From: Michael Paul Johnson <mpj@netcom.com>
Date: Sat, 14 Oct 95 21:28:59 PDT
To: Where to get PGP list <viacrypt@acm.org
Subject: Where to Get PGP
Message-ID: <Pine.SUN.3.91.951014211209.9333A-100000@netcom14>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

WHERE TO GET THE PRETTY GOOD PRIVACY PROGRAM (PGP) FAQ 14 OCTOBER 1995
Long version


For questions not covered here, please see the MAIN alt.security.pgp FAQ at

ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt


WHAT IS THE LATEST VERSION OF PGP?

Platform(s)       Latest Version        Distribution File Names
__________________________________________________________________________
|                |                     |                                 |
|DOS, Unix,      | Viacrypt PGP 2.7.1  | disk sets                       |
|Mac, Windows,   |                     |                                 |
|or WinCIM/CSNav |                     |                                 |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Hardware-based  | Viacrypt 2.7.1      | disk sets                       |
|PGP/Token       |                     |                                 |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|DOS, Unix, VAX, | MIT PGP 2.6.2       | pgp262.zip  (DOS + docs)        |
|others          |                     | pgp262s.zip (source)            |
|                |                     | pg262s.zip source on CompuServe |
|                |                     | pgp262s.tar.gz (source)         |
|                |                     | pgp262s.tar.Z (source)          |
|                |                     | pgp262dc.zip (documentation)    |
|                |                     | pg262d.zip (docs on CompuServe) |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Macintosh       | MIT PGP 2.6.2       | MacPGP2.6.2-130v1.hqx           |
|                | Mac version 1.3.0   | m262pgp.hqx (same as above)     |
|                |                     | MacPGP2.6.2-130v1.source.asc    |
|                |                     | m262pgps.asc (same as above)    |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Power Mac       | Zbigniew's "beta"   | Fatmacpgp262b131.sea.hqx        |
|                |                     | f262pgp.hqx (same as above)     |
|                |                     | Fatmacpgp262b131.src.hqx        |
|                |                     | f262pgps.hqx (same as above)    |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Amiga           | PGP 2.6.2 Amiga 1.4 | pgp262-a14-000.lha              |
|                |                     | pgp262-a14-020.lha              |
|                |                     | pgp262-a14-src.lha              |
|                |                     | PGPAmi262is.lha (international) |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Atari           | Atari MIT PGP 2.6.2 | pgp262st.zip                    |
|                | Atari International | pgp262ib.zip                    |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|OS/2            | MIT PGP 2.6.2       | pgp262-os2.zip                  |
|                |                     | on ftp.gibbon.com               |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Non-USA version | PGP 2.6.2i from     | pgp262i.zip  (DOS executable)   |
|to avoid RSAREF | Stale Schumacher,   | pgp262ix.zip (32-bit DOS)       |
|license.        | Kai Uwe Rommel,     | pgp262i-os2.zip (OS/2 exe)      |
|(various        | Harald Denker, and  | pgp262ib.zip (Atari)            |
|platforms)      | Peter Simons        | PGPAmi262is.lha (Amiga)         |
|                |                     | pgp262is.zip (source)           |
|                |                     | pgp262is.tar.gz (Unix source)   |
|                |                     |                                 |
|                | Canadian "mutant"   | MacPGP262ca124.exe.sea.hqx      |
|                | not for USA use     | MacPGP262ca124.src.sea.hqx      |
|________________|_____________________|_________________________________|
|                |                     |                                 |
|Unofficial      | PGP 2.6.2ui         | pgp262ui.zip (executable)       |
|non-USA version | Not for use in the  | pg262uis.zip (source)           |
|fully under Gnu | USA because of      | pg262uix.zip (DOS extended)     |
|public license  | probable patent     |                                 |
|(based on 2.3a  | infringement        |                                 |
|code)           | problems.           |                                 |
|________________|_____________________|_________________________________|


BUG LISTS

http://www.ifi.uio.no/~staalesc/PGP/bugs.html
http://www.mit.edu:8001/people/warlord/pgp-faq.html



WHERE CAN I GET VIACRYPT PGP?

Viacrypt has versions of PGP complete with licenses for
commercial use of the RSA and IDEA encryption algorithms.
Viacrypt PGP comes in executable code only (no source code),
but it is based on (and just as secure as) the freeware PGP.
Viacrypt PGP for Windows is the only real Windows PGP (and even
it is partially a quickwin executable that looks like a DOS
port).  Still, it is much better from an interface standpoint
than all the others.

