From:	SMTP%"everhart@star.zko.dec.com"  2-MAY-1995 18:19:44.69
To:	EVERHART
CC:	
Subj:	PGP_SITES.GET

Date: Tue, 2 May 1995 18:08:48 -0400
Message-Id: <95050218084855@star.zko.dec.com>
From: everhart@star.zko.dec.com (Glenn C. Everhart 603 881 1497)
To: EVERHART@arisia.gce.com
Subject: PGP_SITES.GET
X-Vms-To: EVERHART@ARISIA.GCE.COM

Article 28263 of sci.crypt:
Newsgroups: sci.crypt
Path: jac.zko.dec.com!crl.dec.com!crl.dec.com!bloom-beacon.mit.edu!gatech!howland.reston.ans.net!news.sprintlink.net!noc.netcom.net!netcom.com!mpj
From: mpj@netcom.com (Michael Paul Johnson)
Subject: Re: ftp site for pgp 2.6i
Message-ID: <mpjD7AsB1.L1w@netcom.com>
Organization: NETCOM On-line Communication Services (408 261-4700 guest)
References: <1995Apr19.113717.1630@vms.huji.ac.il>
Date: Wed, 19 Apr 1995 19:47:25 GMT
Lines: 484
Sender: mpj@netcom2.netcom.com

tabitha@vms.huji.ac.il writes:

>Could somebody be so kind
>as to direct me to an ftp site
>from which I can download
>pgp 2.6 i?

-----BEGIN PGP SIGNED MESSAGE-----

WHERE TO GET THE PRETTY GOOD PRIVACY PROGRAM (PGP) FAQ 11 Apr 1995

This is ftp://ftp.csn.net/mpj/getpgp.asc
See also ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt


Platform(s)      Latest Version       Distribution File Names

DOS, Unix,       Viacrypt PGP 2.7.1   disk sets (Windows upgrade due
Mac, Windows,                         out by end of April others
or WinCIM/CSNav                       shipping now)

Hardware-based   Viacrypt 2.7.1       disk sets (due out by end of
PGP/Token                             April)

DOS, Unix, VAX,  MIT PGP 2.6.2        pgp262.zip  (DOS + docs)
others                                pgp262s.zip (source)
                                      pg262s.zip source on CompuServe
                                      pgp262s.tar.gz (source)
                                      pgp262s.tar.Z (source)
                                      pgp262dc.zip (documentation)
                                      pg262d.zip (docs on CompuServe)

Macintosh        MIT PGP 2.6          MacPGP2.6.sea.hqx (binary+docs)
                                      macpgp26.hqx (same as above)
                                      MacPGP2.6.src.sea.hqx (source)
                                      macpgp26.src (same as above)
                                      MacPGP2.6-68000.sea.hqx (binary)
                                      mcpgp268.hqx (same as above)

Mac Applescript  Zbigniew's "beta"    MacPGP2.6.2.beta126.sea.hqx
                                      mcpgp262q.hqx (same as above)
                                      MacPGP2.6.2.beta125.src.sea.hqx
                                      mcpgp262s.hqx (same as above)
                                      MacPGP2.6.2.beta126.src.sea.hqx
                                      mcpgp262t.hqx (diff 1.25->1.26)

Amiga            PGP 2.6.2 Amiga 1.4  pgp262-a14-000.lha
                                      pgp262-a14-020.lha
                                      pgp262-a14-src.lha

Atari            Atari MIT PGP 2.6.2  pgp262st.zip
                 Atari International  pgp262ib.zip

Non-USA version  PGP 2.6.i from       pgp26i.zip
to avoid RSAREF  Stale Schumacher     pgp26is.zip
license.                              pgp26is.tar.gz


BUG

Digital signatures made with keys 2034-2048 bits in length may be corrupt if
made by any version of PGP prior to Viacrypt's PGP 2.7.1 or MIT 2.6.3 (not
released yet)  To fix this in the source code, change the line in function
make_signature_certificate in crypto.c from

        byte inbuf[MAX_BYTE_PRECISION], outbuf[MAX_BYTE_PRECISION];
to
        byte inbuf[MAX_BYTE_PRECISION], outbuf[MAX_BYTE_PRECISION+2];


VIACRYPT PGP

Viacrypt has versions of PGP complete with licenses for commercial use of the
RSA and IDEA encryption algorithms.  Viacrypt PGP comes in executable code
only (no source code), but it is based on (and just as secure as) the
freeware PGP.

