HIPAA tech
HIPAA dvisory
 HIPAAdvisory > HIPAAtech Phoenix Health Systems
news
regs
action
tech
wares
alert
live
latest
online HIPAA training
HIPAAstore
HIPAA help desk
search
contact us
site map

PGP® or Pretty Good Privacy®

Pretty Good Privacy (PGP) is a powerful cryptographic product family that enables people to securely exchange messages, and to secure files, disk volumes and network connections with both privacy and strong authentication. Privacy means that only the intended recipient of a message can read it.

By providing the ability to encrypt messages, PGP provides protection against anyone eavesdropping on the network. Even if the information is intercepted, it is completely unreadable to the snooper. Authentication identifies the origin of the information, certainty that it is authentic, and that it has not been altered. Authentication also provides an extremely valuable tool in network security: verification of the identity of an individual. In addition to secure messaging, PGP also provides secure data storage, enabling you to encrypt files stored on your computer.

Version 6.5.2 also includes PGPnet - a powerful VPN client which enables secure peer-to-peer IP-based network connections - and Self-Decrypting Archives (SDAs) which allow you to exchange information securely even with those who do not have PGP.

For more information visit the PGP web site.

November 13, 2000 PGP Launches HIPAA Initiative designed to assist the healthcare industry to ensure patient privacy and administrative simplification as required by HIPAA. Full Story.

August 25, 2000 -- Major Vulnerability Found in PGP
Serious vulnerabilities have been found in PGP. A patch is being developed and should be available soon at the PGP web site. PGP versions 5.5 through 6.5.3 are effected. The flaw is in how those versions handle unauthorized Additional Decryption Key additions to the unhashed/unsigned areas of PGP keys.

CERT Advisory

News article:
The Standard

The paper which initially reported the vulnerability (technical):
KEY-EXPERIMENTS - How PGP Deals With Manipulated Keys - An Experimental Approach by Ralf Senderek

General information about the Risks of Key Recovery, Key Escrow, and Trusted Third-Party Encryption

Go to TOP