19.5.1. DOS and Windows - SecureDevice + SecureDrive - "Secdrv13d is the latest version. There was an unupdated .exe file in the package that had to be fixed. From the readme file: If you found this file inside FPART13D.ZIP, this is an update and bug fix for the FPART utility of SecureDrive Release 1.3d, - Edgar Swank involved? + SecureDevice - Major Versions: - Functions: - Principal Authors: - Major Platforms: + Where to Find: - ftp://ftp.csn.org/mpj/I_will_not_export/crypto_???????/ secdrv/secdev.arj See ftp://ftp.csn.org/mpj/README.MPJ for the ??????? - Strengths: - Weaknesses: + Notes: - By the way, I'm not the only one who gets SecureDrive and SecureDevice confused. Watch out for this. + SFS - "A MS-DOS-based package for hard disk encryption. It is implemented as a device driver and encrypts a whole partition (i.e., not a file or a directory). It uses the MDC/SHA cipher. ... It is available from Grabo (garbo.uwasa.fi:/pc/crypt/sfs110.zip, I think), and also from our ftp site: ftp.informatik.uni- hamburg.de:/pub/virus/crypt/disk/sfs110.zip I would recommend the Garbo site, because ours is a bit slow." [Vesselin Bontchev, alt.security.pgp, 1994-09-05] - Compared to SecureDrive, users report it to be faster, better-featured, has a Windows interface, is a device driver, and is robust. The disadvantages are that it currently does not ship with source code and uses a more obscure cipher. - "SFS (Secure FileSystem) is a set of programs which create and manage a number of encrypted disk volumes, and runs under both DOS and Windows. Each volume appears as a normal DOS drive, but all data stored on it is encryped at the individual-sector level....SFS 1.1 is a maintenance release which fixes a few minor problems in 1.0, and adds a number of features suggested by users. More details on changes are given in in the README file." [Peter Gutmann, sci.crypt, 1994-08-25] - "from garbo.uwasa.fi and all its mirror sites worldwide as /pc/crypt/sfs110.zip." + WinCrypt. - "WinCrypt is pretty good IF you keep your encrypted text to less than the length of your password, AND IF you generate your password randomly, AND IF you only use each password ONCE. :-)" [Michael Paul Johnson, sci.crypt, 1994-07-08] + Win PGP + there seem to be two identically-named programs: - WinPGP, by Christopher w. Geib + WinPGP, by Timothy M. Janke and Geoffrey C. Grabow - ftp WinPGP 1.0 from oak.oakland.edu//pub/msdos/windows3/WinPGP10.ZIP - Until this is clarified... + PGPShell - "PGPShell v3.2 has been released and is available at these sites: (U.S.) oak.oakland.edu:/pub/msdos/security/pgpshe32.zip (Euro) ftp.demon.co.uk:/simtel20/msdos/security/pgpshe32.zip [still@rintintin.Colorado.EDU (Johannes Kepler), 1994-07- 07] + PGS - ftp.informatik.uni- hamburg.de:/pub/virus/crypt/pgp/shells/pgs099b.zip - "I just uploaded the bug fix of PGS (v0.99b) on some FTP- sites: wuarchive.wustl.edu:/pub/msdos_uploads/pgs/pgs099b.zip rzsun2.informatik.uni-hamburg.de:/pub/virus/crypt/pgp/... (Just uploaded it, should be on in a few days) oak.oakland.edu:/SimTel/msdos/security/pgs099b.zip (Just uploaded it, should be on in a few days) [Eelco Cramer <crame001@hio.tem.nhl.nl>, 1994-06-27] + DOS disk encryption utilities + Several free or nearly free utilities are available: - ftp.informatik.uni-hamburg.de:/pub/virus/crypt/disk/ [Vesselin Vladimirov Bontchev, as of 1994-08] + Norton's "Diskreet" is weak and essentially useless - uses DES in weak (ECB) mode...is probably the "snake oil" that Zimmermann writes about in his docs. SFS docs say it is even worse than that. + PGS - "PGS v0.99c is out there! This new version of PGS supports 8 bytes keyid's. This version will be able to run in a OS/2 DOS box. PGS v0.99c is available on the following site: wuarchive.wustl.edu:/pub/msdos_uploads/pgs/pgs099c.zip" [ER CRAMER <crame001@hio.tem.nhl.nl>, 1994-07-08] + Program: - Major Versions: - Functions: - Principal Authors: - Major Platforms: - Where to Find: - Strengths: - Weaknesses: - Notes: 19.5.2. OS/2 19.5.3. Amiga + Program: PGPAmiga, Amiga PGP + Major Versions: 2.3a.4, PGP 2.6 - "The Amiga equivalent of PGP 2.6ui is called PGP 2.3a.3" [unknown commenter] - Functions: - Principal Authors: - Major Platforms: - Where to Find: - Strengths: - Weaknesses: - Notes: Situation is confusing. 