Cyphernomicon Top
Cyphernomicon 19.5

Appendices:
Appendix -- Summary of Crypto Versions


   19.5.1. DOS and Windows
           - SecureDevice
           + SecureDrive
             - "Secdrv13d is the latest version.  There was an unupdated
                .exe file in the package that had to be fixed.  From the
                readme file: If you found this file inside FPART13D.ZIP,
                this is an update and bug fix for the FPART utility of
                SecureDrive Release 1.3d,
             - Edgar Swank involved?
           + SecureDevice
             - Major Versions:
             - Functions:
             - Principal Authors:
             - Major Platforms:
             + Where to Find:
               - ftp://ftp.csn.org/mpj/I_will_not_export/crypto_???????/
                  secdrv/secdev.arj
                  See ftp://ftp.csn.org/mpj/README.MPJ for the ???????
             - Strengths:
             - Weaknesses:
             + Notes:
               - By the way, I'm not the only one who gets SecureDrive
                  and SecureDevice confused. Watch out for this.
           + SFS
             - "A MS-DOS-based package for hard disk encryption. It is
                implemented as a device driver and encrypts a whole
                partition (i.e., not a file or a directory). It uses the
                MDC/SHA cipher. ... It is available from Grabo
                (garbo.uwasa.fi:/pc/crypt/sfs110.zip, I think), and also
                from our ftp site: ftp.informatik.uni-
                hamburg.de:/pub/virus/crypt/disk/sfs110.zip    I would
                recommend the Garbo site, because ours is a bit slow."
                [Vesselin Bontchev, alt.security.pgp, 1994-09-05]
             - Compared to SecureDrive, users report it to be faster,
                better-featured, has a Windows interface, is a device
                driver, and is robust. The disadvantages are that it
                currently does not ship with source code and uses a more
                obscure cipher.
             - "SFS (Secure FileSystem) is a set of programs which
                create and manage a number of encrypted disk volumes, and
                runs under both DOS and Windows.  Each volume appears as
                a normal DOS drive, but all data stored on it is encryped
                at the individual-sector level....SFS 1.1 is a
                maintenance release which fixes a few minor problems in
                1.0, and adds a number of features suggested by users.
                More details on changes are given in in the README file."
                [Peter Gutmann, sci.crypt, 1994-08-25]
             - "from garbo.uwasa.fi and all its mirror sites worldwide
                as  /pc/crypt/sfs110.zip."
           + WinCrypt.
             - "WinCrypt is pretty good IF you keep your encrypted text
                to less than the length of your password, AND IF you
                generate your password randomly, AND IF you only use each
                password ONCE.  :-)" [Michael Paul Johnson,  sci.crypt,
                1994-07-08]
           + Win PGP
             + there seem to be two identically-named programs:
               - WinPGP, by Christopher w. Geib
               + WinPGP, by Timothy M. Janke and Geoffrey C. Grabow
                 - ftp WinPGP 1.0 from
                    oak.oakland.edu//pub/msdos/windows3/WinPGP10.ZIP
               - Until this is clarified...
           + PGPShell
             - "PGPShell v3.2 has been released and is available at
                these sites: (U.S.)
                oak.oakland.edu:/pub/msdos/security/pgpshe32.zip
                   (Euro)
                ftp.demon.co.uk:/simtel20/msdos/security/pgpshe32.zip
                [still@rintintin.Colorado.EDU (Johannes Kepler), 1994-07-
                07]
           + PGS
             - ftp.informatik.uni-
                hamburg.de:/pub/virus/crypt/pgp/shells/pgs099b.zip
             - "I just uploaded the bug fix of PGS (v0.99b) on some FTP-
                sites:
                wuarchive.wustl.edu:/pub/msdos_uploads/pgs/pgs099b.zip
                rzsun2.informatik.uni-hamburg.de:/pub/virus/crypt/pgp/...
                   (Just uploaded it, should be on in a few days)
                 oak.oakland.edu:/SimTel/msdos/security/pgs099b.zip (Just
                uploaded it, should be on in a few days)
                
                [Eelco Cramer <crame001@hio.tem.nhl.nl>, 1994-06-27]
           + DOS disk encryption utilities
             + Several free or nearly free utilities are available:
               - ftp.informatik.uni-hamburg.de:/pub/virus/crypt/disk/
                  [Vesselin Vladimirov Bontchev, as of 1994-08]
             + Norton's "Diskreet" is weak and essentially useless
               - uses DES in weak (ECB) mode...is probably the "snake
                  oil" that Zimmermann writes about in his docs. SFS docs
                  say it is even worse than that.
           + PGS
             - "PGS v0.99c is out there!
                
