author: Gary Edstrom

subject: alt.security.pgp FAQ (Part 1/5)

text:
Archive-name: pgp-faq/part1
Version: 8
Last-modified: 1994/3/13

-----BEGIN PGP SIGNED MESSAGE-----

                     Frequently Asked Questions
                          alt.security.pgp
                             Version 8
                             1994/3/13

========================================================================
                       IMPORTANT DISCLAIMER!

     The use of PGP raises  a number of political  and legal
     issues.  I AM NOT a lawyer and AM NOT qualified to give
     any legal opinions.  Nothing in this document should be
     interpreted  as legal advice.   If you  have any  legal
     questions concerning the use of PGP, you should consult
     an  attorney who  specializes in  patent and/or  export
     law.   In any case,  the law  will vary from country to
     country.
========================================================================

Beginning with this revision of the FAQ, I have stopped maintaining
the master document in Microsoft Word for Windows format.  It was just
getting to be too much trouble especially since my ultimate output was
going to be just a simple ASCII text file anyway.  You will no longer
see the Word for Windows document in my ftp directory.

In place of the Word for Windows master document, you will see the
file "pgpfaq.asc" which is a clear signed version of my ASCII master
document.  You can ftp this file in place of the multi-part version
that was posted to usenet if you so desire.

This version of the FAQ is being cross posted to news.answers and
alt.answers as well as being archived at rtfm.mit.edu.

Please check the pgp signatures that I have applied to all parts and
versions of this document.  Several people reported to me that part 1
of my previous posting of the FAQ had been corrupted.  Others,
however, said that the file checked out just fine.  Please report any
signature problem with these files to me.

All additions, deletions, or corrections to this FAQ should be
directed to me. I will acknowledge all e-mail.

Gary Edstrom <[email]>
ftp: ftp.netcom.com:/pub/gbe

========================================================================

Revision History

Ver  Date        Description
- ---  ----        -----------
 1   09-Dec-93   Proof Reading Copy - Limited Distribution
 2   11-Dec-93   First  Preliminary Posting
 3   19-Dec-93   Second Preliminary Posting
 4   01-Jan-94   Third  Preliminary Posting
 5   15-Jan-94   First Official Posting
 6   26-Jan-94   Assorted Changes

12-Feb-94 Changes for version 7:

Modified Public Key Server List in section 8.2
Added information on Italian PGP translations in section 1.7

06-Feb-94 Changes for version 8:

Fixed a number of minor spelling, grammar, and typographical errors.
Removed entry for PGPWinFront 1.2 as it was superceeded by version 2.0.
Modified public key server list in section 8.
Added additional source for German language pgp files in section 1.7.
Added source for Swedish language pgp files in section 1.7.
Added information in PGP Integration Project in Appendix I.
Changed my ftp address to ftp.netcom.com:/pub/gbe (was netcom.com:/pub...)
Added information on ViaCrypt PGP for Unix, WinCIM, & CSNav in section 1.9
Added PGPAmiga-FrontEnd to support products section in appendix I.
Added late breaking news from -=Xenon=-.

17-Apr-94 Changes for version 9:

Converted file from Word for Windows format to simple text format.
Modified the public key server list in section 8.
Added Japanese to list of languages for which help files are available.
Added information on OzPKE for PGP/OzCIS in Appendix I.
Added information on AutoPGP & PGPSORT in Appendix I.
Added information on The Ferret BBS in section 1.11.
Added information on PGPTalk in Appendix I.
Modified answer in 3.3 on extracting multiple keys into a single file.
Modified information on HPACK in Appendix I.
Added FTP source for StealthPGP.

========================================================================

This FAQ is slanted towards the DOS or Unix users of PGP and many of
the examples given may only apply to them.  For other systems, I would
like to direct your attention to the following documents:

  MAC: "Here's How to MacPGP!" by Xenon <[email]>
  Archimedes PGP comes with its own PGPhints file.
  Send e-mail to [email] for a list of PGP tips.

It should be noted that most of the questions and answers concerning
PGP apply equally well to the ViaCrypt(tm) version.

Material for this FAQ has come from many different sources.  It would
be difficult to name each of the contributors individually, but I
would like to thank them as a group for their assistance.

The files making up this FAQ are available via ftp at
ftp.netcom.com:/pub/gbe. The file names are pgpfaq-<n>.asc and are in
clearsig pgp format.

- --
Gary B. Edstrom          | Sequoia Software     | PGP fingerprint:
Internet: [email] | Programming Services | 2F F6 1B 28 6E A6 09 6C
CompuServe: 72677,564    | P.O. Box 9573        | B0 EA 9E 4C C4 C6 7D 46
Fax: 1-818-247-6046      | Glendale, CA 91226   | Key available via finger
What is PGP?  Subscribe to alt.security.pgp and find out!

Late Breaking PGP News From -=Xenon=-

- -----BEGIN PGP SIGNED MESSAGE-----

 Gary,

Mac and DOS PGP are now available on  MindVox (telnet to phantom.com and
login as guest), which is however a pay service BBS. Their modem numbers
are:

    300/1200/2400-bps  +1 212 989-4141
    96/14.4/16.8/19.2  +1 212 989-1550
    Hayes V.FC 28,800  +1 212 645-8065

My "Here's How to MacPGP!" guide is now available by e-mail with Subject
"Bomb me!" to [email] or by ftp to netcom.com in /pub/qwerty.
Please change my address in the FAQ to [email]. The Guide is also
available on the WELL in the Mondo conference, by typing 'texts', but make
sure they have updated it to a recent version (2.7).

You might also mention steganography finally. I have a list of
steganography software in /pub/qwerty as Steganography.software.list, where
I have also archived a number of steganography programs. Steganographs let
you replace the "noise" of many types of carrier files with an encrypted
message.

Related to steganography, is the new utility "Stealth", by "Henry Hastur",
available by ftp to netcom.com in /pub/qwerty as Stealth1.1.tar.Z for DOS
or Unix, or as AmigaStealth1.0.lha. The Amiga version, ported by Peter
Simons <[email], is also available
by ftp to:

        wuarchive.wustl.edu (or any other Aminet host)

        /pub/aminet/util/crypt/StealthPGP1_0.lha
        /pub/aminet/util/crypt/StealthPGP1_0.readme

The archive contains the binary, source and readme. However, Stealth1.1
should also compile on the Amiga.

Stealth PGP strips a binary PGP message down to the bare bones encrypted
message, something that you cannot easily tell from "noise", so such a
message can masquerade AS noise :-).

ViaCrypt is now selling Unix PGP 2.4 and a neat new add-on for Compuserve
users:

PGP for UNIX 2.4. Includes object code for SunOS 4.1x, RS/6000 AIX, HP 9000
700/800 UX, and SCO 386/486 UNIX (plus others soon). $149.98 single user.

PGP for WinCIM/CSNav 2.4. Specially packaged for users of (and requires)
Compuserve's Information Manager for Windows or Compuserve Navigator for
Windows. Consists of PGP for MS-DOS 2.4 integrated with a companion add-in
program. You can digitally sign and encrypt (or verify and decrypt) e-mail
messages without leaving these popular e- ail programs. Available starting
April 1994. $119.98 single user.

I'm not sure if you mention it but [email] has a nice PGP ftp
site list which he e-mails to anyone sending mail to [email],
or uses the World Wide Web at www.mantis.co.uk in /pgp/pgp.html, which is a
Hypertext version. He also has a short summary and tips about the legal
situation included in it.

FAQ: What's Phil Zimmermann up to these days?

A: Voice-PGP, the direct answer to the Clipper chip.

Also, the remailer situation keeps changing, so this service is very nice
to have:

 From Matthew Ghio <[email],

"I maintain a FAQ on the anonymous remailers, which lists over a dozen
alternative anonymous services.  Many of them are much faster than
anon.penet.fi, because they do not have such a heavy load.  You can get the
info by sending mail to: [email] My software is set
up to automatically send it back when it receives your request, so sending
a blank message is sufficient.  I update the info every few weeks or so."

 -=Xenon=-

- -----BEGIN PGP SIGNATURE-----
Version: 2.3

iQCVAgUBLYHC7ASzG6zrQn1RAQEU+gP/YqLpSBAaJ9TSziyOK7FD8pQ8ql1ILRBU
1NAkhjGCbeNRRflV1tDNXnH+JO/GXUR1DpkiafPYPbrMAewGnEvQaZvXA57RcvKW
l4ew7nyaGbKU3bLGGvhKXLKrVue8y1cLFNUDlXjC6MmKxtVcaeA/0dv1CNtlkf/u
D82bFKbulW8=
=j9Fv
- -----END PGP SIGNATURE-----

Table of Contents

  1.  Introductory Questions
  1.1.  What is PGP?
  1.2.  Why should I encrypt my mail?  I'm not doing anything illegal!
  1.3.  What are public keys and private keys?
  1.4.  How much does PGP cost?
  1.5.  Is encryption legal?
  1.6.  Is PGP legal?
  1.7.  Where can I get translations of the PGP documentation and/or
        language.txt files?
  1.8.  Is there an archive site for alt.security.pgp?
  1.9.  Is there a commercial version of PGP available?
  1.10. What platforms has PGP been ported to?
  1.11. Where can I obtain PGP?

  2.  General Questions
  2.1.  Why can't a person using version 2.2 read my version 2.3 message?
  2.2.  Why does it take so long to encrypt/decrypt messages?
  2.3.  How do I create a secondary key file?
  2.4.  How does PGP handle multiple addresses?
  2.5.  How can I use PGP to create a return receipt for a message?
  2.6.  Where can I obtain scripts to integrate pgp with my email or news
        reading system?

  3.  Keys
  3.1.  Which key size should I use?
  3.2.  Why does PGP take so long to add new keys to my key ring?
  3.3.  How can I extract multiple keys into a single armored file?
  3.4.  I tried encrypting the same message to the same address two different
        times and got completely different outputs. Why is this?
  3.5.  How do I specify which key to use when an individual has 2 or more
        public keys and the very same user ID on each, or when 2 different
        users have the same name?
  3.6.  What does the message "Unknown signator, can't be checked" mean?
  3.7.  How do I get PGP to display the trust parameters on a key?

  4.  Security Questions
  4.1.  How secure is PGP?
  4.2.  Can't you break PGP by trying all of the possible keys?
  4.3.  How secure is the conventional cryptography (-c) option?
  4.4.  Can the NSA crack RSA?
  4.5.  How secure is the "for your eyes only" option (-m)?
  4.6.  What if I forget my pass phrase?
  4.7.  Why do you use the term "pass phrase" instead of "password"?
  4.8.  If my secret key ring is stolen, can my messages be read?
  4.9.  How do I choose a pass phrase?
  4.10. How do I remember my pass phrase?
  4.11. How do I verify that my copy of PGP has not been tampered with?
  4.12. How do I know that there is no trap door in the program?
  4.13. Can I put PGP on a multi-user system like a network or amainframe?
  4.14. Why not use RSA alone rather than a hybrid mix of IDEA, MD5, & RSA?
  4.15. Aren't all of these security procedures a little paranoid?
  4.16. Can I be forced to reveal my pass phrase in any legal proceedings?

