1996-01-15 - Where to get PGP FAQ update
Header Data
From: Michael Paul Johnson <mpj@netcom.com>
To: cypherpunks@toad.com
Message Hash: fd2daf825e1a4eab41ef621237e54278abb3789f52837331a7645174ec4404e2
Message ID: <Pine.SUN.3.91.960115134703.2645A-100000@netcom6>
Reply To: N/A
UTC Datetime: 1996-01-15 21:50:20 UTC
Raw Date: Mon, 15 Jan 96 13:50:20 PST
Raw message
From: Michael Paul Johnson <mpj@netcom.com>
Date: Mon, 15 Jan 96 13:50:20 PST
To: cypherpunks@toad.com
Subject: Where to get PGP FAQ update
Message-ID: <Pine.SUN.3.91.960115134703.2645A-100000@netcom6>
MIME-Version: 1.0
Content-Type: text/plain
-----BEGIN PGP SIGNED MESSAGE-----
WHERE TO GET THE PRETTY GOOD PRIVACY PROGRAM (PGP) FAQ
Revised 14 January 1996
Disclaimer -- I haven't recently verified all of the information in this
file, and much of it is probably out of date. If you discover inaccurate or
out of date information, please let me know at mpj@netcom.com. Thanks!
For questions not covered here, please see the MAIN alt.security.pgp FAQ at
rtfm.mit.edu.
WHAT IS THE LATEST VERSION OF PGP?
Platform(s) Latest Version Distribution File Names
__________________________________________________________________________
| | | |
|DOS, Unix, | Viacrypt PGP 2.7.1 | disk sets |
|Mac, Windows, | | |
|or WinCIM/CSNav | | |
|________________|_____________________|_________________________________|
| | | |
|Hardware-based | Viacrypt 2.7.1 | disk sets |
|PGP/Token | | |
|________________|_____________________|_________________________________|
| | | |
|DOS, Unix, VAX, | MIT PGP 2.6.2 | pgp262.zip (DOS + docs) |
|others | | pgp262s.zip (source) |
| | | pg262s.zip source on CompuServe |
| | | pgp262s.tar.gz (source) |
| | | pgp262s.tar.Z (source) |
| | | pgp262dc.zip (documentation) |
| | | pg262d.zip (docs on CompuServe) |
|________________|_____________________|_________________________________|
| | | |
|Macintosh | MIT PGP 2.6.2 | MacPGP2.6.2-130v1.hqx |
| | Mac version 1.3.0 | m262pgp.hqx (same as above) |
| | | MacPGP2.6.2-130v1.source.asc |
| | | m262pgps.asc (same as above) |
| | PGPfone 1.0 beta 5 | |
|________________|_____________________|_________________________________|
| | | |
|Power Mac | Zbigniew's "beta" | Fatmacpgp262b131.sea.hqx |
| | | f262pgp.hqx (same as above) |
| | | Fatmacpgp262b131.src.hqx |
| | | f262pgps.hqx (same as above) |
|________________|_____________________|_________________________________|
| | | |
|Amiga | PGP 2.6.2 Amiga 1.4 | pgp262-a14-000.lha |
| | | pgp262-a14-020.lha |
| | | pgp262-a14-src.lha |
| | | PGPAmi262is.lha (international) |
|________________|_____________________|_________________________________|
| | | |
|Atari | Atari MIT PGP 2.6.2 | pgp262st.zip |
| | Atari International | pgp262ib.zip |
|________________|_____________________|_________________________________|
| | | |
|OS/2 | MIT PGP 2.6.2 | pgp262-os2.zip |
| | | on ftp.gibbon.com |
|________________|_____________________|_________________________________|
| | | |
|Non-USA version | PGP 2.6.2i from | pgp262i.zip (DOS executable) |
|to avoid RSAREF | Stale Schumacher, | pgp262ix.zip (32-bit DOS) |
|license. | Kai Uwe Rommel, | pgp262i-os2.zip (OS/2 exe) |
| | Harald Denker, and | pgp262ib.zip (Atari) |
| | Peter Simons | PGPAmi262is.lha (Amiga) |
| | | pgp262is.zip (source) |
| | | pgp262is.tar.gz (Unix source) |
| | | |
| | Canadian "mutant" | MacPGP262ca124.exe.sea.hqx |
| | not for USA use | MacPGP262ca124.src.sea.hqx |
|________________|_____________________|_________________________________|
| | | |
|Unofficial | PGP 2.6.2ui | pgp262iu.zip |
|non-USA version | Not for use in the | |
|fully under Gnu | USA because of | |
|public license | probable patent | |
|(based on 2.3a | infringement | |
|code) | problems. | |
|________________|_____________________|_________________________________|
BUG
Digital signatures made with keys 2034-2048 bits in length may be corrupt if
made by MIT PGP 2.6.2, but I think this has been fixed in PGP 2.6.2i. To fix
this in the source code, change the line in function
make_signature_certificate in crypto.c from
byte inbuf[MAX_BYTE_PRECISION], outbuf[MAX_BYTE_PRECISION];
to
byte inbuf[MAX_BYTE_PRECISION], outbuf[MAX_BYTE_PRECISION+2];
See also
http://www.ifi.uio.no/~staalesc/PGP/bugs.html. and
http://www.mit.edu:8001/people/warlord/pgp-faq.html
WHERE CAN I GET VIACRYPT PGP?
