{"id":129344,"date":"2021-12-20T00:00:00","date_gmt":"2021-12-20T00:00:00","guid":{"rendered":"https:\/\/nursingstudybay.com\/2021\/12\/20\/principles-of-pretty-good-privacy-information-technology-essay\/"},"modified":"2021-12-20T00:00:00","modified_gmt":"2021-12-20T00:00:00","slug":"principles-of-pretty-good-privacy-information-technology-essay","status":"publish","type":"post","link":"https:\/\/www.studyproessays.com\/help\/principles-of-pretty-good-privacy-information-technology-essay\/","title":{"rendered":"Principles Of Pretty Good Privacy Information Technology Essay"},"content":{"rendered":"<p>Study Bay Coursework Assignment Writing Help<\/p>\n<p>data is so easily duplicated and shared.\u00a0 This is why more and more organizations are looking to encrypt all their information. A word of warning to beginners to encryption.\u00a0 The PGP program, notwithstanding its user-friendly graphical user interface, may take some getting used to here and there.\u00a0 At the USENIX Security Symposium in 1999, Alma Whitten &amp; J. Tygar published a paper entitled \u201cWhy Johnny Can\u2019t encrypt\u201d in which they point out some of the usability problems associated with the software.\u00a0 The paper is available at\u00a0www.sims.berkeley.edu\/~alma<\/p>\n<p>With this in mind, our tutorial aims to help you get over the initial hurdles at least so you can be up and running using the software without much difficulty.\u00a0 The features of PGP introduced in this tutorial are all you need to know to use the program to protect your privacy in the normal run of affairs.\u00a0 But bear in mind that to become a power user of PGP\u2013one who takes advantage of the full suite of encryption protections\u2013you will need to invest some time in reading the Manual that accompanies the program.\u00a0 The Manuals for each version of PGP can be downloaded from the PGP International web site at\u00a0https:\/\/monkessays.com\/write-my-essay\/pgpi.org\/doc\/guide\/.<\/p>\n<h2>II. Platforms:<\/h2>\n<p>PGP is available for many different\u00a0platforms, including Windows,\u00a0Unix,MS-DOS,\u00a0OS\/2,\u00a0Macintosh,\u00a0Amiga\u00a0and\u00a0Atari.<\/p>\n<h2>III. Latest versions:<\/h2>\n<p>The latest international freeware versions of PGP are\u00a06.5.1i\u00a0(Windows 95\/98\/NT and MacOS only) and 5.0i (other platforms). The older 2.6.3i is still available, but you may experience incompatibility problems if you are communicating with users of PGP 5.0 and later. You can\u00a0download the most recent versions here. However, there are many\u00a0other versions of PGP, both\u00a0freeware\u00a0and\u00a0commercial.<\/p>\n<h2>IV. How Does It Works:<\/h2>\n<p>PGP uses a variation of the\u00a0public key\u00a0system. In this system, each user has a publicly known\u00a0encryption\u00a0key and a\u00a0private key\u00a0known only to that user. You encrypt a message you send to someone else using their public key. When they receive it, they decrypt it using their private key. Since encrypting an entire message can be time-consuming, PGP uses a faster encryption algorithm\u00a0to encrypt the message and then uses the public key to encrypt the shorter key that was used to encrypt the entire message. Both the encrypted message and the short key are sent to the receiver who first uses the receiver\u2019s private key to decrypt the short key and then uses that key to decrypt the message.<\/p>\n<p>PGP comes in two public key versions \u2013\u00a0Rivest-Shamir-Adleman\u00a0(RSA) and Diffie-Hellman. The RSA version, for which PGP must pay a license fee to RSA, uses the\u00a0IDEA\u00a0algorithm to generate a short key for the entire message and RSA to encrypt the short key. The Diffie-Hellman version uses the\u00a0CAST algorithm for the short key to encrypt the message and the Diffie-Hellman algorithm to encrypt the short key.<\/p>\n<p>For sending digital signatures, PGP uses an efficient algorithm that generates a\u00a0hash\u00a0(or mathematical summary) from the user\u2019s name and other signature information. This hash code is then encrypted with the sender\u2019s private key. The receiver uses the sender\u2019s public key to decrypt the hash code. If it matches the hash code sent as the digital signature for the message, then the receiver is sure that the message has arrived securely from the stated sender. PGP\u2019s RSA version uses the\u00a0MD5\u00a0algorithm to generate the hash code. PGP\u2019s Diffie-Hellman version uses the SHA-1 algorithm to generate the hash code.