Please contact ViaCrypt for pricing (about US $100 up), the latest
platforms, and availablity at 800-536-2664 8:30am to 5:00pm
MST, Monday - Friday.  They accept VISA, MasterCard, AMEX and
Discover credit cards.

http://www.viacrypt.com

If you have further questions, please ask:

Paul E. Uhlhorn
Director of Marketing, ViaCrypt Products
Mail:          9033 N. 24th Avenue
Suite 7
Phoenix AZ 85021-2847
Phone:         (602) 944-0773
Fax:           (602) 943-2601
Internet:      viacrypt@acm.org
Compuserve:    70304.41


WHERE CAN I FTP PGP IN NORTH AMERICA?

If you are in the USA or Canada, you can get PGP by following the
instructions in any of:

ftp://net-dist.mit.edu/pub/PGP/README
ftp://ftp.csn.net/mpj/README.MPJ
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
ftp://ftp.netcom.com/pub/mp/mpj/README.MPJ
ftp://ftp.netcom.com/pub/dd/ddt/crypto/READ_ME_FIRST!
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_ftp_instructions.txt
ftp://ftp.eff.org

Follow the instructions found in README.Dist that you get from one of:
ftp://ftp.eff.org/pub/Net_info/Tools/Crypto/README.Dist
gopher.eff.org, 1/Net_info/Tools/Crypto
gopher://gopher.eff.org/11/Net_info/Tools/Crypto
http://www.eff.org/pub/Net_info/Tools/Crypto/

ftp://ftp.csua.berkeley.edu/pub/cypherpunks/pgp/
ftp://ftp.gibbon.com/pub/pgp/README.PGP
http://www.gibbon.com/getpgp.html
ftp://ftp.wimsey.bc.ca/pub/crypto/software/README


WHERE IS PGP ON THE WORLD WIDE WEB?

http://web.mit.edu/network/pgp-form.html
http://www.ifi.uio.no/~staalesc/PGP/home.html
http://rschp2.anu.edu.au:8080/crypt.html
http://www.eff.org/pub/Net_info/Tools/Crypto/
http://community.net/community/all/home/solano/sbaldwin
http://www.cco.caltech.edu/~rknop/amiga_pgp26.html
http://www.csua.berkeley.edu/cypherpunks/home.html
http://www.leo.org/archive/os2/crypt/
http://colossus.net/wepinsto/wshome.html
http://www.cs.hut.fi/ssh/crypto/


WHERE IS PGP ON COMPUSERVE?

GO NCSAFORUM.  Follow the instructions there to gain access to
Library 12: Export Controlled.

Compuserve file names are limited, so look for PGP262.ZIP,
PG262S.ZIP (source code), PGP262.GZ (Unix source code) and
PG262D.ZIP (documentation only).


AOL

Go to the AOL software library and search "PGP" or ftp from
ftp://ftp.csua.berkeley.edu/pub/cypherpunks/pgp.


WHAT BULLETIN BOARD SYSTEMS CARRY PGP?

MANY BBS carry PGP.  The following carry recent versions of PGP
and allow free downloads of PGP.

US

303-343-4053 Hacker's Haven, Denver, CO Lots of crypto stuff here.
303-772-1062 Colorado Catacombs BBS, Longmont CO
    8 data bits, 1 stop, no parity, up to 28,800 bps. Use ANSI terminal
    emulation.  For free access: log in with your own name, answer the
    questions.
303-914-0031 The FreeMatrix ]I[
314-896-9309 The KATN BBS
317-791-9617 Computer Virus Research Center (CVRC) BBS, Indianapolis, IN
    Login Name: PGP USER  Password: PGP
501-791-0124, 501-791-0125 The Ferret BBS, North Little Rock, AR
    Login name: PGP USER  Password: PGP
506-457=0483 Data Intelligence Group Corporation BBS
508-668-4441 Emerald City, Walpole, MA
601-582-5748 CyberGold BBS
612-690-5556, !CyBERteCH SeCURitY BBS! Minneapolis MN, - write a letter
    to the sysop requesting full access.
914-667-4567 Exec-Net, New York, NY
915-587-7888, Self-Governor Information Resource, El Paso, Texas


UK

01273-688888

GERMANY

+49-781-38807 MAUS BBS, Offenburg - angeschlossen an das MausNet
+49-521-68000 BIONIC-BBS Login: PGP


WHERE CAN I FTP PGP CLOSE TO ME?

