PGP - Pretty Good Privacy

First contact with PGP/GnuPG

• Overview of PGP
• Why do you need PGP?
• A glossary

Downloads

• Download the international Version from http://www.pgpi.com/download/
• The famous hacktic server ftp://ftp.hacktic.nl/pub/crypto/pgp/.
• There are a lot of PGP Versions. The differences are explained on PGP Versions Tracker and the PGP Interactions Page

Krypto / Links

• The OpenPGP format is defined in the RFC 2440
• Good collections of links
• SPKI/SDSI and the Web of Trust
• PGP Time stamping Service
• The Global Trust Register is a printed list of fingerprints of some electronic keys (no new versions avaiable after 1999).
• How to create secure passphrases with dices.

email integration

• A list of Tools and Plug-Ins
• For a wide variety of text-editor based programs: CryptEdit+ is a complete *FREEWARE* PGPTray replacement that retains all of PGPTray's functionality and adds the capability to integrate PGP 5.x or 6.x with a wide variety of text-editor based programs via Hotkeys.
• In Pegasus Mail (PMail) with QDPGP. PMail is a free Mailer for Windows and Mac Platforms.

local keyring management

• extract a key from the keyring or add a key to the keyring
• sign a key

Keyservers

The keyservers build a world wide storage system for keys and key signatures.

• search a key on the keyserver network
• send key and signatures to the keyserver network.

Key signatures / key signing

Keys should be signed by other users. This way others can verify the validity of the keys. These signatures build the web of trust.

• Key signing sessions in switzerland. Next Session: February, 16th, 2004.
• List of international key signing sessions and individuals who are willing to sign keys.
• Pathfinder and statistic tools:
• • Web of trust statistics and pathfinder (Wotsap). A new pathserver with graphical output and giving statistics about signatures, including missing cross signatures
  • Signature Path Tracing, a perl program
  • Experimental PGP pathfinder

Analysis

• A current, a new, an older analysis of the web of trust.
• List of dublicate keyids by July, 9th, 1999. A newer analysis by 2002-02-01
• PGP keyring statistic by November, 16th, 1999. Lists also keys with dublicate keyids. A newer analysis by 2002-02-01