Alpha Omega	02 February 2004 Home | Site MAP
Pretty Good Privacy (PGP)	Download Instructions Links

Download PGP

All currently available versions directly from PGP International

The Windows 95/98/NT International version (but full strength encryption) free for private and non-commercial use. PGP Freeware 6.51 directly from PGPI (bypassing the download wizard)!

[New] Update: PGP Freeware 7.03

PGP Freeware 7.03 for Windows (Win95/Win98/Windows ME/Win2K)

Download PGPFW703.zip (7316 KB) from any of the sites listed at PGP International. Please try this first, or if you know you will have trouble trying to download a 7MB file you can get it from our FTP where it is split into six zip archives of no more than 1368KB each, plus the PGP 7.0.3 HotFix1 and HotFix2 (security update 20020710). These and other HotFixes (for Windows and Mac) may be found on the NAI web site.

First part, second, third, fourth, fifth, and sixth part, but don't forget the hot-fix one and two.

Instructions

Step-by-step guide to installing and using Pretty Good Privacy

Not written yet!

Quickstart for PGP 6.51

If you have just downloaded and installed PGP, but have not got up to speed yet with the terminology used in the options settings, you might find it helpful to copy this sample set of options with reasons for the particular choices.

The best way to get up to speed with PGP is to use it, but why don't I just let you know what options I have set? These are the options for version 6.51 that I am using in Win98, but I have also installed the latest version on a Mac (using OS9).

In v.6.51 under options there are several tabs. Rather than take pictures of them I'll just tell you what they are.

General tab:

• Always encrypt to default key. ON. (I always want to be able to read anything I have encrypted!)
• Faster key generation. ON. (I tire of spending most of my life waiting for computers to do things!)
• Cache decryption passphrases for ten minutes. (I have a very long passphrase and I don't want to type it more than once in ten minutes.)
• Cache signing passphrases for ten minutes.(Same reason.)
• Comment block optional: I've put a message here that helps people get PGP so I am not always wasting my time using it, such as "For my public key & PGP downloads: http://ao.com.au/pgp.htm" Obviously you'll need to put a link to your own public key, which, as I have done, you may like to post on your website.
• File wiping: I think these are just the defaults, but warn before wiping is turned on. Eight passes (wipe it eight times is selected, but I don't really care about this as I generally don't bother using this feature).

Files tab:

When you have set up your PGP you will have a public keyring file, which is like an address book for all of your contacts (and your own) public keys. You will also have a separate file containing any private keys you have (usually only your own)! ;) Lastly, you will have a random seed file. I'll trust that you will find appropriate file locations for these, but wherever they are, that's where these options need to specify (including the full path and filename).

Email tab:

I have everything turned off here, except for word-wrap clear signed messages at column 70. If everyone else used PGP I would definitely turn some more of these options on.

Hot keys tab:

None set. I use hot keys for other applications (such as Notepad Ctrl-Alt-N, Wordpad Ctrl-Alt-W, Calculator Ctrl-Alt-C, MS Word Ctrl-Shift-W, MS Excel Ctrl-Shift-E, and MS Access Ctrl-Shift-A), but I am not interested in using hot keys for PGP functions at this stage. If I were constantly using PGP it would obviously be helpful.

Servers tab:

I have two servers listed, ldap://certserver.pgp.com , and http://pgpkeys.mit.edu:11371 , (that's a port number on that URL), but I don't currently have any of these synchronisation options set. They may be handy in the future though.

CA tab:

This (Certifications Authorities tab) is not relevant for individuals creating our own PGP keys. It is for companies that issue certified keys or people who use them. Certified keys are those where, for example, if Australia Post issues you with a key signed by them as a certification authority, that means they certify to anyone that the owner of that key has been authenticated by them as being the person
the key identifies them as. However, I think that Australia Post only issues X.509 digital certificates, like Verisign does, not PGP ones, but recent PGP versions I understand can also handle X.509 keys.

(Usually you have to pay for X.509 keys, and they expire fairly rapidly too!) It's like going to a Justice of the Peace (or a Notary Public, for our American friends) and having him (or her) witness your signature on a document (except better).

Advanced tab:

• Preferred (encryption) algorithm: I've chosen CAST.
• Allowed algorithms: I've chosen all three: CAST, IDEA, and TripleDES.
• Trust model:
  • Display marginal validity level: NO. (I don't want to be bothered with this while I don't have a whole collection of public keys all signed by a bunch of other people that know each other.)
  • Treat marginally valid keys as invalid: NO. (Same reason as above.)
  • Warn when encrypting to keys with an ADK (Additional Decryption Key): YES! (Not having this turned on would be a security hole. What would seem like a single known person's public key may have incorporated (with or without their knowledge) the public key of another person who I would NOT want to be able to read the message. So I would choose not to encrypt to that key.)
• Export format: I've chosen compatible. (I'm not really interested in innovations such as putting photos in it. Most people on the Internet don't know me by my face anyway. I'm also not interested in incorporating an X.509 certificate into my PGP Public key.)

Have fun with PGP. Send someone an encrypted message when you have set it up! (Make sure you either include your Public Key in your message or put a link to it in your comments section.)

PGPI's documentation and Frequently Asked Questions.

Skip directly to the PGP 6.51 for Win 95/98/NT User Guide! This requires the Adobe Acrobat reader (It's free, and most people already have it).

Privacy and encryption links

These sites are provided for your reference. Some of them may prove helpful to you. Listing of these external sites does not mean Alpha Omega endorses the content or views expressed therein.

• The Australian Privacy Commissioner's website
• Australian Privacy Homepage
  This is getting a bit dated now, but it has a very simple explanation on how to use PGP 5.0 and provides a source for it. This version is no longer needed, but I am still using my PGP 5.0 key for compatibility.
• The Center for Democracy and Technology
• Electronic Frontiers Australia
• EPIC (Electronic Privacy Information Center) Online Guide to Practical Privacy Tools
• InfoWar.Com, Info-Sec and Infowar Portal,
  The Internet Global Clearinghouse for Information Warfare, and Cybercrime Reporting
• Privacy International
  A human rights group functioning as a watchdog on surveillance by governments and corporations.
• The International PGP Home Page

Contact

PGP-Key