AU

ftp://ftp.cc.adfa.oz.au/pub/security/pgp23/macpgp2.3.cpt.hqx
ftp://ftp.iinet.net.au:mirrors/pgp (Australia ONLY)
ftp://plaza.aarnet.edu.au/micros/mac/umich/misc/documentation/howtomacpgp2.7.txt

DE

ftp://ftp.informatik.tu-muenchen.de/pub/comp/os/os2/crypt
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/pgp
ftp://ftp.fu-berlin.de/mac/sys/init/MacPGP2.6uiV1.2en.cpt.hqx.gz
ftp://ftp.tu-clausthal.de/pub/atari/misc/pgp/pgp261b.lzh
ftp://ftp.uni-kl.de/pub/aminet/util/crypt
ftp://ftp.uni-paderborn.de/pub/aminet/util/crypt
ftp://ftp.westfalen.de/pd/Atari/Pgp  (Atari)
ftp://tupac-amaru.informatik.rwth-aachen.de

ES

ftp://goya.dit.upm.es
ftp://encomix.es/pub/pgp/pgp262i/pgp262i.zip

IT

ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP

FI

ftp://ftp.funet.fi/pub/crypt

NL

ftp://ftp.nl.net/pub/crypto/pgp
ftp.nic.surfnet.nl/surfnet/net-security/encryption/pgp

NZ

ftp://ftphost.vuw.ac.nz
ftp://rs950.phys.waikato.ac.nz/pub/incoming/pgp (New Zealand ONLY)

SE

ftp://leif.thep.lu.se

TW

ftp://nctuccca.edu.tw/PC/wuarchive/pgp/

UK

ftp://ftp.demon.co.uk/pub/amiga/pgp
ftp://ftp.ox.ac.uk/pub/crypto/pgp
ftp://src.doc.ic.ac.uk/aminet/amiga-boing
ftp://unix.hensa.ac.uk/pub/uunet/pub/security/virus/crypt/pgp

USA

ftp://atari.archive.umich.edu/pub/atari/Utilities/pgp261st.zip (Atari)
ftp://ftp.leo.org/pub/comp/os/os2/crypt
ftp://wuarchive.wustl.edu/pub/aminet/util/crypt
ftp://ftp.netcom.com/pub/gr/grady/PGP_NOT_FOR_EXPORT/MacPGP262ca124.exe.sea.hqx
ftp://ftp.netcom.com/pub/gr/grady/PGP_NOT_FOR_EXPORT/MacPGP262ca124.src.sea.hqx

ZA

ftp://ftp.ee.und.ac.za/pub/crypto/pgp
    /pub/archimedes
    /pub/pgp
    /pub/mac/MacPGP


HOW CAN I GET PGP BY EMAIL?

If you have access to email, but not to ftp, send a message
saying "help" to

ftpmail@decwrl.dec.com,

mailserv@nic.funet.fi, or

ftp-request@netcom.com

To get pgp 2.6.2i by email:

Send a message to
pgp@hypnotech.com with your request in the
Subject: field.

Subject              What you will get

GET pgp262i.zip      MS-DOS executable (uuencoded)
GET pgp262is.zip     MS-DOS source code (uuencoded)
GET pgp262is.tar.gz  UNIX source code (uuencoded)


For FAQ information, send e-mail to

mail-server@rtfm.mit.edu with

send usenet/news.answers/ftp-list/faq

in the body of the message.


WHERE IS MACPGP?

ftp://ftp.csn.net/mpj/README.MPJ
ftp://ftp.confusion.net/pub/pgp/mac-pgp/README
ftp://highway.alinc.com/users/jordyn/mac-pgp/README
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS


WHERE IS VAX PGP?

Get the full PGP distribution, then get VAXPGP262.TAR.Z from
the berkeley site for additional files needed to compile PGP
for the VAX and a precompiled version for VAX/VMS 5.5-2.