                This new version of PGS supports 8 bytes keyid's.
                This version will be able to run in a OS/2 DOS box.
                
                PGS v0.99c is available on the following site:
                wuarchive.wustl.edu:/pub/msdos_uploads/pgs/pgs099c.zip"
                [ER CRAMER <crame001@hio.tem.nhl.nl>, 1994-07-08]
                
                
           + Program:
             - Major Versions:
             - Functions:
             - Principal Authors:
             - Major Platforms:
             - Where to Find:
             - Strengths:
             - Weaknesses:
             - Notes:
   19.5.2. OS/2
   19.5.3. Amiga
           + Program: PGPAmiga, Amiga PGP
             + Major Versions:  2.3a.4, PGP 2.6
               - "The Amiga equivalent of PGP 2.6ui is called PGP
                  2.3a.3" [unknown commenter]
             - Functions:
             - Principal Authors:
             - Major Platforms:
             - Where to Find:
             - Strengths:
             - Weaknesses:
             - Notes: Situation is confusing. 2.3a.3 is not equivalent
                to PGP 2.6ui.
   19.5.4. Unix
           - NeXTStep
           - Sun 4.3
           - Solaris
           - HP
           - SGI
           + swIPe
             - Metzger: It was John Ioannidis' swIPe package, and it was
                not merely announced
                but released. Phil has done a similar package for KA9Q
                and was one of
   19.5.5. SFS ?
           - "A MS-DOS-based package for hard disk encryption. It is
              implemented as a device driver and encrypts a whole
              partition (i.e., not a file or a directory). It uses the
              MDC/SHA cipher. ... It is available from Grabo
              (garbo.uwasa.fi:/pc/crypt/sfs110.zip, I think), and also
              from our ftp site: ftp.informatik.uni-
              hamburg.de:/pub/virus/crypt/disk/sfs110.zip    I would
              recommend the Garbo site, because ours is a bit slow."
              [Vesselin Bontchev, alt.security.pgp, 1994-09-05]
   19.5.6. Macintosh
           + more on MacPGP
             - From: phinely@uhunix.uhcc.Hawaii.Edu (Peter Hinely)
                Subject: Re: MacPGP 2.6ui doesn't actually work
                Message-ID: <CsI3wr.I3B@news.Hawaii.Edu>
                Sender: news@news.Hawaii.Edu
                Organization: University of Hawaii
                References: <m0qJqLD-001JKsC@sunforest.mantis.co.uk>
                Date: Wed, 6 Jul 1994 04:17:15 GMT
                Lines: 9
                
                In article <m0qJqLD-001JKsC@sunforest.mantis.co.uk>
                mathew@stallman.mantis.co.uk (mathew at home) writes:
                >Well, I downloaded the rumoured MacPGP 2.6ui, but sadly
                it bombs out
                >immediately with an address error when I try to run it.
                
                MacPGP 2.6ui works on my Quadra 605.
                The MacBinary process cannot handle pathnames >63
                characters, but as long
                an you encrypt files on the desktop, it's not too much of
                a problem.
             - From: warlord@MIT.EDU (Derek Atkins)
                Newsgroups: alt.security.pgp
                Subject: Re: When will there be a bug fix for MacPGP?
                Followup-To: alt.security.pgp
                Date: 6 Jul 1994 10:19:13 GMT
                Organization: Massachusetts Institute of Technology
                Lines: 19
                Message-ID: <WARLORD.94Jul6061917@toxicwaste.mit.edu>
                References: <AWILSON-020794082446@ts7-57.upenn.edu>
                NNTP-Posting-Host: toxicwaste.media.mit.edu
                In-reply-to: AWILSON@DRUNIVAC.DREW.EDU's message of 2 Jul
                1994 12:25:14 GMT
                
                In article <AWILSON-020794082446@ts7-57.upenn.edu>
                AWILSON@DRUNIVAC.DREW.EDU (AL WILSON) writes:
                
                   When will there be a bug fix for MacPGP (1.1.1)?  I am
                not complaining, I
                   know that the software is free.  I just want to start
                utilizing it for
                   communications at the earliest possible time.
                
