Date:       Sat, 30 Apr 94 10:43:40 EST
Errors-To:  Comp-privacy Error Handler <owner-comp-privacy@uwm.edu>
From:       Computer Privacy Digest Moderator  <comp-privacy@uwm.edu>
To:         Comp-privacy@uwm.edu
Subject:    Computer Privacy Digest V4#060

Computer Privacy Digest Sat, 30 Apr 94              Volume 4 : Issue: 060

Today's Topics:			       Moderator: Leonard P. Levine

         Re: Phillip Zimmermann's Encryption program anybody??
         Re: Phillip Zimmermann's Encryption program anybody??

   The Computer Privacy Digest is a forum for discussion on the effect 
  of technology on privacy.  The digest is moderated and gatewayed into 
  the USENET newsgroup comp.society.privacy (Moderated).  Submissions 
  should be sent to comp-privacy@uwm.edu and administrative requests 
  to comp-privacy-request@uwm.edu.  Back issues are available via 
  anonymous ftp on ftp.cs.uwm.edu [129.89.9.18].  Login as "ftp" 
  with password "yourid@yoursite".  The archives are in the directory 
  "pub/comp-privacy".   Archives are also held at ftp.pica.army.mil
  [129.139.160.133].
----------------------------------------------------------------------

From: Scott Bennett <bennett@mp.cs.niu.edu>
Date: 29 Apr 1994 20:25:17 -0500
Subject: Re: Phillip Zimmermann's Encryption program anybody??
Organization: Northern Illinois University

    bcieslak@mkelan5.remnet.ab.com (Brian Cieslak ) writes: I recently
    read an article in the Wall street journal about an encryption
    program that is used by emailers on the internet called PGP "Pretty
    Good Privacy". I figured this would be a good place to start
    looking for information about computer privacy...Can anyone tell me
    of an FTP site where I can get a copy? (for personal use).

     The following file was obtained by sending an empty message
to pgpinfo@mantis.co.uk.  (The response is automated.)  For those
*not* having trouble receiving mail, it would probably be a good
idea to get a fresh copy of the file just in case it has been
updated since I got the one below.

                                  Scott Bennett, Comm. ASMELG, CFIAG
                                  Systems Programming
                                  Computer Center
                                  Northern Illinois University
                                  DeKalb, Illinois 60115
**********************************************************************
* Internet:       bennett@cs.niu.edu    bennett@netmgr.cso.niu.edu   *
* BITNET:         A01SJB1@NIU                                        *
*--------------------------------------------------------------------*
* It takes a clever politician to mask his envy while he accuses his *
* opponent of fooling the public.  --Anonymous                       *
**********************************************************************
>From nobody@mantis.co.uk Tue Apr  5 00:37:04 1994
Date: Tue, 5 Apr 94 06:36 BST
Subject: Information request
From: mailer-daemon@mantis.co.uk

                              PRETTY GOOD PRIVACY
                                       
Introduction

   PGP 2 is a freely-redistributable public key cryptosystem for MS-DOS,
   Amiga, Atari ST and UNIX. With it, you can communicate securely with
   other people -- without having to meet beforehand to exchange secret
   keys!
   
   Is it secure? Ask Dorothy Denning:
   
     "PGP," warns Dorothy Denning, a Georgetown University professor who
     has worked closely with the National Security Agency, "could
     potentially become a widespread problem." -- (E. Dexheimer)
     
Legal Issues

   People often claim that PGP is illegal. It isn't. A companion document
   to this one explains the legal issues.
   
Obtaining PGP

   You can buy a proper commercial release of PGP for DOS or UNIX (Mac
   version coming soon) from ViaCrypt.
   
   Alternatively, here are some places from which you can download PGP.
   Look down the list to find the section for the machine or OS you're
   using -- DOS, UNIX or whatever. Then look in that section for a site
   which is near to you.
   
   __ Remember: Do not obtain PGP from a site in the USA or Canada,
   unless you are physically within the borders of the USA or Canada. __
   
   Disobeying the above instruction is probably very very naughty. If you
   get your wrists slapped, it isn't my fault.
   
   If you're reading this list on the World Wide Web, you can set your
   WWW client to load to disk and click on one of the locations.
   