WHERE CAN I GET MORE PGP INFORMATION?

http://www.csn.net/~mpj
ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt
ftp://starfire.ne.uiuc.edu/preston/pgpquick.ps (and
pgpquick.doc)
http://www.prairienet.org/~jalicqui/
http://www.mit.edu:8001/people/warlord/pgp-faq.html
http://draco.centerline.com:8080/~franl/crypto.html
http://draco.centerline.com:8080/~franl/pgp/bug0.html
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa_paper.ps.gz
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa.paper
http://www.cco.caltech.edu/~rknop/amiga_pgp26.html
Email
pgp-help@hks.net
ftp://ds.internic.net/internet-drafts/draft-pgp-pgpformat-00.txt
ftp://ds.internic.net/internet-drafts/draft-ietf-pem-mime-08.txt
http://www.cis.ohio-state.edu/
ftp://ftp.csn.net/mpj/public/pgp/MacPGP262_manual.sit.hqx
http://www-mitpress.mit.edu/mitp/recent-books/comp/pgp-source.html
http://web.cnam.fr/Network/Crypto/ (c'est en francais)
http://web.cnam.fr/Network/Crypto/survey.html (en anglais)
http://www2.hawaii.edu/~phinely/MacPGP-and-AppleScript-FAQ.html
ftp://ftp.prairienet.org/pub/providers/pgp/pgpbg11.asc (Beginner's Guide)
http://pluto.cc.umr.edu/~steve/Privacy_Page.html/Where_is_PGP.html
http://www.netresponse.com/zldf
http://bookweb.cwis.uci.edu:8042/Orders/ubipgp.html
http://www.geopages.com/Athens/1802/pgpfaq.html
http://www.pgp.net/pgp
http://www.sydney.sterling.com:8080/~ggr/pgpmoose.html
Beginner's Guide: send email to
slutsky@lipschitz.sfasu.edu, subject: bg2pgp


WHAT ARE SOME GOOD PGP BOOKS?

Protect Your Privacy: A Guide for PGP Users
by William Stallings
Prentice Hall PTR
ISBN 0-13-185596-4
US $19.95
This is a good technical manual for PGP for most users, and makes a better
reference than the "official" documentation that comes with PGP.  I recommend
it highly.

PGP: Pretty Good Privacy
by Simson Garfinkel
O'Reilly & Associates, Inc.
ISBN 1-56592-098-8
US $24.95

E-Mail Security: How to Keep Your Electronic Mail Private
"Covers PGP/PEM"
by Bruce Schneier
Wiley Publishing

The Computer Privacy Handbook: A Practical Guide to E-Mail Encryption, Data
Protection, and PGP PRivacy Software
by Andr&eacute; Bacard
Peachpit Press
ISBN 1-56609-171-3
US $24.95
800-283-9444 or 510-548-4393
This is an interesting book on the sociology and politics of privacy in the
computer age as well as a practical manual on using PGP.  Must reading for
all members of Congress, presidential staff, members of Parliament, and
ordinary citizens who would like to take reasonable steps to protect
themselves from some forms of crime that have been made easy by technology.

THE OFFICIAL PGP USER'S GUIDE
by Philip R. Zimmerman
MIT Press
April 1995 - 216 pp. - paper - US $14.95 - ISBN 0-262-74017-6 ZIMPP
Standard PGP documentation neatly typeset and bound.

PGP SOURCE CODE AND INTERNALS
by Philip R. Zimmerman
April 1995 - 804 pp. -
US $55.00 - 0-262-24039-4 ZIMPH
This is a handy printed reference with commented source code for PGP 2.6.2
with great educational value.  This is a great way to study some of the
computer science and information theory behind the world's best email privacy
tool without having either a computer or reams of printouts handy.
Recommended reading on long airline flights for serious students of computer
science and computer security.

Ordering information for the last two books:
Call US Toll Free 1-800-356-0343 or 617-625-8569.
Cite code 5CSC and number 661.
Allow 4-6 weeks for delivery within North America.
Allow 8-12 weeks for delivery outside of North America.

How to Use PGP, 61 pages,  (Pub #121) from the Superior Broadcasting Company,
Box 1533-N, Oil City, PA 16301, phone: (814) 678-8801 (about US $10-$13).


WHERE CAN I GET PGP LANGUAGE MODULES?