<\/p>\n<p>To use PGP, you download or purchase it and install it on your computer system. Typically, it contains a user interface that works with your customary e-mail program. You may also need to register the public key that your PGP program gives you with a PGP public-key server so that people you exchange messages with will be able to find your public key.<\/p>\n<p>Where Can You Use PGP?<\/p>\n<p>Originally, the U.S. government restricted the exportation of PGP technology. Today, however, PGP encrypted e-mail can be exchanged with users outside the U.S if you have the correct versions of PGP at both ends. Unlike most other encryption products, the international version is just as secure as the domestic version.<\/p>\n<p>There are several versions of PGP in use. Add-ons can be purchased that allow backwards compatibility for newer RSA versions with older versions. However, the Diffie-Hellman and RSA versions of PGP do not work with each other since they use different algorithms.<\/p>\n<h2>V. PGP Commands<\/h2>\n<p>PGP commands are installed with\u00a0software\u00a0that is designed specifically for generating the commands for\u00a0data encryption. The command line is installed by running the setup and then installing the software into your preferred location.<\/p>\n<p>After the command lines are installed it is necessary to configure the PGP before sending encrypted email. The configuration requires you to create a public and private key pair before extracting the public key and adding the public key for the email recipient.<\/p>\n<p>Key Pair Generation:\u00a0Key pair generation involves identifying the key type, the algorithm associated with the key type, the size of the key, a user ID, validation of the private key for signing the email, and a password.<\/p>\n<p>Public Key Extraction:\u00a0The public key for both the sender and the recipient can be extracted in the form of a text file and by using a PGP command. Once the key is extracted it should be exchanged between the sender and the recipient before communication commences.<\/p>\n<p>Add the Recipient\u2019s Key:\u00a0The recipient\u2019s key is added through the use of a PGP command line and is also added to the sender\u2019s key ring. Once the recipient\u2019s key is authenticated, the sender can encrypt the file using the recipient\u2019s ID and the private key that is held by the sender to sign the email.<\/p>\n<p>These are the basic methods for using PGP for encryption. There are additional strategies that are used depending upon the data privacy needs and the requirements of an organization when it comes to securing\u00a0sensitive\u00a0data\u00a0during transmission.<\/p>\n<h2>VI. Where did it come from?<\/h2>\n<p>Rarely does anything of significance arise out of the blue.\u00a0\u00a0PGP (Pretty Good Privacy)\u00a0is the culmination of a long history of cryptographic discoveries.\u00a0 Cryptography is the science of writing messages in secret codes.\u00a0 It is nothing new.\u00a0 Since the human race became a species of its own, we have pondered the challenge of concealing our communications from others.\u00a0 Secrecy\u2013stealth\u2013is not a preserve of the human species.\u00a0 It is a matter of survival for all our brothers, sisters and cousins in the animal world from which we have evolved.\u00a0 Whether in times of peace or in times of war, we all harbor secret thoughts, feelings, desires, objectives, and so forth that we want to share only with those we absolutely trust, and that we want to carefully conceal from those who would take advantage of us if they knew what we had in mind.<\/p>\n<p>Encryption makes this possible, and one of the strongest encryption tools available to us today is PGP.<\/p>\n<p>Phil Zimmermann\u00a0invented PGP because he recognized that cryptography \u201cis about the right to privacy, freedom of speech, freedom of political association, freedom of the press, freedom from unreasonable search and seizure, freedom to be left alone.\u201d\u00a0 You can read Phil Zimmermann\u2019s fuller explanation as to\u00a0why you need PGP.\u00a0 In the development of PGP, Zimmermann was greatly Helped by his knowledge of the long history of cryptography.\u00a0 Like Sir Isaac Newton, Zimmermann was able to achieve what he achieved because he \u201cstood on the shoulders of giants\u201d who went before him.