Viacrypt has versions of PGP complete with licenses for commercial use of the
RSA and IDEA encryption algorithms. Viacrypt PGP comes in executable code
only (no source code), but it is based on (and just as secure as) the
freeware PGP. Viacrypt PGP for Windows is the only real Windows PGP (and even
it is partially a quickwin executable that looks like a DOS port). Still, it
is much better from an interface standpoint than all the others.
Please contact ViaCrypt for pricing (about US $100 up), the latest platforms,
and availablity at 800-536-2664 8:30am to 5:00pm MST, Monday - Friday. They
accept VISA, MasterCard, AMEX and Discover credit cards.
Viacrypt is currently working on preparing the release of version 4.0
(personal) and version 4.0 (business). The business edition adds a few extra
key management features (like master keys) that are of use to businesses, but
not really useful for persnal email.
ViaCrypt Products
Mail: 9033 N. 24th Avenue
Suite 7
Phoenix AZ 85021-2847
Phone: (602) 944-0773
Fax: (602) 943-2601
Internet: viacrypt@acm.org
Compuserve: 70304.41
WHERE IS PGP ON THE WORLD WIDE WEB?
* http://web.mit.edu/network/pgp-form.html (U. S. PGP primary distribution
site)
* http://web.mit.edu/network/pgpfone (PGP Fone primary distribution site)
* http://www.ifi.uio.no/~staalesc/PGP/home.html (International PGP
primary distribution site)
* http://www.ifi.uio.no/~staalesc/PGP/language.html (Language file master
list)
* http://www.epic.org/privacy/tools.html
* http://rschp2.anu.edu.au:8080/crypt.html
* http://www.eff.org/pub/Net_info/Tools/Crypto/
* http://community.net/community/all/home/solano/sbaldwin
* http://www.cco.caltech.edu/~rknop/amiga_pgp26.html
* http://www.csua.berkeley.edu/cypherpunks/home.html
* http://www.leo.org/archive/os2/crypt/
* http://colossus.net/wepinsto/wshome.html
* http://www.cs.hut.fi/ssh/crypto/
WHERE CAN I FTP PGP IN NORTH AMERICA?
If you are in the USA or Canada, you can get PGP by following the
instructions in any of:
* ftp://net-dist.mit.edu/pub/PGP/README
* ftp://ftp.csn.net/mpj/README.MPJ
* ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
* ftp://ftp.netcom.com/pub/dd/ddt/crypto/READ_ME_FIRST!
* ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_ftp_instructions.txt
* ftp://ftp.eff.org
* Follow the instructions found in README.Dist that you get from one
of:
* ftp://ftp.eff.org/pub/Net_info/Tools/Crypto/README.Dist
* gopher.eff.org, 1/Net_info/Tools/Crypto
* gopher://gopher.eff.org/11/Net_info/Tools/Crypto
* http://www.eff.org/pub/Net_info/Tools/Crypto/
* ftp://ftp.csua.berkeley.edu/pub/cypherpunks/pgp/
* ftp://ftp.gibbon.com/pub/pgp/README.PGP
* http://www.gibbon.com/getpgp.html
(OS/2 users see also /pub/gcp/gcppgp10.zip)
* ftp://ftp.wimsey.bc.ca/pub/crypto/software/README
WHERE IS PGP ON COMPUSERVE?