These are suitable for most PGP versions.


http://www.ifi.uio.no/~staalesc/PGP/language.html
ftp://ftp.ifi.uio.no/pub/pgp/doc/
German

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_german.txt
ftp://ftp.csn.net/mpj/public/pgp/pgp_german.txt
ftp://ftp.csn.net/mpj/public/pgp/PGP_german_docs.lha
ftp://ftp.informatik.uni-hamburg.de:/pub/virus/crypt/pgp/language/pgp_german.asc
ftp://ftp.leo.org/pub/comp/os/os2/crypt/pgp262i-german.zip

Italian

ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.italian.tar.gz
ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/PGP/pgp-lang.italian.tar.gz
ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.italian.tar.gz

Japanese

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_japanese.tar.gz
ftp://ftp.csn.net/mpj/public/pgp/pgp-msgs-japanese.tar.gz

Lithuanian

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_lithuanian.zip
ftp://ftp.csn.net/mpj/public/pgp/pgp23ltk.zip

Norwegian

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_norwegian.tar.gz
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26i_norwegian.zip

Romanian

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_romanian.tar.gz
ftp://ftp.encomix.es/pub/pgp/lang/pgp-romanian.zip
http://www.info.polymtl.ca/zuse/tavi/www/archive/ro_2.6.2.zip
http://www.info.polymtl.ca/zuse/tavi/www/archive/language.txt

Russian

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_russian.zip
ftp://ftp.kiae.su/unix/crypto/pgp/pgp26ru.zip
ftp://ftp.csn.net/mpj/public/pgp/pgp26ru.zip

Spanish

ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.spanish.tar.gz
ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp-lang.spanish.tar.gz
ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.spanish.tar.gz
ftp://ftp.encomix.es/pub/pgp/lang/pgp262i-spanish.zip

Swedish

ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_swedish.txt
ftp://ftp.csn.net/mpj/public/pgp/pgp_swedish.txt


IS PGP MORALLY RIGHT?

PGP itself is morally neutral.  What you do with it is not.  Protecting
privacy, prevention of criminal theft, and taking due diligence to
protect certain business information (like credit card numbers,
customer lists, etc.) are good uses for PGP.  Concealing criminal
or other immoral activity is wrong.  You can fool the police some
of the time, but you can't fool God.


IS PGP LEGAL?

Pretty Good Privacy is legal if you follow these rules:

Don't export PGP from the USA except to Canada, or from
Canada except to the USA, without a license.

If you are in the USA, use either Viacrypt PGP (licensed
for commercial use) or MIT PGP using RSAREF (limited to
personal, noncommercial use).  Outside of the USA, where
RSA is not patented, you may prefer to use a version of
PGP (2.6.i) that doesn't use RSAREF to avoid the
restrictions of that license.

If you are in a country where the IDEA cipher patent
holds in software (including the USA, Canada, and some
countries in Europe), make sure you are licensed to use
the IDEA cipher commercially before using PGP
commercially.  (No separate license is required to use
the freeware PGP for personal, noncommercial use).  For
direct IDEA licensing, contact Ascom Systec.

Ascom Systec has taken over the distribution of IDEA
licenses effective April 1, 1995. Erhard Widmer is the
person responsible for the sales aspects, and Peter
Hartmann is responsible for the technical aspects. They
can be reached as follows:

Erhard Widmer,  Ascom Systec AG, Dep't. CMVV      Phone  +41 64 56 59 83
Peter Hartmann, Ascom Systec AG, Dep't. CMN       Phone  +41 64 56 59 45

Fax:            +41 64 56 59 90
e-mail:         IDEA@ascom.ch
Mail address:   Gewerbepark, CH-5506 Maegenwil (Switzerland)

Don't sell PGP based on Philip Zimmermann's source code in
North America unless you are reselling for Viacrypt (because
they have an exclusive marketing agreement on Philip
Zimmermann's copyrighted code). (Selling shareware/freeware
disks or connect time is OK).  This restriction might be
lifted with PGP 3.0, since it is a complete rewrite by Colin
Plumb.  Distribution and use restrictions on that version are
still to be determined.

If you modify PGP (other than porting it to another platform
or adapting it to another compiler), don't call it PGP (TM)
or Pretty Good Privacy (TM) without Philip Zimmermann's
permission.


WHAT IS PHILIP ZIMMERMANN'S LEGAL STATUS?

Philip Zimmermann is under investigation for alleged violation
of export regulations, with a grand jury hearing evidence.
There is speculation that the Feds are trying to make an
example of Phil through prolonged and expensive legal
proceedings, thus reaping a reward of Fear, Uncertainty, and
Doubt to discourage development and use of strong crypto in the
USA.

Even though people in this country are considered innocent
until proven guilty, there is a problem with the system in that
it can take lots of money for innocent folks to defend
themselves.  Because of the broad implications for freedom,
privacy, and the First Amendment of the U. S. Constitution in
this case, I implore all of you who can to help out with Phil's
rather significant legal and travel expenses involved in his
defense.  Phil is a nice guy with a wife and two children to
support, and he has done a great deal in his PGP social
activism to help all of us.