<\/p>\n<p>How does PGP work?<\/p>\n<p>OK, here goes; put your thinking cap on\u2026\u00a0 If this gets overly technical for you, and your eyes start to glaze over, don\u2019t worry about it.\u00a0 It\u2019s nice if you can understand what\u2019s going on with Public and Private Key encryption, but it\u2019s not necessary right away.\u00a0 You\u2019ll understand it better as you start to use it and as you interact with others who use it and can explain what\u2019s going on.\u00a0 For now, it\u2019s sufficient to just follow the sets of numbered steps carefully in order to learn the skills required to use PGP.\u00a0 But read over what follows and understand it as best you can.<\/p>\n<p>When you have successfully completed Step 3 of this tutorial, you\u2019ll have created two keys to lock and unlock the secrets of your encoded information.\u00a0 A key is a block or string of alphanumeric text (letters and numbers and other characters such as !, ?, or %) that is generated by PGP at your request using special encryption algorithms.<\/p>\n<p>The first of the two keys you\u2019ll create is your Public Key, which you\u2019ll share with anyone you wish (the tutorial also will show you how you can put your Public Key on an international server so that even strangers could send you encrypted data if they wanted).\u00a0 Your Public Key is used to encrypt\u2013put into secret code\u2013a message so that its meaning is concealed to everyone except you<\/p>\n<p>Then there is your Private Key, which you\u2019ll jealously guard by not sharing with anyone.\u00a0 The Private Key is used to decrypt\u2013decode\u2013the data (messages and so forth) that have been encrypted using your Public Key.\u00a0 This means that\u00a0 the message encrypted (encoded) using your Public Key can only be decrypted (decoded) by you, the owner of the corresponding Private Key.<\/p>\n<p>The designation of one of the two keys (Key1, say) as Public and the other (Key2) as Private is purely arbitrary since there is no functional difference between the two.\u00a0 PGP chooses one to act as the Public Key and designates the other as the Private Key.\u00a0 If it chooses to designate them in the other order (Public=Key2 and Private=Key1), it would make no difference. This is because when either key is used to encrypt something, the other will act as the corresponding decrypting key to convert the encrypted data back into its original form. This capability is at the heart of the \u201cSigning\u201d process mentioned in Steps 8 through 10 below.<\/p>\n<p>Public and Private Key encryption solves one of two major problems with older methods of encryption, namely that you had to somehow share the key with anyone you wanted to be able to read (decrypt) your secret message.\u00a0 The very act of sharing the key meant that some untrustworthy so-and-so could intercept it\u2013and frequently did.\u00a0 Which meant your code was practically useless.<\/p>\n<p>The second major problem with older methods of encryption was the relative ease with which the code could be broken.\u00a0 Codes have to be incredibly complex if they\u2019re to foil the attempts of astute humans to crack them.\u00a0 This is all the more the case today when we have increasingly powerful computers to do the dirty, \u201cbrute force,\u201d work of trying every conceivable combination of\u00a0 key possibilities for us.\u00a0 PGP, and other similar encryption systems, use a key that is really\u2013well\u2013astronomically large, meaning that the number of binary bits (1s and 0s) used to create it has an astronomically large number of possible combinations and the actual decimal (base 10) value they represent is\u2013well\u2013huge.\u00a0 Unlike earlier encryption methods, the security of PGP encryption lies entirely with the key.\u00a0 Earlier encryption methods relied on \u201csecurity through obscurity\u201d (ie: keeping secret the method used to do the encryption).\u00a0 The methods used to do PGP encryption are known and documented.\u00a0 It is PGP\u2019s selection of the complex keys used to do an encryption that makes it next to impossible to crack.<\/p>\n<p>The size of the key can be increased whenever necessary to stay one step ahead of advances in technology.\u00a0 Time alone will tell if PGP can stand the test of time, but for now it\u2019s one of the best encryption technologies you\u2019ll find.