Zip encryption is vulnerable to known-plaintext attacks. Implementation quality also is an issue; WinZip's is particularly bad. No source, I'm afraid.