PC-Online 1998 February

home *** CD-ROM | disk | FTP | other *** search

/ PC-Online 1998 February / PCOnline_02_1998.iso / filesbbs / os2 / pmpgp13.arj / PMPGP.INF (.txt) < prev next >

Wrap

OS/2 Help File | 1995-05-30 | 23.4 KB | 719 lines

ΓòÉΓòÉΓòÉ 1. Copyright ΓòÉΓòÉΓòÉ Copyright pmPGP V 1.3 is not Freeware. Thomas Blummer holds Copyright on this program and its documentation. The use and distribution of this programm and its documentation is regulated by its license agreement. You may received this program as Shareware, which means you are allowed to test this program for a limited period of time. ΓòÉΓòÉΓòÉ 1.1. License agreement ΓòÉΓòÉΓòÉ License agreement You are granted to use a shareware version of this program for 30 days prior to registartion for test porposes. You may o use a licenced copy only on a single machine at any one time. o make copies of this program for backup purposes. o transfer the program to other party provided the other party accepts these licence agreement. If you transfer this program to another party, you must transfer or destroy all copies of the program; you do not retain any rights in respect to the program. You may not o use an unregistered copy after the trial period. o use one licensed copy on more than a single machine at any one time o use a product licensed for an other person. o reverse-assemble or reverse-compile the program without my written permission. ΓòÉΓòÉΓòÉ 2. Shareware registration ΓòÉΓòÉΓòÉ pmPGP is licensed for one machine. You will receive a serial number if you register this product. The a valid serial number hides the Information window about Shareware Order form Name ________________________________________________________________ Company _____________________________________________________________ Address _____________________________________________________________ _____________________________________________________________ Phone _______________________________________________________________ Depending on your location and net access you can choose between three registration methods: o BMT Micro is likely the best choice for USA residents and/or Internet users. o Direct registration is the best choice for european especially german speaking users. o Registration via CompuServe is practicable only for CompuServe users. See details right below. Order through BMT Micro Mail Orders To: BMT Micro 452 Horn Road Wilmington, NC 28412-2411 U.S.A. Voice Orders: 8:00am - 8:00pm EST (-5 GMT) (800) 414-4268 (Orders Only) (910) 791-7052 (Orders, questions) Fax Orders: (910) 350-2937 24 hours / 7 Days Online Orders via modem: (910) 350-8061 10 lines, all 14.4K (910) 799-0923 Direct 28.8K line via Compuserve: Thomas Bradford, 74031,307 via Internet: orders@bmtmicro.com We accept Visa, Mastercard, Discover, American Express, Optima, Eurocard, money orders, cashiers checks and personal checks. Please do not send cash in the mail. Personal checks are subject to clearance. We accept purchase orders from educational institutions, governmental agencies and other verifiable businesses. Terms are "Due Upon Receipt". Product Quantity Price Number of copies _________________________ ______________ ________________ pmPGP Version 1.3 $ 35.00 US 1st Class ................................. Free Airborne (Next day most places, USA Only).. $ 7.00 US Federal Express (USA Only)................. $ 13.00 US Federal Express (Canada/Mexico)............ $ 25.00 US Federal Express (Europe/Japan)............. $ 30.00 US Express (Outside USA) ..................... $ 16.00 US Total: $ _______ For credit card payment only Circle one: VISA / Master / Discover Credit card number: _____________________________________________ Expiration date: ________________________________________________ Authorization signature: ________________________________________ Direct order For one license send me your order per E-Mail to: 100273.3607@compuserve.com from the Internet or to 100273,3607 from CompuServe. I will ask you for a check (Verrechnungsscheck) in Deutsche Mark DM 50,- per License. You will receive direct phone support by me if you choose this way to registrate. Order via CompuServe's SWREG Service You can register trough Compuserve's SWREG service also. GO SWREG and register ID : 5127. The registration fee is $ 35.00 US if you use this method. ΓòÉΓòÉΓòÉ 3. Known bugs ΓòÉΓòÉΓòÉ pmPGP 1.3 does not work correctly in following cases: o Context menu does not work with OS/2 2.11 o Some menu items are still disabled after the work ist done on OS/2 2.11 o Importing keys from a file which does not contain keys causes the program to hang. o The program