<\/p>\n<p>If you would like to read the history of encryption and understand the origins of Zimmermann\u2019s PGP program, an excellent account is given in Simon Singh\u2019s CODE BOOK (Doubleday, New York, NY, 1999).\u00a0 Find out more about PGP at the\u00a0International PGP home page.\u00a0 The\u00a0Crypto Rights Foundation\u00a0is another good website for information regarding privacy issues.\u00a0 You might also like to join the PGP-BASICS User group\u00a0where you can find speedy and informed answers to questions that might arise as you get started using PGP.\u00a0 Once you\u2019re more experienced with the program, you can join the PGP Users Mailing List\u00a0so you can keep in touch with issues related to privacy.<\/p>\n<h2>VII. Compatibility<\/h2>\n<p>As PGP evolves, PGP systems that support newer features and algorithms are able to create encrypted messages that older PGP systems cannot decrypt, even with a valid private key. Thus, it is essential that partners in PGP communication understand each other\u2019s capabilities or at least agree on PGP settings.<\/p>\n<h2>VIII. Confidentiality<\/h2>\n<p>PGP can be used to send messages confidentially. For this, PGP combines symmetric-key encryption and public-key encryption. The message is encrypted using a symmetric encryption algorithm, which requires a symmetric key. Each symmetric key is used only once and is also called a session key. The session key is protected by encrypting it with the receiver\u2019s public key thus ensuring that only the receiver can decrypt the session key. The encrypted message along with the encrypted session key is sent to the recipient.<\/p>\n<h2>IX. Digital signatures<\/h2>\n<p>PGP supports message authentication and integrity checking. The former is used to detect whether a message has been altered since it was completed (the\u00a0message integrity\u00a0property), and the latter to determine whether it was actually sent by the person\/entity claimed to be the sender (a\u00a0digital signature). In PGP, these are used by default in conjunction with encryption, but can be applied to the plain text\u00a0as well. The sender uses PGP to create a digital signature for the message with either the\u00a0RSA\u00a0or\u00a0DSA\u00a0signature algorithms. To do so, PGP computes a hash (also called a\u00a0message digest) from the plaintext, and then creates the\u00a0digital signature\u00a0from that hash using the sender\u2019s private key.<\/p>\n<h2>X. Web Of Trust:<\/h2>\n<p>Both when encrypting messages and when verifying signatures, it is critical that the public key used to send messages to someone or some entity actually does \u2018belong\u2019 to the intended recipient. Simply downloading a public key from somewhere is not overwhelming assurance of that association; deliberate (or accidental) impersonation is possible. PGP has, from its first versions, always included provisions for distributing a user\u2019s public keys in an \u2018identity certificate\u2019 which is also constructed cryptographically so that any tampering (or accidental garble) is readily detectable. But merely making a certificate which is impossible to modify without being detected effectively is also insufficient. It can prevent corruption only after the certificate has been created, not before. Users must also ensure by some means that the public key in a certificate actually does belong to the person\/entity claiming it. From its first release, PGP products have included an internal certificate \u2018vetting scheme\u2019 to Help with this; a trust model which has been called a\u00a0web of trust. A given public key (or more specifically, information binding a user name to a key) may be digitally signed by a third party user to attest to the association between someone (actually a user name) and the key. There are several levels of confidence which can be included in such signatures. Although many programs read and write this information, few (if any) include this level of certification when calculating whether to trust a key.<\/p>\n<p>The web of trust protocol was first described by\u00a0Zimmermann\u00a0in 1992 in the manual for PGP version 2.0:<\/p>\n<h2>As time goes on, you will accumulate keys from other people that you may want to designate as trusted introducers. Everyone else will each choose their own trusted introducers. And everyone will gradually accumulate and distribute with their key a collection of certifying signatures from other people, with the expectation that anyone receiving it will trust at least one or two of the signatures. This will cause the emergence of a decentralized fault-tolerant web of confidence for all public keys.