How does recipient-based encryption differ from password-based encryption?
Password-based encryption depends on both the sender and receiver knowing, and providing, intellectual input (the password) in clear text. The password is used to derive a binary Master Session Key (MSK) for each decryption run. No key information is kept within the ZIP Archive; therefore both parties must retain the password in an external location.