  5.  Message Signatures
  5.1.  What is message signing?
  5.2.  How do I sign a message while still leaving it readable?

  6.  Key Signatures
  6.1.  What is key signing?
  6.2.  How do I sign a key?
  6.3.  Should I sign my own key?
  6.4.  Should I sign X's key?
  6.5.  How do I verify someone's identity?
  6.6.  How do I know someone hasn't sent me a bogus key to sign?

  7.  Revoking a key
  7.1.  My secret key ring has been stolen or lost, what do I do?
  7.2.  I forgot my pass phrase. Can I create a key revocation certificate?

  8.  Public Key Servers
  8.1.  What are the Public Key Servers?
  8.2.  What public key servers are available?
  8.3.  What is the syntax of the key server commands?

  9.  Bugs

  10. Related News Groups

  11. Recommended Reading

  12. General Tips

  Appendix I    - PGP add-ons and Related Products
  Appendix II   - Glossary of Cryptographic Terms
  Appendix III  - Cypherpunks
  Appendix IV   - How to obtain articles from _Wired_ magazine
  Appendix V    - Testimony of Philip Zimmermann to Congress
  Appendix VI   - Announcement of Philip Zimmermann Defense Fund
  Appendix VII  - A Statement from ViaCrypt Concerning ITAR
  Appendix VIII - Unites States Congress Phone and FAX List

========
1.    Introductory Questions
========
1.1.  What is PGP?
========

PGP is a program that gives your electronic mail something that it
otherwise doesn't have: Privacy. It does this by encrypting your mail
so that nobody but the intended person can read it. When encrypted,
the message looks like a meaningless jumble of random characters. PGP
has proven itself quite capable of resisting even the most
sophisticated forms of analysis aimed at reading the encrypted text.

PGP can also be used to apply a digital signature to a message without
encrypting it.  This is normally used in public postings where you
don't want to hide what you are saying, but rather want to allow
others to confirm that the message actually came from you. Once a
digital signature is created, it is impossible for anyone to modify
either the message or the signature without the modification being
detected by PGP.

While PGP is easy to use, it does give you enough rope so that you can
hang yourself. You should become thoroughly familiar with the various
options in PGP before using it to send serious messages. For example,
giving the command "PGP -sat <filename>" will only sign a message, it
will not encrypt it. Even though the output looks like it is
encrypted, it really isn't. Anybody in the world would be able to
recover the original text.

========

1.2. Why should I encrypt my mail?  I'm not doing anything illegal!

You should encrypt your e-mail for the same reason that you don't
write all of your correspondence on the back of a post card. E-mail is
actually far less secure than the postal system. With the post office,
you at least put your letter inside an envelope to hide it from casual
snooping. Take a look at the header area of any e-mail message that
you receive and you will see that it has passed through a number of
nodes on its way to you. Every one of these nodes presents the
opportunity for snooping.  Encryption in no way should imply illegal
activity.  It is simply intended to keep personal thoughts personal.

Xenon <[email]> puts it like this:

Crime? If you are not a politician, research scientist, investor, CEO,
lawyer, celebrity, libertarian in a repressive society, investor, or
person having too much fun, and you do not send e-mail about your
private sex life, financial/political/legal/scientific plans, or
gossip then maybe you don't need PGP, but at least realize that
privacy has nothing to do with crime and is in fact what keeps the
world from falling apart. Besides, PGP is FUN. You never had a secret
decoder ring? Boo!  -Xenon (Copyright 1993, Xenon)

========

1.3.  What are public keys and private keys?

With conventional encryption schemes, keys must be exchanged with
everyone you wish to talk to by some other secure method such as face
to face meetings, or via a trusted courier.  The problem is that you
need a secure channel before you can establish a secure channel!  With
conventional encryption, either the same key is used for both
encryption and decryption or it is easy to convert either key to the
other. With public key encryption, the encryption and decryption keys
are different and it is impossible for anyone to convert one to the
other. Therefore, the encryption key can be made public knowledge, and
posted in a database somewhere. Anyone wanting to send you a message
would obtain your encryption key from this database or some other
source and encrypt his message to you. This message can't be decrypted
with the encryption key. Therefore nobody other than the intended
receiver can decrypt the message. Even the person who encrypted it can
not reverse the process. When you receive a message, you use your
secret decryption key to decrypt the message. This secret key never
leaves your computer. In fact, your secret key is itself encrypted to
protect it from anyone snooping around your computer.

========

1.4.  How much does PGP cost?

Nothing! (Compare to ViaCrypt PGP at $98!)  It should be noted,
however, that in the United States, the freeware version of PGP *MAY*
be a violation of a patent held by Public Key Partners (PKP).

========

1.5.  Is encryption legal?

In much of the civilized world, encryption is either legal, or at
least tolerated. However, there are a some countries where such
activities could put you in front of a firing squad! Check with the
laws in your own country before using PGP or any other encryption
product. A couple of the countries where encryption is illegal are
Iran and Iraq.

========

1.6.  Is PGP legal?

In addition to the comments about encryption listed above, there are a
couple of additional issues of importance to those individuals
residing in the United States or Canada.  First, there is a question
as to whether or not PGP falls under ITAR regulations which govern the
exporting of cryptographic technology from the United States and
Canada. This despite the fact that technical articles on the subject
of public key encryption have been available legally worldwide for a
number of years.  Any competent programmer would have been able to
translate those articles into a workable encryption program. There is
the possibility that ITAR regulations may be relaxed to allow for
encryption technology.

========

1.7.  Where can I get translations of the PGP documentation and/or
language.txt files?

Spanish:        ghost.dsi.unimi.it:/pub/crypt.
      Author:   Armando Ramos <[email]>
German:         black.ox.ac.uk:/src/security/pgp_german.txt
      Author:   Marc Aurel <[email]>
Swedish:        black.ox.ac.uk:/src/security/pgp_swedish.txt
Italian:        ghost.dsi.unimi.it:/pub/crypt/pgp-lang.italian.tar.gz
      Author:   David Vincenzetti <[email]>
Lithuanian:     ghost.dsi.unimi.it:/pub/crypt/pgp23ltk.zip
                nic.funet.fi:/pub/crypt/ghost.dsi.unimi.it/pgp23ltk.zip
      Author:   Zygimantas Cepaitis, Bokera Ltd., Kaunas Lithuania.
                <[email]> or <[email]>
Japanese:       black.ox.ac.uk/src/security

========

1.8. Is there an archive site for alt.security.pgp?

[email] (Laszlo Baranyi) says:

"My memory says that ripem.msu.edu stores a backlog of both
alt.security.pgp, and sci.crypt. But that site is ONLY open for ftp
for those that are inside US."

========

1.9. Is there a commercial version of PGP available?

Yes, by arrangement with the author of PGP, a company called ViaCrypt
is marketing a version of PGP that is almost identical to the version
currently available on Internet. Each can read or write messages to
the other.  The list price of ViaCrypt PGP is $98 (US) for a single
user license and is NOT available for export from the United States.
In addition, it is presently available only for MS-DOS and Unix.  Soon
to be available are versions for CompuServe's WinCIM & CSNav.
Versions for other platforms are under development.  While the present
product is 100% compatible with free PGP, it is not known if this will
remain the case in the future. The address of ViaCrypt is:

    ViaCrypt
    David A. Barnhart
    Product Manager
    2104 West Peoria Avenue
    Phoenix, Arizona 85029
    Tel: (602) 944-0773
    Fax: (602) 943-2601
    E-Mail: [email]
    E-Mail: [email]
    Credit card orders only. (800)536-2664 (8-5 MST M-F)

========

1.10. What platforms has PGP been ported to?

DOS: 2.3a
MAC: 2.3
OS/2: 2.3a
Unix: 2.3a (Variations exist for many different systems.)
VAX/VMS: 2.3a
Atari ST: 2.3a
Archimedes: 2.3a subversion 1.18b
Commodore Amiga: 2.3a patchlevel 2

========

From: [email] (Peter Simons)
Date: Fri, 31 Dec 1993 08:10:53 +0100
Newsgroups: alt.security.pgp
Subject: PGPAmiga 2.3a.2 available for FTP

TITLE

     Pretty Good Privacy (PGP)

VERSION

     Version 2.3a patchlevel 2

AUTHOR

     Amiga port and enhancements by Peter Simons <[email]>

CHANGES

     This version is re-compiled with SAS/C 6.50. A few minor bugs
have been fixed. Additionally, the manual is now available in TexInfo
style and can easily be converted into AmigaGuide, postscript, dvi or
whatever format. AmigaGuide versions are included.

     Also for the first time, the alt.security.pgp frequently asked
questions (FAQ) are included in the archive.

NOTES

     Please take note that the archive contains a readme file, with
checksums for ALL files in the distribution and is signed with my key!
Please be careful, if this file is missing or rigged!

     A mailing list concerning PGPAmiga has been opened on
peti.GUN.de. To subscribe, send e-mail to [email] with
"ADD your_address PGPAmiga" in the message body. You may add "HELP" in
the next line to receive a command overview of ListSERV.

SPECIAL REQUIREMENTS

     none

HOST NAME

     Any Aminet host, i.e. ftp.uni-kl.de (131.246.9.95).

DIRECTORY

     /pub/aminet/util/crypt/

FILE NAMES

     PGPAmi23a_2.lha

     PGPAmi23a2_src.lha

========

1.11. Where can I obtain PGP?

FTP sites:

    soda.berkeley.edu
      /pub/cypherpunks/pgp (DOS, MAC)
      Verified: 21-Dec-93
    ftp.demon.co.uk
      /pub/amiga/pgp
      /pub/archimedes
      /pub/pgp
      /pub/mac/MacPGP
    ftp.informatik.tu-muenchen.de
    ftp.funet.fi
    ghost.dsi.unimi.it
      /pub/crypt
      Verified: 21-Dec-93
    ftp.tu-clausthal.de (139.174.2.10)
    wuarchive.wustl.edu
      /pub/aminet/util/crypt
    src.doc.ic.ac.uk (Amiga)
      /aminet
      /amiga-boing
    ftp.informatik.tu-muenchen.de
      /pub/comp/os/os2/crypt/pgp23os2A.zip (OS/2)
    black.ox.ac.uk (129.67.1.165)
      /src/security (Unix)
    iswuarchive.wustl.edu
      pub/aminet/util/crypt (Amiga)
    csn.org
      /mpj (see README.MPJ for export restrictions)
    nic.funet.fi (128.214.6.100)
    van-bc.wimsey.bc.ca (192.48.234.1)
    ftp.uni-kl.de (131.246.9.95)
    qiclab.scn.rain.com (147.28.0.97)
    pc.usl.edu (130.70.40.3)
    leif.thep.lu.se (130.235.92.55)
    goya.dit.upm.es (138.4.2.2)
    tupac-amaru.informatik.rwth-aachen.de (137.226.112.31)
    ftp.etsu.edu (192.43.199.20)
    princeton.edu (128.112.228.1)
    pencil.cs.missouri.edu (128.206.100.207)

StealthPGP:

    The Amiga version can be FTP'ed from the Aminet in
    /pub/aminet/util/crypt/ as StealthPGP1_0.lha.

Also, try an archie search for PGP using the command:

    archie -s pgp23  (DOS Versions)
    archie -s pgp2.3 (MAC Versions)

ftpmail:

    For those individuals who do not have access to FTP, but do have access
    to e-mail, you can get FTP files mailed to you.  For information on
    this service, send a message saying "Help" to [email].
    You will be sent an instruction sheet on how to use the ftpmail
    service.