<\/h2>\n<p>The web of trust mechanism has advantages over a centrally managed\u00a0public key infrastructure\u00a0scheme such as that used by\u00a0S\/MIME\u00a0but has not been universally used. Users have been willing to accept certificates and check their validity manually or to simply accept them. No satisfactory solution has been found for the underlying problem.<\/p>\n<h2>XI. Certificates:<\/h2>\n<p>In the (more recent) Open PGP specification,\u00a0trust signatures\u00a0can be used to support creation of\u00a0certificate authorities. A trust signature indicates both that the key belongs to its claimed owner and that the owner of the key is trustworthy to sign other keys at one level below their own. A level 0 signature is comparable to a web of trust signature since only the validity of the key is certified. A level 1 signature is similar to the trust one has in a certificate authority because a key signed to level 1 is able to issue an unlimited number of level 0 signatures. A level-2 signature is highly analogous to the trust assumption users must rely on whenever they use the default certificate authority list (like those included in web browsers); it allows the owner of the key to make other keys certificate authorities.<\/p>\n<p>PGP versions have always included a way to cancel (\u2018revoke\u2019) identity certificates. A lost or compromised private key will require this if communication security is to be retained by that user. This is, more or less, equivalent to the\u00a0certificate revocation lists\u00a0of centralized PKI schemes. Recent PGP versions have also supported certificate expiration dates.<\/p>\n<p>The problem of correctly identifying a public key as belonging to a particular user is not unique to PGP. All public key \/ private key cryptosystems have the same problem, if in slightly different guise, and no fully satisfactory solution is known. PGP\u2019s original scheme, at least, leaves the decision whether or not to use its endorsement\/vetting system to the user, while most other PKI schemes do not, requiring instead that every certificate attested to by a central\u00a0certificate authority\u00a0be accepted as correct.<\/p>\n<h2>XII. Criminal investigation:<\/h2>\n<p>Shortly after its release, PGP encryption found its way outside the\u00a0United States, and in February 1993 Zimmermann became the formal target of a criminal investigation by the US Government for \u201cmunitions\u00a0export without a license\u201d. Cryptosystems using keys larger than\u00a040 bits\u00a0were then considered munitions within the definition of the\u00a0US export regulations; PGP has never used keys smaller than 128 bits so it qualified at that time. Penalties for violation, if found guilty, were substantial. After several years, the investigation of Zimmermann was closed without filing criminal charges against him or anyone else.<\/p>\n<p>Zimmermann challenged these regulations in a curious way. He published the entire\u00a0source code\u00a0of PGP in a hardback book,\u00a0via\u00a0MIT Press, which was distributed and sold widely. Anybody wishing to build their own copy of PGP could buy the $60 book, cut off the covers, separate the pages, and scan them using an\u00a0OCR\u00a0program, creating a set of source code text files. One could then build the application using the freely available\u00a0GNU Compiler Collection. PGP would thus be available anywhere in the world. The claimed principle was simple: export of\u00a0munitions-guns, bombs, planes, and software-was (and remains) restricted; but the export of\u00a0books\u00a0is protected by the\u00a0First Amendment. The question was never tested in court with respect to PGP. In cases addressing other encryption software, however, two federal appeals courts have established the rule that cryptographic software source code is speech protected by the First Amendment (the\u00a0Ninth Circuit Court of Appeals\u00a0in theBernstein case\u00a0and the\u00a0Sixth Circuit Court of Appeals\u00a0in the\u00a0Junger case).