GO NCSAFORUM. Follow the instructions there to gain access to Library 12:
Export Controlled.
Compuserve file names used to be seriously limited, so look for PGP262.ZIP,
PG262S.ZIP (source code), PGP262.GZ (Unix source code) and PG262D.ZIP
(documentation only).
AOL
Go to the AOL software library and search "PGP" or ftp from
ftp://ftp.csua.berkeley.edu/pub/cypherpunks/pgp or another site listed above
or below.
It is possible to get PGP from ftp sites with hidden directories
with the following trick: (1) View the README file with the hidden
directory name in it, then quickly (2) Start a new ftp connection,
specifiying the hidden directory name with the ftp site's address, like
ftp.csn.net/mpj/I_will_not_export/crypto_xxxxxxx (where the xxxxxxx is
replaced with the current character string).
WHAT BULLETIN BOARD SYSTEMS CARRY PGP?
MANY BBS carry PGP. The following carry recent versions of PGP and allow free
downloads of PGP.
* US
303-343-4053 Hacker's Haven, Denver, CO Lots of crypto stuff here.
303-772-1062 Colorado Catacombs BBS, Longmont CO
8 data bits, 1 stop, no parity, up to 28,800 bps.
Use ANSI terminal emulation.
For free access: log in with your own name, answer the questions.
314-896-9309 The KATN BBS
317-887-9568 Computer Virus Research Center (CVRC) BBS, Indianapolis, IN
Login First Name: PGP Last Name: USER Password: PGP
501-791-0124, 501-791-0125 The Ferret BBS, North Little Rock, AR
Login name: PGP USER Password: PGP
506-457=0483 Data Intelligence Group Corporation BBS
508-668-4441 Emerald City, Walpole, MA
601-582-5748 CyberGold BBS
612-690-5556, !CyBERteCH SeCURitY BBS! Minneapolis MN, - write a
letter to the sysop requesting full access.
914-667-4567 Exec-Net, New York, NY
915-587-7888, Self-Governor Information Resource, El Paso, Texas
* UK
01273-688888
* GERMANY
+49-781-38807 MAUS BBS, Offenburg - angeschlossen an das MausNet
+49-521-68000 BIONIC-BBS Login: PGP
WHERE CAN I FTP PGP CLOSE TO ME?
* AU
ftp://ftp.cc.adfa.oz.au/pub/security/pgp23/macpgp2.3.cpt.hqx
ftp://ftp.iinet.net.au:mirrors/pgp(Australia ONLY)
ftp://plaza.aarnet.edu.au/micros/mac/umich/misc/documentation/howtomacpgp2.7.txt
* DE
ftp://ftp.informatik.tu-muenchen.de/pub/comp/os/os2/crypt
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/pgp
ftp://ftp.fu-berlin.de/mac/sys/init/MacPGP2.6uiV1.2en.cpt.hqx.gz
ftp://ftp.tu-clausthal.de/pub/atari/misc/pgp/pgp261b.lzh
ftp://ftp.uni-kl.de/pub/aminet/util/crypt
ftp://ftp.uni-paderborn.de/pub/aminet/util/crypt
ftp://ftp.westfalen.de/pd/Atari/Pgp(Atari)
ftp://tupac-amaru.informatik.rwth-aachen.de
* ES
ftp://goya.dit.upm.es
ftp://encomix.es/pub/pgp/pgp262i/pgp262i.zip
* IT
ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP
* FI
ftp://ftp.funet.fi/pub/crypt
* NL
ftp://ftp.nl.net/pub/crypto/pgp
ftp.nic.surfnet.nl/surfnet/net-security/encryption/pgp
* NZ
ftp://ftphost.vuw.ac.nz
ftp://rs950.phys.waikato.ac.nz/pub/incoming/pgp(New Zealand ONLY)
* SE
ftp://leif.thep.lu.se
* TW
ftp://nctuccca.edu.tw/PC/wuarchive/pgp/
* UK
ftp://ftp.demon.co.uk/pub/amiga/pgp
ftp://ftp.ox.ac.uk/pub/crypto/pgp
ftp://src.doc.ic.ac.uk/aminet/amiga-boing
ftp://unix.hensa.ac.uk/pub/uunet/pub/security/virus/crypt/pgp
* USA
ftp://atari.archive.umich.edu/pub/atari/Utilities/pgp261st.zip (Atari)
ftp://ftp.leo.org/pub/comp/os/os2/crypt
ftp://wuarchive.wustl.edu/pub/aminet/util/crypt
ftp://ftp.netcom.com/pub/gr/grady/PGP_NOT_FOR_EXPORT/MacPGP262ca124.exe.sea.hqx
ftp://ftp.netcom.com/pub/gr/grady/PGP_NOT_FOR_EXPORT/MacPGP262ca124.src.sea.hqx
* ZA
ftp://ftp.ee.und.ac.za/pub/crypto/pgp
/pub/archimedes
/pub/pgp
/pub/mac/MacPGP
HOW CAN I GET PGP BY EMAIL?
