50 likes | 62 Views
Learn about Pretty Good Privacy (PGP) email encryption and its benefits in ensuring confidentiality, authentication, non-repudiation, integrity, and proof of delivery for your email messages.
E N D
Network Security Chapter 5a - Pretty Good Privacy (PGP) Email (aka GPG or GnuPG - Gnu Privacy Guard) http://www.faisalakhan.info/Classes/ faisal.khan@buitms.edu.pk Office: SS Block, BUITEMS
Security Services for Email Privacy - only read by intended recipient (confidentiality, access, authorization) Authentication - confidence in ID of sender Non-repudiation - proof that sender sent it (attribution) Integrity - assurance of no data alteration Less Common: Proof of submission - was sent to email server Proof of delivery - was received (and read) by addressee 2
Message Integrity The source authentication methods that include a hash of the message provide MIC Non-repudiation Private-key signing provides non-repudiation. Secret-key method requires a "Notary" to "Sign" a time-stamp + hash of the message Proof of Delivery Acknowledge 3
PGP Email: Sign (optional) before Encryption (also optional) From "PGP Freeware for MacOS, User's Guide" Version 6.5, Network Associates, Inc., www.pgp.com 4
with signature attached if there is one How PGP Encryption Works From "PGP Freeware for MacOS, User's Guide" Version 6.5, Network Associates, Inc., www.pgp.com 5