sometimes traps if you close in signature view of public keys a deep open tree view at once. I will not fix bugs that are clearly related with OS/2 2.11 as this operating system version is outdated. ΓòÉΓòÉΓòÉ 4. How to get Support ? ΓòÉΓòÉΓòÉ I support this product via E-Mail. Please address your questions in english or german to 100273.3607@compuserve.com from the Internet or to 100273,3607 from CompuServe. I am glad to hear your suggestions too. I also support this product in CompuServe's OS2SHARE forum in english and in OS2UGER forum in german language. PGP and Me I am not involved in the development of PGP. I do not distribute or support PGP. The entire chances and risks of using PGP are with you. ΓòÉΓòÉΓòÉ 5. Introduction ΓòÉΓòÉΓòÉ pmPGP is a shell for PGP. pmPGP includes no cryptographic functionality, it uses PGP to do the real work. PGP is the most powerful tool for secure communication and authentication available for everybody. As PGP is designed to be used on every operating system, it can not support uniq features of a particular one. pmPGP adds support for OS/2's powerful graphical user environment to PGP. ΓòÉΓòÉΓòÉ 6. User Interface ΓòÉΓòÉΓòÉ The pmPGP window is divided into three areas. Read about their components and functionality below. You see the Files in use on the left side, Friends on the right top and Identities on the right bottom part of the window. You can change the visible amount of each part by dragging and moving the separating lines between them. pmPGP stores the new position of the separators. ΓòÉΓòÉΓòÉ 6.1. Files in use ΓòÉΓòÉΓòÉ The left side of the pmPGP window shows files you are currently using. You must first pick up a file hereto if you want to encrypt, decrypt or sign it. The table is devided into the following columns: Column Description File Shows the file name Type Either E-Mail, Binary or unknown. History A brief of the history of this file. Directory The directory where the file resides. You can pick up files by using one of the following methods: o Drag a file from any Workplace folder an drop it into this window. This will create a link for the file object. It will not move the file. o Use the "Pick up a file ..." selection of the "Files" menu. o create a file from the clipboard using "Paste from clipboard" selection from the "Files" menu. You can directly access the "Files" menu through a click with the right mouse button into this window. You can either forget files in use which you no longer need using the "Forget files" menu selection or drag them and drop to any folder of the Workplace. Objects are moved in this case. Files in use can also be deleted, copied, edited or pasted to clipboard. Read about these fetures in the sction How do I ?. ΓòÉΓòÉΓòÉ 6.2. Friends ΓòÉΓòÉΓòÉ The right top part of the pmPGP window shows the public keys pmPGP found on the current keyring. pmPGP offers two sights of the public keys; a tabular and a tree view. See the contents of the tabular view below. Tabular view Column Description Name Shows the user name and probably the E-Mail adress of a friend. Type Is either public or private. It is possible to store private keys on a public keyring, but I would consider it as an error. Validity The Validity of a key, which PGP calculates on the basis of the trust of the keys its signatures and the trusts of these signatures. Read the PGP documentation for more information. Trust The trust of a key if it is used to sign an other key. Read the PGP documentation for more information Date The Date the key was created by its owner. Bits The Length of the key in bits. Longer keys are slower to process then short keys. NOTE that the security of a key is not defined by its length. ID The short ID of a key. Fingerprint This is a short hash code of the key, which is useful to check (eg. over the phone) if your friend has the same key for a person. Tree view You get the tree view of the public keys if you select "Show signatures" from the "Public keys" menu. The tree view shows the signatures of a key and the signatures of the signatures up to the fourth nesting. This view is useful to control and understand the key Validity calculation of PGP. You see the trust of the keys used to sign a key in square brackets. ΓòÉΓòÉΓòÉ 6.3. Identities ΓòÉΓòÉΓòÉ The right bottom part of the pmPGP window shows the private keys pmPGP found on the current keyring in a tabular view. Tabular view Column Description Name Shows the user name and probably the E-Mail adress of a friend. Type Is either public or private. It is possible to store private keys on a public keyring, but I would consider it as an error. Validity