   Please try to download during hours which are off peak for the machine
   in question.
     _________________________________________________________________
   
  UNIX PGP 2.3
  
   Compiles best with GCC 2.4.x or higher. A straight port from DOS, so
   hardened UNIX users find it a bit chatty.
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/pgp23A.tar.Z
     * _UK:_ ftp://black.ox.ac.uk/src/security/pgp23A.tar.Z
     * _NL:_ ftp://svin02.info.win.tue.nl/pub/misc/pgp23A.tar.gz
     * _SE:_ ftp://ftp.sunet.se/pub/security/tools/crypt/pgp23A.tar.gz
     * _SE:_ ftp://isy.liu.se/pub/misc/pgp/2.3A/pgp23A.tar.Z
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/pgp23A.tar.Z
     * _FI:_ ftp://ftp.funet.fi/pub/crypt/pgp23A.tar.Z
     * _FI:_ ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp23A.tar.Z
     * _US:_ ftp://soda.berkeley.edu/pub/cypherpunks/pgp/pgp23A.tar.gz
       
   
     _________________________________________________________________
   
  MS-DOS PGP 2.3
  
    Program
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/pgp23A.zip
     * _UK:_ ftp://black.ox.ac.uk/src/security/pgp23A.zip
     * _SE:_ ftp://isy.liu.se/pub/misc/pgp/2.3A/pgp23A.zip
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/pgp23A.zip
     * _FI:_ ftp://ftp.funet.fi/pub/crypt/pgp23A.zip
     * _IT:_ ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp23A.zip
     * _US:_ ftp://soda.berkeley.edu/pub/cypherpunks/pgp/pgp23A.zip
       
    Source code
    
   Designed to compile with Turbo C; compiles fine with Microsoft Visual
   C++ also.
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/pgp23srcA.zip
     * _UK:_ ftp://black.ox.ac.uk/src/security/pgp23srcA.zip
     * _SE:_ ftp://isy.liu.se/pub/misc/pgp/2.3A/pgp23srcA.zip
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/pgp23srcA.zip
     * _FI:_ ftp://ftp.funet.fi/pub/crypt/pgp23srcA.zip
     * _FI:_
       ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp23srcA.zip
     * _US:_ ftp://soda.berkeley.edu/pub/cypherpunks/pgp/pgp23srcA.zip
       
   
     _________________________________________________________________
   
  MACPGP 2.3
  
   A slightly souped-up port of PGP to the Mac. Has help menus and other
   goodies, but is still not a real Mac application. However, it works.
   
   Note that the version 2.3 release of MacPGP contains the major bug-fix
   which was later added to UNIX/DOS PGP 2.3. There was therefore no need
   for a MacPGP 2.3A release; version 2.3 already had the bug fix by the
   time it was released. There is no MacPGP 2.3A.
   
    Program
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/MacPGP/MacPGP2.3.cpt.hqx
     * _UK:_ ftp://black.ox.ac.uk/src/security/macpgp2.3.cpt.hqx
     * _SE:_ ftp://isy.liu.se/pub/misc/pgp/2.3A/macpgp2.3.cpt.hqx
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/macpgp2.3.cpt.hqx
     * _FI:_
       ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/macpgp2.3.cpt.hqx
     * _US:_
       ftp://soda.berkeley.edu/pub/cypherpunks/pgp/macpgp2.3.cpt.hqx.gz
       
    Source code
    
   Requires Think C.
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/MacPGP/MacPGP2.2src.sea.hqx --
       version 2.2 only
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/macpgp2.3src.sea.hqx.pgp
     * _FI:_
       ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/macpgp2.3src.sea.h
       qx.pgp
       
    Documentation
    
   PGP is rather counter-intuitive to a Mac user. Luckily, there's a
   guide to using MacPGP in
   ftp://ftp.netcom.com/pub/qwerty/Here.is.How.to.MacPGP.
     _________________________________________________________________
   
  OS/2 PGP
  
   You can, of course, run the DOS version of PGP under OS/2.
   