If you have access to email, but not to ftp, send a message saying
"help" to
ftpmail@decwrl.dec.com, mailserv@nic.funet.fi,
or ftp-request@netcom.com
To get pgp 2.6.2i by email:
Send a message to
pgp@hypnotech.com with your request in the
Subject: field.
Subject What you will get GET pgp262i.zip MS-DOS executable
(uuencoded) GET pgp262is.zip MS-DOS source code (uuencoded) GET
pgp262is.tar.gz UNIX source code (uuencoded)
For FAQ
information, send e-mail to mail-server@rtfm.mit.edu
with
send usenet/news.answers/ftp-list/faq
in the body of the message.
WHERE IS MACPGP?
ftp://ftp.csn.net/mpj/README.MPJ
ftp://ftp.confusion.net/pub/pgp/mac-pgp/README
ftp://highway.alinc.com/users/jordyn/mac-pgp/README
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
WHERE IS VAX PGP?
Get the full PGP distribution, then get VAXPGP262.TAR.Z from the
berkeley site for additional files needed to compile PGP for the VAX and
a precompiled version for VAX/VMS 5.5-2.
WHERE CAN I GET MORE PGP INFORMATION?
http://www.csn.net/~mpj
ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt
ftp://starfire.ne.uiuc.edu/preston/pgpquick.ps(and pgpquick.doc)
http://www.prairienet.org/~jalicqui/
http://www.mit.edu:8001/people/warlord/pgp-faq.html
http://draco.centerline.com:8080/~franl/crypto.html
http://draco.centerline.com:8080/~franl/pgp/bug0.html
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa_paper.ps.gz
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa.paper
http://www.cco.caltech.edu/~rknop/amiga_pgp26.html
Email pgp-help@hks.net
ftp://ds.internic.net/internet-drafts/draft-pgp-pgpformat-00.txt
ftp://ds.internic.net/internet-drafts/draft-ietf-pem-mime-08.txt
http://www.cis.ohio-state.edu/
ftp://ftp.csn.net/mpj/public/pgp/MacPGP262_manual.sit.hqx
http://www-mitpress.mit.edu/mitp/recent-books/comp/pgp-source.html
http://web.cnam.fr/Network/Crypto/(c'est en français)
http://web.cnam.fr/Network/Crypto/survey.html(en anglais)
http://www2.hawaii.edu/~phinely/MacPGP-and-AppleScript-FAQ.html
ftp://ftp.prairienet.org/pub/providers/pgp/pgpbg11.asc(Beginner's Guide)
http://pluto.cc.umr.edu/~steve/Privacy_Page.html/Where_is_PGP.html
http://www.netresponse.com/zldf
http://bookweb.cwis.uci.edu:8042/Orders/ubipgp.html
http://www.geopages.com/Athens/1802/pgpfaq.html
http://www.pgp.net/pgp
http://www.sydney.sterling.com:8080/~ggr/pgpmoose.html
Beginner's Guide: send email to slutsky@lipschitz.sfasu.edu, subject: bg2pgp
WHAT ARE SOME GOOD PGP BOOKS?
Protect Your Privacy: A Guide for PGP Users
by William Stallings
Prentice Hall PTR
ISBN 0-13-185596-4
US $19.95
This is a good technical manual for PGP for most users, and makes a
better reference than the "official" documentation that comes with PGP.
I recommend it highly.
PGP: Pretty Good Privacy
by Simson Garfinkel
O'Reilly & Associates, Inc.
