home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PC-Online 1998 February
/
PCOnline_02_1998.iso
/
filesbbs
/
os2
/
pmpgp13.arj
/
PMPGP.INF
(
.txt
)
< prev
next >
Wrap
OS/2 Help File
|
1995-05-30
|
24KB
|
719 lines
ΓòÉΓòÉΓòÉ 1. Copyright ΓòÉΓòÉΓòÉ
Copyright
pmPGP V 1.3 is not Freeware. Thomas Blummer holds Copyright on this program
and its documentation. The use and distribution of this programm and its
documentation is regulated by its license agreement. You may received this
program as Shareware, which means you are allowed to test this program for a
limited period of time.
ΓòÉΓòÉΓòÉ 1.1. License agreement ΓòÉΓòÉΓòÉ
License agreement
You are granted to use a shareware version of this program for 30 days prior to
registartion for test porposes.
You may
o use a licenced copy only on a single machine at any one time.
o make copies of this program for backup purposes.
o transfer the program to other party provided the other party accepts these
licence agreement. If you transfer this program to another party, you must
transfer or destroy all copies of the program; you do not retain any rights in
respect to the program.
You may not
o use an unregistered copy after the trial period.
o use one licensed copy on more than a single machine at any one time
o use a product licensed for an other person.
o reverse-assemble or reverse-compile the program without my written
permission.
ΓòÉΓòÉΓòÉ 2. Shareware registration ΓòÉΓòÉΓòÉ
pmPGP is licensed for one machine. You will receive a serial number if you
register this product. The a valid serial number hides the Information window
about Shareware
Order form
Name ________________________________________________________________
Company _____________________________________________________________
Address _____________________________________________________________
_____________________________________________________________
Phone _______________________________________________________________
Depending on your location and net access you can choose between three
registration methods:
o BMT Micro is likely the best choice for USA residents and/or Internet users.
o Direct registration is the best choice for european especially german
speaking users.
o Registration via CompuServe is practicable only for CompuServe users.
See details right below.
Order through BMT Micro
Mail Orders To: BMT Micro
452 Horn Road
Wilmington, NC 28412-2411
U.S.A.
Voice Orders: 8:00am - 8:00pm EST (-5 GMT)
(800) 414-4268 (Orders Only)
(910) 791-7052 (Orders, questions)
Fax Orders: (910) 350-2937 24 hours / 7 Days
Online Orders via modem: (910) 350-8061 10 lines, all 14.4K
(910) 799-0923 Direct 28.8K line
via Compuserve: Thomas Bradford, 74031,307
via Internet: orders@bmtmicro.com
We accept Visa, Mastercard, Discover, American Express, Optima,
Eurocard, money orders, cashiers checks and personal checks.
Please do not send cash in the mail. Personal checks are subject to
clearance.
We accept purchase orders from educational institutions,
governmental agencies and other verifiable businesses. Terms are
"Due Upon Receipt".
Product Quantity Price Number of copies
_________________________ ______________ ________________
pmPGP Version 1.3 $ 35.00 US
1st Class ................................. Free
Airborne (Next day most places, USA Only).. $ 7.00 US
Federal Express (USA Only)................. $ 13.00 US
Federal Express (Canada/Mexico)............ $ 25.00 US
Federal Express (Europe/Japan)............. $ 30.00 US
Express (Outside USA) ..................... $ 16.00 US
Total: $ _______
For credit card payment only
Circle one: VISA / Master / Discover
Credit card number: _____________________________________________
Expiration date: ________________________________________________
Authorization signature: ________________________________________
Direct order
For one license send me your order per E-Mail to:
100273.3607@compuserve.com from the Internet or to 100273,3607 from CompuServe.
I will ask you for a check (Verrechnungsscheck) in Deutsche Mark DM 50,- per
License. You will receive direct phone support by me if you choose this way to
registrate.
Order via CompuServe's SWREG Service
You can register trough Compuserve's SWREG service also. GO SWREG and register
ID : 5127. The registration fee is $ 35.00 US if you use this method.
ΓòÉΓòÉΓòÉ 3. Known bugs ΓòÉΓòÉΓòÉ
pmPGP 1.3 does not work correctly in following cases:
o Context menu does not work with OS/2 2.11
o Some menu items are still disabled after the work ist done on OS/2 2.11
o Importing keys from a file which does not contain keys causes the program to
hang.
o The program sometimes traps if you close in signature view of public keys a
deep open tree view at once.
