_TYPE_ZIP64,
+	EXTRAFIELD_TYPE_AES,
+	EXTRAFIELD_TYPE_NTFS,
+	EXTRAFIELD_TYPE_EXTENDED_TIMESTAMP,
+	EXTRAFIELD_TYPE_UNICODE_PATH,
+	EXTRAFIELD_TYPE_UNICODE_COMMENT,
+	EXTRAFIELD_TYPE_USDZ,
+	EXTRAFIELD_TYPE_INFOZIP,
+	EXTRAFIELD_TYPE_UNIX,
+	EXTRAFIELD_TYPE_UNIX_TYPE1,
+	EXTRAFIELD_TYPE_PKWARE_UNIX
+]);
 
 class ZipEntry {
 
@@ -9026,6 +9075,20 @@ function detach(entry) {
 	}
 }
 
+function getUserExtraField(extraField) {
+	if (extraField) {
+		const userExtraField = new Map();
+		extraField.forEach((field, type) => {
+			if (!INTERPRETED_EXTRA_FIELD_TYPES.has(type)) {
+				userExtraField.set(type, field.data);
+			}
+		});
+		if (userExtraField.size) {
+			return userExtraField;
+		}
+	}
+}
+
 async function exportZip(zipWriter, entry, totalSize, options, readers) {
 	const selectedEntry = entry;
 	const entryOffsets = new Map();
@@ -9063,9 +9126,13 @@ async function exportZip(zipWriter, entry, totalSize, options, readers) {
 					uncompressedSize,
 					encrypted,
 					zipCrypto,
-					signature,
+					crc32,
 					compressionMethod,
-					extraFieldAES
+					extraFieldAES,
+					internalFileAttributes,
+					extraField,
+					uid,
+					gid
 				} = child.data;
 				zipEntryOptions = {
 					externalFileAttributes,
@@ -9073,8 +9140,20 @@ async function exportZip(zipWriter, entry, totalSize, options, readers) {
 					comment,
 					lastModDate,
 					creationDate,
-					lastAccessDate
+					lastAccessDate,
+					internalFileAttributes
 				};
+				const userExtraField = getUserExtraField(extraField);
+				if (userExtraField) {
+					zipEntryOptions.extraField = userExtraField;
+				}
+				if (uid !== UNDEFINED_VALUE || gid !== UNDEFINED_VALUE) {
+					Object.assign(zipEntryOptions, {
+						uid,
+						gid,
+						unixExtraFieldType: options.unixExtraFieldType || INFOZIP_EXTRA_FIELD_TYPE
+					});
+				}
 				if (child.passThrough) {
 					let level, encryptionStrength;
 					if (compressionMethod === 0) {
@@ -9087,7 +9166,7 @@ async function exportZip(zipWriter, entry, totalSize, options, readers) {
 						passThrough: true,
 						encrypted,
 						zipCrypto,
-						signature,
+						crc32,
 						uncompressedSize,
 						level,
 						encryptionStrength,
@@ -9274,4 +9353,4 @@ function addChild(parent, name, params, directory) {
 	}
 }
 