    Program
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/pgp22os2.zip -- version 2.2
       only, native binaries
     * _DE:_
       ftp://ftp.informatik.tu-muenchen.de/pub/comp/os/os2/crypt/pgp23os2
       A.zip
       
    Source code
     * _DE:_
       ftp://ftp.informatik.tu-muenchen.de/pub/comp/os/os2/crypt/pgp23src
       A.zip
       
   
     _________________________________________________________________
   
  AMIGA PGP
     * _UK:_ ftp://ftp.demon.co.uk/pub/amiga/pgp/pgp21ami.lha -- version
       2.1 only
     * _DE:_
       ftp://faui43.informatik.uni-erlangen.de/mounts/rzsuna/pub/aminet/u
       til/crypt/pgp21ami.lha -- version 2.1 only
     * _DE:_ ftp://ftp.uni-kl.de/pub/aminet/util/crypt/PGPAmi23a_2.lha
     * _US:_ ftp://ftp.wustl.edu/pub/aminet/util/crypt/PGPAmi23a_2.lha
       
    Source
     * _DE:_ ftp://ftp.uni-kl.de/pub/aminet/util/crypt/PGPAmi23a2_src.lha
     * _US:_ ftp://ftp.wustl.edu/pub/aminet/util/crypt/PGPAmi23a2_src.lha
       
   
     _________________________________________________________________
   
  ARCHIMEDES PGP
     * _UK:_ ftp://ftp.demon.co.uk/pub/archimedes/ArcPGP23a
       
   
     _________________________________________________________________
   
  DOCUMENTATION ONLY
  
   Want to know more about PGP, but too scared to download the actual
   program in case the Feds bust down your door? Fetch this.
     * _UK:_ ftp://ftp.demon.co.uk/pub/pgp/pgp23docA.zip
     * _US:_ ftp://soda.berkeley.edu/pub/cypherpunks/pgp/pgp23docA.zip
       
   
     _________________________________________________________________
   
  FOREIGN LANGUAGE MODULES
  
   These are suitable for most PGP versions.
   
    Italian
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/pgp-lang.italian.tar.gz
     * _FI:_
       ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp-lang.italian.t
       ar.gz
       
    Spanish
     * _IT:_ ftp://ghost.dsi.unimi.it/pub/crypt/pgp-lang.spanish.tar.gz
     * _FI:_
       ftp://ftp.funet.fi/pub/crypt/ghost.dsi.unimi.it/pgp-lang.spanish.t
       ar.gz
       
    German
     * _UK:_ ftp://black.ox.ac.uk/src/security/pgp_german.txt
       
    Swedish
     * _UK:_ ftp://black.ox.ac.uk/src/security/pgp_swedish.txt
       
   
     _________________________________________________________________
   
  OTHER SITES
  
   Some cryptographic software is available from
   ftp://van-bc.wimsey.bc.ca/pub/crypto/software/. They're worried about
   ITAR regulations, so you'll have to read the README file and proceed
   from there.
   
   Other sites which may carry PGP:
     * _DE:_ ftp.tu-clausthal.de
     * _DE:_ tupac-amaru.informatik.rwth-aachen.de
     * _US:_ csn.org
     * _US:_ qiclab.scn.rain.com
     * _US:_ ftp.etsu.edu
     * _US:_ princeton.edu
     * _US:_ pc.usl.edu
     * _SE:_ leif.thep.lu.se
     * _ES:_ goya.dit.upm.es
    mathew
    <mathew@mantis.co.uk>

                      PRETTY GOOD PRIVACY - LEGAL ISSUES
                                       
   People often claim that PGP is illegal. There are three separate
   reasons why they might claim so.
   
Issue 1: Export Law

   It is probable (not certain, but probable) that PGP falls under the
   ITAR restrictions, which control the export of munitions and
   cryptographic technology from the US and Canada.
   
   If this is the case, it is illegal to export PGP from the USA or
   Canada to any other country.
   
   Of course, if you don't get PGP from the US or Canada, the issue is
   moot.
   
Issue 2: Crypto Legality

   In some countries, the use of cryptography is restricted by law. For
   example, in the UK it is illegal to transmit encrypted data by radio
   communication. This is generally the case in other countries, where
   Amateur Radio frequencies are concerned.
   