BBS sites:

    Hieroglyphics Vodoo Machine (Colorado)
    DOS version only
    (303) 443-2457
    Verified: 26-Dec-93

    Colorado Catacombs BBS
    (303) 938-9654

    Exec-Net (New York)
    Host BBS for the ILink net.
    (914) 667-4567

    The Grapvine BBS (Little Rock, Arkansas)
    Now combined with and known as:
    The Ferret BBS (North Little Rock, Arkansas)
    (501) 791-0124   also   (501) 791-0125
    Carrying RIME, Throbnet, Smartnet, and Usenet
    Special PGP users account:
    login name: PGP USER
    password:   PGP
    This information from: Jim Wenzel <[email]>

========

2.   General Questions

========

2.1. Why can't a person using version 2.2 read my version 2.3 message?

Try adding "+pkcs_compat=0" to your command line as follows: "pgp
- -seat +pkcs_compat=0 <filename>"  By default, version 2.3 of PGP uses
a different header format that is not compatible with earlier versions
of PGP. Inserting this option into the command will force PGP to use
the older header format. You can also set this option in your
config.txt file, but this is not recommended.

========

2.2. Why does it take so long to encrypt/decrypt messages?

This problem can arise when you have placed the entire public key ring
from one of the servers into the pubring.pgp file. PGP may have to
search through several thousand keys to find the one that it is after.
The solution to this dilemma is to maintain 2 public key rings. The
first ring, the normal pubring.pgp file, should contain only those
individuals that you send messages to quite often. The second key ring
can contain ALL of the keys for those occasions when the key you need
isn't in your short ring. You will, of course, need to specify the key
file name whenever encrypting messages using keys in your secondary
key ring. Now, when encrypting or decrypting messages to individuals
in your short key ring, the process will be a LOT faster.

========

2.3. How do I create a secondary key file?

First, let's assume that you have all of the mammoth public key ring
in your default pubring.pgp file. First, you will need to extract all
of your commonly used keys into separate key files using the -kx
option. Next, rename pubring.pgp to some other name. For this example,
I will use the name pubring.big. Next, add each of the individual key
files that you previously created to a new pubring.pgp using the -ka
option. You now have your 2 key rings. To encrypt a message to someone
in the short default file, use the command "pgp -e <userid>". To
encrypt a message to someone in the long ring, use the command "pgp -e
<userid> c:\pgp\pubring.big". Note that you need to specify the
complete path and file name for the secondary key ring. It will not be
found if you only specify the file name.

========

2.4. How does PGP handle multiple addreses?

When encrypting a message to multiple addresses, you will notice that
the length of the encrypted file only increases by a small amount for
each additional address.  The reason that the message only grows by a
small amount for each additional key is that the body of the message
is only encrypted once using a random session key and IDEA. It is only
necessary then to encrypt this session key once for each address and
place it in the header of the message. Therefore, the total length of
a message only increases by the size of a header segment for each
additional address. (To avoid a known weakness in RSA when encrypting
the same message to multiple recipients, the IDEA session key is
padded with different random data each time it is RSA- encrypted.)

========

2.5. How can I use PGP to create a return receipt for a message?

I was planning on including a section on this question. However, while
following a similar thread in alt.security.pgp, I realized that there
were too many unresolved issues to include an answer here.  I may try
to include the subject in a future release of the FAQ.

========

2.6. Where can I obtain scripts to integrate pgp with my email or news
reading system?

The scripts that come with the source code of PGP are rather out of
date. Newer versions of some of the scripts are available via
anonymous ftp at ftp.informatik.uni-hamburg.de:/pub/virus/misc/contrib.zip

========

3. Keys

========

3.1.  Which key size should I use?

PGP gives you 4 choices of key size: 384, 512, 1024, or a user
selected number of bits. The larger the key, the more secure the RSA
portion of the encryption is. The only place where the key size makes
a large change in the running time of the program is during key
generation. A 1024 bit key can take 8 times longer to generate than a
384 bit key. Fortunately, this is a one time process that doesn't need
to be repeated unless you wish to generate another key pair. During
encryption, only the RSA portion of the encryption process is affected
by key size. The RSA portion is only used for encrypting the session
key used by the IDEA. The main body of the message is totally
unaffected by the choice of RSA key size. So unless you have a very
good reason for doing otherwise, select the 1024 bit key size.  Using
currently available algorithms for factoring, the 384 bit key is just
not far enough out of reach to be a good choice.

========

3.2. Why does PGP take so long to add new keys to my key ring?

The time required to check signatures and add keys to your public key
ring tends to grow as the square of the size of your existing public
key ring. This can reach extreme proportions. I just recently added
the entire 850KB public key ring form one of the key servers to my
local public key ring. Even on my 66MHz 486 system, the process took
over 10 hours.

========

3.3. How can I extract multiple keys into a single armored file?

A number of people have more than one public key that they would like
to make available. One way of doing this is executing the "-kxa"
command for each key you wish to extract from the key ring into
separate armored files, then appending all the individual files into a
single long file with multiple armored blocks. This is not as
convenient as having all of your keys in a single armored block.

Unfortunately, the present version of PGP does not allow you to do
this directly. Fortunately, there is an indirect way to do it.

I would like to thank Robert Joop <[email]> for
supplying the following method which is simpler than the method that I
had previously given.

solution 1:

pgp -kxaf uid1 >  extract
pgp -kxaf uid2 >> extract
pgp -kxaf uid3 >> extract

Someone who does a `pgp extract` processes the individual keys, one by
one. that's inconvinient.

solution 2:

pgp -kx uid1 extract
pgp -kx uid2 extract
pgp -kx uid3 extract

This puts all three keys into extract.pgp. To get an ascii amored
file, call:

pgp -a extract.pgp

You get an extract.asc. Someone who does a `pgp extract` and has
either file processes all three keys simultaneously.

A Unix script to perform the extraction with a single command would be
as follows:

  foreach name (name1 name2 name3 ...)
  pgp -kx $name /tmp/keys.pgp <keyring>
  end

An equivalent DOS command would be:

  for %a in (name1 name2 name3 ...) do pgp -kx %a <keyring>

========

3.4. I tried encrypting the same message to the same address two
different times and got completely different outputs. Why is this?

Every time you run pgp, a different session key is generated. This
session key is used as the key for IDEA. As a result, the entire
header and body of the message changes. You will never see the same
output twice, no matter how many times you encrypt the same message to
the same address.  This adds to the overall security of PGP.

========

3.5.  How do I specify which key to use when an individual has 2 or
more public keys and the very same user ID on each, or when 2
different users have the same name?

Instead of specifying the user's name in the ID field of the PGP
command, you can use the key ID number. The format is 0xNNNNNN where
NNNNNN is the user's 6 character key ID number. It should be noted
that you don't need to enter the entire ID number, a few consecutive
digits from anywhere in the ID should do the trick.  Be careful: If
you enter "0x123", you will be matching key IDs 0x123937, 0x931237, or
0x912373.  Any key ID that contains "123" anywhere in it will produce
a match.  They don't need to be the starting characters of the key
ID.  You will recognize that this is the format for entering hex
numbers in the C programming language. For example, any of the
following commands could be used to encrypt a file to me.

    pgp -e <filename> "Gary Edstrom"
    pgp -e <filename> [email]
    pgp -e <filename> 0x90A9C9

This same method of key identification can be used in the config.txt
file in the "MyName" variable to specify exactly which of the keys in
the secret key ring should be used for encrypting a message.

========

3.6. What does the message "Unknown signator, can't be checked" mean?

========

It means that the key used to create that signature does not exist in
your database. If at sometime in the future, you happen to add that
key to your database, then the signature line will read normally. It
is completely harmless to leave these non-checkable signatures in your
database. They neither add to nor take away from the validity of the
key in question.

========

3.7.  How do I get PGP to display the trust parameters on a key?

You can only do this when you run the -kc option by itself on the
entire database. The parameters will NOT be shown if you give a
specific ID on the command line. The correct command is: "pgp -kc".
The command "pgp -kc smith" will NOT show the trust parameters for
smith.

========

4. Security Questions

========

4.1. How secure is PGP?

The big unknown in any encryption scheme based on RSA is whether or
not there is an efficient way to factor huge numbers, or if there is
some backdoor algorithm that can break the code without solving the
factoring problem. Even if no such algorithm exists, it is still
believed that RSA is the weakest link in the PGP chain.

========

4.2. Can't you break PGP by trying all of the possible keys?

This is one of the first questions that people ask when they are first
introduced to cryptography. They do not understand the size of the
problem. For the IDEA encryption scheme, a 128 bit key is required.
Any one of the 2^128 possible combinations would be legal as a key,
and only that one key would successfully decrypt all message blocks.
Let's say that you had developed a special purpose chip that could try
a billion keys per second. This is FAR beyond anything that could
really be developed today. Let's also say that you could afford to
throw a billion such chips at the problem at the same time. It would
still require over 10,000,000,000,000 years to try all of the possible
128 bit keys. That is something like a thousand times the age of the
known universe! While the speed of computers continues to increase and
their cost decrease at a very rapid pace, it will probably never get
to the point that IDEA could be broken by the brute force attack.

The only type of attack that might succeed is one that tries to solve
the problem from a mathematical standpoint by analyzing the
transformations that take place between plain text blocks, and their
cipher text equivalents. IDEA is still a fairly new algorithm, and
work still needs to be done on it as it relates to complexity theory,
but so far, it appears that there is no algorithm much better suited
to solving an IDEA cipher than the brute force attack, which we have
already shown is unworkable. The nonlinear transformation that takes
place in IDEA puts it in a class of extremely difficult to solve
mathmatical problems.

========

4.3. How secure is the conventional cryptography (-c) option?

Assuming that you are using a good strong random pass phrase, it is
actually much stronger than the normal mode of encryption because you
have removed RSA which is believed to be the weakest link in the
chain.  Of course, in this mode, you will need to exchange secret keys
ahead of time with each of the recipients using some other secure
method of communication, such as an in- person meeting or trusted
courier.

========

4.4. Can the NSA crack RSA?

This question has been asked many times. If the NSA were able to crack
RSA, you would probably never hear about it from them. The best
defense against this is the fact the algorithm for RSA is known
worldwide. There are many competent mathematicians and cryptographers
outside the NSA and there is much research being done in the field
right now. If any of them were to discover a hole in RSA, I'm sure
that we would hear about it from them. I think that it would be hard
to hide such a discovery.  For this reason, when you read messages on
USENET saying that "someone told them" that the NSA is able to break
pgp, take it with a grain of salt and ask for some documentation on
exactly where the information is coming from.

========

4.5. How secure is the "for your eyes only" option (-m)?

It is not secure at all. There are many ways to defeat it. Probably
the easiest way is to simply redirect your screen output to a file as
follows:

    pgp [filename] > [diskfile]

The -m option was not intended as a fail-safe option to prevent plain
text files from being generated, but to serve simply as a warning to
the person decrypting the file that he probably shouldn't keep a copy
of the plain text on his system.

