Security Info and Links ______________________________________________________________ PGP stands for Pretty Good Privacy. It is encrytion software that allows people to put digital signatures on each piece of e-email thus enabling people to securely exchange messages. It is also possible to secure files, disk volumes and network connections with both privacy and strong authentication. Philip R. Zimmermann is the creator of PGP, and also of the program called PGPfone. PGPfone allows conversations to be digitally encrypted. If you are a user that is concerned with security and privacy, then PGP is for you. If your use PGP and want to practice safe computing, you can check the PGP signed message or file - whereby you will see if the message or file is indeed legitimate. MIT distributes PGP Freeware without cost for personal, non- commercial use, only to U.S. citizens in the United States, or to Canadian citizens in Canada. Currently they distribute for the following platforms: Windows 95/98/NT/2000, DOS, MacOS, AIX, HPUX, Linux, and Solaris. The Amiga versions are not carried at MIT. Thanks to Robert 'Rob' Knop, Amiga users have a port of PGP. Rob ceased development of AmigaPGP after version 2.6.3, due to the restrictions at the time. AmigaPGP 2.6.3 is much easier to work with and much smaller in size than AmigaPGP5. AmigaPGP is a legal port, as long as it is used for non- commercial purposes. There are seperate USA/Canadian and International versions available. The International versions are referred to as PGPi. If you run into compatibility problems when checking signatures that have been signed with version 5, you could ask the sender to use their PGP5 in backward compatible mode for your 2.6.3. [ PGP In The News ] [ PGP Links and Downloads ] [ Jump to PGP Amiga Freeware ] [ Jump to PGP Amiga Misc ] [ Jump to PGP keys Available ] ______________________________________________________________ PGP In The News December 13, 1999 - The US Government granted Network Associates, Inc. (NAI) an export license for PGP. Read more about this news on the PGPi project's news page. May 30, 2000 - CERT issued Advisory CA-2000-09, titled Flaw in PGP 5.0 Key Generation. This advisory has to do with the UNIX platform. In part this advisory states: UNIX systems having a /dev/random device running any version of PGP 5.0, including U.S. Commercial, U.S. Freeware, and International versions. Under certain circumstances, PGP v5.0 generates keys that are not sufficiently random, which may allow an attacker to predict keys and, hence, recover information encrypted with that key. Read the full story about the Flaw in PGP 5.0 Key Generation. Aug 24, 2000 - CERT issued Advisory CA-2000-18, titled PGP May Encrypt Data With Unauthorized ADKs. This advisory has to do with PGP versions 5.5.x through 6.5.3, domestic and international. In part this advisory states: Additional Decryption Keys (ADKs) is a feature introduced into PGP (Pretty Good Privacy) versions 5.5.x through 6.5.3 that allows authorized extra decryption keys to be added to a user's public key certificate. However, an implementation flaw in PGP allows unsigned ADKs which have been maliciously added to a certificate to be used for encryption. Philip Zimmermann, author of PGP, says in part "The MIT web site should have a new PGP 6.5.x freeware release early Friday, and the NAI/PGP web site should have patches out for the commercial releases at about the same time." Read the full story about how PGP May Encrypt Data With Unauthorized ADKs. 19 September 2000 - CryptoRights Benefit - The RSA Expiration Party! A major party to celebrate the RSA patent expiration will be held on Thursday, September 21, at the Great American Music Hall in San Francisco. Admission is free, but donations to benefit the CryptoRights Foundation are appreciated. To read CryptoRights Foundation's particlulars, visit The Big RSA Patent Expiration Party. 