                There are still a number of outstanding bugs that need to
                be
                fixed, but the hope is to make a bugfix release in the
                near
                future.  I don't know when that is going to be, but
                hopefully
                it will be Real Soon Now (TM).
             - Date: Wed, 6 Jul 1994 10:42:08 -0700
                From: tcmay (Timothy C. May)
                To: tcmay
                Subject: (fwd) Re: What is the difference between 2.6 &
                2.6ui?
                Newsgroups: alt.security.pgp
                Organization: NETCOM On-line Communication Services (408
                261-4700 guest)
                Status: O
                
                Xref: netcom.com alt.security.pgp:16979
                Path: netcom.com!netcomsv!decwrl!lll-
                winken.llnl.gov!sol.ctr.columbia.edu!howland.reston.ans.n
                et!pipex!lyra.csx.cam.ac.uk!iwj10
                From: iwj10@cus.cam.ac.uk (Ian Jackson)
                Newsgroups: alt.security.pgp
                Subject: Re: What is the difference between 2.6 & 2.6ui?
                Date: Wed, 6 Jul 1994 10:14:24 GMT
                Organization: Linux Unlimited
                Lines: 55
                Message-ID:
                <1994Jul6.101424.9203.chiark.ijackson@nyx.cs.du.edu>
                References: <CsE3CC.Gqz@crash.cts.com>
                <RATINOX.94Jul3221136@delphi.ccs.neu.edu>
                NNTP-Posting-Host: bootes.cus.cam.ac.uk
                Summary: Use 2.6ui :-).
                Originator: iwj10@bootes.cus.cam.ac.uk
                
                -----BEGIN PGP SIGNED MESSAGE-----
                
                In article <RATINOX.94Jul3221136@delphi.ccs.neu.edu>,
                Stainless Steel Rat <ratinox@ccs.neu.edu> wrote:
                >Ed Dantes <edantes@crash.cts.com> writes [quoting
                normalised - iwj]:
                >> subject line says it all.
                >
                >PGP 2.6 is distributed from MIT and is legally available
                to US and Canadian
                >residents. It uses the RSAREF library. It has code that
                will prevent
                >interoperation with earlier versions of PGP.
                >
                >PGP 2.6ui is a modified version of PGP 2.3a which
                functions almost
                >identically to MIT PGP 2.6, without the "cripple code"
                of MIT PGP 2.6. It
                >is legally available outside the US and Canada only.
                
                This is false.  PGP 2.6ui is available to US and Canadian
                residents.
                It is definitely legal for such people to download PGP
                2.6ui and study
                it.
                
                However, RSADSI claim that *using* PGP 2.6ui in the US
                and Canada
                violates their patents on the RSA algorithm and on public
                key
                cryptography in general.  Other people (like myself)
                believe that
                these patents wouldn't stand up if tested in court, and
                that in any
                case the damages recoverable would be zero.
                
                You might also like to know that the output formats
                generated by 2.6ui
                and MIT-2.6 are identical, so that if you choose to use
                2.6ui in North
                America noone will be able to tell the difference anyway.
                
                Unfortunately these patent problems have caused many
                North American
                FTP sites to stop carrying 2.3a and 2.6ui, for fear of
                committing
                contributory infringement.
                
                If you would like to examine PGP 2.3a or 2.6ui, they are
                available on
                many FTP sites.  Try
                 black.ox.ac.uk:/src/security
                 ftp.demon.co.uk:/pub/pgp
                 ftp.dsi.unimi.it:/pub/security/crypt/PGP
                 ftp.funet.fi:/pub/crypt
                for starters.  Look out for the regular postings here in
                alt.security.pgp for other sites.
                