Please contact ViaCrypt for pricing (about $100 up), the latest platforms,
and availablity at 800-536-2664 8:30am to 5:00pm MST, Monday - Friday.  They
accept VISA, MasterCard, AMEX and Discover credit cards.

If you have further questions, please ask:

Paul E. Uhlhorn
Director of Marketing, ViaCrypt Products
Mail:          9033 N. 24th Avenue
               Suite 7
               Phoenix AZ 85021-2847
Phone:         (602) 944-0773
Fax:           (602) 943-2601
Internet:      viacrypt@acm.org
Compuserve:    70304.41


FTP SITES IN NORTH AMERICA

If you are in the USA or Canada, you can get PGP by following the
instructions in any of:

ftp://net-dist.mit.edu/pub/PGP/README
ftp://ftp.csn.net/mpj/README.MPJ
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS
ftp://ftp.netcom.com/pub/mp/mpj/README.MPJ
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_ftp_instructions.txt
ftp.eff.org
    Follow the instructions found in README.Dist that you get from one of:
    ftp://ftp.eff.org/pub/Net_info/Tools/Crypto/README.Dist
    gopher.eff.org, 1/Net_info/Tools/Crypto
    gopher://gopher.eff.org/11/Net_info/Tools/Crypto
    http://www.eff.org/pub/Net_info/Tools/Crypto/
ftp://ftp.csua.berkeley.edu/pub/cypherpunks/pgp/
ftp://ftp.gibbon.com/pub/pgp/README.PGP
    (OS/2 users see also /pub/gcp/gcppgp10.zip)
ftp://ftp.wimsey.bc.ca/pub/crypto/software/dist/README


WORLD WIDE WEB

http://web.mit.edu/network/pgp-form.html
http://www.ifi.uio.no/~staalesc/PGPVersions.html
http://rschp2.anu.edu.au:8080/crypt.html
http://www.eff.org/pub/Net_info/Tools/Crypto/
http://community.net/community/all/home/solano/sbaldwin
http://www.cco.caltech.edu/~rknop/amiga_pgp26.html


COMPUSERVE

GO NCSAFORUM.  Follow the instructions there to gain access to Library 12: Export
Controlled.

Compuserve file names are limited, so look for PGP262.ZIP, PG262S.ZIP
(source code), PGP262.GZ (Unix source code) and PG262D.ZIP (documentation
only).


AOL

Go to the AOL software library and search "PGP" or ftp from
ftp.csua.berkeley.edu/pub/cypherpunks/pgp.


BULLETIN BOARD SYSTEMS

USA

303-343-4053 Hacker's Haven, Denver, CO Lots of crypto stuff here.

303-772-1062 Colorado Catacombs BBS, Longmont CO
    8 data bits, 1 stop, no parity, up to 28,800 bps.
    Use ANSI terminal emulation.
    For free access: log in with your own name, answer the questions.

303-914-0031 The FreeMatrix ]I[

314-896-9309 The KATN BBS

317-791-9617 Computer Virus Research Center (CVRC) BBS, Indianapolis, IN
    Login Name: PGP USER  Password: PGP

501-791-0124, 501-791-0125 The Ferret BBS, North Little Rock, AR
    Login name: PGP USER  Password: PGP

601-582-5748 CyberGold BBS

612-690-5556, !CyBERteCH SeCURitY BBS! Minneapolis MN, - write a letter
    to the sysop requesting full access.