========

4.6. What if I forget my pass phrase?

In a word: DON'T. If you forget your pass phrase, there is absolutely
no way to recover any encrypted files. I use the following technique:
I have a backup copy of my secret key ring on floppy, along with a
sealed envelope containing the pass phrase. I keep these two items in
separate safe locations, neither of which is my home or office. The
pass phrase used on this backup copy is different from the one that I
normally use on my computer. That way, even if some stumbles onto the
hidden pass phrase and can figure out who it belongs to, it still
doesn't do them any good, because it is not the one required to unlock
the key on my computer.

========

4.7. Why do you use the term "pass phrase" instead of "password"?

This is because most people, when asked to choose a password, select
some simple common word. This can be cracked by a program that uses a
dictionary to try out passwords on a system. Since most people really
don't want to select a truly random password, where the letters and
digits are mixed in a nonsense pattern, the term pass phrase is used
to urge people to at least use several unrelated words in sequence as
the pass phrase.

========

4.8. If my secret key ring is stolen, can my messages be read?

No, not unless they have also stolen your secret pass phrase, or if
your pass phrase is susceptible to a brute-force attack. Neither part
is useful without the other. You should, however, revoke that key and
generate a fresh key pair using a different pass phrase. Before
revoking your old key, you might want to add another user ID that
states what your new key id is so that others can know of your new
address.

========

4.9. How do I choose a pass phrase?

All of the security that is available in PGP can be made absolutely
useless if you don't choose a good pass phrase to encrypt your secret
key ring. Too many people use their birthday, their telephone number,
the name of a loved one, or some easy to guess common word.  While
there are a number of suggestions for generating good pass phrases,
the ultimate in security is obtained when the characters of the pass
phrase are chosen completely at random. It may be a little harder to
remember, but the added security is worth it. As an absolute minimum
pass phrase, I would suggest a random combination of at least 8
letters and digits, with 12 being a better choice. With a 12 character
pass phrase made up of the lower case letters a-z plus the digits 0-9,
you have about 62 bits of key, which is 6 bits better than the 56 bit
DES keys. If you wish, you can mix upper and lower case letters in
your pass phrase to cut down the number of characters that are
required to achieve the same level of security. I don't do this myself
because I hate having to manipulate the shift key while entering a
pass phrase.

A pass phrase which is composed of ordinary words without punctuation
or special characters is susceptible to a dictionary attack.
Transposing characters or mis-spelling words makes your pass phrase
less vulnerable, but a professional dictionary attack will cater for
this sort of thing.

========

4.10. How do I remember my pass phrase?

This can be quite a problem especially if you are like me and have
about a dozen different pass phrases that are required in your
everyday life. Writing them down someplace so that you can remember
them would defeat the whole purpose of pass phrases in the first
place. There is really no good way around this. Either remember it, or
write it down someplace and risk having it compromised.

========

4.11. How do I verify that my copy of PGP has not been tampered with?

If you do not presently own any copy of PGP, use great care on where
you obtain your first copy. What I would suggest is that you get two
or more copies from different sources that you feel that you can
trust. Compare the copies to see if they are absolutely identical.
This won't eliminate the possibility of having a bad copy, but it will
greatly reduce the chances.

If you already own a trusted version of PGP, it is easy to check the
validity of any future version. There is a file called PGPSIG.ASC
included with all new releases. It is a stand-alone signature file for
the contents of PGP.EXE. The signature file was created by the author
of the program. Since nobody except the author has access to his
secret key, nobody can tamper with either PGP.EXE or PGPSIG.ASC
without it being detected. To check the signature, you MUST be careful
that you are executing the OLD version of PGP to check the NEW. If
not, the entire check is useless. Let's say that your existing copy of
PGP is in subdirectory C:\PGP and your new copy is in C:\NEW. You
should execute the following command:

    \PGP\PGP C:\NEW\PGPSIG.ASC C:\NEW\PGP.EXE

This will force your old copy of PGP to be the one that is executed.
If you simply changed to the C:\NEW directory and executed the command
"PGP PGPSIG.ASC PGP.EXE" you would be using the new version to check
itself, and this is an absolutely worthless check.

Once you have properly checked the signature of your new copy of PGP,
you can copy all of the files to your C:\PGP directory.

========

4.12. How do I know that there is no trap door in the program?

The fact that the entire source code for PGP is available makes it
just about impossible for there to be some hidden trap door. The
source code has been examined by countless individuals and no such
trap door has been found. To make sure that your executable file
actually represents the given source code, all you need to do is to
re-compile the entire program. I did this with the DOS version 2.3a
and the Borland C++ 3.1 compiler and found that the output exactly
matched byte for byte the distributed executable file.

========

4.13. Can I put PGP on a multi-user system like a network or a
mainframe?

You can, but you should not, because this greatly reduces the security
of your secret key/pass phrase. This is because your pass phrase may
be passed over the network in the clear where it could be intercepted
by network monitoring equipment. Also, while it is being used by PGP
on the host system, it could be caught by some Trojan Horse program.
Also, even though your secret key ring is encrypted, it would not be
good practice to leave it lying around for anyone else to look at.

========

4.14. Why not use RSA alone rather than a hybrid mix of IDEA, MD5, &
RSA?

Two reasons: First, the IDEA encryption algorithm used in PGP is
actually MUCH stronger than RSA given the same key length.  Even with
a 1024 bit RSA key, it is believed that IDEA encryption is still
stronger, and, since a chain is no stronger than its weakest link, it
is believed that RSA is actually the weakest part of the RSA - IDEA
approach. Second, RSA encryption is MUCH slower than IDEA. The only
purpose of RSA in most public key schemes is for the transfer of
session keys to be used in the conventional secret key algorithm, or
to encode signatures.

========

4.15. Aren't all of these security procedures a little paranoid?

That all depends on how much your privacy means to you! Even apart
from the government, there are many people out there who would just
love to read your private mail. And many of these individuals would be

-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLbHQa0HZYsvlkKnJAQFDFgP/UvMttuqLqHJwIyBTz8fObCYfVkwKl9Hc
ycizqVTNfBJ5hdPnAG5rxvR5ZeY9Jxi6FfltMIquL0YUJN3oUQA7ZjYa+frWqi7S
8r7ZuXQEz4aXFh0a+COZuoYF4czvuTPK5KxZrQ+q9CMGC/4+CTsWZfVku4LJzUBh
tGaYE/FlOwg=
=h8F0


subject: alt.security.pgp FAQ (Part 2/5)

text:
Archive-name: pgp-faq/part2
Version: 8
Last-modified: 1994/3/13

-----BEGIN PGP SIGNED MESSAGE-----

willing to go to great lengths to compromise your mail. Look at the
amount of work that has been put into some of the virus programs that
have found their way into various computer systems. Even when it
doesn't involve money, some people are obsessed with breaking into
systems. Just about week ago, I saw a posting on alt.security.pgp
where the return address had been altered to say
"[email]". In this case, the content of the message
showed that it was obviously fake, but what about some of those other
not so obvious cases.

========

4.16. Can I be forced to reveal my pass phrase in any legal
proceedings?

The following information applies only to citizens of the United
States in U.S. Courts.  The laws in other countries may vary.  Please
see the disclaimer at the top of part 1.

There have been several threads on Internet concerning the question of
whether or not the fifth amendment right about not being forced to
give testimony against yourself can be applied to the subject of being
forced to reveal your pass phrase.  Not wanting to settle for the many
conflicting opinions of armchair lawyers on usenet, I asked for input
from individuals who were more qualified in the area.  The results
were somewhat mixed.  There apparently has NOT been much case history
to set precedence in this area.  So if you find yourself in this
situation, you should be prepared for a long and costly legal fight on
the matter.  Do you have the time and money for such a fight?  Also
remember that judges have great freedom in the use of "Contempt of
Court".  They might choose to lock you up until you decide to reveal
the pass phrase and it could take your lawyer some time to get you
out.  (If only you just had a poor memory!)

========

5.   Message Signatures

========

5.1. What is message signing?

Let's imagine that you received a letter in the mail from someone you know
named John Smith. How do you know that John was really the person who sent
you the letter and that someone else simply forged his name? With PGP, it is
possible to apply a digital signature to a message that is impossible to
forge. If you already have a trusted copy of John's public encryption key,
you can use it  to check the signature on the message. It would be impossible
for anybody but John to have created the signature, since he is the only
person with access to the secret key necessary to create the signature. In
addition, if anybody has tampered with an otherwise valid message, the
digital signature will detect the fact. It protects the entire message.

========

5.2. How do I sign a message while still leaving it readable?

Sometimes you are not interested in keeping the contents of a message
secret, you only want to make sure that nobody tampers with it, and to
allow others to verify that the message is really from you. For this,
you can use clear signing. Clear signing only works on text files, it
will NOT work on binary files. The command format is:

    pgp -sat +clearsig=on <filename>

The output file will contain your original unmodified text, along with
section headers and an armored PGP signature. In this case, PGP is not
required to read the file, only to verify the signature.

========

6.   Key Signatures

========

6.1. What is key signing?

OK, you just got a copy of John Smith's public encryption key. How do
you know that the key really belongs to John Smith and not to some
impostor? The answer to this is key signatures. They are similar to
message signatures in that they can't be forged. Let's say that you
don't know that you have John Smith's real key. But let's say that you
DO have a trusted key from Joe Blow. Let's say that you trust Joe Blow
and that he has added his signature to John Smith's key. By inference,
you can now trust that you have a valid copy of John Smith's key. That
is what key signing is all about. This chain of trust can be carried
to several levels, such as A trusts B who trusts C who trusts D,
therefore A can trust D. You have control in the PGP configuration
file over exactly how many levels this chain of trust is allowed to
proceed. Be careful about keys that are several levels removed from
your immediate trust.

========

6.2. How do I sign a key?

- From the command prompt, execute the following command:

    PGP -ks [-u userid] <keyid>

A signature will be appended to already existing on the specified key.
Next, you should extract a copy of this updated key along with its
signatures using the "-kxa" option. An armored text file will be
created. Give this file to the owner of the key so that he may
propagate the new signature to whomever he chooses.

Be very careful with your secret keyring.  Never be tempted to put a
copy in somebody else's machine so you can sign their public key -
they could have modified PGP to copy your secret key and grab your
pass phrase.

It is not considered proper to send his updated key to a key server
yourself unless he has given you explicit permission to do so. After
all, he may not wish to have his key appear on a public server.  By
the same token, you should expect that any key that you give out will
probably find its way onto the public key servers, even if you really
didn't want it there, since anyone having your public key can upload
it.

========

6.3. Should I sign my own key?

Yes, you should sign each personal ID on your key. This will help to
prevent anyone from placing a phony address in the ID field of the key
and possibly having your mail diverted to them.  Anyone changing a
user id to your key will be unable to sign the entry, making it stand
out like a sore thumb since all of the other entries are signed.  Do
this even if you are the only person signing your key.  For example,
my entry in the public key ring now appears as follows if you use the
"-kvv" command:

Type bits/keyID   Date       User ID
pub  1024/90A9C9 1993/09/13  Gary Edstrom <[email]>
sig       90A9C9               Gary Edstrom <[email]>
                             Gary Edstrom <[email]>
sig       90A9C9               Gary Edstrom <[email]>

========

6.4.  Should I sign X's key?

Signing someone's key is your indication to the world that you believe
that key to rightfully belong to that person, and that person is who
he purports to be.  Other people may rely on your signature to decide
whether or not a key is valid, so you should not sign capriciously.