I will not fix bugs that are clearly related with OS/2 2.11 as this operating
system version is outdated.
ΓòÉΓòÉΓòÉ 4. How to get Support ? ΓòÉΓòÉΓòÉ
I support this product via E-Mail. Please address your questions in english or
german to
100273.3607@compuserve.com from the Internet or to 100273,3607 from CompuServe.
I am glad to hear your suggestions too.
I also support this product in CompuServe's OS2SHARE forum in english and in
OS2UGER forum in german language.
PGP and Me
I am not involved in the development of PGP.
I do not distribute or support PGP. The entire chances and risks of using PGP
are with you.
ΓòÉΓòÉΓòÉ 5. Introduction ΓòÉΓòÉΓòÉ
pmPGP is a shell for PGP. pmPGP includes no cryptographic functionality, it
uses PGP to do the real work.
PGP is the most powerful tool for secure communication and authentication
available for everybody.
As PGP is designed to be used on every operating system, it can not support
uniq features of a particular one.
pmPGP adds support for OS/2's powerful graphical user environment to PGP.
ΓòÉΓòÉΓòÉ 6. User Interface ΓòÉΓòÉΓòÉ
The pmPGP window is divided into three areas. Read about their components and
functionality below.
You see the Files in use on the left side, Friends on the right top and
Identities on the right bottom part of the window.
You can change the visible amount of each part by dragging and moving the
separating lines between them. pmPGP stores the new position of the separators.
ΓòÉΓòÉΓòÉ 6.1. Files in use ΓòÉΓòÉΓòÉ
The left side of the pmPGP window shows files you are currently using.
You must first pick up a file hereto if you want to encrypt, decrypt or sign
it.
The table is devided into the following columns:
Column Description
File Shows the file name
Type Either E-Mail, Binary or unknown.
History A brief of the history of this file.
Directory The directory where the file resides.
You can pick up files by using one of the following methods:
o Drag a file from any Workplace folder an drop it into this window. This will
create a link for the file object. It will not move the file.
o Use the "Pick up a file ..." selection of the "Files" menu.
o create a file from the clipboard using "Paste from clipboard" selection from
the "Files" menu.
You can directly access the "Files" menu through a click with the right mouse
button into this window.
You can either forget files in use which you no longer need using the "Forget
files" menu selection or drag them and drop to any folder of the Workplace.
Objects are moved in this case.
Files in use can also be deleted, copied, edited or pasted to clipboard. Read
about these fetures in the sction How do I ?.
ΓòÉΓòÉΓòÉ 6.2. Friends ΓòÉΓòÉΓòÉ
The right top part of the pmPGP window shows the public keys pmPGP found on the
current keyring.
pmPGP offers two sights of the public keys; a tabular and a tree view. See the
contents of the tabular view below.
Tabular view
Column Description
Name Shows the user name and probably the E-Mail adress of a friend.
Type Is either public or private. It is possible to store private
keys on a public keyring, but I would consider it as an error.
Validity The Validity of a key, which PGP calculates on the basis of the
trust of the keys its signatures and the trusts of these
signatures. Read the PGP documentation for more information.
Trust The trust of a key if it is used to sign an other key. Read the
PGP documentation for more information
Date The Date the key was created by its owner.
Bits The Length of the key in bits. Longer keys are slower to process
then short keys. NOTE that the security of a key is not defined
by its length.
ID The short ID of a key.
Fingerprint This is a short hash code of the key, which is useful to check
(eg. over the phone) if your friend has the same key for a
person.
Tree view
You get the tree view of the public keys if you select "Show signatures" from
the "Public keys" menu.
The tree view shows the signatures of a key and the signatures of the
signatures up to the fourth nesting. This view is useful to control and
understand the key Validity calculation of PGP. You see the trust of the keys
used to sign a key in square brackets.
ΓòÉΓòÉΓòÉ 6.3. Identities ΓòÉΓòÉΓòÉ
The right bottom part of the pmPGP window shows the private keys pmPGP found on
the current keyring in a tabular view. Tabular view
Column Description
Name Shows the user name and probably the E-Mail adress of a friend.
Type Is either public or private. It is possible to store private
keys on a public keyring, but I would consider it as an error.
Validity The Validity of a key, which PGP calculates on the basis of the
trust of the keys its signatures and the trusts of these
signatures. Read the PGP documentation for more information.
Trust The trust of a key if it is used to sign an other key. Read the
PGP documentation for more information
Date The Date the key was created by its owner.