914-667-4567 Exec-Net, New York, NY

915-587-7888, Self-Governor Information Resource, El Paso, Texas

UK

01273-688888

GERMANY

+49-781-38807 MAUS BBS, Offenburg - angeschlossen an das MausNet

+49-521-68000 BIONIC-BBS Login: PGP


MORE FTP SITES

AU
ftp://ftp.cc.adfa.oz.au/pub/security/pgp23/macpgp2.3.cpt.hqx>
ftp://ftp.iinet.net.au:mirrors/pgp (Australia ONLY)
ftp://plaza.aarnet.edu.au/micros/mac/umich/misc/documentation/howtomacpgp2.7.txt

DE
ftp.informatik.tu-muenchen.de/pub/comp/os/os2/crypt/pgp23os2A.zip
ftp.informatik.uni-hamburg.de/pub/virus/crypt/pgp
ftp.fu-berlin.de/mac/sys/init/MacPGP2.6uiV1.2en.cpt.hqx.gz
ftp.tu-clausthal.de/pub/atari/misc/pgp/pgp261b.lzh
ftp.uni-kl.de/pub/aminet/util/crypt
ftp.westfalen.de/pd/Atari/Pgp  (Atari)
tupac-amaru.informatik.rwth-aachen.de

ES
goya.dit.upm.es

IT
ftp.dsi.unimi.it/pub/security/crypt/PGP

FI
ftp.funet.fi/pub/crypt

NL
xs4all.nl/pub/crypto/

NZ
kauri.vuw.ac.nz
rs950.phys.waikato.ac.nz/pub/incoming/pgp (New Zealand ONLY)

SE
leif.thep.lu.se

TW
nctuccca.edu.tw/PC/wuarchive/pgp/

UK
ftp.demon.co.uk/pub/amiga/pgp
ftp.ox.ac.uk/pub/crypto/pgp
src.doc.ic.ac.uk/aminet/amiga-boing
unix.hensa.ac.uk/pub/uunet/pub/security/virus/crypt/pgp

USA
atari.archive.umich.edu/pub/atari/Utilities/pgp261st.zip (Atari)
ftp.leo.org/pub/com/os/os2/crypt
wuarchive.wustl.edu/pub/aminet/util/crypt

NZ
ftp.ee.und.ac.za/pub/crypto/pgp
      /pub/archimedes
      /pub/pgp
      /pub/mac/MacPGP


FTPMAIL

If you have access to email, but not to ftp, send a message saying "help" to
ftpmail@decwrl.dec.com, mailserv@nic.funet.fi, or ftp-request@netcom.com

To get pgp 2.6.i by email:
  Send a message to hypnotech-request@ifi.uio.no with your request in the
  Subject: field.

  Subject             What you will get

  GET pgp26i.zip      MS-DOS executable (uuencoded)
  GET pgp26is.zip     MS-DOS source code (uuencoded)
  GET pgp26is.tar.gz  UNIX source code (uuencoded)

For FAQ information, send e-mail to mail-server@rtfm.mit.edu with
      send usenet/news.answers/ftp-list/faq
in the body of the message.


MACPGP

ftp://ftp.csn.net/mpj/README.MPJ
ftp://ftp.confusion.net/pub/mac-pgp/README
ftp://highway.alinc.com/users/jordyn/mac-pgp/README
ftp://miyako.dorm.duke.edu/pub/GETTING_ACCESS


VAX PGP

Get the full PGP distribution, then get VAXPGP262.TAR.Z from the berkeley
site for additional files needed to compile PGP for the VAX and a precompiled
version for VAX/VMS 5.5-2.


MORE PGP INFORMATION

ftp://ftp.prairienet.org/pub/providers/pgp/pgpfaq.txt
ftp://starfire.ne.uiuc.edu/preston/pgpquick.ps (and pgpquick.doc)
http://www.prairienet.org/~jalicqui/
http://www.mit.edu:8001/people/warlord/pgp-faq.html
http://draco.centerline.com:8080/~franl/pgp/bug0.html
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa_paper.ps.gz
http://www.eff.org/pub/EFF/Issues/Crypto/ITAR_export/cryptusa.paper
Email pgp-help@hks.net
ftp://ds.internic.net/internet-drafts/draft-pgp-pgpformat-00.txt
ftp://ds.internic.net/internet-drafts/draft-ietf-pem-mime-08.txt


PGP BOOKS

Protect Your Privacy:     PGP: Pretty Good Privacy     E-Mail Security
  A Guide for PGP Users                                How to Keep Your
by William Stallings      by Simson Garfinkel          Electronic Mail Private
Prentice Hall PTR         O'Reilly & Associates, Inc.  "Covers PGP/PEM"
ISBN 0-13-185596-4        ISBN 1-56592-098-8           Bruce Schneier
US $19.95                 US $24.95                    Wiley Publishing


LANGUAGE MODULES

These are suitable for most PGP versions.