Some countries require respected professionals such as doctors or
engineers to endorse passport photographs as proof of identity for a
passport application - you should consider signing someone's key in
the same light. Alternatively, when you come to sign someone's key,
ask yourself if you would be prepared to swear in a court of law as to
that person's identity.

========

6.5. How do I verify someone's identity?

It all depends on how well you know them.  Relatives, friends and
colleagues are easy.  People you meet at conventions or key-signing
sessions require some proof like a driver's license or credit card.

========

6.6. How do I know someone hasn't sent me a bogus key to sign?

It is very easy for someone to generate a key with a false ID and send
e-mail with fraudulent headers, or for a node which routes the e-mail
to you to substitute a different key.  Finger servers are harder to
tamper with, but not impossible.  The problem is that while public key
exchange does not require a secure channel (eavesdropping is not a
problem) it does require a tamper-proof channel (key-substitution is a
problem).

If it is a key from someone you know well and whose voice you
recognize then it is sufficient to give them a phone call and have
them read their key's fingerprint (obtained with PGP -kvc <userid>).

If you don't know the person very well then the only recourse is to
exchange keys face-to-face and ask for some proof of identity.  Don't
be tempted to put your public key disk in their machine so they can
add their key - they could maliciously replace your key at the same
time.  If the user ID includes an e-mail address, verify that address
by exchanging an agreed encrypted message before signing.  Don't sign
any user IDs on that key except those you have verified.

========

7.   Revoking a key

========

7.1. My secret key ring has been stolen or lost, what do I do?

Assuming that you selected a good solid random pass phrase to encrypt
your secret key ring, you are probably still safe. It takes two parts
to decrypt a message, the secret key ring, and its pass phrase.
Assuming you have a backup copy of your secret key ring, you should
generate a key revocation certificate and upload the revocation to one
of the public key servers. Prior to uploading the revocation
certificate, you might add a new ID to the old key that tells what
your new key ID will be. If you don't have a backup copy of your
secret key ring, then it will be impossible to create a revocation
certificate under the present version of pgp. This is another good
reason for keeping a backup copy of your secret key ring.

========

7.2. I forgot my pass phrase. Can I create a key revocation certificate?

YOU CAN'T, since the pass phrase is required to create the
certificate! The way to avoid this dilemma is to create a key
revocation certificate at the same time that you generate your key
pair.  Put the revocation certificate away in a safe place and you
will have it available should the need arise. You need to be careful
how you do this, however, or you will end up revoking the key pair
that you just generated and a revocation can't be reversed. After you
have generated your key pair initially, extract your key to an ASCII
file using the -kxa option. Next, create a key revocation certificate
and extract the revoked key to another ASCII file using the -kxa
option again. Finally, delete the revoked key from your public key
ring using the - kr option and put your non-revoked version back in
the ring using the -ka option. Save the revocation certificate on a
floppy so that you don't lose it if you crash your hard disk sometime.

========

8.   Public Key Servers

========

8.1. What are the Public Key Servers?

Public Key Servers exist for the purpose of making your public key
available in a common database where everybody can have access to it
for the purpose of encrypting messages to you. While a number of key
servers exist, it is only necessary to send your key to one of them.
The key server will take care of the job of sending your key to all
other known servers. As of 1-Feb-94 there are about 3,088 keys on the
key servers.

========

8.2. What public key servers are available?

The following is a list of all of the known public key servers active
as of the publication date of this FAQ.  I try to keep this list
current by requesting keys from a different server every few days on a
rotating basis. Any changes to this list should be posted to
alt.security.pgp and a copy forwarded to me for inclusion in future
releases of the alt.security.pgp FAQ.

Changes:

    17-Apr-94 Updated information on [email]
    17-Apr-94 Added ftp: alex.sp.cs.cmu.edu:/links/security/pubring.pgp
    13-Apr-94 Sorted these modification dates from newest to oldest.
    06-Mar-94 Added information on <[email]>
    05-Mar-94 Changed FTP status on [email] from
             "Unknown" to "None".
    05-Feb-94 Added [email] plus note on finger server.
    01-Feb-94 Verified that [email] is still operational.
    24-Jan-94 Added message announcing WWW access to public keyserver
              on martigny.ai.mit.edu
    24-Jan-94 Verified the existance of [email] and
              corrected its address.
    21-Jan-94 Added [email] to list.
    20-Jan-94 Added [email] to list.
    17-Jan-94 Added [email] to key servers no longer
              operational.

Internet sites:

    [email]
    Mark Turner <[email]>
    FTP: ftp.demon.co.uk:/pub/pgp/pubring.pgp
    Verified: 10-Apr-94

    [email]
    Vesselin V. Bontchev <[email]>
    FTP: ftp.informatik.uni-hamburg.de:/pub/virus/misc/pubkring.pgp
    Verified: 10-Apr-94

    [email]
    Brian A. LaMacchia <[email]>
    FTP: None
    Verified: 10-Apr-94

    [email]
    Paul Leyland <[email]>
    FTP: None
    Verified: 11-Apr-94

    [email]
    David Vincenzetti <[email]>
    FTP: ghost.dsi.unimi.it:/pub/crypt/public-keys.pgp
    Verified: 10-Apr-94

    [email]
    Teun Nijssen <[email]>
    FTP: None
    Verified: 10-Apr-94

    [email]
    Hironobu Suzuki <[email]>
    FTP: None
    Verified: 11-Apr-94

    [email]
    Jeremy Fitzhardinge <[email]>
    FTP: None
    Verified: 8-Mar-94

    [email]
    Sysop: [email]
    FTP: wasabi.io.com:/pub/pgpkeys
        NNNNNN.asc for individual keys
        KV             pgp -kv listing
        KVV            pgp -kvv listing
        KXA.asc        full keyring (pgp -kxa listing)
        pgpkeys.tar.Z  all the above (for other archive sites)
        (This site does *not* hold a binary keyring)
    Verified: 10-Apr-94
    Server does not support "Last <n>" command
    finger <userid>@wasabi.io.com - Returns all names matching <userid>
    finger  <keyid>@wasabi.io.com - Returns armored key matching <keyid>
    finger         @wasabi.io.com - Returns help for finger server
    Note: site name may change at some time in the future: if wasabi.io.com
    doesn't exist, try pgp.io.com ...

    [email]
    <[email]>
    FTP: Unknown
    Verified: 15-Apr-94

    [email]
    (See the message below on how to use this server)

Public Key Ring also available from:

    ftp: alex.sp.cs.cmu.edu:/links/security/pubring.pgp

The following key servers are no longer in operation:

    [email]
    [email]
    [email]
    [email]
    [email]

BBS sites:

    Unknown

===============

From: [email] (Brian A. LaMacchia)
Newsgroups: alt.security.pgp
Subject: Announcing WWW access to public keyserver on martigny.ai.mit.edu
Date: 22 Jan 94 00:19:37

Announcing a new way to access public keyservers...

The public keyserver running on martigny.ai.mit.edu may now be
accessed via a World Wide Web client with forms support (such as
Mosaic).  In your favorite WWW client, open the following URL to start:

     http://martigny.ai.mit.edu/~bal/pks-toplev.html

Access to keys on the server is immediate.  You can also submit new
keys and/or signatures in ASCII-armored format to the server.  New
keys are processed every 10 minutes (along with server requests that
arrive by e- mail).

The martigny.ai.mit.edu keyserver currently syncs directly with these
other keyservers:

         [email]
         [email]
         [email]
         [email]

NOTE!  This service is experimental, and has limited options at
present.  I expect to be making changes to the server over the next
few weeks to make it more useful.  I would appreciate any bug reports,
comments or suggestions you might have.

           --Brian LaMacchia
             [email]
             [email]

===============

Date: Sat, 5 Mar 1994 11:44:53 -0800
From: Stable Large Email Database <[email]>
To: [email]
Subject: Sled Info

 -----------------------------------
 SLED : Stable Large Email Database
 -----------------------------------

SLED is an attempt to provide a reasonable mechanism to maintain
and search email addresses for individuals and companies that
make up the on-line community.  SLED is intended for those who
have one or more mailboxes that are generally checked on a
daily basis, and are addressable from the internet.

 --- What does it provide? ---

  I.   Timely maintenance of current email address: Over a
       period of time a person may have many different email
       addresses, which come and go with the changing of jobs, internet
       providers, schools, and so on.  Maintenance also means
       pruning the list for those who no longer interact on-line
       (and are perhaps dead).

  II.  Realistic search parameters:  Current email databases such
       as whois & netfind provide a search granularity that is
       useful only if you already know the person's email address.

       The data set is crafted by each individual user.  It can
       contain entries for schools, occupations, research areas,
       nick names, and so on.  See note below on how this data
       is kept private.

  III. Protection against the enemy:  SLED is intended to provide
       a high quality data set which provides flexibility in
       searching, but yields protection against the enemies of large
       address books.

       The enemy can be one of the following.
             - Head Hunters/Body shops
             - Anonymous and Fake user accounts
             - Commercial Junk mailers

  IV.  A repository for PGP public keys: SLED provides an alternative
       to the huge, very public "public key" rings on some of the
       foreign key servers. (If you don't know what PGP is, don't
       worry.) The public keys retrieved from SLED are signed by 'sled'.
       A key is signed by 'sled', after the check clears, an exchange
       of encrypted messages occurs, and fingerprints are compared.
       SLED uses ViaCrypt PGP.

 --- How? ---

It costs a few $$, and it requires the use of snail mail ( USPS )
at least once.

There are several reasons for charging a small (very small in this case)
fee for this service.

   1. Authoritative ID.  For your data to be included in the database
      we require that you write a personal check.  For the initial
      sign-up, we verify that the name on the check matches the name
      in the database.  A signed check which clears the
      banking system provides very good authentication.

      A semantic note: we don't actually wait for the check to clear.
      We get the check, eyeball the data, update the computer and then
      send the check to the bank. If the check turns out to be bogus
      we go back and zap you. (So you see, there is a way to get a
      couple days of free time.)

   2. By charging a small fee, we can help offset the cost of the
      resources used to maintain & back up the database.  With the
      fee structure, no one will get rich or poor, but there is
      an increased likelihood that this database will be around
      for years.

   3. By tacking on a few dollars to the initial fee, we hope to
      discourage people who would fail to maintain their data, and
      then drop out of the database, then re-join, then drop out,
      then re-join.

   4. Every 5 months (or so), we email an invoice (typically
      for $5.00 US) for the next 5 months of service.  This invoice
      must be printed and sent to us, with a check, via US mail.
      This procedure keeps all data reasonably current ( +/- 5 months),
      which is about as good as it's going to get for such a
      remote service.  The point being, you can not just write
      a check for $50.00 and be covered for the next
      4 years.

      If you have PGP, you will only be subjected to this
      procedure every 10 months, as verification can be accomplished
      via a signed email message.

 --- Well, how much does it cost? ---

      Fee to add your data to the database:   $4.00 US
      Fee to maintain your data:              $1.00 US / per month

 --- Trivia ---

 - The database is meant to be hold REAL names, no aliases,
   anonymous, or otherwise bogus id's.
 - In order to search the database, users must themselves exist
   in the database.
 - The dataset you enter for yourself can never viewed as a whole.
   You are encouraged to enter data for previous & current schools,
   occupations & other organizations/institutions, but a match on
   a single item will not reveal the others.  For example, you used
   to work at AT&T, and now you work for IBM.  If an old friend
   was trying to track you down, they might search on parts
   of your First and Last Name and AT&T.  If you were found, it
   would only show your one line entry corresponding to AT&T.