ISBN 1-56592-098-8
US $24.95
E-Mail Security: How to Keep Your Electronic Mail Private
"Covers PGP/PEM"
by Bruce Schneier
Wiley Publishing
The Computer Privacy Handbook: A Practical Guide to E-Mail Encryption,
Data Protection, and PGP PRivacy Software
by Andre Bacard
Peachpit Press
ISBN 1-56609-171-3
US $24.95
800-283-9444 or 510-548-4393
This is an interesting book on the sociology and politics of privacy in
the computer age as well as a practical manual on using PGP. Must
reading for all members of Congress, presidential staff, members of
Parliament, and ordinary citizens who would like to take reasonable
steps to protect themselves from some forms of crime that have been
made easy by technology.
THE OFFICIAL PGP USER'S GUIDE
by Philip R. Zimmerman
MIT Press
April 1995 - 216 pp. - paper - US $14.95 - ISBN 0-262-74017-6 ZIMPP
Standard PGP documentation neatly typeset and bound.
PGP SOURCE CODE AND INTERNALS
by Philip R. Zimmerman
April 1995 - 804 pp. -
US $55.00 - 0-262-24039-4 ZIMPH
This is a handy printed reference with commented source code for PGP
2.6.2 with great educational value. This is a great way to study some
of the computer science and information theory behind the world's best
email privacy tool without having either a computer or reams of
printouts handy.
Recommended reading on long airline flights for serious students of
computer science and computer security.
Ordering information for the last two books:
Call US Toll Free 1-800-356-0343 or 617-625-8569.
Cite code 5CSC and number 661.
Allow 4-6 weeks for delivery within North America.
Allow 8-12 weeks for delivery outside of North America.
How to Use PGP, 61 pages, (Pub #121) from the Superior
Broadcasting Company,
Box 1533-N, Oil City, PA 16301, phone: (814) 678-8801 (about US
$10-$13).
WHERE CAN I GET PGP LANGUAGE MODULES?
These are suitable for most PGP versions.
http://www.ifi.uio.no/~staalesc/PGP/language.html
ftp://ftp.ifi.uio.no/pub/pgp/doc/
* German
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_german.txt
ftp://ftp.csn.net/mpj/public/pgp/pgp_german.txt
ftp://ftp.csn.net/mpj/public/pgp/PGP_german_docs.lha
ftp://ftp.informatik.uni-hamburg.de:/pub/virus/crypt/pgp/language/pgp_german.asc
ftp://ftp.leo.org/pub/comp/os/os2/crypt/pgp262i-german.zip
* Italian
ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.italian.tar.gz
ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/PGP/pgp-lang.italian.tar.gz</A
*
ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.italian.tar.gz
* Japanese
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_japanese.tar.gz
ftp://ftp.csn.net/mpj/public/pgp/pgp-msgs-japanese.tar.gz
* Lithuanian
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_lithuanian.zip
ftp://ftp.csn.net/mpj/public/pgp/pgp23ltk.zip
* Norwegian
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_norwegian.tar.gz
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26i_norwegian.zip
* Romanian
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_romanian.tar.gz
ftp://ftp.encomix.es/pub/pgp/lang/pgp-romanian.zip
http://www.info.polymtl.ca/zuse/tavi/www/archive/ro_2.6.2.zip
http://www.info.polymtl.ca/zuse/tavi/www/archive/language.txt
* Russian
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_russian.zip
ftp://ftp.kiae.su/unix/crypto/pgp/pgp26ru.zip
ftp://ftp.csn.net/mpj/public/pgp/pgp26ru.zip
* Spanish
ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.spanish.tar.gz
ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp-lang.spanish.tar.gz
ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.spanish.tar.gz
ftp://ftp.encomix.es/pub/pgp/lang/pgp262i-spanish.zip
* Swedish
ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_swedish.txt
ftp://ftp.csn.net/mpj/public/pgp/pgp_swedish.txt
IS PGP MORALLY RIGHT?
PGP itself is morally neutral. What you do with it is not. Protecting
privacy, prevention of criminal theft, and taking due diligence to protect
certain business information (like credit card numbers, customer lists, etc.)
are good uses for PGP. Concealing criminal or other immoral activity is
wrong. You can fool the police some of the time, but you can't fool God.
IS PGP LEGAL?
Pretty Good Privacy is legal if you follow these rules:
* Don't export PGP from the USA except to Canada, or from Canada except to
the USA, without a license.
* If you are in the USA, use either Viacrypt PGP (licensed for commercial
use) or MIT PGP using RSAREF (limited to personal, noncommercial use).