German
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_german.txt
 ftp://ftp.csn.net/mpj/public/pgp/pgp_german.txt
 ftp://ftp.csn.net/mpj/public/pgp/PGP_german_docs.lha
 ftp://ftp.informatik.uni-hambrug.de:/pub/virus/crypt/pgp/language/pgp_german.asc

Italian
 ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.italian.tar.gz
 ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/PGP/pgp-lang.italian.tar.gz
 ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.italian.tar.gz

Japanese
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_japanese.tar.gz
 ftp://ftp.csn.net/mpj/public/pgp/pgp-msgs-japanese.tar.gz

Lithuanian
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_lithuanian.zip
 ftp://ftp.csn.net/mpj/public/pgp/pgp23ltk.zip

Norwegian
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/languate/pgp23_norwegian.tar.gz
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/languate/pgp26i_norwegian.zip

Romanian
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_romanian.tar.gz
 http://www.info.polymtl.ca/zuse/tavi/www/archive/ro.hlp
 http://www.info.polymtl.ca/zuse/tavi/www/archive/language.txt


Russian
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp26_russian.zip
 ftp://ftp.kiae.su/unix/crypto/pgp/pgp26ru.zip
 ftp://ftp.csn.net/mpj/public/pgp/pgp26ru.zip

Spanish
 ftp://ftp.dsi.unimi.it/pub/security/crypt/PGP/pgp-lang.spanish.tar.gz
 ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp-lang.spanish.tar.gz
 ftp://ftp.csn.net/mpj/public/pgp/pgp-lang.spanish.tar.gz

Swedish
 ftp://ftp.ox.ac.uk/pub/crypto/pgp/language/pgp23_swedish.txt
 ftp://ftp.csn.net/mpj/public/pgp/pgp_swedish.txt


CRYPTO LAW AND PGP

Pretty Good Privacy is legal if you follow these rules:

1.  Don't export PGP from the USA except to Canada, or from Canada except to
the USA, without a license.

2.  If you are in the USA, use either Viacrypt PGP (licensed for commercial
use) or MIT PGP using RSAREF (limited to personal, noncommercial use).
Outside of the USA, where RSA is not patented, you may prefer to use a
version of PGP (2.6.i) that doesn't use RSAREF to avoid the restrictions of
that license.

3.  If you are in a country where the IDEA cipher patent holds in software
(including the USA, Canada, and some countries in Europe), make sure you are
licensed to use the IDEA cipher commercially before using PGP commercially.
(No separate license is required to use the freeware PGP for personal,
noncommercial use).  For direct IDEA licensing, contact:

Ph. Baumann, IDEA Lizenz
Ascom Tech AG
Postfach 151
CH-4502 Solothurn
Switzerland

Tel ++41 65 242828, Fax ++41 65 242847.

4.  Don't sell PGP in North America unless you are reselling for Viacrypt
(because they have an exclusive marketing agreement on Philip Zimmermann's
copyrighted code). (Selling shareware/freeware disks or connect time is OK).

5.  If you modify PGP (other than porting it to another platform or adapting
it to another compiler), don't call it PGP (TM) or Pretty Good Privacy (TM)
without Philip Zimmermann's permission.