   In some countries, it is outright illegal to encrypt data at all. In
   other countries, they're working on it.
   
   Some providers of networking services restrict what sort of traffic is
   allowed on their networks. Make sure your service provider allows the
   passage of encrypted data.
   
Issue 3: Patent Stupidity

   The RSA public key cryptosystem was developed at MIT by Rivest, Shamir
   and Adleman. Shortly before the details were due to be published, some
   gentlemen from a US government department reportedly "asked" them to
   cancel publication. However, copies of the article had already reached
   the outside world; A.K. Dewdney of Scientific American had a photocopy
   of the document explaining the algorithm. People began hastily
   photocopying and distributing the document.
   
   The RSA algorithm had been developed with Federal funding from grants
   from the National Science Foundation and the Navy. It was patented by
   MIT (U.S. patent #4,405,829, issued 20th September 1983).
   
   The patent was then handed over to a commercial company in California
   called Public Key Partners (PKP). PKP hold the exclusive commercial
   license to sell and sub-license the RSA public key cryptosystem. They
   also hold other patents which cover other public key cryptography
   algorithms. This gives them absolute control over who may legally use
   public key cryptography in the US and Canada.
   
   Note that the RSA patents are _not valid_ outside the USA and Canada,
   because the patent was not applied for until after publication.
   
   Also note that none of PKP's patents have been tested in court. They
   might be ruled invalid in a real court case. PKP have been reluctant
   to take people to court, although they did threaten Phil Zimmerman,
   the author of PGP, with legal action. So far, there has been a lot of
   sabre-rattling, but no real action.
   
   PKP have also been seemingly reluctant to produce any products or
   license their patents. Eventually, after PGP 1.0 was released, PKP
   released their own RSA code. Called RSAREF, it licensed for test
   applications only, not for real use. They have repeatedly refused to
   license RSA for use in PGP.
   
   The IDEA algorithm used in PGP is also patented, by Ascom-Tech AG of
   Zurich. However, Ascom-Tech allow free use of the IDEA algorithm in
   freeware and shareware products.
   
   A US company, ViaCrypt, has side-stepped this legal issue. They had
   already licensed the RSA algorithm from PKP, and it was clear that the
   license applied to PGP, given a suitable implementation of RSA.
   ViaCrypt have therefore been able to start selling an entirely legal,
   100% legitimate version of PGP, with all patents properly licensed.
   
  VIACRYPT PGP
  
   ViaCrypt PGP is a commercial public-key encryption package which is
   based on, and virtually identical to, the freeware program known as
   PGP, or "Pretty Good Privacy".
   
   (The source code is in fact identical to that of the freeware version
   2.3a of PGP, with the exception of the RSA encryption module, which is
   one ViaCrypt developed in-house after acquiring a license for the
   algorithm from PKP. In addition, ViaCrypt incorporates a few bug
   fixes. The private-key crypto algorithm is IDEA, as in freeware PGP,
   for which ViaCrypt has obtained a license from Ascom-Tech AG of
   Zurich.)
   
   ViaCrypt bought its RSA license from PKP before either PKP or ViaCrypt
   knew that ViaCrypt would someday use it to sell PGP. ViaCrypt later
   acquired the rights to sell PGP from Phil Zimmermann. ViaCrypt's PKP
   license clearly allows them to sell PGP. ViaCrypt PGP Output is
   byte-for-byte identical with that of freeware PGP 2.3a, except that
   the "Version" header before the message body reads "Version: 2.4"
   instead of "Version: 2.3a". Keys, signature certificates, and
   ciphertexts produced by one program will be identical to, and
   transparently handled by, the other.
   
   ViaCrypt PGP is available in the US and Canada only, pending any
   future relaxation of the ITAR export control laws. Phil Zimmermann
   says that no compromises in the cryptographic strength of PGP were
   made for ViaCrypt's version of PGP.
   
   The ViaCrypt PGP package includes program disks (executables only, no
   source code), a user manual, and an individual user license. The
   current release is available for MS-DOS and UNIX. There is a special
   version available which interfaces to CompuServe's CIM. Prices start
   at $100 for the DOS version.
   