Outside of the USA, where RSA is not patented, you may prefer to use a
version of PGP (2.6.i) that doesn't use RSAREF to avoid the restrictions of
that license.
* If you are in a country where the IDEA cipher patent holds in software
(including the USA, Canada, and some countries in Europe), make sure you are
licensed to use the IDEA cipher commercially before using PGP commercially.
(No separate license is required to use the freeware PGP for personal,
noncommercial use). For direct IDEA licensing, contact Ascom Systec.
Ascom Systec has taken over the distribution of IDEA licenses effective April
1, 1995. Erhard Widmer is the person responsible for the sales aspects, and
Peter Hartmann is responsible for the technical aspects. They can be reached
as follows:
Erhard Widmer, Ascom Systec AG, Dep't. CMVV Phone +41 64 56
59 83
Peter Hartmann, Ascom Systec AG, Dep't. CMN Phone +41 64 56 59 45
Fax: +41 64 56 59 90
e-mail: IDEA@ascom.ch
Mail address: Gewerbepark, CH-5506 Maegenwil (Switzerland)
* Don't sell PGP based on Philip Zimmermann's source code in North America
unless you are reselling for Viacrypt (because they have an exclusive
marketing agreement on Philip Zimmermann's copyrighted code). (Selling
shareware/freeware disks or connect time is OK). This restriction does not
apply to PGP 3.0, since it is a complete rewrite by Colin Plumb. Distribution
and use restrictions on that version are still to be determined.
* If you modify PGP (other than porting it to another platform or adapting
it to another compiler), don't call it PGP (TM) or Pretty Good Privacy (TM)
without Philip Zimmermann's permission.
WHAT IS PHILIP ZIMMERMANN'S LEGAL STATUS?
Philip Zimmermann was under investigation for alleged violation of export
regulations, with a grand jury hearing evidence for about 28 months, ending
11 January 1996. The Federal Government chose not to comment on why it
decided to not prosecute, nor is it likely to. The Commerce Secretary stated
that he would seek relaxed export controls for cryptographic products, since
studies show that U. S. industry is being harmed by current regulations.
Philip endured some serious threats to his livelihood and freedom, as well as
some very real legal expenses, for the sake of your right to electronic
privacy.
Although there was no direct and open legal battle, there was a lot of behind
the scenes work by Phil's legal team, headed by Philip L. Dubois
(dubois@dubois.com). GREAT JOB! If you ever are in the situation of needing
a good lawyer to help you with similar Federal harassment, consider yourself
fortunate if Mr. Dubois will take your case.
Philip Zimmermann is breathing more easily these days, still a free man and
able to work to support his family. The battle is won, but the war is not
over. The regulations that caused him so much grief and which continue to
dampen cryptographic development, harm U. S. industry, and do violence to the
U. S. National Security by eroding the First Ammendment of the U. S.
Constitution and encouraging migration of cryptographic industry outside of
the U. S. A. are still on the books. If you are a U. S. Citizen, please
write to your U. S. Senators, Congressional Representative, President, and
Vice President pleading for a more sane and fair cryptographic policy.
WHERE CAN I GET WINDOWS & DOS SHELLS FOR PGP?
http://www.ifi.uio.no/~staalesc/AutoPGP.html
http://www.dayton.net/~cwgeib
ftp://oak.oakland.edu/SimTel/msdos/security/apgp22b.zip
ftp://oak.oakland.edu/SimTel/win3/security/pgpw40.zip
http://alpha.netaccess.on.ca/~spowell/crypto/pwf31.zip
ftp://ftp.netcom.com/pub/dc/dcosenza/pgpw40.zip
ftp://Sable.ox.ac.uk/pub
http://www.firstnet.net/~cwgeib/welcom.html
ftp://ftp.netcom.com/pub/ec/ecarp/pgpwind.zip
http://www.eskimo.com/~joelm(Private Idaho)
ftp://ftp.eskimo.com/~joelm
http://www.xs4all.nl/~paulwag/security.htm
http://www.LCS.com/winpgp.html
ftp://mirrors.aol.com/mir01/circa/pub/pc/win3/util/pwf31.zip
http://netaccess.on.ca/~rbarclay/index.html
http://netaccess.on.ca/~rbarclay/pgp.html
ftp://ftp.leo.org/pub/comp/os/os2/crypt/gcppgp10.zip
ftp://ftp.leo.org/pub/comp/os/os2/crypt/pmpgp.zip
http://iquest.com/~aegisrcs
Compuserve:
Library 3, European Forum.