Bits The Length of the key in bits. Longer keys are slower to process
then short keys. NOTE that the security of a key is not defined
by its length.
ID The short ID of a key.
Fingerprint This is a short hash code of the key, which is useful to check
(eg. over the phone) if your friend has the same key for a
person.
ΓòÉΓòÉΓòÉ 7. How do I ? ΓòÉΓòÉΓòÉ
This section describes how you can use pmPGP to solve a particular work.
Choose one of the following cathegories
How to do I
access menus.
access context menus.
pick up, forget and manupilate files.
open and manipulate keyrings.
encrypt, decrypt and sign files.
ΓòÉΓòÉΓòÉ 7.1. Menus ΓòÉΓòÉΓòÉ
You can use most of the menu selections only while pmPGP is not working. Menu
selections are valid only under certain circumstances. Temporary invalid
selections are showed gray.
ΓòÉΓòÉΓòÉ 7.2. Context menus ΓòÉΓòÉΓòÉ
Click with the right mouse button on the "Files in use", "Friends" or
"Identities" window. pmPGP will pop up a menu which contains valid selections
for the objects marked with a dot line at this time. Note that selected menu
items in a context menu are working on the dot line marked objects and not on
the hilighted (selected) ones
The context menus for the tables are corresponding with the "Files", "Public
keys" and "Private keys" menus.
ΓòÉΓòÉΓòÉ 7.3. Files ΓòÉΓòÉΓòÉ
Choose one of the following actions you want to perform on a file:
Pick up a file
Forget a file
Edit a file
Copy a file
Create a file from the clipboard
Copy a file to the clipboard
Delete a file
Move a file
Print a file
ΓòÉΓòÉΓòÉ 7.3.1. Pick up a file ΓòÉΓòÉΓòÉ
You must pick up a file into the files window before you perform any other work
on it.
Pick up a file file by dragging any file from the workplace and dropping it
into the files window, or use the menu selection "Pick up a file" from the
"Files" menu or from the context menu.
ΓòÉΓòÉΓòÉ 7.3.2. Forget a file ΓòÉΓòÉΓòÉ
You should tell pmPGP to forget files which you do not want to process any
more.
Forgetting a file do not mean deleting it. pmPGP simply removes the file's data
from its file window.
Use the menu selection "Forget files" from the "Files" menu or or from the
context menu.
ΓòÉΓòÉΓòÉ 7.3.3. Edit a file ΓòÉΓòÉΓòÉ
pmPGP is able to start an editor of your choice if you doubleclick a file in
its files window or select the "Edit file" item from the "Files" menu or the
context menu.
The editor it starts defaults to E.EXE, and can be altered using the
preferences dialog.
ΓòÉΓòÉΓòÉ 7.3.4. Copy a file ΓòÉΓòÉΓòÉ
Select one file if you want to copy it. pmPGP will ask for a destination and
copy the file together with its history. The new file is automatically added to
the files in use.
Use the menu item "Copy a file" either of the "Files" or the context menu.
ΓòÉΓòÉΓòÉ 7.3.5. Create a file from the clipboard ΓòÉΓòÉΓòÉ
pmPGP is able to dump the content of the clipboard into a file, provided that
it is in a text format.
Use the menu item "Paste from clipboard" either of the "Files" or the context
menu.
ΓòÉΓòÉΓòÉ 7.3.6. Copy a file to the clipboard ΓòÉΓòÉΓòÉ
pmPGP is able to dump the content of a file into the clipboard, provided that
the file is in a readable text format.
Use the menu item "Copy to clipboard" either of the "Files" or the context
menu.
ΓòÉΓòÉΓòÉ 7.3.7. Delete a file ΓòÉΓòÉΓòÉ
pmPGP offers two methods for deleting a file. You can drag the file and drop it
to the shredder, which is a quick but not secure way to to delete, or you can
use the "Delete" menu item of the "Files" menu or the context menu.
The "Delete" option of pmPGP provides a secure deletion, as it first overwrites
the whole file and then deletes it. It is not possible to recover the content
of a file deleted with this option, not even with file recovery utilities, so
take care with its use.
ΓòÉΓòÉΓòÉ 7.3.8. Move a file ΓòÉΓòÉΓòÉ
Drag a file from the files window and drop it into a Workplace folder or drive.
pmPGP will move the file in this case. pmPGP also forgets the file after the
move.
ΓòÉΓòÉΓòÉ 7.3.9. Print a file ΓòÉΓòÉΓòÉ
Drag a file from the files window and drop it onto a Workplace printer.