07 November 2000 - PGPwireless For Wireless Phone and PDA Users Network Associates, Inc. (NAI), introduced the product PGPwireless, to protect wireless phone and PDA users. PGPwireless provides encryption, decryption, digital signature and authentication capabilities based on world's most widely used encryption technology. (Added Jan 19, 2001) 11 January 2001 - PGP Security Wins Macworld Eddy Award Network Associates, Inc. (NAI), announced that PGP Desktop Security 7.0 received Macworld's Eddy Award for Best Utility at the 16th annual awards ceremony that kicked off the Macworld Expo in San Francisco. PGP Desktop Security 7.0 defeated Connectix's Copy Agent 1.0 and Intego's NetBarrier 1.6 for the award. (Added Jan 19, 2001) 21 February 2001 - Legendary Cryptographer Phil Zimmerman Joins Hush Dublin, Ireland - 19 February, 2001-Hush Communications Corporation (www.hush.com) today announced the appointment of Philip R. Zimmermann as a Chief Cryptographer for the Company. Zimmermann has been asked to lead Hush's efforts to fully integrate support for the OpenPGP standard into Hush's core technology by President and Chief Executive Officer, Jon Matonis, and Chief Technology Officer, David Bowman. Read more about OpenPGP here. 22 March 2001 - PGP Inventor Says Encryption Flaw Minor Story at CNet News by Robert Lemos, says that a flaw found by two Czech researchers in the popular OpenPGP digital signature standard is real but relatively minor, Phil Zimmermann, chairman of the open-source group, said Wednesday. "This is not a practical attack," he said. "Your adversary has to be able to modify your private key. That means they have to have access to your computer." Once an attacker has access, there are many other ways they can monitor the system. That makes the attack largely irrelevant, Zimmermann said. You can also read the article by James Middleton of vnunet titled OpenPGP Flaw Confirmed. 25 April 2001 - PGPi News: PGP 7.0.3 Hotfix 1 Available Pretty Good Privacy International, (PGPi) says this hotfix corrects a bug in the Windows version of PGP 7.0.3 which made it possible for an attacker to create a .sig file containing a DLL and trick PGP into loading this DLL instead of the system DLL. This hotfix will force the PGP component DLLs to always load from the directory they were installed in. Additionally, it will force a "Save As" dialog for any extracted files with a .dll, .sys, or .vxd extension. * Hotfix .zip file: PGPfreeware703Hotfix1.zip 07 June 2001 - GnuPG 1.0.6 Released Pretty Good Privacy International, (PGPi) says version 1.0.6 of the GNU Privacy Guard is now available for download. This is a maintenance release that fixes a number of bugs. The GNU Privacy Guard (GnuPG) is a free, GPLed RFC2440 (OpenPGP) implementation. It is being developed by Werner Koch in Germany. Currently it is only available as a command line program (Unix, Windows and DOS), but a GUI version is planned. 07 June 2001 - PGP Marked 10th Anniversary On 5th of June 2001 Phil Zimmermann starts off with "It was on this day in 1991 that I sent the first release of PGP to a couple of my friends for uploading to the Internet." He goes on to mention that it was ported to other platforms, including Commodore Amiga. * Click here for a PGP signed version of this announcement 25 September 2001 - NAI Releases Source Code For PGPsdk Pretty Good Privacy International, (PGPi) says NAI has released the source code for PGPsdk 2.1.1 for peer review. It can be downloaded here. 25 September 2001 - PGP Multiple User ID Vulnerability Pretty Good Privacy International, (PGPi) says a vulnerability in PGP's display of key validity has been discovered that could allow an attacker to fool users into thinking that a valid signature was created by what is actually an invalid user ID. The attack was discovered by Sieuwert van Otterloo, and works on all PGP 5.x, 6.x and 7.x versions. NAI has already released a hotfix that corrects the problem for the latest freeware and commercial PGP versions. See the original report and NAI's advisory. 