   The point being that although your data might be read as
   a personal resume, it won't be shown that way.  Of course
   that won't stop your nosy friend from sending you email
   asking where you are working now.
 - People keep asking why the database doesn't have fields
   for phone & address.  No! That kind of data is too personal
   for a large database like this.  If you want someone's address,
   send them email and ask for it.
 - The searching criteria make it really hard to use this
   database for something like head hunting or generating a
   junk mail list (this is by design).

 --- Interface ---

 The interface is via email.  This allows the database to span all
 services (cis, prodigy, aol,...) which have gateways to the
 internet.  Also, it allows each user to craft their data with
 their own editor, in a flexible time frame.

 Searching the database via email, while very functional,  is a bit
 more kludgy than is desirable.

 A searcher accessible via telnet will probably not be put on-line,
 rather the next step will be a Mosaic searcher/browser.

 --- How To Start ---

   Send Mail to:

  -  [email]  subject 'info'   for a (this) text
  -  [email]  subject 'add'    to add yourself to SLED
  -  [email]  subject 'change' to alter your data
  -  [email]  subject 'search' to search the SLED

  -  [email]  To report a bug.
  -  [email]  To send a comment that isn't quite a bug.

 --- The End ---

===============

8.3. What is the syntax of the key server commands?

The remailer expects to see one of the following commands placed in the
subject field. Note that only the ADD command uses the body of the message.

- -------------------------------------------------------------
ADD           Your PGP public key (key to add is body of msg) (-ka)
INDEX         List all PGP keys the server knows about (-kv)
VERBOSE INDEX List all PGP keys, verbose format (-kvv)
GET           Get the whole public key ring (-kxa *)
GET <userid>  Get just that one key (-kxa <userid>)
MGET <userid> Get all keys which match <userid>
LAST <n>      Get all keys uploaded during last <n> days
- -------------------------------------------------------------

If you wish to get the entire key ring and have access to FTP, it
would be a lot more efficient to use FTP rather than e-mail. Using
e-mail, the entire key ring can generate a many part message, which
you will have to reconstruct into a single file before adding it to
your key ring.

========

9.  Bugs

========

9.1 Where should I send bug reports?

Post all of your bug reports concerning PGP to alt.security.pgp and
forward a copy to me for possible inclusion in future releases of the
FAQ.  Please be aware that the authors of PGP might not acknowledge
bug reports sent directly to them.  Posting them on USENET will give
them the widest possible distribution in the shortest amount of time.
The following list of bugs is limited to version 2.2 and later. For
bugs in earlier versions, refer to the documentation included with the
program.

========

9.2 Version 2.3 for DOS has a problem with clear signing messages.
Anyone using version 2.3 for DOS should upgrade to version 2.3a.

========

9.3 Version 2.2 for DOS has a problem of randomly corrupting memory,
which can (and sometimes does) make DOS trash your hard disk.

========

10. Related News Groups

alt.privacy.clipper         Clipper, Capstone, Skipjack, Key Escrow
alt.security                general security discussions
alt.security.index          index to alt.security
alt.security.pgp            discussion of PGP
alt.security.ripem          discussion of RIPEM
alt.society.civil-liberty   general civil liberties, including privacy
comp.compression            discussion of compression algorithms
comp.org.eff.news           News reports from EFF
comp.org.eff.talk           discussion of EFF related issues
comp.patents                discussion of S/W patents, including RSA
comp.risks                  some mention of crypto and wiretapping
comp.society.privacy        general privacy issues
comp.security.announce      announcements of security holes
misc.legal.computing        software patents, copyrights, computer laws
sci.crypt                   methods of data encryption/decryption
sci.math                    general math discussion
talk.politics.crypto        general talk on crypto politics

========

11.   Recommended Reading

========

      The Story of Secret Writing
      By David Kahn
      The MacMillan Publishing Company (1968)
      866 Third Avenue, New York, NY 10022
      Library of Congress Catalog Card Number: 63-16109

    ISBN: 0-02-560460-0

    This has been the unofficial standard reference book on the history of
    cryptography for the last 25 years. It covers the development of
    cryptography from ancient times, up to 1967. It is interesting to read
    about the cat and mouse games that governments have been playing with
    each other even to this day. I have been informed by Mats Lofkvist <d87-
    [email]> that the book has been reissued since its original
    printing.  He found out about it from the 'Baker & Taylor Books'
    database.  I obtained my original edition from a used book store.  It is
    quite exhaustive in its coverage with 1164 pages.  When I was serving in
    the United States Navy in the early 1970's as a cryptographic repair
    technician, this book was considered contraband and not welcome around my
    work place, even though it was freely available at the local public
    library.  This was apparently because it mentioned several of the pieces
    of secret cryptographic equipment that were then in use in the military.

Dorothy Denning, "Cryptography and Data Security", Addison-Wesley,
Reading, MA 1982

Dorothy Denning, "Protecting Public Keys and Signature Keys", IEEE Computer,
Feb 1983

Martin E. Hellman, "The Mathematics of Public-Key Cryptography," Scientific
American, Aug 1979

Steven Levy, "Crypto Rebels", WIRED, May/Jun 1993, page 54. (This is a "must-
read" article on PGP and other related topics.)

Ronald Rivest, "The MD5 Message Digest Algorithm", MIT Laboratory for
Computer Science, 1991

    Available from the net as RFC1321.
    ----------------
    Also available at ghost.dsi.unimi.it and its mirror at
    nic.funet.fi:/pub/crypt/ghost.dsi.unimi.iti is: IDEA_chapter.3.ZIP,   a
    postscript text from the IDEA designer about IDEA.

Xuejia Lai, "On the Design and Security of Block Ciphers", Institute for
Signal and Information Processing, ETH-Zentrum, Zurich, Switzerland, 1992

Xuejia Lai, James L. Massey, Sean Murphy, "Markov Ciphers and Differential
Cryptanalysis", Advances in Cryptology- EUROCRYPT'91

Philip Zimmermann, "A Proposed Standard Format for RSA Cryptosystems",
Advances in Computer Security, Vol III, edited by Rein Turn, Artech House,
1988

Bruce Schneier, "Applied Cryptography: Protocols, Algorithms, and Source Code
in C", John Wiley & Sons, 1993

Paul Wallich, "Electronic Envelopes", Scientific American, Feb 1993, page 30.
(This is an article on PGP)

========

12.   General Tips

    their boards.  Just because they have PGP in their file area, that
    doesn't necessarily mean they tolerate you uploading encrypted mail or
    files - so *do* check first.

    mail after checking that:

      a) Your sysop permits it.
      b) Your recipient's sysop permits it.
      c) The mail is routed through nodes whose sysops also permit it.

    increases the chances of another person finding a path of trust from
    himself to you.

    signed it.  Confirm the identity of the individual yourself.  Remember,
    you are putting your reputation on the line when you sign a key.

========================================================================
Appendix I - PGP add-ons and Related Programs
========================================================================

Much of this section was taken from an old FAQ supplied to me for the
development of this list. This section will hopefully grow to contain
a list of every utility that has been written. I would appreciate it
if the authors of the various utilities could send me mail about their
latest version, a description, if source code is available, and where
to get it. I will then include the information in the next release of
the FAQ.

If you have a utility, but don't know how to make it widely available,
send mail to David Vincenzetti <[email]> who is crypto
collection maintainer at ghost.dsi.unimi.it.  That ftp-site is weekly
mirrored at nic.funet.fi in area: /pub/crypt/ghost.dsi.unimi.it

========================================================================
    unpack with 'pkunzip -d pgp23srcA.zip' to get them all come up nicely
    sorted in subdirectories.

========
Amiga
========
PGP Mail Integration Project
========

TITLE

      PGP Mail Integration Project

VERSION

      Release 1

AUTHOR

      Peter Simons <[email]>

DESCRIPTION

      Pretty Good(tm) Privacy (PGP), from Phil's Pretty Good Software, is a
      high security cryptographic software application for MSDOS, Unix,
      AmigaOS, and other computers. PGP allows people to exchange files or
      messages with privacy and authentication.

      All in all, PGP is a very useful and important program.  However it is
      a little bit...uh... overkill for the average Joe Dow to install this
      rather complex package, just to encrypt his few e-mail, which are not
      so private anyway. PGP comes with dozens of options, switches and
      configuration possibilities, far too many to 'just install and run'.
      This has prevented many potential users from using PGP for their
      private mail.

      This is what the PGP Mail Integration Project wants to change. In our
      opinion man-kind should stay superior and leave the 'dirty-work' to the
      machines. :-)) Our idea was to integrate PGP, as far as possible, into
      common UUCP packages so the user needn't care starting about PGP
      himself. Outgoing or incoming mail should be en-/decrypted
      automatically and the software should do all the basics of controlling
      PGP.

      This archive contains the Amiga versions of PGPSendmail and PGPRMail,
      which incorperate public key encryption into the ordinary SLIP or UUCP
      setup. Full source in C and an AmigaGuide manual is included in the
      distribution.

SPECIAL REQUIREMENTS

      none

HOST NAME

      Any Aminet host, i.e. ftp.uni-kl.de (131.246.9.95).

DIRECTORY

      /pub/aminet/comm/mail/

FILE NAMES

      PGPMIP.lha
      PGPMIP.readme

DISTRIBUTABILITY

      GNU General Public License

========
PGPAmiga-FrontEnd
========

Date: Tue, 22 Feb 94 21:10:31 +0100
From: [email]
To: [email]
Subject: PGPAmiga-FrontEnd available

A beta version of PGPAmiga-FrontEnd is available via BMS from
peti.GUN.de. If you can't bms, just contact me via email and I will
send you an uuencoded copy. This program is a graphical front end,
controlling PGPAmiga. You can de-/encrypt., sign and much more, using
a comfortable GUI.

========
Archimedes
========
PGPwimp
========

             From: Peter Gaunt
    Current Version: 0.12
    Where Available: ftp.demon.co.uk:/pub/archimedes
Information Updated: 21-Dec-93

A multi-tasking WIMP front-end for PGP (requires RISC OS 3).  Operates on
files - it has no hooks to allow integration with mailers/newsreaders.

========
RNscripts4PGP
========

               From: [email] (Paul L. Allen)
    Current Version: 1.1
    Where Available: ftp.demon.co.uk:/pub/archimedes
Information Updated: 12-Dec-93

A collection of scripts and a small BASIC program which integrate PGP
with the ReadNews mailer/newsreader.  Provides encryp, decrypt, sign
signature- check, add key.

========
DOS / MS Windows
========
AutoPGP
PGPSORT
========

From: Stale Schumacher <[email]>
Date: Wed, 13 Apr 1994 12:51:57 +0200
To: [email]
Subject: PGP utilities for FAQ

Gary,

I have a couple of PGP utilities that you may want to include in your FAQ:

APGP20B5.ZIP: AutoPGP v2.0b5: Automatic QWK email encryption with PGP
PGPSORT.ZIP : Utility to sort PGP public key rings (BP7 source included)

Both programs are for MS-DOS, and will soon be available at most ftp sites
that carry PGP. Note that AutoPGP is still in beta, and that I am interested
in beta testers.