   To purchase ViaCrypt PGP or to find out more about it, you can
   contact:
    ViaCrypt,
    2104 W. Peoria Avenue,
    Phoenix,
    AZ 85029.
    USA.
    Tel 602-944-0773.
    Fax 602-943-2601.
    Email <70304.41@compuserve.com>
    Email <wk01965@worldlink.com>
    
    Credit card orders 800-536-2664 (0800-1700 MST, Mon-Fri)
    
   _ Thanks to Hugh Miller <hmiller@lucpul.it.luc.edu> and Jack Edward
   Brown, Jr. <as156@yfn.ysu.edu> for the information. _
   
                          SO WHAT DOES THIS ALL MEAN?
                                       
   We can summarize the legal status of PGP as follows:
     * If you live in the USA or Canada, you should buy ViaCrypt PGP.
       Otherwise you will be infringeing the patents held by PKP, which
       you merely paid for.
     * If you live outside the USA or Canada, you can use PGP without
       having to worry about patent infringement.
     * It may be illegal to send encrypted messages in some countries or
       on some networks.
     * You should not export PGP from the USA or Canada to any other
       country.
    mathew
    <mathew@mantis.co.uk>


------------------------------

From: sonny@netcom.com (James Hicks)
Date: 30 Apr 1994 03:03:51 GMT
Subject: Re: Phillip Zimmermann's Encryption program anybody??
Organization: NETCOM On-line Communication Services (408 241-9760 guest)

    Brian Cieslak (bcieslak@mkelan5.remnet.ab.com) wrote: I recently
    read an article in the Wall street journal about an encryption
    program that is used by emailers on the internet called PGP "Pretty
    Good Privacy". I figured this would be a good place to start
    looking for information about computer privacy...Can anyone tell me
    of an FTP site where I can get a copy? (for personal use).

This info was posted in alt.security.pgp.
 ---------------------------------------------------------------------
>From netcom.com!mpj Fri Apr 29 19:53:53 1994
Xref: netcom.com alt.security.pgp:11804 alt.privacy:14598 alt.security:14995 alt.2600:7927
Newsgroups: alt.security.pgp,alt.privacy,alt.security,alt.2600
Path: netcom.com!mpj
From: mpj@netcom.com (Michael Paul Johnson)
Subject: Where to get Pretty Good Privacy
Message-ID: <mpjCoxF34.MLA@netcom.com>
Summary: Where you can get Philip Zimmermann's Pretty Good Privacy Program.
Keywords: PGP privacy security encryption RSA IDEA ftp BBS
Organization: NETCOM On-line Communication Services (408 241-9760 guest)
Date: Wed, 27 Apr 1994 16:28:15 GMT
Lines: 371

 -----BEGIN PGP SIGNED MESSAGE-----

WHERE TO GET THE PRETTY GOOD PRIVACY PROGRAM (PGP)
(Last modified: 27 April 1994 by Mike Johnson)

The latest commercial version is 2.4
The latest freeware Mac version is 2.3
The latest freeware version for all other platforms is 2.3a

If you are a commercial user of PGP in the USA or Canada, contact Viacrypt in
Phoenix, Arizona, USA.  The commecial version of PGP is fully licensed to use
the patented RSA and IDEA encryption algorithms in commercial applications,
and may be used in corporate environments in the USA and Canada.  It is fully
compatible with, functionally the same as, and just as strong as the freeware
version of PGP. Due to limitations on ViaCrypt's RSA distribution license,
ViaCrypt only distributes executable code and documentation for it, but they
are working on making PGP available for a variety of platforms.  Call or
write to them for the latest information.  The latest information I have from
them on compiled versions are:

    MS-DOS 2.4
    Unix 2.4 (several different platforms)
    WinCIM CSNAV 2.4
    Mac version expected late this summer.