2.3a.3 is not equivalent to PGP 2.6ui. 19.5.4. Unix - NeXTStep - Sun 4.3 - Solaris - HP - SGI + swIPe - Metzger: It was John Ioannidis' swIPe package, and it was not merely announced but released. Phil has done a similar package for KA9Q and was one of 19.5.5. SFS ? - "A MS-DOS-based package for hard disk encryption. It is implemented as a device driver and encrypts a whole partition (i.e., not a file or a directory). It uses the MDC/SHA cipher. ... It is available from Grabo (garbo.uwasa.fi:/pc/crypt/sfs110.zip, I think), and also from our ftp site: ftp.informatik.uni- hamburg.de:/pub/virus/crypt/disk/sfs110.zip I would recommend the Garbo site, because ours is a bit slow." [Vesselin Bontchev, alt.security.pgp, 1994-09-05] 19.5.6. Macintosh + more on MacPGP - From: phinely@uhunix.uhcc.Hawaii.Edu (Peter Hinely) Subject: Re: MacPGP 2.6ui doesn't actually work Message-ID: <CsI3wr.I3B@news.Hawaii.Edu> Sender: news@news.Hawaii.Edu Organization: University of Hawaii References: <m0qJqLD-001JKsC@sunforest.mantis.co.uk> Date: Wed, 6 Jul 1994 04:17:15 GMT Lines: 9 In article <m0qJqLD-001JKsC@sunforest.mantis.co.uk> mathew@stallman.mantis.co.uk (mathew at home) writes: >Well, I downloaded the rumoured MacPGP 2.6ui, but sadly it bombs out >immediately with an address error when I try to run it. MacPGP 2.6ui works on my Quadra 605. The MacBinary process cannot handle pathnames >63 characters, but as long an you encrypt files on the desktop, it's not too much of a problem. - From: warlord@MIT.EDU (Derek Atkins) Newsgroups: alt.security.pgp Subject: Re: When will there be a bug fix for MacPGP? Followup-To: alt.security.pgp Date: 6 Jul 1994 10:19:13 GMT Organization: Massachusetts Institute of Technology Lines: 19 Message-ID: <WARLORD.94Jul6061917@toxicwaste.mit.edu> References: <AWILSON-020794082446@ts7-57.upenn.edu> NNTP-Posting-Host: toxicwaste.media.mit.edu In-reply-to: AWILSON@DRUNIVAC.DREW.EDU's message of 2 Jul 1994 12:25:14 GMT In article <AWILSON-020794082446@ts7-57.upenn.edu> AWILSON@DRUNIVAC.DREW.EDU (AL WILSON) writes: When will there be a bug fix for MacPGP (1.1.1)? I am not complaining, I know that the software is free. I just want to start utilizing it for communications at the earliest possible time. There are still a number of outstanding bugs that need to be fixed, but the hope is to make a bugfix release in the near future. I don't know when that is going to be, but hopefully it will be Real Soon Now (TM). - Date: Wed, 6 Jul 1994 10:42:08 -0700 From: tcmay (Timothy C. May) To: tcmay Subject: (fwd) Re: What is the difference between 2.6 & 2.6ui? Newsgroups: alt.security.pgp Organization: NETCOM On-line Communication Services (408 261-4700 guest) Status: O Xref: netcom.com alt.security.pgp:16979 Path: netcom.com!netcomsv!decwrl!lll- winken.llnl.gov!sol.ctr.columbia.edu!howland.reston.ans.n et!pipex!lyra.csx.cam.ac.uk!iwj10 From: iwj10@cus.cam.ac.uk (Ian Jackson) Newsgroups: alt.security.pgp Subject: Re: What is the difference between 2.6 & 2.6ui? Date: Wed, 6 Jul 1994 10:14:24 GMT Organization: Linux Unlimited Lines: 55 Message-ID: <1994Jul6.101424.9203.chiark.ijackson@nyx.cs.du.edu> References: <CsE3CC.Gqz@crash.cts.com> <RATINOX.94Jul3221136@delphi.ccs.neu.edu> NNTP-Posting-Host: bootes.cus.cam.ac.uk Summary: Use 2.6ui :-). Originator: iwj10@bootes.cus.cam.ac.uk -----BEGIN PGP SIGNED MESSAGE----- In article <RATINOX.94Jul3221136@delphi.ccs.neu.edu>, Stainless Steel Rat <ratinox@ccs.neu.edu> wrote: >Ed Dantes <edantes@crash.cts.com> writes [quoting normalised - iwj]: >> subject line says it all. > >PGP 2.6 is distributed from MIT and is legally available to US and Canadian >residents. It uses the RSAREF library. It has code that will prevent >interoperation with earlier versions of PGP. > >PGP 2.6ui is a modified version of PGP 2.3a which functions almost >identically to MIT PGP 