I quote from the AutoPGP documentation:

- ------------------------------------------------------------------------

                             AutoPGP 2.0b5
                             =============

                  Automatic e-mail encryption with PGP

                          by Stale Schumacher

                     (C) 1993, 1994 Felix Shareware
                           Revised 1994/04/10

AutoPGP is a fully automatic e-mail encryption package for use with PGP
2.3a and an offline mail reader. It enables you to write encrypted
messages and read decrypted messages from within your favourite QWK mail
reader, using the highly secure and widely acclaimed Pretty Good Privacy
software package by Philip Zimmermann - the new standard in public key
encryption. AutoPGP combines the ease and comfort of reading and writing
e-mail in an offliner with the security of public key encryption. You
don't need any previous experience with PGP or any other encryption
software, as AutoPGP will handle all interfacing with PGP automatically.
If you are already familiar with the concepts of offline mail reading,
you will soon get acquainted to AutoPGP, even if you have never used PGP
before.

Features of AutoPGP 2.0 include:

  *  Full QWK support. You may use AutoPGP in conjunction with any offline
     mail reader which conforms to the QWK/REP packet specifications.
     AutoPGP also supports XBoard and Offliner, two popular Norwegian
     offline readers that use the PCBoard and MBBS grab formats rather than
     QWK.

  *  Easy installation. An intuitive, easy-to-use installation program will
     configure AutoPGP correctly for the first-time user. The installation
     program will automatically detect many popular offline readers, and
     configure AutoPGP for use with these readers. It will also find the
     correct paths to PKZIP, ARJ and PGP, set DOS environment variables and
     update your AUTOEXEC.BAT file if necessary.

  *  Automatic, seamless operation. When correctly set up, AutoPGP will
     automatically decrypt, encrypt and sign messages, verify signatures
     and add new public keys to your public key ring, all with a minimum of
     interaction from the user.

  *  Advanced functions not found in any other PGP front-end utility.
     AutoPGP lets you:

     + encrypt and/or sign only part(s) of a message
     + insert your own or other users' public keys anywhere in a message
     + include PGP ASCII armoured files in a message
     + decrypt incoming messages
     + verify signatures on incoming messages
     + add new public keys found in incoming messages to your keyring
     + extract PGP ASCII armoured files from incoming messages
     + choose which public keys to use from an alphabetic list of userids
     + and much more!

- ------------------------------------------------------------------------

I have also translated PGP into Norwegian. The Norwegian language module
LANGUAGE.TXT will soon be available by ftp, or directly from me.

I can be contacted at:

email: [email]
www  : http://www.ifi.uio.no/~staalesc

Best regards,
Stale <[email]>

========
HPACK79   PGP-compatible archiver
========

    114243 Nov 20 07:08 garbo.uwasa.fi:/pc/arcers/hpack79.zip
    146470 Dec  3 01:01 garbo.uwasa.fi:/pc/doc-soft/hpack79d.zip
    511827 Dec  3 14:46 garbo.uwasa.fi:/pc/source/hpack79s.zip
    667464 Dec  5 16:43 garbo.uwasa.fi:/unix/arcers/hpack79src.tar.Z

Where hpack79.zip is the MSDOS executable, hpack79d.zip is the
Postscript documentation, hpack79s.zip is the source code, and
hpack79src.tar.Z is the source code again but in tar.Z format (note
that the latter is a tiny bit more recent that hpack79s.zip and
contains changes for the NeXT).  There is a (rather primitive)
Macintosh executable somewhere on garbo as well, possibly
/mac/arcers/hpack79mac.cpt. OS/2 32-bit versions of

HPACK is available for anonymous FTP from the UK. `ftp.demon.co.uk'
[158.152.1.65] in ~/pub/ibmpc/pgp

Note:

The OS/2 executables of hpack at ftp.demon.co.uk are out of date,
version 0.78.  Current 0.79 executables are available at
ftp.informatik.tu-muenchen.de in
/pub/comp/os/os2/crypt/hpack79{os2,src}.zip.

HPACK is also available from:

[email]
[email]
[email]
[email]
[email]
[email]
(In order of preference - one of 'ems bound to work)

========
MENU.ZIP
========

Menushell for MSDOS. (Requires 4DOS or Norton's NDOS) You can
customize the menu for your own preferences.  The name 'MENU' violates
file naming conventions on ftp-sites, so I guess it's hard to find
this program somewhere else. Exists at ghost.dsi.unimi.it  area:
/pub/crypt/ (ask archie about 4DOS, a comand.com replacement)

========
OzPKE
========

Date:  05-Mar-94 08:48 PST
From:  Don Moe [72407,1054]
Subj:  Info about OzPKE for PGP/OzCIS.

Gary,

Recently I downloaded your PGPFAQ from EFFSIG on CompuServe and enjoyed
reading it.

As the author of a utility program, OzPKE, which links PGP with the OzCIS
automated access program, I would like to inform you about my program.

Here an exerpt from the documentation file:

- ----------------

 "This utility program, OzPKE, works in conjunction with Steve Sneed's
 automated CompuServe access program OzCIS (v2.0a) and ViaCrypt PGP program
 (v2.4) to assure secure communications via electronic mail. Alternative
 similar encryption programs are also supported.

 "The goal is to simplify public key encryption of outgoing and decryption of
 incoming messages and files passing through the CompuServe Information
 System. Both direct electronic mail and forum messages as well as file
 attachments are supported.  OzPKE handles encryption of outgoing messages and
 files as well as decryption of incoming messages and received files.

 "Although the user could use whatever public-key encryption software he
 chooses, provided it supports command-line operation, the recommended program
 is ViaCrypt PGP system since OzPKE makes use of PGP's public keyring file and
 specific features of that program.

 "The program OzPKE contains no encryption or decryption algorithms or
 routines and relies entirely on the external encryption software to perform
 that task."

- ----------------

OzPKE is available on EFFSIG lib 15 and OZCIS lib 7. Version 1.3 was just
recently additionally uploaded EURFORUM lib 1.

========
PBBS (Scheduled for release summer 1994)
========

Public Bulletin Board System (PBBS) ver 1.0 is a privacy-oriented host
BBS application designed with the "anonymous movement's" diverse needs
in mind. PBBS is a compact application at 75K, allowing it to be run
off of a floppy disk if desired, and requires no telecommunications
experience to operate. Installation of PBBS takes about 2 minutes
flat, and is easy to set up and maintain.  Don't let the size fool you
however, it packs a powerful set of Zmodem, Ymodem, and Xmodem
assembly-language protocols, supports speeds up to 57,600 bps, door
support, full ANSI-emulation, and many more features!

Public BBS is an eclectic and powerful BBS and also the first bulletin
board system designed to work with Pretty Good Privacy (PGP), the
public-key encryption program.  A unique Post Office within PBBS
allows users to send each other private "postcards" or to upload and
download PGP-encrypted messages to other user's mail boxes.  PBBS also
contains a comprehensive public message base with "anonymous" read,
write, and reply options.  PBBS has a built in emergency self-destruct
sequence for the sysop that desires an extra level of security.  The
ESD option will completely shred all PBBS- related files on disk,
assuring the sysop that his or her BBS will not be compromised in any
way.  Look for Public BBS to be released on all Internet sites and
FidoNet BBS's as PBBS10.ZIP.  PBBS will change the face of cyber-
fringe telecommunications forever!  Questions or comments please
e-mail James Still at <[email]>.

========
PGP-Front
========

             From: Walter H. van Holst <[email]>
    Current Version:
   Where Available: ghost.dsi.unimi.it:/pub/crypt
                     nic.funet.fi:/pub/crypt
Information Updated: 09-Jan-94

"PGP-Front is an interactive shell for Phill Zimmerman's Pretty Good
Privacy and is available since November 1993 on some of the biggest
FTP-sites.  It features an easy to use interface for those who don't
want to learn all PGP flags by heart but still want to make use of its
versatility. The most used options of PGP are supported, including
most key-management options.  An improved version is under development
and will feature support for some of the advanced options of PGP and a
lot of extra configuration options for PGP- Front itself. System
requirements for this beta-version:

- - 80286 or better (will be lifted in version 1.00)
- - MS/PC-DOS 3.11 or better
- - Enough memory to run PGP plus an extra 512 bytes for PGP-Front, thanks to
Ralph Brown.

Any feedback on this project will be appreciated,

Walter H. van Holst <[email]>"

========
PGP-NG.ZIP
========

At nic.funet.fi; /pub/crypt/pgp-ng.zip. A norton Guide database for PGP ver
2.0. Easy to find info for programmers about all the functions in the source
code, and users can more easily find their subject. Is any update for the
current version planned? Ask archie about the 2 Norton guide clones that are
out on the net.

========
PGPSHELL
========

   Date:  12-Jan-94
   From:  James Still <[email]>
Subject:  PGPShell Version 3.0

- --------------------------------------------------------------------
                     FOR IMMEDIATE RELEASE
- --------------------------------------------------------------------

              PGPSHELL VERSION 3.0 PROGRAM RELEASE

PGPShell, a front-end DOS program for use with Philip Zimmermann's
Pretty Good Privacy (PGP) public-key encryption software, has just
been upgraded and released as version 3.0.

PGPShell incorporates easy to use, mouse-driven menus and a unique Key
Management Screen to easily display all public key ring information in

-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLbHQdEHZYsvlkKnJAQE5UwP/UHx3Zw5G7tCgNpLcnBwDcCq2ksJUsDD/
7AlV/9rI00BHIFJcmN6aJ3csr+TXpqSoeKoRfPH55++0q89a9pwuQp6VjoIEm1m5
+S9ehR/0zIKK5u2H/AJ7f2K7MkGrJUXOjS7yB0Z7T6I85DTNp5D3r2/rSy1edmuC
TDfrkq4kuWk=
=E0rz


subject: alt.security.pgp FAQ (Part 5/5)

text:
Archive-name: pgp-faq/part5
Version: 8
Last-modified: 1994/3/13

-----BEGIN PGP SIGNED MESSAGE-----

R TX DeLay, Thomas                  1-202-225-5951   na
R TX Fields, Jack                   1-202-225-4901   na
R TX Johnson, Sam                   1-202-225-4201   na
R TX Smith, Lamar S.                1-202-225-4236   1-202-225-8628
D UT Orton, William H.              1-202-225-7751   1-202-226-1223
D UT Shepherd, Karen                1-202-225-3011   1-202-226-0354
R UT Hansen, James V.               1-202-225-0453   1-202-225-5857
D VA Boucher, Rick                  1-202-225-3861   na
D VA Byrne, Leslie L.               1-202-225-1492   na
D VA Moran Jr., James P.            1-202-225-4376   1-202-225-0017
D VA Payne Jr., Lewis F.            1-202-225-4711   1-202-226-1147
D VA Pickett, Owen B.               1-202-225-4215   1-202-225-4218
D VA Scott, Robert C.               1-202-225-8351   1-202-225-3854
D VA Sisisky, Norman                1-202-225-6365   1-202-226-1170
R VA Bateman, Herbert H.            1-202-225-4261   1-202-225-4382
R VA Bliley Jr., Thomas J.          1-202-225-2815   na
R VA Goodlatte, Robert W.           1-202-225-5431   1-202-225-9681
R VA Wolf, Frank R.                 1-202-225-5136   na
D VI de Lugo, Ron                   1-202-225-1790   1-202-225-9392
I VT Sanders, Bernard               1-202-225-4115   1-202-225-6790
D WA Cantwell, Maria                1-202-225-6311   1-202-225-2286
D WA Dicks, Norman D.               1-202-225-5916   na
D WA Foley, Thomas S.               1-202-225-2006   na
D WA Inslee, Jay                    1-202-225-5816   1-202-226-1137
D WA Kreidler, Mike                 1-202-225-8901   1-202-226-2361
D WA McDermott, James A.            1-202-225-3106   1-202-225-9212
D WA Swift, Al                      1-202-225-2605   1-202-225-2608
D WA Unsoeld, Jolene                1-202-225-3536   1-202-225-9095
R WA Dunn, Jennifer                 1-202-225-7761   na
D WI Barrett, Thomas M.             1-202-225-3571   na
D WI Gunderson, Steve               1-202-225-5506   1-202-225-6195
D WI Kleczka, Gerald D.             1-202-225-4572   na
D WI Obey, David R.                 1-202-225-3365   na
R WI Klug, Scott                    1-202-225-2906   na
R WI Petri, Thomas E.               1-202-225-2476   1-202-225-2356
R WI Roth, Toby                     1-202-225-5665   1-202-225-0087
R WI Sensenbrenner, F. J.           1-202-225-5101   1-202-225-3190
D WV Mollohan, Alan B.              1-202-225-4172   1-202-225-7564
D WV Rahall II, Nick Joe            1-202-225-3452   1-202-225-9061
D WV Wise Jr., Robert E.            1-202-225-2711   1-202-225-7856
R WY Thomas, Craig                  1-202-225-2311   1-202-225-0726