                -----BEGIN PGP SIGNATURE-----
                Version: 2.6
                
                iQCVAgUBLhqD48MWjroj9a3bAQH9VgQAqOvCVXqJLhnFvsKfr82M5808h
                6GKY5RW
                SZ1/YLmshlDEMgeab4pSLSz+lDvsox2KFxQkP7O3oWYnswXcdr4FdLBu/
                TXU+IQw
                E4r/jY/IXSupP97Lxj9BB73TkJIHVmrqgoPQG2Nszj60cbE/LsiGs5uMn
                CSESypH
                c0Y8FnR64gc=
                =Pejo
                -----END PGP SIGNATURE-----
                --
                Ian Jackson, at home  <ijackson@nyx.cs.du.edu> or
                <iwj10@cus.cam.ac.uk>
                +44 223 575512    Escoerea on IRC.
                http://www.cl.cam.ac.uk/users/iwj10/
                2 Lexington Close, Cambridge, CB4 3LS, England.   Urgent:
                <iwj@cam-orl.co.uk>
                
                --
                .........................................................
                .................
                Timothy C. May         | Crypto Anarchy: encryption,
                digital money,
                tcmay@netcom.com       | anonymous networks, digital
                pseudonyms, zero
                408-688-5409           | knowledge, reputations,
                information markets,
                W.A.S.T.E.: Aptos, CA  | black markets, collapse of
                governments.
                Higher Power: 2^859433 | Public Key: PGP and MailSafe
                available.
                "National borders are just speed bumps on the information
                superhighway."
                
                
                
                
           + CurveEncrypt, for Mac
             - "Curve Encrypt 1.1, IDEA encryption for the Macintosh is
                now available.....Curve Encrypt is a freeware drag-and-
                drop encryption application for the Macintosh. It uses
                IDEA cipher-feedback mode with a 255 character pass
                phrase, encrypts both the data and resource forks of
                files, and will encrypt the contents of a folder or
                volume in a single operation. Source code is provided,
                natch. CE is System 7 only....(Note that this program has
                nothing whatsoever to do with elliptic curve
                encryption methods, just so nobody gets confused...)" [
                "W. Kinney" <kinney@bogart.Colorado.EDU>, 1994-07-08]
             - "Ftp Sites:
                
                ripem.msu.edu:pub/crypt/other/curve-encrypt-idea-for-mac/
                This is an export controlled ftp site: read
                pub/crypt/GETTING_ACCESS for
                information.
                
                ftp.csn.org:/mpj/I_will_not_export/crypto_???????/curve_e
                ncrypt/
                csn.org is also export-controlled: read /mpj/README for
                the characters
                to replace ???????."  [ "W. Kinney"
                <kinney@bogart.Colorado.EDU>, 1994-07-08]
           + RIPEM on Macintosh
             - Carl Ellison says "I've only used RIPEM on AOL -- but it
                should be the same....I run on a Mac, generating the
                armored file, and then use AOL's "paste from file" option
                in the File menu to include the encrypted file in the
                body of my message.....In the other direction, I have to
                use Select All and Copy to get it out of AOL mail, Paste
                to get it into an editor.  From there I can file it and
                give that file to PGP or RIPEM.....BBEDIT on the Mac has
                good support for RIPEM.  I wish I knew how to write
                BBEDIT extensions for Mac PGP as well." [C.E., 1994-07-
                06]
           + URL for Stego (Macintosh)
             - http://www.nitv.net/~mech/Romana/stego.html
   19.5.7. Newton
   19.5.8. Atari
   19.5.9. VMS
  19.5.10. IBM VM/etc.
  19.5.11. Miscellaneous
  19.5.12. File-splitting utilities
           + Several exist.
             - XSPLIT
             - cryptosplit, Ray Cromwell
             - shade
 

Next Page: 19.6 Appendix -- References
Previous Page: 19.4 Appendix -- Glossary

By Tim May, see README

HTML by Jonathan Rochkind