ACCC Home Page Academic Computing and Communications Center  
Accounts / Passwords Email Labs / Classrooms Telecom Network Security Software Computing and Network Services Education / Teaching Getting Help
 

Related Links: PGP, Cryptography, and Security

     
 
     
About Cryptography
 
Crypto-Gram Newsletter
"Cryptogram is a free monthly e-mail newsletter on computer security and cryptography from Bruce Schneier (author of Applied Cryptography, inventor of Blowfish and Twofish [encryption algorithms], CTO and founder of Counterpane Internet Security, Inc., general crypto pundit and occasional crypto curmudgeon)."
Why Cryptography is Harder than It Looks
Also by Bruce Schneier.
Index of Cryptography Papers Available Online
From Bruce Schneier's company, Counterpane Internet Security, Inc.
How PGP Works
The intro to cryptography from PGP.
Proof of WHO, WHAT, and WHEN in Electronic Commerce
By Charles R. Merrill, from the American Bar Association.
Why Is Certification Harder Than It Looks?
By Ed Gerck.
RSA Lab's Crypto FAQ
All you need to know about cryptography from the people who brought the modern version of it to us.
Cryptography FAQ Index
This is the FAQ from the Usenet email groups on cryptography; it has more detailed info about cryptography than you'll ever want to know, including the mathematics behind it. It's dated, but the we're talking basics here.
 
     
About PGP
 
PGP Desktop at UIC
Installing and using the UIC-licensed PGP Whole Disk Encryption (PGP WDE).
PGP-related FAQs
A list of PGP-related FAQs, from the International PGP Home Page.
PGP Documentation
The International PGP Home Page also has online copies of much of PGP's official documentation, including the User's Guide and Phil Zimmermann's "Why do you need PGP?". And, being an international site, they have a lot of it in a lot of different languages.
Why do you need PGP?
by Phil Zimmermann. Phil Zimmermann is the original creator of PGP and is a pretty interesting guy. Phil Zimmermann's home page.
PGP Vulnerabilities
No data system is infallible. This list of the ways that PGP can be circumvented is interesting both in specific -- as it applies to PGP -- and in general, to see what lengths some people are willing to go to steal information.
PGP Web of Trust Statistics
by Neal McBurnett of Lucent Technologies and the IETF.
PGP Timeline
The site this FAQ is on leaves a bit to be desired, but its PGP history and its list of PGP acronyms is interesting.
PGP Corporation
Was purchased by Symantec.
Information Technology Focus: Cyptography Resources
As the name implies, information and links about cryptography. It's quite interesting.
DMOS open directory project's PGP directory
A nice listing of Web pages about PGP.
Best Practices: PGP WDE - PGP Desktop 10
Best practices to use prior to performing PGP Whole Disk Encryption.
 
     
Encrypting Email
 

The UIC site-licensed version PGP Desktop does not include the email portions of PGP Desktop. If you treat the email message as a file, you can used it to protect email, however -- the UIC site-licensed version of PGP Desktop only knows about PGP Desktop keys. You cannot use it to encrypt email for people whose keys are not kepts in PGP Desktop.

If you only encrypt email for your colleagues at UIC, and they all use the UIC version of PGP Desktop, then you're set. Otherwise, go to About.com's page below and select a email encryption tool that suits the way you do email. I installed Engmail to work with Thunderbird and it works great.

About.com's Secure Your Emails and Protect Your Privacy Through Encryption page

 
     
How to Use PGP
 

The best source is PGP Corp.'s documentation, which comes in PDF form with PGP Desktop.

 
     
About S/MIME and OpenPGP
 
S/MIME and OpenPGP
From the Internet Mail Consortium. A summary of and comparison between S/MIME and OpenPGP. Very readable.
An Open Specification for Pretty Good Privacy (OpenPGP)
This one I didn't read, but it is the home page for the IETF working group on OpenPGP. As such, it's the resource for OpenPGP.
S/MIME Working Group
And here is the home page for the IETF S/MIME working group.
About.com's Secure Your Emails and Protect Your Privacy Through Encryption page
Links to articles on email encryption, including S/MIME and OpenPGP.
 
     
About Online Internet Security
 

If you have a PC at work or at home that has a static IP address (if you're on the UIC campus network or you use DSL or a cable modem, then you do), you should look into these:

Head Off PC Hack Attacks
by Preston Gralla, ZDNet (ZDNet is the PC Magazine folks.); also Web attacks: Are ISPs doing enough?
Internet Connection Security for Windows Users and ShieldsUp free security scan
by Steve Gibson, Gibson Research Corporation

And these security scans scared you just a bit, check out: ZoneLabs Integrity Desktop.

 
     
Other Stuff
 
PasswordVault
Do you have too many passwords to remember? Then you might be interested in PasswordVault, a simple program designed to ease the burden of remembering all of your University passwords, Mac, Windows, or Linux passwords, and Web passwords, by securely storing all your passwords on your desktop machine or, with its companion program, PasswordVault2Go, a portable device. No matter how many passwords you store, you only need to remember your master password to access all of them.

You can download PasswordVault and PasswordVault2Go from the University of Illinois Webstore at no cost.
 


2011-7-27  document@uic.edu
UIC Home Page Search UIC Pages Contact UIC