PGP

Pretty Good Privacy (PGP) has been the de facto standard for encrypting e-mail messages and desktop files ever since its introduction to the 'net in 1993. The client itself is based on an encryption technology known as public key cryptography which uses pairs of "keys" to maintain the security of data. These keys are the digital codes that allow you to encrypt and decrypt the data contained in your messages and files. PGP creates a pair of keys for each user known as a public key and a private key. These two keys work together and represent the core technology behind the two major areas of protection that PGP focuses on -- privacy and authenticity. PGP first ensures the privacy of your information by encrypting your messages and enabling only the intended recipient (or recipients) the ability to read them. Your public key is given out to others so that they can send you encrypted messages, and in turn you receive the public keys of acquaintances so that you can send your own PGP-encrypted mail. The second of the two keys, the private key, is used in conjunction with your public key to decipher incoming messages or desktop files that have been encrypted using PGP. And in order to decipher encrypted messages that you have sent to others, they will need to use their own private key in combination with the public key sent with your message. PGP also ensures the authenticity of your messages by verifying that a message received did indeed originate from the person claiming to have sent it and that the message has not been altered in any way during its delivery. When using PGP's authentication capabilities to send out your own authenticated messages, you use your private key to digitally sign the messages you send to others. The recipient can then use their copy of your public key to determine if you really sent the e-mail and to ensure that it has not been modified during transit. And when someone sends you e-mail with their digital signature, you use a copy of their public key to verify the signature and to make sure that the message has not been tampered with. If it all sounds a bit confusing, no need to worry -- PGP handles all of the tricky details for you. A Key Generation Wizard will create a key pair for you composed of a public key and a private key. You can then use a public key server to send out your public key to others as well as to retrieve the public keys of your friends. Additionally, PGP features Automatic Key Retrieval which will contact a public key server automatically when you attempt to send a message to a PGP user without knowing their public key. This is all you need to do in order to begin sending and receiving encrypted e-mail -- it's that simple. Similarly, PGP makes the actual process of encrypting and decrypting your messages a straightforward process. The client offers seamless integration with Eudora Pro and Light (versions 3.0 and later) and functions as a plug-in for Microsoft Outlook and Exchange. If you use another mail client you can access PGP via either PGPmenu (a context menu plug-in offering clipboard encryption) or PGPtray (clipboard encryption accessible from a system traybar application). PGP also allows you to encrypt/sign or decrypt/verify files on your desktop directly from the Windows Explorer. File formats that can be used with PGP include web pages, documents, spreadsheets, sound bytes, video clips, and more. The result of PGP's focus on privacy and authenticity is the most advanced protection for your data currently available. While earlier versions of PGP used RSA to generate keys, the newer versions offer the option of creating keys based on the more sophisticated DSS/Diffie-Hellman technology. Keys generated using the RSA technology max out at 1024-bit security, while the newer technology allows for up to 4096-bit security (the strength of the security is user-definable). As a gauge of the strength of PGP's security, a web browser in comparison can only use a maximum of 128-bit security. Perhaps the best thing about PGP is its freeware status as long as you use the client for individual, non-commercial purposes. For commercial use, versions are available for individuals beginning at $59 (PGP for Personal Privacy) and for businesses beginning at $119 (PGP for Business Privacy). PGPfreeware contains all of the features as the commercial versions with the exception of technical support and optional PGP 2.x backward compatibility algorithm support. The only real downside to PGP is that cryptographic software continues to be classified as export-controlled by the U.S. Government, which means that only citizens and permanent residents of the United States and Canada can download and legally use the software. But if you do live in the U.S. or Canada and privacy is of any importance to you, PGP is an essential app to have in your arsenal. Pros: Freeware, excellent encryption capabilities, helpful wizards and tips make the client easy to setup and use Cons: Only available to U.S/Canada residents, plug-in support not available for all e-mail applications For the latest information on PGP, check out: http://cws.internet.com/32auxx.html#pgp