The Validity of a key, which PGP calculates on the basis of the trust of the keys its signatures and the trusts of these signatures. Read the PGP documentation for more information. Trust The trust of a key if it is used to sign an other key. Read the PGP documentation for more information Date The Date the key was created by its owner. Bits The Length of the key in bits. Longer keys are slower to process then short keys. NOTE that the security of a key is not defined by its length. ID The short ID of a key. Fingerprint This is a short hash code of the key, which is useful to check (eg. over the phone) if your friend has the same key for a person. ΓòÉΓòÉΓòÉ 7. How do I ? ΓòÉΓòÉΓòÉ This section describes how you can use pmPGP to solve a particular work. Choose one of the following cathegories How to do I access menus. access context menus. pick up, forget and manupilate files. open and manipulate keyrings. encrypt, decrypt and sign files. ΓòÉΓòÉΓòÉ 7.1. Menus ΓòÉΓòÉΓòÉ You can use most of the menu selections only while pmPGP is not working. Menu selections are valid only under certain circumstances. Temporary invalid selections are showed gray. ΓòÉΓòÉΓòÉ 7.2. Context menus ΓòÉΓòÉΓòÉ Click with the right mouse button on the "Files in use", "Friends" or "Identities" window. pmPGP will pop up a menu which contains valid selections for the objects marked with a dot line at this time. Note that selected menu items in a context menu are working on the dot line marked objects and not on the hilighted (selected) ones The context menus for the tables are corresponding with the "Files", "Public keys" and "Private keys" menus. ΓòÉΓòÉΓòÉ 7.3. Files ΓòÉΓòÉΓòÉ Choose one of the following actions you want to perform on a file: Pick up a file Forget a file Edit a file Copy a file Create a file from the clipboard Copy a file to the clipboard Delete a file Move a file Print a file ΓòÉΓòÉΓòÉ 7.3.1. Pick up a file ΓòÉΓòÉΓòÉ You must pick up a file into the files window before you perform any other work on it. Pick up a file file by dragging any file from the workplace and dropping it into the files window, or use the menu selection "Pick up a file" from the "Files" menu or from the context menu. ΓòÉΓòÉΓòÉ 7.3.2. Forget a file ΓòÉΓòÉΓòÉ You should tell pmPGP to forget files which you do not want to process any more. Forgetting a file do not mean deleting it. pmPGP simply removes the file's data from its file window. Use the menu selection "Forget files" from the "Files" menu or or from the context menu. ΓòÉΓòÉΓòÉ 7.3.3. Edit a file ΓòÉΓòÉΓòÉ pmPGP is able to start an editor of your choice if you doubleclick a file in its files window or select the "Edit file" item from the "Files" menu or the context menu. The editor it starts defaults to E.EXE, and can be altered using the preferences dialog. ΓòÉΓòÉΓòÉ 7.3.4. Copy a file ΓòÉΓòÉΓòÉ Select one file if you want to copy it. pmPGP will ask for a destination and copy the file together with its history. The new file is automatically added to the files in use. Use the menu item "Copy a file" either of the "Files" or the context menu. ΓòÉΓòÉΓòÉ 7.3.5. Create a file from the clipboard ΓòÉΓòÉΓòÉ pmPGP is able to dump the content of the clipboard into a file, provided that it is in a text format. Use the menu item "Paste from clipboard" either of the "Files" or the context menu. ΓòÉΓòÉΓòÉ 7.3.6. Copy a file to the clipboard ΓòÉΓòÉΓòÉ pmPGP is able to dump the content of a file into the clipboard, provided that the file is in a readable text format. Use the menu item "Copy to clipboard" either of the "Files" or the context menu. ΓòÉΓòÉΓòÉ 7.3.7. Delete a file ΓòÉΓòÉΓòÉ pmPGP offers two methods for deleting a file. You can drag the file and drop it to the shredder, which is a quick but not secure way to to delete, or you can use the "Delete" menu item of the "Files" menu or the context menu. The "Delete" option of pmPGP provides a secure deletion, as it first overwrites the whole file and then deletes it. It is not possible to recover the content of a file deleted with this option, not even with file recovery utilities, so take care with its use. ΓòÉΓòÉΓòÉ 7.3.8. Move a file ΓòÉΓòÉΓòÉ Drag a file from the files window and drop it into a Workplace folder or drive. pmPGP will move the file in this case. pmPGP also forgets the file after the move. ΓòÉΓòÉΓòÉ 7.3.9. Print a file ΓòÉΓòÉΓòÉ Drag a file from the files window and drop it onto a Workplace printer. ΓòÉΓòÉΓòÉ 7.4. Keyrings ΓòÉΓòÉΓòÉ pmPGP offers various manipulations on Keyrings. Read more about them by selecting one of the following operations Open a keyring Import keys Export a