27 September 2001 - PRZ Says: No Regrets About Developing PGP Phil Zimmermann says "The Friday September 21st Washington Post carried an article by Ariana Cha that I feel misrepresents my views on the role of PGP encryption software in the September 11th terrorist attacks." (Zimmerman notes: This letter may be widely circulated) * Click here for Signed version of announcement * Click here for local Signed version at VHT-Canada * Click here for Washington Post article in question 25 October 2001 - Network Associates Selling PGP Division Pretty Good Privacy International, (PGPi) says NAI has announced that it will discontinue PGP development and sell its PGP Security division. Read more in WiredNews and ExtremeTech 18 November 2001 - Zimmermann Inducted into CRN Industry Hall of Fame Marcia Savage of CMP Media, has a write-up on Philip Zimmermann's accomplishments over the years. Top of Page ______________________________________________________________ COMMERCIAL PGP Versions PGP Home Page Has Trialware version FREEWARE PGP Versions USA/Canadian: PGP at MIT n/a anymore AmigaPGP 2.6.3 AmigaPGP 5.1 International: PGP at PGPi Project AmigaPGP 2.6.3i AmigaPGP 5.1i ______________________________________________________________ PGP LINKS PGP Home Page PGP creator Phil R. Zimmermann FAQ about PGP from PGPi Project FAQ about PGP from MIT Crypto-Gram: Computer and Network Security ______________________________________________________________ PGP FREEWARE AMIGA DOWNLOADS USA/CANADIAN: PGP 2.6.3 is only legal to use inside of the USA and Canada. IF you are in any other country, use PGP 2.6.3i. The following files (that are actually external links to the webpage that the binarys are on), may only be downloaded by residents of the United States of America or Canada. Program Name: AmigaPGP 2.6.3 Programmer: Robert A. Knop Jr. Notice: This archive is for USA or Canada only. Released Version Archive Name 19-Jan-1996 2.6.3 PGPAmiga-000.lha Webpage PGPAmiga-000 Read Me * Requirements: All Amigas * AmigaPGP 2.6.3 Home Page for further information Program Name: AmigaPGP 2.6.3 [020] Programmer: Robert A. Knop Jr. Notice: This archive is for USA or Canada only. Released Version Archive Name 15-Jan-1996 2.6.3 PGPAmiga-020.lha Webpage PGPAmiga-020 Read Me * Requirements: All Amigas * AmigaPGP 2.6.3 [020] Home Page for further information Program Name: AmigaPGP 5.1 Programmer: Stefan Zakarias Notice: This archive is for USA or Canada only. Released Version Archive Name 25-Mar-1998 5.1 amiga-pgp51-bin.lha Webpage amiga-pgp51-bin Read Me * Requirements: Details are in the readme file. Bug-fixed version of language50.txt * AmigaPGP 5.1 Start Page at PGPi for further information Top of Page INTERNATIONAL: PGP 2.6.3i is only legal to use outside of the USA and Canada. IF you are in the USA or Canada, use PGP 2.6.3. The following files (that are actually external links to the webpage that the binarys are on), may only be downloaded by users outside of the USA, and Canada. The PGPi Project's International site, is located in Norway. Program Name: AmigaPGP 2.6.3i Programmer: Peter Simons Notice: This archive is for International users only. Released Version Archive Name 15-Jan-1996 2.6.3i PGPAmiga-2.6.3is.lha Webpage PGPAmiga-2.6.3is Read Me * Requirements: All Amigas * AmigaPGPi 2.6.3i Home Page for further information * Webmaster Note: If you have a hard time getting on the Norway server, then you can try one of the mirror sites. Click here for the AmigaPGP 2.6.3i mirror list. Program Name: AmigaPGP 5.1i Programmer: Stefan Zakarias Notice: This archive is for International users only. Released Version Archive Name 22-Mar-1998 5.1i amiga-pgp51i-bin.lha Webpage amiga-pgp51i-bin Read Me * Requirements: Details are in the readme file. Bug-fixed