ΓòÉΓòÉΓòÉ 7.4. Keyrings ΓòÉΓòÉΓòÉ
pmPGP offers various manipulations on Keyrings. Read more about them by
selecting one of the following operations
Open a keyring
Import keys
Export a key
Remove a key
Generate a new key pair
Revoke your key
Edit your name or pass phrase
Sign a key
Remove a key signature
Edit the trust of a key
ΓòÉΓòÉΓòÉ 7.4.1. Open a keyring ΓòÉΓòÉΓòÉ
pmPGP opens the keyrings pubring.pgp and secring.pgp in the directory referred
by the variable PGPPATH in your config.sys. You can open and manipulate other
keyrings too.
Use the "Open keyring" menu item of the "Private keys" or "Public keys" menu
respectively, or the context menu.
NOTE that due to a restriction of PGP, pmPGP uses the default keyrings
(PGPPATH) for cryptographical work even if you opened an other keyring. You can
only import, export or remove keys on other than the default keyrings.
ΓòÉΓòÉΓòÉ 7.4.2. Import keys ΓòÉΓòÉΓòÉ
This feature allows you to incorparate public or private keys you received into
your key ring for future use.
You must first pick up the file which contains the keys, then select this (only
one) file and choose the menu item "Import keys" from either the "Private keys"
or "Public keys" menus. You should import public keys into your public keyring,
it is unlikely that you receive private keys from a friend.
ΓòÉΓòÉΓòÉ 7.4.3. Export a key ΓòÉΓòÉΓòÉ
This feature allows you to forward keys you know to other people. You can also
export private keys, if you know what you are doing. Exporting private keys is
generally a big mistake.
pmPGP exports a key together with all of its signatures into a file of you
choice which it automatically places into the files in use table.
Use the menu item Export a key of the menus "Private keys" or "Public keys" or
the context menu.
ΓòÉΓòÉΓòÉ 7.4.4. Remove a key ΓòÉΓòÉΓòÉ
This feature allows you remove keys from your keyring. This functionality is
provided only to lighten your keyring by deleting keys you do not ever want to
use.
Remember to issue a key revokation certificate before you delete your own keys
<g>.
Use the menu item Remove a key of the menus "Private keys" or "Public keys" or
the context menu.
ΓòÉΓòÉΓòÉ 7.4.5. Generate your own keys ΓòÉΓòÉΓòÉ
This feature allows you generate a own new public and private key pair.
Use the menu item Generate keys of the menu "Private keys" or the context menu.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.4.6. Revoke your key ΓòÉΓòÉΓòÉ
This feature allows you to revoke your own keys. The created key revocation
certificate will be placed onto your public key ring. You have to extract this
certificate like a key and mail it to the persons or key servers who have been
using your revoked key.
Use the menu item Issue a revocation certificate of the menu "Private keys" or
the context menu.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.4.7. Edit your name or pass phrase ΓòÉΓòÉΓòÉ
This feature allows you to edit the pass phrase or the E-Mail adress of your
own key.
Use the menu item Edit user name or pass phrase of the menu "Private keys" or
the context menu.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.4.8. Sign a key ΓòÉΓòÉΓòÉ
This feature allows you to certify a key with your private key. You should only
sign key if you are absolutely sure that the key belongs to the name in the
E-Mail adress.
Choose one and only one Public key and use the menu item Sign a key of the menu
"Public keys" or the context menu. The private key actually selected on the
private key ring will be used to certify the public key.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.4.9. Remove a key signature ΓòÉΓòÉΓòÉ
This feature allows you to remove key certifications from a public key.
Choose one and only one Public key and use the menu item Sign a key signature
of the menu "Public keys" or the context menu.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.4.10. Edit the trust of a key ΓòÉΓòÉΓòÉ
The key signatures can certify that a key actually belongs to a particular
name. Another question is whom you really trust that he/she signs only proven
keys. You adjust with the trust of a key: to what grade you trust somebody as
an introducer of other people.
Choose one and only one Public key and use the menu item Edit trust of a key of
the menu "Public keys" or the context menu.
A PGP window will be opened for you. Answer the questions PGP will ask you.
ΓòÉΓòÉΓòÉ 7.5. Cryptographic work ΓòÉΓòÉΓòÉ
pmPGP offers the following cryptographic operations.