Library 6, NCSA Forum
PCWorld Online Forum.
WUGNET Forum.
WinShare Forum
See also the BBS list for PGP, above.
WHERE CAN I GET THE MACPGP KIT?
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGP_icons.sit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkitSources.sit.hqx
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/MacPGPkit1.6.sit
OTHER MAC ADD-ONS
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/ChainMail.0.7.sit
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/Eudora->PGPScripts1.5.sit
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/pgp/mac/AppleScripts
WHAT OTHER FILE ENCRYPTION (DOS, MAC) TOOLS ARE THERE?
PGP can do conventional encryption only of a file (-c) option, but
you might want to investigate some of the other alternatives if you do
this a lot. Alternatives include Quicrypt and Atbash2 for DOS, DLOCK2 for
DOS & UNIX, Curve Encrypt (for the Mac), HPACK (many platforms), and a
few others.
Quicrypt is interesting in that it comes in two flavors:
shareware exportable and registered secure. Atbash2 is interesting in
that it generates ciphertext that can be read over the telephone or sent
by Morse code. DLOCK is a no-frills strong encryption program with
complete source code. Curve Encrypt has certain user-friendliness
advantages. HPACK is an archiver (like ZIP or ARC), but with strong
encryption. A couple of starting points for your search are:
ftp://ftp.csn.net/mpj/qcrypt11.zip
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/file/
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/file/
ftp://ftp.csn.net/mpj/README for the ???????)
ftp://ftp.miyako.dorm.duke.edu/mpj/crypto/file/
HOW DO I SECURELY DELETE FILES (DOS)?
If you have the Norton Utilities, Norton WipeInfo is pretty good. I use
DELETE.EXE in del110.zip, which is really good at deleting existing files,
but doesn't wipe "unused" space.
ftp://ftp.csn.net/mpj/public/del120.zip
ftp://ftp.demon.co.uk/pub/ibmpc/security/realdeal.zip
WHAT DO I DO ABOUT THE PASS PHRASE IN MY WINDOWS SWAP FILE?
The nature of Windows is that it can swap any memory to disk at any time,
meaning that all kinds of interesting things could end up in your swap file.
ftp://ftp.firstnet.net/pub/windows/winpgp/wswipe.zip
WHERE DO I GET PGPfone(tm)?
PGPfone is in beta test for Macintosh users. A Windows 95 version is
being developed.
http://web.mit.edu/network/pgpfone
ftp://net-dist.mit.edu/pub/PGPfone/README
ftp.hacktic.nl/pub/pgp/pgpfone
WHERE DO I GET NAUTILUS?
Bill Dorsey, Pat Mullarky, and Paul Rubin have come out with a program called
Nautilus that enables you to engage in secure voice conversations between
people with multimedia PCs and modems capable of at least 7200 bps (but 14.4
kbps is better). See
ftp://ripem.msu.edu/pub/crypt/GETTING_ACCESS
ftp://ripem.msu.edu/pub/crypt/other/nautilus-phone-0.9.2-source.tar.gz
ftp://ftp.csn.net/mpj/README
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/voice/naut092.zip
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
ftp://miyako.dorm.duke.edu/mpj/crypto/voice/naut092.zip
ftp://ftp.dsi.unimi.it/pub/security/crypt/cypherpunks/nautilus
ftp://ftp.ox.ac.uk/pub/crypto/misc
The Colorado Catacombs BBS 303-772-1062
HOW DO I ENCRYPT MY DISK ON-THE-FLY?
Rather than manually encrypting and decrypting files, it is sometimes easier
(and therefore more secure, because you are more likely to use it) to use a
utility that encrypts or decrypts files on the fly as you use them in your
favorite applications. This also allows you to automatically encrypt
temporary files generated by your applications if they are on the encrypted
volume.
Secure File System (SFS) is a DOS device driver that encrypts an entire
partition on the fly using SHA in feedback mode.
Secure Drive also encrypts an entire DOS partition, using IDEA, which is
patented.
Secure Device is a DOS device driver that encrypts a virtual, file-hosted
volume with IDEA.