version of language50.txt * AmigaPGP 5.1i Start Page at PGPi for further information Program Name: AmigaPGP 5.1i [060] Notice: This archive is for International users only. Programmer: Stefan Zakarias Released Version Archive Name 22-Mar-1998 5.1i amiga-pgp51i-bin060.lha Webpage amiga-pgp51i-bin060 Read Me * Requirements: Details are in the readme file. Bug-fixed version of language50.txt * AmigaPGP 5.1i [060] Start Page at PGPi for further information Program Name: AmigaPGP 5.1i Source Code Programmer: Stefan Zakarias Released Version Archive Name 21-Mar-1998 5.1i amiga-pgp51i-src.lha Webpage amiga-pgp51i-src Read Me * Requirements: Details are in the readme file. Bug-fixed version of language50.txt * AmigaPGP 5.1i Source Code Start Page at PGPi for further information Top of Page MISCELLANEOUS Program Name: language50.txt Author: Stefan Zakarias Released Version Archive Name Byte Size 07-Apr-1998 5.0 lang50.lha 21.027 lang50.lha.sig lang50 Read Me * Program Note: language50.txt is a bug-fixed version of the one normally supplied with Amiga PGP5 Program Name: PGP5 Docs as AmigaGuides Author: Chris Page Released Version Archive Name Byte Size 03-Apr-1998 1.0 PGP5Guides.lha 42.363 PGP5Guides.lha.sig PGP5Guides Read Me Program Name: ixemul & ixnet Librarys [000] Programmer: GeekGadgets Released Version Archive Name Byte Size 01-Jan-1990 48.0 ixemul-48.0-000.lha 154.890 ixemul-48.0-000.lha.sig ixemul-48.0-000 Read Me * Includes IXPrefs for ixemul v48.0 Program Name: ixemul & ixnet Librarys [020] Programmer: GeekGadgets Released Version Archive Name Byte Size 01-Jan-1990 48.0 ixemul-48.0-020.lha 249.337 ixemul-48.0-020.lha.sig ixemul-48.0-020 Read Me * Includes IXPrefs for ixemul v48.0 Program Name: ixemul & ixnet Librarys [040] Programmer: GeekGadgets Released Version Archive Name Byte Size 01-Jan-1990 48.0 ixemul-48.0-040.lha 249.416 ixemul-48.0-040.lha.sig ixemul-48.0-040 Read Me * Includes IXPrefs for ixemul v48.0 Program Name: ixemul & ixnet Librarys [060] Programmer: GeekGadgets Released Version Archive Name Byte Size 01-Jan-1990 48.0 ixemul-48.0-060.lha 151.651 ixemul-48.0-060.lha.sig ixemul-48.0-060 Read Me * Includes IXPrefs for ixemul v48.0 Program Name: IXPrefs for ixemul v48.0 Librarys Programmer: Kriton Kyrimis Released Version Archive Name Byte Size 01-Jun-1999 2.7 / 48.0 ixprefs-v48.0.lha 31.325 ixprefs-v48.0.lha.sig ixprefs-v48.0 Read Me Program Name: IXPrefs for ixemul v47.2 Librarys Programmer: Kriton Kyrimis Released Version Archive Name Byte Size 24-Nov-1997 2.7 / 47.2 ixprefs-v47lha 22.908 ixprefs-v47.lha.sig ixprefs-v47 Read Me * Does not include the GNU General Public License Program Name: GNU General Public License v2 Programmer: Free Software Foundation, Inc. Released Version Archive Name Byte Size Jun-1991 2 GNULicense.lha 9.174 GNULicense.lha.sig GNULicense Read Me Program Name: MUI GUI for Amiga PGP5 Programmer: Stefan Zakarias Released Version Archive Name Byte Size 15-Apr-1998 1.6 pgp5gui-16.lha 28.148 pgp5gui-16.lha.sig pgp5gui-16 Read Me Program Name: MUI GUI for Amiga PGP5 (beta) Programmer: Stefan Zakarias Released Version Archive Name Byte Size 14-May-1998 1.7.4b pgp5gui-174b.lha 66.337 pgp5gui-174b.lha.sig pgp5gui-174b Read Me * Program Note: Full 'C' Source Included! PGP-KEYS AVAILABLE Alex van Niel key_avn-pgp.txt VHT-NL CEO and Programmer Charlene key_clm-pgp.txt VHT-CAN + VHT-NL Member Dirk Stöcker key_ds-pgp.txt Amiga Programmer Georg Hörmann key_georg-pgp.txt Amiga Programmer Jan Erik Olausen key_jeo-pgp.txt Amiga Programmer Martin Zemblowski key_mz-pgp.txt VirusSlayer II Peter Simons key_pgpkeys.txt AmigaPGP 2.6.3i port PGP People key_pgpkeys.txt Phil Zimmermann key_phil-key.txt PGP creator Robert A. Knop key_rknop_key.txt AmigaPGP 2.6.3 port Simone Tellini key_wiz-pgp.txt MCC Classes Stef Zakarias key_stefanskey.txt AmigaPGP 5 ports Zeeball Trzcionkowski key_zeeball-pgp.txt Safe Back to Virus Warning Page Top of Page