    ViaCrypt
    David A. Barnhart, Product Manager
    2104 West Peoria Avenue
    Phoenix, Arizona 85029
    Tel: (602) 944-0773
    Fax: (602) 943-2601
    E-Mail: 70304.41@compuserve.com
    E-Mail: wk01965@worldlink.com
    Credit card orders only. (800)536-2664 (8-5 MST M-F)

The freeware version of PGP is intended for noncommercial, experimental, and
scholarly use.  It is available on thousands of BBSes, commercial information
services, and Internet anonymous-ftp archive sites on the planet called Earth.
This list cannot be comprehensive, but it should give you plenty of pointers
to places to find PGP.  Although the latest freeware version of PGP was
released from outside the USA (New Zealand), it is not supposed to be
exported from the USA under a strange law called the International Traffic in
Arms Regulations (ITAR).  Because of this, please get PGP from a site outside
the USA if you are outside of the USA.

This data is subject to change without notice.  If you find that PGP has been
removed from any of these sites, please let me know so that I can update this
list.  Likewise, if you find PGP on a good site elsewhere (especially on any
BBS that allows first time callers to access PGP for free), please let me
know so that I can update this list.  Thanks to Gary Edstrom and Hugh Miller
for providing part of this data.

FTP sites:

    soda.berkeley.edu
      /pub/cypherpunks/pgp (DOS, MAC)
      Verified: 21-Dec-93
    ftp.demon.co.uk
      /pub/amiga/pgp
      /pub/archimedes
      /pub/pgp
      /pub/mac/MacPGP
    ftp.informatik.tu-muenchen.de
    ftp.funet.fi
    ghost.dsi.unimi.it
      /pub/crypt
      Verified: 21-Dec-93
    ftp.tu-clausthal.de (139.174.2.10)
    wuarchive.wustl.edu
      /pub/aminet/util/crypt
    src.doc.ic.ac.uk (Amiga)
      /aminet
      /amiga-boing
    ftp.informatik.tu-muenchen.de
      /pub/comp/os/os2/crypt/pgp23os2A.zip (OS/2)
    black.ox.ac.uk  (129.67.1.165)
        /src/security/pgp23A.zip     (MS-DOS executables & docs)
        /src/security/pgp23srcA.zip  (Unix, MS-DOS, VMS, Amiga sources,
                                      docs, info on building PGP into
                                      mailers, editors, etc.)
        /src/security/pgp23A.tar.Z   (Same as PGP22SRC.ZIP, in Unix tar
                                      format)
        /src/security/macpgp2.3.cpt.hqx     (Macintosh version)

    iswuarchive.wustl.edu
      pub/aminet/util/crypt (Amiga)

    csn.org
      /mpj/README.MPJ contains variable directory name -- read this first.
      /mpj/help explains how to get to hidden directory containing PGP
      /mpj/I_will_not_export/crypto_???????/pgp/  contains current PGP
      /mpj/I_will_not_export/crypto_???????/pgptools/ contains related tools
      /mpj/public/pgp/ contains PGP shells, faq documentation, etc.

    ftp.netcom.com
      /pub/mpj (see README.MPJ -- similar layout to csn.org//mpj)
      /pub/gbe/pgpfaq.asc -- frequently asked questions answered.

    nic.funet.fi  (128.214.6.100)
        /pub/crypt/pgp23A.zip
        /pub/crypt/pgp23srcA.zip
        /pub/crypt/pgp23A.tar.Z

    van-bc.wimsey.bc.ca  (192.48.234.1)
        /m/ftp2/crypto/RSA/PGP/2.3a/pgp23A.zip
        /m/ftp2/crypto/RSA/PGP/2.3a/pgp23srcA.zip

    ftp.uni-kl.de (131.246.9.95)
    qiclab.scn.rain.com (147.28.0.97)
    pc.usl.edu (130.70.40.3)
    leif.thep.lu.se (130.235.92.55)
    goya.dit.upm.es (138.4.2.2)
    tupac-amaru.informatik.rwth-aachen.de (137.226.112.31)
    ftp.etsu.edu (192.43.199.20)
    princeton.edu (128.112.228.1)
    pencil.cs.missouri.edu (128.206.100.207)

StealthPGP:

    The Amiga version can be FTP'ed from the Aminet in 
    /pub/aminet/util/crypt/ as StealthPGP1_0.lha.