2.6, without the "cripple code" of MIT PGP 2.6. It >is legally available outside the US and Canada only. This is false. PGP 2.6ui is available to US and Canadian residents. It is definitely legal for such people to download PGP 2.6ui and study it. However, RSADSI claim that *using* PGP 2.6ui in the US and Canada violates their patents on the RSA algorithm and on public key cryptography in general. Other people (like myself) believe that these patents wouldn't stand up if tested in court, and that in any case the damages recoverable would be zero. You might also like to know that the output formats generated by 2.6ui and MIT-2.6 are identical, so that if you choose to use 2.6ui in North America noone will be able to tell the difference anyway. Unfortunately these patent problems have caused many North American FTP sites to stop carrying 2.3a and 2.6ui, for fear of committing contributory infringement. If you would like to examine PGP 2.3a or 2.6ui, they are available on many FTP sites. Try black.ox.ac.uk:/src/security ftp.demon.co.uk:/pub/pgp ftp.dsi.unimi.it:/pub/security/crypt/PGP ftp.funet.fi:/pub/crypt for starters. Look out for the regular postings here in alt.security.pgp for other sites. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAgUBLhqD48MWjroj9a3bAQH9VgQAqOvCVXqJLhnFvsKfr82M5808h 6GKY5RW SZ1/YLmshlDEMgeab4pSLSz+lDvsox2KFxQkP7O3oWYnswXcdr4FdLBu/ TXU+IQw E4r/jY/IXSupP97Lxj9BB73TkJIHVmrqgoPQG2Nszj60cbE/LsiGs5uMn CSESypH c0Y8FnR64gc= =Pejo -----END PGP SIGNATURE----- -- Ian Jackson, at home <ijackson@nyx.cs.du.edu> or <iwj10@cus.cam.ac.uk> +44 223 575512 Escoerea on IRC. http://www.cl.cam.ac.uk/users/iwj10/ 2 Lexington Close, Cambridge, CB4 3LS, England. Urgent: <iwj@cam-orl.co.uk> -- ......................................................... ................. Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay@netcom.com | anonymous networks, digital pseudonyms, zero 408-688-5409 | knowledge, reputations, information markets, W.A.S.T.E.: Aptos, CA | black markets, collapse of governments. Higher Power: 2^859433 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway." + CurveEncrypt, for Mac - "Curve Encrypt 1.1, IDEA encryption for the Macintosh is now available.....Curve Encrypt is a freeware drag-and- drop encryption application for the Macintosh. It uses IDEA cipher-feedback mode with a 255 character pass phrase, encrypts both the data and resource forks of files, and will encrypt the contents of a folder or volume in a single operation. Source code is provided, natch. CE is System 7 only....(Note that this program has nothing whatsoever to do with elliptic curve encryption methods, just so nobody gets confused...)" [ "W. Kinney" <kinney@bogart.Colorado.EDU>, 1994-07-08] - "Ftp Sites: ripem.msu.edu:pub/crypt/other/curve-encrypt-idea-for-mac/ This is an export controlled ftp site: read pub/crypt/GETTING_ACCESS for information. ftp.csn.org:/mpj/I_will_not_export/crypto_???????/curve_e ncrypt/ csn.org is also export-controlled: read /mpj/README for the characters to replace ???????." [ "W. Kinney" <kinney@bogart.Colorado.EDU>, 1994-07-08] + RIPEM on Macintosh - Carl Ellison says "I've only used RIPEM on AOL -- but it should be the same....I run on a Mac, generating the armored file, and then use AOL's "paste from file" option in the File menu to include the encrypted file in the body of my message.....In the other direction, I have to use Select All and Copy to get it out of AOL mail, Paste to get it into an editor. From there I can file it and give that file to PGP or RIPEM.....BBEDIT on the Mac has good support for RIPEM. I wish I knew how to write BBEDIT extensions for Mac PGP as well." [C.E., 1994-07- 06] + URL for Stego (Macintosh) - http://www.nitv.net/~mech/Romana/stego.html 19.5.7. Newton 19.5.8. Atari 19.5.9. VMS 19.5.10. IBM VM/etc. 19.5.11. Miscellaneous 19.5.12. File-splitting utilities + Several exist. - XSPLIT - cryptosplit, Ray Cromwell - shade
Next Page: 19.6 Appendix -- References
Previous Page: 19.4 Appendix -- Glossary
By Tim May, see README
HTML by Jonathan Rochkind