Cryptographic File System (CFS) is a Unix device driver that uses DES.
http://www.cs.auckland.ac.nz/~pgut01/sfs.html
ftp://ftp.informatik.uni-hamburg.de/pub/virus/crypt/disk/
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/disk/
ftp://ftp.csn.net/mpj/README for the ???????)
ftp://miyako.dorm.duke.edu/mpj/crypto/disk/
ftp://ftp.nic.surfnet.nl/surfnet/net-security/encryption/disk/
ftp://ftp.demon.co.uk/pub/ibmpc/secdev/secdev14.arj
WHERE IS PGP'S COMPETITION?
RIPEM is the second most popular freeware email encryption package.
I like PGP better for lots of reasons, but if for some reason you want
to check or generate a PEM signature, RIPEM is available at
ripem.msu.edu. There is also an exportable RIPEM/SIG.
ftp://ripem.msu.edu/pub/GETTING_ACCESS
HOW DO I PUBLISH MY PGP PUBLIC KEY?
Send mail to one of these addresses with the single word "help" in the
subject line to find out how to use them. These servers sychronize keys with
each other.
pgp-public-keys@keys.pgp.net
pgp-public-keys@keys.de.pgp.net
pgp-public-keys@keys.no.pgp.net
pgp-public-keys@keys.uk.pgp.net
pgp-public-keys@keys.us.pgp.net
pgp-public-keys@burn.ucsd.edu
pgp-public-keys@pgp.cc.gatech.edu
pgp-public-keys@goliat.upc.es
pgp-public-keys@demon.co.uk
pgp-public-keys@dsi.unimi.it
pgp-public-keys@ext221.sra.co.jp
pgp-public-keys@fbihh.informatik.uni-hamburg.de
pgp-public-keys@jpunix.com
pgp-public-keys@kiae.su
pgp-public-keys@kr.com
pgp-public-keys@kram.org
pgp-public-keys@kub.nl
pgp-public-keys@nexus.hpl.hp.com
pgp-public-keys@pgp.ai.mit.edu
pgp-public-keys@pgp.barclays.co.uk
pgp-public-keys@gondolin.org
pgp-public-keys@pgp.dhp.com
pgp-public-keys@pgp.hpl.hp.com
pgp-public-keys@pgp.iastate.edu
pgp-public-keys@pgp.kr.com
pgp-public-keys@pgp.mit.edu
pgp-public-keys@pgp.ox.ac.uk
pgp-public-keys@pgp.pipex.net
pgp-public-keys@srce.hr
pgp-public-keys@sw.oz.au
pgp-public-keys@uit.no
pgp-public-keys@vorpal.com
pgp-public-keys@nic.surfnet.nl
WWW interface to the key servers:
http://www-swiss.ai.mit.edu/~bal/pks-toplev.html
http://www-lsi.upc.es/~alvar/pks/pks-toplev.html
For US $20/year or so, you can have your key officially
certified and published in a "clean" key database that is much less
susceptible to denial-of-service attacks than the other key servers.
Send mail to info-pgp@Four11.com
for information, or look at http://www.Four11.com/
PGP public keys which are stored on SLED's Four11 Key Server
are now retrievable by fingering UserEmailAddress@publickey.com.
Example: My e-mail addresses is mpj@csn.org finger
mpj@csn.org@publickey.com My key (mpj8) is at Four11.com, at
ftp://ftp.csn.net/mpj/mpj8.asc, on the key servers, on my BBS, and
available by finger.
CAN I COPY AND REDISTRIBUTE THIS FAQ?
Yes. Permission is granted to distribute unmodified copies of this FAQ.
Please e-mail comments to mpj@netcom.com
-----BEGIN PGP SIGNATURE-----
Version: 2.7.1
iQCVAwUBMPoQnvX0zg8FAL9FAQHgAwP+Of94tn35tUAaXsZXk4yDLZaOsk0YEgpT
3sSKrvYS78iHjNgRQDE+cAntOHeexYDQZ17ecSGAMqvcC1oOiPoeb0lV4lxGRCPK
plOnVQLSjgKyshb1mrOPnl25kZhiCOt6Std3nsNICgnMtz+SafRI5+hCLA+l+xUH
7fqHR8Dq6b0=
=sbwR
-----END PGP SIGNATURE-----
Thread
Return to January 1996
Return to “Michael Paul Johnson <mpj@netcom.com>”
1996-01-15 (Mon, 15 Jan 96 13:50:20 PST) - Where to get PGP FAQ update - Michael Paul Johnson <mpj@netcom.com>