To send a check or money order by mail, make it payable, NOT to
Phil Zimmermann, but to "Philip L. Dubois, Attorney Trust
Account."  Mail the check or money order to the following
address:

Philip Dubois
2305 Broadway
Boulder, CO USA 80304
(Phone #: 303-444-3885)

To send a wire transfer, your bank will need the following
information:

Bank: VectraBank
Routing #: 107004365
Account #: 0113830
Account Name: "Philip L. Dubois, Attorney Trust Account"

To contribute using your credit card (secured with PGP), simply
compose a message in plain ASCII text giving the following: the
recipient ("Philip L.  Dubois, Attorney Trust Account"); the
bank name of your VISA or MasterCard; the name which appears on
it (yours, hopefully :-)); a telephone number at which you can
be reached in case of problems; the card number; date of
expiry; and, most important, the amount you wish to donate.
(Make this last item as large as possible.) Then use PGP to
encrypt and ASCII-armor the message using Phil Dubois's public
key, distributed with PGP 2.6.2.  E-mail the output file to
Phil Dubois (dubois@csn.org).
Please be sure to use a "Subject:" line reading something like
"Phil Zimmermann Defense Fund" so he'll know to decrypt it
right away.


WHERE CAN I GET WINDOWS & DOS SHELLS FOR PGP?

http://www.ifi.uio.no/~staalesc/AutoPGP.html
http://www.dayton.net/~cwgeib
ftp://oak.oakland.edu/SimTel/msdos/security/apgp22b.zip
ftp://oak.oakland.edu/SimTel/win3/security/pgpw40.zip
http://alpha.netaccess.on.ca/~spowell/crypto/pwf31.zip
ftp://ftp.netcom.com/pub/dc/dcosenza/pgpw40.zip
ftp://Sable.ox.ac.uk/pub
ftp://ftp.firstnet.net/pub/windows/winpgp/pgpw40.zip  &lt;WinPGP's home site&gt;
http://www.firstnet.net/~cwgeib/welcom.html
ftp://ftp.netcom.com/pub/ec/ecarp/pgpwind.zip
http://www.eskimo.com/~joelm (Private Idaho)
ftp://ftp.eskimo.com/~joelm
http://www.xs4all.nl/~paulwag/security.htm
http://www.LCS.com/winpgp.html
ftp://mirrors.aol.com/mir01/circa/pub/pc/win3/util/pwf31.zip
http://netaccess.on.ca/~rbarclay/index.html
http://netaccess.on.ca/~rbarclay/pgp.html
ftp://ftp.leo.org/pub/comp/os/os2/crypt/gcppgp10.zip
ftp://ftp.leo.org/pub/comp/os/os2/crypt/pmpgp.zip
http://iquest.com/~aegisrcs

Compuserve:
Library 3, European Forum.
Library 6, NCSA Forum
PCWorld Online Forum.
WUGNET Forum.
WinShare Forum

See also the BBS list for PGP, above.


WHERE CAN I GET THE MACPGP KIT?

ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGP_icons.sit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkitSources.sit.hqx
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/MacPGPkit1.6.sit

OTHER MAC ADD-ONS

ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/ChainMail.0.7.sit
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/Eudora->PGP Scripts1.5.sit
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/pgp/mac/AppleScripts


WHERE IS THE PGP 3.0 API DRAFT?

The (prelim. draft) PGP 3.0 API is at:

ftp://ftp.netcom.com/pub/dd/ddt/crypto/crypto_info/950212 pgp3spec.txt
All comments on it for the PGP 3.0 API Team should be sent to:
<pgp@lsd.com>


WHAT OTHER FILE ENCRYPTION (DOS, MAC) TOOLS ARE THERE?

PGP can do conventional encryption only of a file (-c) option,
but you might want to investigate some of the other
alternatives if you do this a lot.  Alternatives include
Quicrypt and Atbash2 for DOS, DLOCK for DOS & UNIX, Curve
Encrypt (for the Mac), HPACK (many platforms), and a few
others.

Quicrypt is interesting in that it comes in two flavors:
shareware exportable and registered secure.  Atbash2 is
interesting in that it generates ciphertext that can be read
over the telephone or sent by Morse code.  DLOCK is a no-frills
strong encryption program with complete source code.  Curve
Encrypt has certain user-friendliness advantages.  HPACK is an
archiver (like ZIP or ARC), but with strong encryption.