-export { BlobReader, BlobWriter, Data64URIReader, Data64URIWriter, ERR_AMBIGUOUS_ARCHIVE, ERR_BAD_FORMAT, ERR_CENTRAL_DIRECTORY_NOT_FOUND, ERR_DUPLICATED_NAME, ERR_ENCRYPTED, ERR_ENCRYPTED_CENTRAL_DIRECTORY, ERR_EOCDR_LOCATOR_ZIP64_NOT_FOUND, ERR_EOCDR_NOT_FOUND, ERR_EXTRAFIELD_ZIP64_NOT_FOUND, ERR_HTTP_RANGE, ERR_HTTP_RESOURCE_CHANGED, ERR_INVALID_CODEC_DEFINITION, ERR_INVALID_CODEC_MODULE, ERR_INVALID_COMMENT, ERR_INVALID_COMPRESSED_DATA, ERR_INVALID_ENCRYPTION_STRENGTH, ERR_INVALID_ENTRY_COMMENT, ERR_INVALID_ENTRY_NAME, ERR_INVALID_EXTRAFIELD_DATA, ERR_INVALID_EXTRAFIELD_TYPE, ERR_INVALID_PASSWORD, ERR_INVALID_SIGNATURE, ERR_INVALID_UNCOMPRESSED_SIZE, ERR_INVALID_VERSION, ERR_ITERATOR_COMPLETED_TOO_SOON, ERR_LOCAL_FILE_HEADER_NOT_FOUND, ERR_OVERLAPPING_ENTRY, ERR_RESERVED_COMPRESSION_METHOD, ERR_SPLIT_ZIP_FILE, ERR_UNDEFINED_READER, ERR_UNDEFINED_UNCOMPRESSED_SIZE, ERR_UNSUPPORTED_COMPRESSION$1 as ERR_UNSUPPORTED_COMPRESSION, ERR_UNSUPPORTED_ENCRYPTION, ERR_UNSUPPORTED_ENCRYPTION_USDZ, ERR_UNSUPPORTED_FORMAT, ERR_WRITER_NOT_INITIALIZED, ERR_ZIP_NOT_EMPTY, HttpRangeReader, HttpReader, Reader, SplitDataReader, SplitDataWriter, TextReader, TextWriter, Uint8ArrayReader, Uint8ArrayWriter, Writer, ZipReader, ZipReaderStream, ZipWriter, ZipWriterStream, configure, createBlobTempStream, createOPFSTempStream, createSyncAccessHandleTempStream, fs, getMimeType, registerCodec, resetConfiguration, terminateWorkersAndModule as terminateWorkers, unregisterCodec };
+export { BlobReader, BlobWriter, Data64URIReader, Data64URIWriter, ERR_AMBIGUOUS_ARCHIVE, ERR_BAD_FORMAT, ERR_CENTRAL_DIRECTORY_NOT_FOUND, ERR_DUPLICATED_NAME, ERR_ENCRYPTED, ERR_ENCRYPTED_CENTRAL_DIRECTORY, ERR_EOCDR_LOCATOR_ZIP64_NOT_FOUND, ERR_EOCDR_NOT_FOUND, ERR_EXTRAFIELD_ZIP64_NOT_FOUND, ERR_HTTP_RANGE, ERR_HTTP_RESOURCE_CHANGED, ERR_INVALID_AUTHENTICATION_CODE, ERR_INVALID_CODEC_DEFINITION, ERR_INVALID_CODEC_MODULE, ERR_INVALID_COMMENT, ERR_INVALID_COMPRESSED_DATA, ERR_INVALID_CRC32, ERR_INVALID_ENCRYPTION_STRENGTH, ERR_INVALID_ENTRY_COMMENT, ERR_INVALID_ENTRY_NAME, ERR_INVALID_EXTRAFIELD_DATA, ERR_INVALID_EXTRAFIELD_TYPE, ERR_INVALID_PASSWORD, ERR_INVALID_SIGNATURE, ERR_INVALID_UNCOMPRESSED_SIZE, ERR_INVALID_VERSION, ERR_ITERATOR_COMPLETED_TOO_SOON, ERR_LOCAL_FILE_HEADER_NOT_FOUND, ERR_OVERLAPPING_ENTRY, ERR_RESERVED_COMPRESSION_METHOD, ERR_SPLIT_ZIP_FILE, ERR_UNDEFINED_READER, ERR_UNDEFINED_UNCOMPRESSED_SIZE, ERR_UNSUPPORTED_COMPRESSION$1 as ERR_UNSUPPORTED_COMPRESSION, ERR_UNSUPPORTED_ENCRYPTION, ERR_UNSUPPORTED_ENCRYPTION_USDZ, ERR_UNSUPPORTED_FORMAT, ERR_WRITER_NOT_INITIALIZED, ERR_ZIP_NOT_EMPTY, HttpRangeReader, HttpReader, Reader, SplitDataReader, SplitDataWriter, TextReader, TextWriter, Uint8ArrayReader, Uint8ArrayWriter, Writer, ZipReader, ZipReaderStream, ZipWriter, ZipWriterStream, configure, createBlobTempStream, createOPFSTempStream, createSyncAccessHandleTempStream, fs, getMimeType, registerCodec, resetConfiguration, terminateWorkersAndModule as terminateWorkers, unregisterCodec };