key Remove a key Generate a new key pair Revoke your key Edit your name or pass phrase Sign a key Remove a key signature Edit the trust of a key ΓòÉΓòÉΓòÉ 7.4.1. Open a keyring ΓòÉΓòÉΓòÉ pmPGP opens the keyrings pubring.pgp and secring.pgp in the directory referred by the variable PGPPATH in your config.sys. You can open and manipulate other keyrings too. Use the "Open keyring" menu item of the "Private keys" or "Public keys" menu respectively, or the context menu. NOTE that due to a restriction of PGP, pmPGP uses the default keyrings (PGPPATH) for cryptographical work even if you opened an other keyring. You can only import, export or remove keys on other than the default keyrings. ΓòÉΓòÉΓòÉ 7.4.2. Import keys ΓòÉΓòÉΓòÉ This feature allows you to incorparate public or private keys you received into your key ring for future use. You must first pick up the file which contains the keys, then select this (only one) file and choose the menu item "Import keys" from either the "Private keys" or "Public keys" menus. You should import public keys into your public keyring, it is unlikely that you receive private keys from a friend. ΓòÉΓòÉΓòÉ 7.4.3. Export a key ΓòÉΓòÉΓòÉ This feature allows you to forward keys you know to other people. You can also export private keys, if you know what you are doing. Exporting private keys is generally a big mistake. pmPGP exports a key together with all of its signatures into a file of you choice which it automatically places into the files in use table. Use the menu item Export a key of the menus "Private keys" or "Public keys" or the context menu. ΓòÉΓòÉΓòÉ 7.4.4. Remove a key ΓòÉΓòÉΓòÉ This feature allows you remove keys from your keyring. This functionality is provided only to lighten your keyring by deleting keys you do not ever want to use. Remember to issue a key revokation certificate before you delete your own keys <g>. Use the menu item Remove a key of the menus "Private keys" or "Public keys" or the context menu. ΓòÉΓòÉΓòÉ 7.4.5. Generate your own keys ΓòÉΓòÉΓòÉ This feature allows you generate a own new public and private key pair. Use the menu item Generate keys of the menu "Private keys" or the context menu. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.4.6. Revoke your key ΓòÉΓòÉΓòÉ This feature allows you to revoke your own keys. The created key revocation certificate will be placed onto your public key ring. You have to extract this certificate like a key and mail it to the persons or key servers who have been using your revoked key. Use the menu item Issue a revocation certificate of the menu "Private keys" or the context menu. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.4.7. Edit your name or pass phrase ΓòÉΓòÉΓòÉ This feature allows you to edit the pass phrase or the E-Mail adress of your own key. Use the menu item Edit user name or pass phrase of the menu "Private keys" or the context menu. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.4.8. Sign a key ΓòÉΓòÉΓòÉ This feature allows you to certify a key with your private key. You should only sign key if you are absolutely sure that the key belongs to the name in the E-Mail adress. Choose one and only one Public key and use the menu item Sign a key of the menu "Public keys" or the context menu. The private key actually selected on the private key ring will be used to certify the public key. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.4.9. Remove a key signature ΓòÉΓòÉΓòÉ This feature allows you to remove key certifications from a public key. Choose one and only one Public key and use the menu item Sign a key signature of the menu "Public keys" or the context menu. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.4.10. Edit the trust of a key ΓòÉΓòÉΓòÉ The key signatures can certify that a key actually belongs to a particular name. Another question is whom you really trust that he/she signs only proven keys. You adjust with the trust of a key: to what grade you trust somebody as an introducer of other people. Choose one and only one Public key and use the menu item Edit trust of a key of the menu "Public keys" or the context menu. A PGP window will be opened for you. Answer the questions PGP will ask you. ΓòÉΓòÉΓòÉ 7.5. Cryptographic work ΓòÉΓòÉΓòÉ pmPGP offers the following cryptographic operations. Decrypt a file Sign a file Encrypt a file Sign and Encrypt a file ΓòÉΓòÉΓòÉ 7.5.1. Decrypt a file ΓòÉΓòÉΓòÉ Select one file in the Files in use window and choose the menu item "Decrypt" of the "Files" menu or the context menu. pmPGP will ask you to enter your pass phrase for the private key currently selected on the private keyring. pmPGP