PGP® or Pretty Good Privacy®
Pretty Good Privacy (PGP) is a powerful cryptographic product family
that enables people to securely exchange messages, and to secure
files, disk volumes and network connections with both privacy and
strong authentication. Privacy means that only the intended recipient
of a message can read it.
By providing the ability to encrypt messages, PGP provides protection
against anyone eavesdropping on the network. Even if the information
is intercepted, it is completely unreadable to the snooper. Authentication
identifies the origin of the information, certainty that it is authentic,
and that it has not been altered. Authentication also provides an
extremely valuable tool in network security: verification of the
identity of an individual. In addition to secure messaging, PGP
also provides secure data storage, enabling you to encrypt files
stored on your computer.
Version 6.5.2 also includes PGPnet - a powerful VPN client which
enables secure peer-to-peer IP-based network connections - and Self-Decrypting
Archives (SDAs) which allow you to exchange information securely
even with those who do not have PGP.
For more information visit the PGP
web site.
November 13, 2000 PGP Launches HIPAA Initiative designed
to assist the healthcare industry to ensure patient privacy and
administrative simplification as required by HIPAA. Full
Story.
August 25, 2000 -- Major Vulnerability Found
in PGP
Serious vulnerabilities have been found in PGP. A patch is being
developed and should be available soon at the PGP web site. PGP
versions 5.5 through 6.5.3 are effected. The flaw is in how those
versions handle unauthorized Additional Decryption Key additions
to the unhashed/unsigned areas of PGP keys.
CERT Advisory
News article:
The
Standard
The paper which initially reported the vulnerability (technical):
KEY-EXPERIMENTS
- How PGP Deals With Manipulated Keys - An Experimental Approach
by Ralf Senderek
General information about the
Risks of Key Recovery, Key Escrow, and Trusted Third-Party Encryption
|