A couple of starting points for your search are:

ftp://ftp.csn.net/mpj/qcrypt10.zip
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/file/
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/file/
(see ftp://ftp.csn.net/mpj/README for the ???????)
ftp://ftp.miyako.dorm.duke.edu/mpj/crypto/file/


HOW DO I SECURELY DELETE FILES (DOS)?

If you have the Norton Utilities, Norton WipeInfo is pretty
good.  I use DELETE.EXE in del110.zip, which is really good at
deleting existing files, but doesn't wipe "unused" space.
ftp://ftp.csn.net/mpj/public/del120.zip
ftp://ftp.demon.co.uk/pub/ibmpc/security/realdeal.zip


WHAT DO I DO ABOUT THE PASS PHRASE IN MY WINDOWS SWAP FILE?

The nature of Windows is that it can swap any memory to disk at
any time, meaning that all kinds of interesting things could
end up in your swap file.
ftp://ftp.firstnet.net/pub/windows/winpgp/wswipe.zip


WHAT EVER HAPPENED TO PGPfone(tm)?

PGPfone is in beta test for Macintosh users.  A Windows 95 version
is being developed.

http://web.mit.edu/network/pgpfone
ftp://net-dist.mit.edu/pub/PGPfone/README
ftp.hacktic.nl/pub/pgp/pgpfone


WHERE DO I GET NAUTILUS?
Bill Dorsey, Pat Mullarky, and Paul Rubin have come out with a
program called Nautilus that enables you to engage in secure
voice conversations between people with multimedia PCs and
modems capable of at least 7200 bps (but 14.4 kbps is better).
See

ftp://ripem.msu.edu/pub/crypt/GETTING_ACCESS
ftp://ripem.msu.edu/pub/crypt/other/nautilus-phone-0.9.2-source.tar.gz

ftp://ftp.csn.net/mpj/README
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/voice/naut092.zip

ftp://ftp.netcom.com/pub/mp/mpj/README
ftp://ftp.netcom.com/pub/mp/mpj/I_will_not_export/crypto_???????/voice/naut092.zip

ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
ftp://miyako.dorm.duke.edu/mpj/crypto/voice/naut092.zip

ftp://ftp.dsi.unimi.it/pub/security/crypt/cypherpunks/nautilus

The Colorado Catacombs BBS 303-772-1062

ftp://ftp.ox.ac.uk/pub/crypto/misc


HOW DO I ENCRYPT MY DISK ON-THE-FLY?

Rather than manually encrypting and decrypting files, it is
sometimes easier (and therefore more secure, because you are
more likely to use it) to use a utility that encrypts or
decrypts files on the fly as you use them in your favorite
applications.  This also allows you to automatically encrypt
temporary files generated by your applications if they are on
the encrypted volume.

Secure File System (SFS) is a DOS device driver that encrypts
an entire partition on the fly using SHA in feedback mode.

Secure Drive also encrypts an entire DOS partition, using IDEA,
which is patented.

Secure Device is a DOS device driver that encrypts a virtual,
file-hosted volume with IDEA.

Cryptographic File System (CFS) is a Unix device driver that
uses DES.

http://www.cs.auckland.ac.nz/~pgut01/sfs.html
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/disk/
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/disk/
(see
ftp://ftp.csn.net/mpj/README for the ???????)
ftp://miyako.dorm.duke.edu/mpj/crypto/disk/
ftp://ftp.nic.surfnet.nl/surfnet/net-security/encryption/disk/
ftp://ftp.demon.co.uk/pub/ibmpc/secdev/secdev14.arj


EMAIL/PGP LINKS

http://cag-www.lcs.mit.edu/mailcrypt/ (EMACS LISP)


WHERE IS PGP'S COMPETITION?

RIPEM is the second most popular freeware email encryption
package.  I like PGP better for lots of reasons, but if for
some reason you want to check or generate a PEM signature,
RIPEM is available at ripem.msu.edu.  There is also an
exportable RIPEM/SIG.

ftp://ripem.msu.edu/pub/GETTING_ACCESS


HOW DO I PUBLISH MY PGP PUBLIC KEY?