<\/p>\n<p>US export regulations\u00a0regarding cryptography remain in force, but were liberalized substantially throughout the late 1990s. Since 2000, compliance with the regulations is also much easier. PGP encryption no longer meets the definition of a non-exportable weapon, and can be exported internationally except to 7 specific countries and a list of named groups and individuals[citation needed]\u00a0(with whom substantially all US trade is prohibited under various US export controls).<\/p>\n<h2>XIII. PGP 3 and founding of PGP Inc.<\/h2>\n<p>During this turmoil, Zimmermann\u2019s team worked on a new version of PGP encryption called PGP 3. This new version was to have considerable security improvements, including a new certificate structure which fixed small security flaws in the PGP 2.x certificates as well as permitting a certificate to include separate keys for signing and encryption. Furthermore, the experience with patent and export problems led them to eschew patents entirely. PGP 3 introduced use of the\u00a0CAST-128\u00a0(a.k.a. CAST5) symmetric key algorithm, and the\u00a0DSA\u00a0and\u00a0El Gamal\u00a0asymmetric key algorithms, all of which were unencumbered by patents.<\/p>\n<p>After the Federal criminal investigation ended in 1996, Zimmermann and his team started a company to produce new versions of PGP encryption. They merged with Viacrypt (to whom Zimmermann had sold commercial rights and who had licensed RSA directly from RSADSI) which then changed its name to PGP Incorporated. The newly combined Viacrypt\/PGP team started work on new versions of PGP encryption based on the PGP 3 system. Unlike PGP 2, which was an exclusively\u00a0command line\u00a0program, PGP 3 was designed from the start as a\u00a0software library\u00a0allowing users to work from a command line or inside a\u00a0GUI\u00a0environment. The original agreement between Viacrypt and the Zimmermann team had been that Viacrypt would have even-numbered versions and Zimmermann odd-numbered versions. Viacrypt, thus, created a new version (based on PGP 2) that they called PGP 4. To remove confusion about how it could be that PGP 3 was the successor to PGP 4, PGP 3 was renamed and released as PGP 5 in May 1997.<\/p>\n<h2>XIV. Open PGP:<\/h2>\n<p>Inside PGP Inc., there was still concern about patent issues. RSADSI was challenging the continuation of the Viacrypt RSA license to the newly merged firm. The company adopted an informal internal standard called \u201cUnencumbered PGP\u201d: \u201cuse no algorithm with licensing difficulties\u201d. Because of PGP encryption\u2019s importance worldwide (it is thought to be the most widely chosen quality cryptographic system), many wanted to write their own software that would interoperate with PGP 5. Zimmermann became convinced that an open standard for PGP encryption was critical for them and for the cryptographic community as a whole. In July 1997, PGP Inc. proposed to the\u00a0IETF\u00a0that there be a standard called Open PGP. They gave the IETF permission to use the name Open PGP to describe this new standard as well as any program that supported the standard. The IETF accepted the proposal and started the Open PGP\u00a0Working Group.<\/p>\n<p>Open PGP is on the\u00a0Internet Standards Track\u00a0and is under active development. The current specification is\u00a0RFC 4880\u00a0(November 2007), the successor to\u00a0RFC 2440. Many e-mail clients provide Open PGP-compliant email security as described in\u00a0RFC 3156.<\/p>\n<p>The\u00a0Free Software Foundation\u00a0has developed its own Open PGP-compliant program called\u00a0GNU Privacy Guard\u00a0(abbreviated Gnu PG or GPG). Gnu PG is freely available together with all source code under the\u00a0GNU General Public License\u00a0(GPL) and is maintained separately from several Graphical User Interfaces (GUIs) that interact with the Gnu PG library for encryption, decryption and signing functions (see\u00a0KGPG,\u00a0Seahorse,\u00a0Mac GPG). Several other vendors have also developed Open PGP-compliant software.<\/p>\n<h2>XV. Network Associates acquisition:<\/h2>\n<p>In December 1997, PGP Inc. was acquired by\u00a0Network Associates, Inc. (\u201cNAI\u201d). Zimmermann and the PGP team became NAI employees. NAI was the first company to have a legal export strategy by publishing source code. Under NAI, the PGP team added disk encryption, desktop firewalls, intrusion detection, and\u00a0IP sec\u00a0VPNs\u00a0to the PGP family. After the export regulation liberalizations of 2000 which no longer required publishing of source, NAI stopped releasing source code.