WINDOWS & DOS SHELLS

http://www.ifi.uio.no/~staalesc/AutoPGP.html
ftp://oak.oakland.edu/SimTel/msdos/security/apgp22b.zip
ftp://oak.oakland.edu/SimTel/win3/security/pgpw31.zip
http://alpha.netaccess.on.ca/~spowell/crypto/pwf31.zip
ftp.netcom.com/pub/dcosenza/pgpw31.zip
ftp://Sable.ox.ac.uk/pub
ftp.firstnet.net/pub/windows/winpgp/pgpw31.zip  <WinPGP's home site>
http://www.firstnet.net/pub/windows/winpgp/pgpw31.zip <soon to have a hmtl>
ftp://ftp.netcom.com/pub/ec/ecarp/pgpwind.zip
http://www.eskimo.com/~joelm (Private Idaho)
ftp://ftp.eskimo.com/~joelm
http://www.xs4all.nl/~paulwag/security.htm

Compuserve:
Library 3, European Forum.
Library 6, NCSA Forum
PCWorld Online Forum.
WUGNET Forum.
WinShare Forum

See also the BBS list for PGP, above.


MACPGP KIT

ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGP_icons.sit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkit.hqx
ftp://duke.bwh.harvard.edu:/pub/adam/mcip/MacPGPkitSources.sit.hqx
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/MacPGPkit1.6.sit

OTHER MAC ADD-ONS

ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/ChainMail.0.7.sit
ftp://ftp.netcom.com/pub/dd/ddt/crypto/pgp_tools/Eudora->PGP Scripts1.5.sit
ftp://ftp.csn.net/mpj/I_will_not_export/crypto_???????/pgp/mac/AppleScripts


PGP 3.0 API DRAFT

The (prelim. draft) PGP 3.0 API is at:
  ftp://ftp.netcom.com/pub/dd/ddt/crypto/crypto_info/950212 pgp3spec.txt
All comments on it for the PGP 3.0 API Team should be sent to: <pgp@lsd.com>


HOW DO I PUBLISH MY PGP PUBLIC KEY?

Send mail to one of these addresses with the single word "help" in the
subject line to find out how to use them.  These servers sychronize keys with
each other.

pgp-public-keys@burn.ucsd.edu
pgp-public-keys@demon.co.uk
pgp-public-keys@dsi.unimi.it
pgp-public-keys@ext221.sra.co.jp
pgp-public-keys@fbihh.informatik.uni-hamburg.de
pgp-public-keys@jpunix.com
pgp-public-keys@kiae.su
pgp-public-keys@kr.com
pgp-public-keys@kram.org
pgp-public-keys@kub.nl
pgp-public-keys@nexus.hpl.hp.com
pgp-public-keys@pgp.ai.mit.edu
pgp-public-keys@pgp.barclays.co.uk
pgp-public-keys@pgp.dhp.com
pgp-public-keys@pgp.hpl.hp.com
pgp-public-keys@pgp.iastate.edu
pgp-public-keys@pgp.kr.com
pgp-public-keys@pgp.mit.edu
pgp-public-keys@pgp.ox.ac.uk
pgp-public-keys@pgp.pipex.net
pgp-public-keys@srce.hr
pgp-public-keys@sw.oz.au
pgp-public-keys@uit.no
pgp-public-keys@vorpal.com
WWW interface to the key servers:
  http://www-swiss.ai.mit.edu/~bal/pks-toplev.html

For $20/year or so, you can have your key officially certified and published
in a "clean" key database that is much less susceptible to denial-of-service
attacks than the other key servers.  Send mail to info-pgp@Four11.com for
information, or look at http://www.Four11.com/

My key (mpj8) is above, at ftp://ftp.csn.net/mpj/mpj8.asc (among other
places).  My PGPprint=F2 5E A1 C1 A6 CF EF 71  12 1F 91 92 6A ED AE A9


COPY THIS FILE

Permission is granted to distribute unmodified copies of this FAQ.


-----BEGIN PGP SIGNATURE-----
Version: 2.7

iQCVAgUBL4yt2PX0zg8FAL9FAQGV3gP8CjrNjwz3ixybUmXdQ2ns0yn0UALEA0AI
4YFJDjARPJ+0ZQwBfvmg6tm2JI7guTclIbDPq0K6DEzjWVfpBvOqLtQ4sfJKZJGo
o0sGpSyBWBrTMxBw2rMAE+bx2HcYTU6e1GiCr2qIPMDWOF5vlb02np3InXG2MTUl
yVXo51JBd7k=
=Upvc
-----END PGP SIGNATURE-----