Send mail to one of these addresses with the single word "help"
in the subject line to find out how to use them.  These servers
sychronize keys with each other.

pgp-public-keys@keys.pgp.net
pgp-public-keys@keys.de.pgp.net
pgp-public-keys@keys.no.pgp.net
pgp-public-keys@keys.uk.pgp.net
pgp-public-keys@keys.us.pgp.net
pgp-public-keys@burn.ucsd.edu
pgp-public-keys@pgp.cc.gatech.edu
pgp-public-keys@goliat.upc.es
pgp-public-keys@demon.co.uk
pgp-public-keys@dsi.unimi.it
pgp-public-keys@ext221.sra.co.jp
pgp-public-keys@fbihh.informatik.uni-hamburg.de
pgp-public-keys@jpunix.com
pgp-public-keys@kiae.su
pgp-public-keys@kr.com
pgp-public-keys@kram.org
pgp-public-keys@kub.nl
pgp-public-keys@nexus.hpl.hp.com
pgp-public-keys@pgp.ai.mit.edu
pgp-public-keys@pgp.barclays.co.uk
pgp-public-keys@gondolin.org
pgp-public-keys@pgp.dhp.com
pgp-public-keys@pgp.hpl.hp.com
pgp-public-keys@pgp.iastate.edu
pgp-public-keys@pgp.kr.com
pgp-public-keys@pgp.mit.edu
pgp-public-keys@pgp.ox.ac.uk
pgp-public-keys@pgp.pipex.net
pgp-public-keys@srce.hr
pgp-public-keys@sw.oz.au
pgp-public-keys@uit.no
pgp-public-keys@vorpal.com
pgp-public-keys@nic.surfnet.nl

WWW interface to the key servers:
http://www-swiss.ai.mit.edu/~bal/pks-toplev.html
http://www-lsi.upc.es/~alvar/pks/pks-toplev.html

For US $20/year or so, you can have your key officially certified
and published in a "clean" key database that is much less
susceptible to denial-of-service attacks than the other key
servers.  Send mail to
info-pgp@Four11.com for information, or
look at
http://www.Four11.com/

PGP public keys which are stored on SLED's Four11 Key Server are
now retrievable by fingering UserEmailAddress@publickey.com.
Example:  My e-mail addresses is mpj@csn.org
finger mpj@csn.org@publickey.com

My key (mpj8) is at Four11.com, at
ftp://ftp.csn.net/mpj/mpj8.asc,
on the key servers, on my BBS, and available by finger.


WHICH FAQ IS THE OFFICIAL ONE?

The main alt.security.pgp FAQ is published by Jeff A. Licquia

<jalicqui@prairienet.org> and is available at

ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt

This shorter FAQ just covers a few of the most frequent
questions and points you to the main FAQ for more answers.
This file is

ftp://ftp.csn.net/mpj/getpgp.asc,

There are some other periodic FAQ-related postings, too, like
the miniFAQ posted by Andre Bacard, which is more about
promoting the use of PGP than where to get it or how to use
it.

FAQs are also posted to
news.answers and
alt.answers, and
archived at rtfm.mit.edu.


CAN I COPY AND REDISTRIBUTE THIS FAQ?

Permission is granted to distribute unmodified copies of this FAQ.  This
information is also in http://www.csn.net/~mpj, which you may link to or
adapt for use at your own web sites.
                 ___________________________________________________________
                |                                                           |
|\  /| |        | Michael Paul Johnson  Colorado Catacombs BBS 303-772-1062 |
| \/ |o|        | PO Box 1151, Longmont CO 80502-1151 USA   Jesus is alive! |
|    | | /  _   | mpj@csn.org aka mpj@netcom.com m.p.johnson@ieee.org       |
|    |||/  /_\  | ftp://ftp.csn.net/mpj/README.MPJ          CIS: 71331,2332 |
|    |||\  (    | ftp://ftp.netcom.com/pub/mp/mpj/README  -. --- ----- .... |
|    ||| \ \_/  | PGPprint=F2 5E A1 C1 A6 CF EF 71  12 1F 91 92 6A ED AE A9 |
                |___________________________________________________________|


-----BEGIN PGP SIGNATURE-----
Version: 2.7.1

iQCVAwUBMICOWPX0zg8FAL9FAQEO1AQAvLSMXX9J/nZ/4Wc/TTS9a60e+G5vbvTR
KU2+KixGhKfHkH5eb9mHwUtuDTiPJSRvnyfx0EOrgs7b5cC8hZsxKnlyfNnsvEG+
fdxGxy1h90L69CUVFD5CGvIbTlTo7a1xT5tYj/knqTO0OH4WOZVVh60uhGpuzevb
0+99R2mUJoA=
=H2Bc
-----END PGP SIGNATURE-----