Current PGP versions
PGP exists in several different versions. If you are not sure which version
is the right one for you, you may find help here. The
following is a list of the most popular PGP versions available today:
PGP 2.3a
This is the "classic" PGP version, and until
recently, this was the version generally used by PGP users all over the
world. You may still use PGP 2.3a if you want to, but you may experience
problems when trying to process messages and keys generated with PGP 2.6
and later versions, or when using keys that are larger than 1280 bits (the
maximum size is now 2048 bits). PGP 2.3a is presumably illegal to use within
the USA because of patent restrictions.
This is an unofficial, "hacked" version of PGP 2.3a,
which aimed at correcting the incompatibility problems introduced by MIT PGP 2.6.
Please observe that PGP 2.6ui is not a "true" 2.6 version as it is based on
the source code for PGP 2.3a, and as such does not include the improvements
and bug fixes found in the newer versions. PGP 2.6ui was published by
mathew in the UK, but is no longer
supported.
PGP 2.62ui
Tony Lezard
in the UK based this version of PGP on mathew's 2.6ui, but tried to bring it
up-to-date with the latest PGP 2.6x improvements (bigger keys, bug-fixes, new
command options etc.). PGP 2.62ui can be downloaded from
ftp.mantis.co.uk.
This is the latest official version of PGP, released
by MIT and adapted (some would say mangled)
for use in the USA:
- It creates messages that cannot be read by PGP versions prior to 2.5.
- It uses the RSAREF encryption library, making it slightly slower on most
platforms. Furthermore, it does not understand the old signature format
used by PGP 2.2 and earlier versions.
PGP 2.6.2 is illegal to export from USA, but once exported anyone may use it
freely. This version corrects a number of bugs found in PGP 2.6
and 2.6.1. If you are a US citizen living in the US, this is probably the PGP
version you want.
MIT PGP 2.6.2 can be downloaded here.
This is the latest international version of PGP,
based on the source code for MIT PGP 2.6.2 and modified for international use.
PGP 2.6.3i is published by Stσle
Schumacher in Norway, and differs from MIT PGP 2.6.2 in the following ways:
It does not use the RSAREF encryption library
- It is 100% compatible with all other PGP 2.x versions
- It corrects a number of bugs present in PGP 2.6.2(i)
- It compiles "out of the box" for many new platforms
- It adds some new features without breaking compatibility with earlier versions
PGP 2.6.3i is the most flexible, up-to-date version of PGP available today.
PGP 2.6.3i is probably illegal to use within the USA,
so if you are a US citizen, you should use MIT PGP 2.6.2 or PGP 2.6.3 instead.
For more information on PGP 2.6.3i, and how to download a copy, refer to the
International PGP Home
Page.
If you compile the source code for PGP 2.6.3i using the
-DUSA option and linking with RSAREF (rsaglue2.c) instead of MPILIB
(rsaglue1c.), you will get a version that identifies itself as PGP 2.6.3. It contains
all the same bug-fixes and improvements as PGP 2.6.3i, but it will be slightly
slower, and the "legal kludge" cannot be disabled. PGP 2.6.3 is not an official PGP version, but is still perfectly legal to use inside the USA. It is
only distributed as source code. However, some
helpful individuals that have compiled it for their own use, have also made it
available to the general public:
I cannot guarantee the authenticity of these compilations. On the other hand,
I have no reason to believe that they have been tampered with, either.
ViaCrypt PGP is a commercial version of PGP available in the US and Canada only. Phil Zimmermann says that no compromises in the cryptographic strength of PGP were made for
ViaCrypt's version of PGP. The ViaCrypt PGP package includes program disks (executables only, no source code), a user manual, and an
individual user license. The current release is available for Windows, MS-DOS, Macintosh and UNIX. There is a special version
available which interfaces to CompuServe's CIM. Prices start at $100 for the DOS version.
To purchase ViaCrypt PGP, click here.
Last updated
March 5, 1997
by Stσle Schumacher
<stale@hypnotech.com>