6.3 Encryption Products on the Net

DES

DES is the U.S. government's Data Encryption Standard. It was developed by IBM with possible suggestions by the National Security Agency. DES is identical to the ANSI standard Data Encryption Algorithm (DEA).

To obtain DES: FTP to ftp://ftp.uws.edu.au in the /pub/unix/security/des directory. FTP to ftp://nisca.acs.ohio-state.edu in the /pub/des directory. FTP to ftp://scss3.cl.msu.edu in the /pub/crypt/des directory. FTP to ftp://thumper.bellcore.com in the /pub/nmh/dos/des directory.

Kerberos

Kerberos is a trusted third-party-distributed authentication system that was developed at MIT as part of Project Athena. Kerberos V4 is most widely implemented by vendors to date. V5 is still in beta 3 status at MIT. A derivative of an earlier V5 version was used as the basis for OSF/DCE authentication.

To obtain Kerberos: FTP to ftp://athena-dist.mit.edu in the /pub/kerberos directory.

Almost all of the Kerberos vendors and additional information will be found in the FAQ .

PEM

There at least two implemantations of PEM: - TIS/PEM is implemanted by Trusted Information Systems, Inc. The TIS/PEM FAQ: FTP to ftp://ftp.tis.com to get the /pub/PEM/FAQ file. - RIPEM was primarily written by Mark Ryordan. The RIPEM FAQ

PGP

PGP (Pretty Good Privacy) was developed by Philip Zimmermann and is available free on the Internet at the following sites:

The PGP FAQ: FTP to ftp://ftp.netcom.com in the directory /pub/gbe. The file name is pgpfaq-<n>.asc.

To get free versions of PGP: The PGP FAQ contains a short list of sites. A much more complete list is available via anonymous FTP at ftp://ftp.csn.ne in the directory /mpj in file getpgp.asc (also found at ftp://ftp.csn.net/mpj). This lists a number of FTP sites in and outside the United States, a number of World-Wide Web facilities, and a few BBS sites. Another excellent source of pointers to PGP sites is on the Web at http://www.mantis.co.uk/pgp/pgp.html .
For the American citizens using a computer in the United States, PGP 2.6.2 can be obtained by first telnetting to telnet://net-dist.mit.edu and logging in as `getpgp.' You will be asked to answer four questions, after which you'll be told where you can retrieve the file via anonymous FTP. If you are not an American citizen, run an Archie search for `pgp262' (`archie -s pgp262'). If that doesn't work, PGP version 2.3a is available at a number of sites; perform a search on `pgp.'

Public Key Directories

The PGP FAQ referenced above provides the address of a number of PGP public-key servers. In addition, the Stable Large E-mail Database (SLED) provides a directory of e-mail addresses and PGP public keys that are authenticated by SLED. There is a fee for having your key and address listed in SLED, but access to the keys is free. For information, send a message or connect via the Web .