It's interesting to me that #Debian still ships zip(1) provided by Info-ZIP. The last release was 3.00 on 7 July 2008, 14 years ago.
Oh, hey! You can overwrite encrypted files in ZIP archives!
$ echo true | tee file1 > file2
$ zip -e -P pass encrypted.zip file1 file2
$ echo lies > file1
$ zip -u encrypted.zip file1
$ unzip -o -P pass encrypted.zip
$ cat file1 file2
lies
true
You can get the unencrypted file list in the archive via:
$ unzip -l encrypted.zip