<\/p>\n<p>In early 2001, Zimmermann left NAI. He served as Chief Cryptographer for\u00a0Hush Communications, who provide an Open PGP-based e-mail service,\u00a0Hushmail. He has also worked with Veridis and other companies. In October, 2001, NAI announced that its PGP assets were for sale and that it was suspending further development of PGP encryption. The only remaining asset kept was the PGP E-Business Server (the original PGP Command line version). In February 2002, NAI cancelled all support for PGP products, with the exception of the re-named command line product. NAI (now\u00a0McAfee) continues to sell and support the product under the name McAfee E-Business Server.<\/p>\n<h2>XVI. Applications:<\/h2>\n<p>Using the PGP encryption softwareto send (encrypt and sign) and receive (decrypt) secure E-Mails.<\/p>\n<p>Using your Default Public key to save a backup, encrypted, decipherable copy of all your E-Mail messages.<\/p>\n<p>PGP signing your own unencrypted E-Mails.<\/p>\n<p>Weaving the Web of Trust-Signing someone else\u2019s Key.<\/p>\n<p>Usingh the PGP encryption software to protect(Encrypt) your documents.<\/p>\n<p>Using PGP to Wipe files from your disk.<\/p>\n<p>Obtaining and adding someone else\u2019s Key to your key ring.<\/p>\n<p>Making your public key available through a certificate server.<\/p>\n<p>Changing your paraphrase.<\/p>\n<p>Setting up(Creating) your public and private PGP keys.<\/p>\n<h2>XVII. What are the Disadvantages of PGP Encryption?<\/h2>\n<p>Pretty good privacy, or PGP, is a cryptography solution used to help protect sensitive data sent across a network. PGP works by compressing cleartext data first. It then creates a session key that is a random number. This random number is then run through the cryptography software to create the session key, which is public, and a private key for the sender. When the cleartext is encrypted, the public key is encrypted to the recipient\u2019s private key. When the recipient receives the ciphertext, he uses his private key to decrypt the data so it can be read.<\/p>\n<p>While PGP is considered a best practice among security professionals, it does have its disadvantages.<\/p>\n<h2>XVIII. Complexity:<\/h2>\n<p>PGP is considered to be a complex process by many people and, therefore, it is avoided in many cases. When people find a process too difficult to grasp, they often refuse to use it, even if the benefits are well known.<\/p>\n<p>Properly training users in how PGP works and how to use PGP will help alleviate any issues related to the belief that it is too complex to use on a regular basis.<\/p>\n<h2>PGP is a Two-way Street<\/h2>\n<p>In order for some PGP encryption to work, both the sender and the recipient must be using it. If the sender emails a file to a recipient who is not using PGP, she will be unable to open the file to view it.<\/p>\n<p>Using newer PGP software that is a self-decrypting archive (SDA) can alleviate this issue. In a case where a document is encrypted using PGP, the recipient can encrypt the file when he needs to open it.<\/p>\n<h2>Key Management<\/h2>\n<p>Managing keys can be challenging for users new to PGP. Keys that are lost or corrupted can be a security risk to users in a highly secure environment. Also, these problems can lead to recipients being unable to open encrypted files.<\/p>\n<p>Implementing an SDA solution is one way to help mitigate issues related to key management. Another way to help prevent issues from arising in a PGP solution is to properly train new users in how PGP works.<\/p>\n<h2>Conclusion<\/h2>\n<p>Cryptography assumed a whole new significance with the development of e-commerce in the mid-1990s. Perhaps the biggest roadblocks to e-commerce were consumer fears over privacy and the security of their financial and personal information. Because of this, cryptography was of central importance to the growth of the Internet economy.<\/p>\n<p>Encryption is the scrambling of text-based messages into unrecognizable code via a complex mathematical algorithm. Only those with the correct \u201ckey\u201d are able to encrypt or decrypt such a message in a given cryptographic system. The key is a set of specific parameters, based on the algorithmic encryption formula, that act to lock and unlock the coded information. The formula typically consists of a long string of bits, sometimes more than 200 digits long. The more digits involved and the more complicated the algorithmic equation used to generate the code, the more difficult the hacker\u2019s job in breaking it.