Also, try an archie search for PGP using the command:

    archie -s pgp23  (DOS Versions)
    archie -s pgp2.3 (MAC Versions)

ftpmail:

For those individuals who do not have access to FTP, but do have access
to e-mail, you can get FTP files mailed to you.  For information on
this service, send a message saying "Help" to ftpmail@decwrl.dec.com.
You will be sent an instruction sheet on how to use the ftpmail
service.

Another e-mail service is from nic.funet.fi. Send the following mail message
to mailserv@nic.funet.fi:

    ENCODER uuencode
    SEND pub/crypt/pgp23srcA.zip
    SEND pub/crypt/pgp23A.zip

This will deposit the two zipfiles, as 15 batched messages, in your mailbox
with about 24 hours.  Save and uudecode.

BBS sites:

    Colorado Catacombs BBS (Longmont, CO)
    Mike Johnson, sysop
    Mac and DOS versions of PGP, PGP shells, and some other crypto stuff.
    Also the home of some good Bible search files and some shareware written
    by Mike Johnson, including DLOCK, CRYPTA, CRYPTE, CRYPTMPJ, MCP, MDIR,
    DELETE, PROVERB, SPLIT, ONEPAD, etc.
    v.32bis/v.42bis, speeds up to 14,400 baud
    8 data bits, 1 stop, no parity
    Free access, but only one line.  If busy or no answer, try again later.
    Downloads of crypto software are limited to the USA and Canada, but you 
    can download on the first call if you are qualified and you answer the
    questions truthfully.  Log in with your own name, or if someone else
    already used that, try a variation on your name or pseudonym.
    (303) 938-9654 (Boulder, Colorado number forwarded to Longmont number)
    (303) 678-9939 (Longmont, Colorado number)
    (verified 4-27-94)

    Hieroglyphics Voodoo Machine (Colorado)
    DOS version only
    (303) 443-2457
    Verified: 26-Dec-93

    Exec-Net (New York)
    Host BBS for the ILink net.
    (914) 667-4567

    The Ferret BBS (North Little Rock, Arkansas)
    (501) 791-0124   also   (501) 791-0125
    Carrying RIME, Throbnet, Smartnet, and Usenet
    Special PGP users account:
    login name: PGP USER
    password:   PGP
    This information from: Jim Wenzel <jim.wenzel@grapevine.lrk.ar.us>

PGP 2.3A has been posted to the FidoNet Software Distribution Network and
should on most if not all Canadian and U.S. nodes carrying SDN software.  It
has also been posted on almost all of the major private North American BBS
systems, thence to countless smaller boards.  Consult a list of your local
BBSes; most with a sizeable file inventory should carry the program.

If you find a version of the PGP package on a BBS or FTP site and it does not
include the PGP User's Guide, something is wrong.  The manual should always
be included in the package.  If it isn't, the package is suspect and should
not be used or distributed.  The site you found it on should remove it so
that it does no further harm to others.

Here is the result of an archie search for pgp:

Host gatekeeper.dec.com

    Location: /.0/BSD/NetBSD/NetBSD-current/src/usr.bin/file/magdir
           FILE -r--r--r--        478  Dec 16 23:10  pgp

Host hpcsos.col.hp.com

    Location: /mirrors/.hpib1/NetBSD/NetBSD-current/src/usr.bin/file/magdir
           FILE -r--r--r--        478  Dec 17 00:10  pgp

Host netcom.com

    Location: /pub/halliday
           FILE -rwx------     212992  Nov 27 20:21  pgp
    Location: /pub/kevitech
           FILE -rwxr-xr-x      89643  Dec  3 05:46  pgp
    Location: /pub/torin
      DIRECTORY drwx--x--x       4096  Jan 11 18:59  pgp

Host quepasa.cs.tu-berlin.de

    Location: /.4/pub/bsd/386bsd-0.1/unofficial/doc/software
           FILE -rw-rw-r--      12121  Feb  2 1993  pgp

Host files1zrz.zrz.tu-berlin.de

    Location: /pub/mail
      DIRECTORY drwxr-xr-x       1024  Jan 11 1993  pgp

Host sun.rz.tu-clausthal.de

    Location: /pub/atari/misc
      DIRECTORY drwxr-xr-x        512  Dec 30 18:56  pgp