-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLbHQkUHZYsvlkKnJAQHElQQAw6mf/+6WAzNZIqLZMi7Mt6Nm0OT2DfeB
oTAO+VN5KROCKiBkKDww7DgjATR/CuFkTfi0Zeo3E3XVR7QG+G21YQes5tfVt0wV
UEEc1J5pnAJl27KpLxqLnssNLaj4ZCx/nccAIOqWmFVFSXCW0ucBrGbDQX1OEPxL
6S1+o350cbE=
=NQrQ
-----END PGP SIGNATURE-----


author: I R A Darth Aggie

subject: Re: I did what I said I would do.

text:
On Sun, 2 Jul 2000 01:39:14 +0100,
Teddy Bear's Picnic <[email]>, in
<17w75.2772$[email]> wrote:

+ The sex fetishist smear is still an issue. Henrietta was for her part very
+ fairly treated. She simply went too far, nothing she says can be given the
+ slightest credulity.  She just makes stuff up from the top of her head.  I
+ spoke to legal affairs of her ISP in Denver Colorado.  I said I would and I
+ did.

And they said what?

I suspect it went along the lines of "kiss our collective ass".

More politely than that, of course.

James


author: Michal Taborsky

subject: Cancel any message

text:
Hello,

I run a private news server without feeds and I need to have the ability to
cancel any message on the server (from my newsreader, not manually). Is it
possible to setup INN in that way and if yes, how ? Thanks.

Michal Taborsky


author: Mirek Luc

subject: Re: Cancel any message

text:
Michal Taborsky <[email]> wrote:

: I run a private news server without feeds and I need to have the ability to
: cancel any message on the server (from my newsreader, not manually). Is it
: possible to setup INN in that way and if yes, how ? Thanks.
INN 2.3.x - set verifycancels to false in etc/inn.conf and restart innd.
INN 1.7.x - set VERIFY_CANCELS to DO in config/config.data, recompile
            and reinstall (make update) INN.
INN 2.2.x - hmmm... I don't know.:)

-Mirek


subject: Re: Cancel any message

text:
Mirek Luc <[email]> wrote:

: INN 1.7.x - set VERIFY_CANCELS to DO in config/config.data, recompile
                                    ^^
My mistake! It should be DONT. I don't know why I wrote such [censored].

-Mirek


author: john r. vanderpool

subject: problem with posts bouncing when .sig is > 4 lines

text:
if my .signature file is greater that four lines nn 6.4.16
bounces all of my posts back to me - i can't find in the man
pages any way to override this - i guess i'll just have to
abbrev my .sig file!?

			fish


author: Speaker-To-Morons-At-Work

subject: Re: problem with posts bouncing when .sig is > 4 lines

text:
[email] (john r. vanderpool) writes:

Please note: It does NOT abort your posts - it simply truncates the
.signature to 4 lines.

This is a configuration parameter, and can be modified.  However,
changing this paramater requires a recompile.


author: Francis Ouellette

subject: Re: problem with posts bouncing when .sig is > 4

text:
In article [email], [email] (john r. vanderpool) writes:

I had my .sig file that was longer at one time, and all it
would do is remove anything after the fourth line,
it didn't bounce it anywhere!??

Maybe you have another problem?  Maybe you have
weird characters in your .sig file?

francis

---
| B.F. Francis Ouellette
| manager, yeast chromosome I project
| dept of biology, McGill university, Montreal, Qc, Canada
| [email]


author: Sven Guckes

text:
[email] (Francis Ouellette) writes:

A system that will send all your postings to you when the signature
file is more than 4 lines in length ?
HA!
Great idea that!
Congratulations to the news administrator of that site!

Sven :)


author: Heiko W.Rupp

text:
[email] (Francis Ouellette) writes:

That normally doesn't do nn, but a news transport system like c-news.


author: [redacted]

subject: can you delete from your $F folder ???

text:
can you delete from you $F folder - like in the elm
 mailer you can go into a folder and kill messages

 fer instance i like to save the FAQ from groups often
 and want to kill the old one after i grab the new one
 and the only way i can do it is by manually editing the
 file

 any chance this will be a future feature?

			fish


author: Kurt Swanson

subject: Re: can you delete from your $F folder ???

text:
[email] writes:

Yes, "C"ancel the message.  RTFFAQ.

Not a chance.


author: Kristian Koehntopp

text:
In <[email]> [email] writes:

You can "G" oto the folder and select the outdated articles.
Then press "C" ancel to mark the articles for cancellation and
leave to folder for example by pressing "Q" uit. nn will
compress the folder by deleting the cancelled articles.

If you have setup nn for backup folders, there will be a large
backup folder file in your .nn. You don't want this, if disk
space is low.

Kristian


author: Mark Hughes

subject: send _real_ SPAM to Canter

text:
Does anyone know a good way to send _real_ SPAM (the canned meat) to Canter
through the US mail?  I would like to send it without the can, but in such
a way that the postal service could deliver it without a mess or a smell.
It should also be disgusting when opened.  Any ideas?

Thanks
Mark


author: Brian Bringardner

subject: Re: send _real_ SPAM to Canter

text:
Mark Hughes ([email]) wrote:
: Does anyone know a good way to send _real_ SPAM (the canned meat) to Canter
: through the US mail?  I would like to send it without the can, but in such
: a way that the postal service could deliver it without a mess or a smell.
: It should also be disgusting when opened.  Any ideas?

: Thanks
: Mark

Canter and Siegel won't understand the signifigance of the Hormel meat
product, especially if you send it without the can.

They probably wouldn't even see it - some receptionist or mail room clerk
would open it and throw it away.

If it was reported to C or S by the receptionist or mail room clerk, they
might hunt you down and sue you or turn the whole thing over to the post
office for investigation and prosecution.

I'm opposed to the idea.  These scum aren't worth getting yourself
into trouble.  And if they don't have a clue by now, sending them
Spam is not going to enlighten them.

It is a funny idea, but I don't think you should do it.


author: Jesper Lauridsen

subject: Re: send _real_ SPAM to Canter

text:
Dear readers of alt.tasteless, this guy needs your help in his quest.

[email] (Mark Hughes) writes:


author: Skoozerxyklipsce

subject: Re: send _real_ SPAM to Canter

text:
Jesper Lauridsen ([email]) wrote:

: >Does anyone know a good way to send _real_ SPAM (the canned meat) to Canter
: >through the US mail?  I would like to send it without the can, but in such
: >a way that the postal service could deliver it without a mess or a smell.
: >It should also be disgusting when opened.  Any ideas?
To send spam through the mail {uncanned} first put the spam in a small
box, shrink wrap the box, put it in another box, then take this package
to your nearest friendly/homicidal postal employee, ask for fourth class
delivery (or whatever takes the longest). You may want to let the Spam
sit out until it achieves the proper consistency and odor. May I suggest
for added effect use the special spam with cheese bits.


author: Bradamante

subject: Re: send _real_ SPAM to Canter

text:
The only thing that springs too mind is that you should put the opened meat
into a small poly-styrene cut out, and place this in a large jiffy bag.
This way, the package can travel without any danger,
And probably kill with its rancid smell when opened...

Be sure to send it to one you *REALLY* love!

Ted:->
.


author: /Ed B

subject: Re: send _real_ SPAM to Canter

text:
To make sure its REALLY ready to open, eat it first, then send it.
Ed B


author: Steve Chandler

subject: Re: send _real_ SPAM to Canter

text:
Bradamante ([email]) wrote:

: >>Does anyone know a good way to send _real_ SPAM (the canned meat) to Canter
: >>through the US mail?  I would like to send it without the can, but in such
: >>a way that the postal service could deliver it without a mess or a smell.
: >>It should also be disgusting when opened.  Any ideas?

: >Jesper Lauridsen        |  I survived the rec.arts.sf-lovers split
: >[email]   |

: The only thing that springs too mind is that you should put the opened meat
: into a small poly-styrene cut out, and place this in a large jiffy bag.
: This way, the package can travel without any danger,
: And probably kill with its rancid smell when opened...

Maybe you could trim the thing to look like a cucumber or a pickle or
whatever with a pearing knife. Then you could... uhm.... protect it with
some sort of latex wrapping. Be sure to include lots of the nice jello
that they so kindly include with each and every purchase of the stuff. (So
I hear, I have never bought any before)

Have fun kids!
---Steve


author: Amy Leung

subject: Ordering in Tin??

text:
I seek net wisdom...

Can someone tell me how I can ask Tin to show up threads in reverse date
order (ie I would see the newest news first), yet arrange individual
articles in forward date order?

I would certainly want to see the latest threads first (esp. in groups
with hundreds of postings!) but I don't want to read from the last
response first ... I find its very difficult to follow the logic (of
discussions going on) in this way!

Anyone have a solution for me?

					Thanks,

					Amy Leung.


author: L. E. de Rivaud

subject: Re: Ordering in Tin??

text:
Start tin.  Press the h key and you will see a list of help topics.

In the list of help topics you will see that the M key will bring you to
a list of configurable options.

Get out of the help section.  Press M and the list of configurable
options will appear.  Option # 15 is what you want to change.

For further configuring, (not for the technologically faint of heart),
at the UNIX prompt type "cat .tinrc"  (without the quotes.)  If that
does not work type  "cd .tin" and then "cat .tinrc"  and hopefully you
will see your .tinrc file.  This file can be edited.

Type "man tin |m" for more information.

Good luck.

Amy Leung (amy@hkueee) wrote:


author: greg berigan

subject: Re: Ordering in Tin??

text:
[email] (L. E. de Rivaud) writes:

Correction:  In the directory "~/.tin" the filename is "tinrc" not
".tinrc".