<\/p>\n<p>The two basic infrastructures used in cryptographic systems are public-key and private-key. While early computer systems used private-key cryptography almost exclusively, by the late 1990s and early 2000s the tide was shifting in favor of public-key cryptography. The dominant encryption standards were testament to the sea of change. The 25-year-old Data Encryption Standard (DES), a private-key algorithm developed by the NSA, was being phased out due to its lack of flexibility and a level of security that could no longer withstand sophisticated modern attacks, not to mention the limited use of private-key systems in e-commerce. In its place, the public-key Advanced Encryption Standard (AES) was preparing for international launch in the early 2000s.<\/p>\n<p>Refrences<\/p>\n<p>[1]. http:\/\/ecommerce.hostip.info\/pages\/271\/Cryptography-Public-Private-Key.html\u00a0<\/p>\n<p>[2]. www.cryptography.org\/getpgp.htm<\/p>\n<p>[3]. https:\/\/monkessays.com\/write-my-essay\/openpgp.org\/<\/p>\n<p>[4].https:\/\/supportimg.pgp.com\/guides\/Tech_Note_PGP_WDE_Recovering_Data_Mac_OS_X.pdf<\/p>\n<p>[5]. https:\/\/monkessays.com\/write-my-essay\/wisegeek.com\/what-is-pgp.htm<\/p>\n<p>[6]. https:\/\/monkessays.com\/write-my-essay\/spamlaws.com\/how-PGP-works.html<\/p>\n<p>[7]. https:\/\/monkessays.com\/write-my-essay\/pitt.edu\/~poole\/PGP.htm<\/p>\n<p>[8]. https:\/\/monkessays.com\/write-my-essay\/pgp.com\/products\/packages\/desktop_pro\/<\/p>\n<p>[9]. http:\/\/searchsecurity.techtarget.com\/definition\/Pretty-Good-Privacy<\/p>\n<p>[10].https:\/\/monkessays.com\/write-my-essay\/symantec.com\/business\/support\/index?page=content&amp;id=TECH149231&amp;key=59279<\/p>\n<p>[11]. http:\/\/home.clara.net\/heureka\/sunrise\/pgp.htm<\/p>\n<p>[12]. https:\/\/monkessays.com\/write-my-essay\/pgpi.org\/doc\/overview\/<\/p>\n<p>[13]. http:\/\/thegate.gamers.org\/~tony\/pgp.html<\/p>\n<p>[14.] http:\/\/oreilly.com\/catalog\/9781565920989<\/p>\n<p>[15]. https:\/\/monkessays.com\/write-my-essay\/slideshare.net\/izacus\/pretty-good-privacy<\/p>\n<p>[16]. https:\/\/monkessays.com\/write-my-essay\/thenakedpc.com\/articles\/v04\/18\/0418-03.html<\/p>\n<p>[17]. http:\/\/simple.wikipedia.org\/wiki\/Pretty_Good_Privacy<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Study Bay Coursework Assignment Writing Help data is so easily duplicated and shared.\u00a0 This is why more and more organizations are looking to encrypt all\u2026<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7641,8827,10535,10533,10534,10531,10529,6744,10532,10530,7741],"tags":[10553,10549,10616,10615,7687,10254,10627,10104,10247,8857,10552,10295,10900,2984,3903,10548,10622,8901,10551,8907],"class_list":["post-129344","post","type-post","status-publish","format-standard","hentry","category-australia-essay-writers","category-australia-essays","category-do-my-university-assignment-for-me","category-essay-pro-dissertation-writers","category-homework-help-services-best-websites","category-i-need-help-writing-a-page-paper-assignment","category-masters-essays","category-nursing-studybay","category-pay-someone-to-write-a-paper-for-you","category-website-that-writes-assignments","category-studybay","tag-1-assignment-help-online-service-for-students-in-the-usa","tag-ai-plagiarism-free-essay-writing-tool","tag-australian-best-tutors","tag-best-trans-tutors","tag-buy-essay-uk","tag-can-someone-write-my-assignment-for-me","tag-cheap-dissertation-writer","tag-essypro","tag-help-me-write-my-dissertation","tag-help-with-writing-an-essay","tag-help-write-my-paper-ai-free","tag-homework-for-you","tag-nursing-bay","tag-nursing-essay","tag-nursing-study-bay","tag-online-essay-writers","tag-phd-essays","tag-studbay","tag-write-my-assignment-help-for-college-students","tag-write-my-essay-for-me"],"_links":{"self":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/129344","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/comments?post=129344"}],"version-history":[{"count":0,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/129344\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/media?parent=129344"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/categories?post=129344"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/tags?post=129344"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}