is certanly not able to decrypt a file if your pass phrase is entered incorrectly or you do not own the neccecary private key. pmPGP do not store the pass phrase because of security reasons. ΓòÉΓòÉΓòÉ 7.5.2. Sign a file ΓòÉΓòÉΓòÉ Select one file in the Files in use window, select a private key on your private keyring and choose the menu item "Sign" of the "Files" menu or the context menu. pmPGP is certanly not able to sign a file if your pass phrase is entered incorrectly. pmPGP do not store the pass phrase because of security reasons. The signature is created either clear or embedded depending on the choices in the preferences dialog. Clear signature means that anybody even without PGP can read the file, and its authenticity can be proved with PGP. Embedded signature is not an encryption, but is readable only with PGP. You should never sign a file which content you do not know, because signing of special files created for that reason could compromize your private key. ΓòÉΓòÉΓòÉ 7.5.3. Encrypt a file ΓòÉΓòÉΓòÉ Select one file in the Files in use window, select all friends who has to be able to read the message on your public keyring and choose the menu item "Encrypt" of the "Files" menu or the context menu. The created file is only readable for Friends whose public key you selected. You should encrypt files only for public keys which have the complate or ultimate validity to ensure that you are using an untampered key. The validity of a key depends on the signatures with other keys it owns and your trust of the keys which were used to sign the key. You can change the trust of a key and sign a key with your own key using pmPGP. ΓòÉΓòÉΓòÉ 7.5.4. Sign and Encrypt a file ΓòÉΓòÉΓòÉ Select one file in the Files in use window, select a private key on your private keyring, select all friends who has to be able to read the message on your public keyring and choose the menu item "Sign and Encrypt" of the "Files" menu or the context menu. pmPGP is certanly not able to sign a file if your pass phrase is entered incorrectly. pmPGP do not store the pass phrase because of security reasons. The created file is only readable for Friends whose public key you selected. Because the signature is made before the encryption, your signature can be verified (even recognised) only by the friends you selected. You should encrypt files only for public keys which have the complate or ultimate validity to ensure that you are using an untampered key. The validity of a key depends on the signatures with other keys it owns and your trust of the keys which were used to sign the key. You can change the trust of a key and sign a key with your own key using pmPGP. You should never sign a file which content you do not know, because signing of special files created for that reason could compromize your private key. ΓòÉΓòÉΓòÉ 8. Examples ΓòÉΓòÉΓòÉ Read and try the following examples to get familiar with pmPGP. ΓòÉΓòÉΓòÉ 8.1. Import a public key. ΓòÉΓòÉΓòÉ You can incorporate my public key into your public keyring using the following steps : 1) select "Pick up a file" in the "Files" menu of pmPGP and pick up the file thomas.asc in the installation directory of pmPGP. 2) select the file thomas.asc and choose the menu item "Import keys" of the "Public keys" menu. 3) now you have a copy of my public key on your keyring. You could use it eg. to verify my signature. 4) You could delete the file thomas as it is no longer needed using the "Delete" menu item. ΓòÉΓòÉΓòÉ 8.2. Sign a file ΓòÉΓòÉΓòÉ Here you see how you could fill out the order form of pmPGP and send it to me signed with your key. Order Form Name [ ] Company [ ] Address [ ] [ ] Phone [ ] Product Quantity Price Number of copies _________________________ ______________ ________________ pmPGP Version 1.3 $ 35.00 US Do the following steps 1) choose "copy" in the menu of this help window. This will copy this page of the documentation into the clipboard. 2) select "Paste from clipboard" in the "Files" menu of pmPGP, and enter order as destination file name 3) double click the file order in the Files in use table, to open an editor. 4) fill and store the form. 5) choose menu item "Sign" of the "Files" menu to sign this document. It is preferable to use clear signature for such a form, so remember to check preferences. 6) You could now either E-Mail this file, or Drag it and Drop to a printer object on the workplace to mail it conventionally. If you performed the first example also and you already own my public key, you could also encrypt this message readable for me by selecting me in the list of friends and "Sign and Encrypt" of the Files menu.