Decrypt a file
Sign a file
Encrypt a file
Sign and Encrypt a file
ΓòÉΓòÉΓòÉ 7.5.1. Decrypt a file ΓòÉΓòÉΓòÉ
Select one file in the Files in use window and choose the menu item "Decrypt"
of the "Files" menu or the context menu.
pmPGP will ask you to enter your pass phrase for the private key currently
selected on the private keyring.
pmPGP is certanly not able to decrypt a file if your pass phrase is entered
incorrectly or you do not own the neccecary private key.
pmPGP do not store the pass phrase because of security reasons.
ΓòÉΓòÉΓòÉ 7.5.2. Sign a file ΓòÉΓòÉΓòÉ
Select one file in the Files in use window, select a private key on your
private keyring and choose the menu item "Sign" of the "Files" menu or the
context menu.
pmPGP is certanly not able to sign a file if your pass phrase is entered
incorrectly.
pmPGP do not store the pass phrase because of security reasons.
The signature is created either clear or embedded depending on the choices in
the preferences dialog. Clear signature means that anybody even without PGP can
read the file, and its authenticity can be proved with PGP. Embedded signature
is not an encryption, but is readable only with PGP.
You should never sign a file which content you do not know, because signing of
special files created for that reason could compromize your private key.
ΓòÉΓòÉΓòÉ 7.5.3. Encrypt a file ΓòÉΓòÉΓòÉ
Select one file in the Files in use window, select all friends who has to be
able to read the message on your public keyring and choose the menu item
"Encrypt" of the "Files" menu or the context menu.
The created file is only readable for Friends whose public key you selected.
You should encrypt files only for public keys which have the complate or
ultimate validity to ensure that you are using an untampered key. The validity
of a key depends on the signatures with other keys it owns and your trust of
the keys which were used to sign the key.
You can change the trust of a key and sign a key with your own key using pmPGP.
ΓòÉΓòÉΓòÉ 7.5.4. Sign and Encrypt a file ΓòÉΓòÉΓòÉ
Select one file in the Files in use window, select a private key on your
private keyring, select all friends who has to be able to read the message on
your public keyring and choose the menu item "Sign and Encrypt" of the "Files"
menu or the context menu.
pmPGP is certanly not able to sign a file if your pass phrase is entered
incorrectly.
pmPGP do not store the pass phrase because of security reasons.
The created file is only readable for Friends whose public key you selected.
Because the signature is made before the encryption, your signature can be
verified (even recognised) only by the friends you selected.
You should encrypt files only for public keys which have the complate or
ultimate validity to ensure that you are using an untampered key. The validity
of a key depends on the signatures with other keys it owns and your trust of
the keys which were used to sign the key.
You can change the trust of a key and sign a key with your own key using pmPGP.
You should never sign a file which content you do not know, because signing of
special files created for that reason could compromize your private key.
ΓòÉΓòÉΓòÉ 8. Examples ΓòÉΓòÉΓòÉ
Read and try the following examples to get familiar with pmPGP.
ΓòÉΓòÉΓòÉ 8.1. Import a public key. ΓòÉΓòÉΓòÉ
You can incorporate my public key into your public keyring using the following
steps :
1) select "Pick up a file" in the "Files" menu of pmPGP and pick up the file
thomas.asc in the installation directory of pmPGP.
2) select the file thomas.asc and choose the menu item "Import keys" of the
"Public keys" menu.
3) now you have a copy of my public key on your keyring. You could use it eg.
to verify my signature.
4) You could delete the file thomas as it is no longer needed using the
"Delete" menu item.
ΓòÉΓòÉΓòÉ 8.2. Sign a file ΓòÉΓòÉΓòÉ
Here you see how you could fill out the order form of pmPGP and send it to me
signed with your key.
Order Form
Name [ ]
Company [ ]
Address [ ]
[ ]
Phone [ ]
Product Quantity Price Number of copies
_________________________ ______________ ________________
pmPGP Version 1.3 $ 35.00 US
Do the following steps
1) choose "copy" in the menu of this help window. This will copy this page of
the documentation into the clipboard.
2) select "Paste from clipboard" in the "Files" menu of pmPGP, and enter order
as destination file name
3) double click the file order in the Files in use table, to open an editor.
4) fill and store the form.
5) choose menu item "Sign" of the "Files" menu to sign this document. It is
preferable to use clear signature for such a form, so remember to check
preferences.
6) You could now either E-Mail this file, or Drag it and Drop to a printer
object on the workplace to mail it conventionally.
If you performed the first example also and you already own my public key, you
could also encrypt this message readable for me by selecting me in the list of
friends and "Sign and Encrypt" of the Files menu.