Host ftp.uni-kl.de

    Location: /pub1/unix/security
      DIRECTORY drwxrwxr-x        512  Feb 24 1993  pgp

Host minnie.zdv.uni-mainz.de

    Location: /pub/atari/misc
      DIRECTORY drwxr-xr-x        512  Dec 30 17:56  pgp

Host info1.rus.uni-stuttgart.de

    Location: /afs/.rus.uni-stuttgart.de/sw/rs_aix32/pgp-2.3/bin
           FILE -rwxr-xr-x     211318  Aug 23 1993  pgp

Host info2.rus.uni-stuttgart.de

    Location: /afs/rus.uni-stuttgart.de/sw/rs_aix32/pgp-2.3/bin
           FILE -rwxr-xr-x     211318  Aug 23 1993  pgp

Host jhunix.hcf.jhu.edu

    Location: /pub/public_domain_software/NetBSD/usr/src/usr.bin/file/magdir
           FILE -rw-r--r--        478  Jun  9 1993  pgp

Host bloom-picayune.mit.edu

    Location: /pub/usenet-by-hierarchy/alt/security
      DIRECTORY drwxrwxr-x        512  Mar 14 00:17  pgp

Host mintaka.lcs.mit.edu

    Location: /pub
      DIRECTORY drwxr-xr-x        512  Jun 18 1993  pgp

Host cecelia.media.mit.edu

    Location: /pub
           FILE -rw-r--r--     321424  Nov 30 20:27  pgp

Host josquin.media.mit.edu

    Location: /pub
           FILE -rw-r--r--     321424  Nov 30 20:27  pgp

Host archive.egr.msu.edu

    Location: /pub
      DIRECTORY drwxr-xr-x        512  Mar  9 18:58  pgp

Host xanth.cs.odu.edu

    Location: /pub
      DIRECTORY drwxrwxr-x        512  Oct 18 00:00  pgp

Host arthur.cs.purdue.edu

    Location: /pub/pcert/tools/unix
      DIRECTORY drwxr-xr-x        512  Jul 31 1993  pgp

Host f.ms.uky.edu

    Location: /pub2/NetBSD/NetBSD-current/src/usr.bin/file/magdir
           FILE -rw-r--r--        478  Dec 17 02:10  pgp

Host dime.cs.umass.edu

    Location: /pub/rcf/exp/build/pgp-2.3
           FILE -rwxr-xr-x     241916  Mar 15 15:42  pgp
    Location: /pub/rcf/exp/build/pgp-2.3/src
           FILE -rwxr-xr-x     241916  Mar 15 15:41  pgp

Host granuaile.ieunet.ie

    Location: /ftpmail-cache/ie/tcd/maths/ftp/src/misc
      DIRECTORY drwxr-xr-x        512  Dec  2 11:43  pgp

Host walton.maths.tcd.ie

    Location: /src/misc
      DIRECTORY drwxr-xr-x        512  May 30 1993  pgp
    Location: /src/misc/pgp-2.0/src
           FILE -rwxr-xr-x     316640  Oct 18 1992  pgp

Host cs.huji.ac.il

    Location: /pub/security
      DIRECTORY drwxrwxr-x        512  Oct 26 19:26  pgp

Host ftp.germany.eu.net

    Location: /pub/comp/msdos/local/utils
      DIRECTORY drwxr-xr-x        512  Jul 12 1993  pgp

Host csn.org

    Location: /mpj/public
      DIRECTORY drwxr-xr-x        512  Mar 14 20:30  pgp

Host isy.liu.se

    Location: /pub/misc
      DIRECTORY drwxr-xr-x        512  Sep 19 00:00  pgp

- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.4
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=BLg5
- -----END PGP PUBLIC KEY BLOCK-----
                  ___________________________________________________________
 |\  /| |        |                                                           |
 | \/ |o|        | Michael Paul Johnson  Colorado Catacombs BBS 303-938-9654 |
 |    | | /  _   | mpj@csn.org  ftp:csn.org//mpj/README.MPJ for crypto stuff |
 |    |||/  /_\  | aka mpj@netcom.com mpjohnson@ieee.org mikej@exabyte.com   |
 |    |||\  (    | m.p.johnso@nyx.cs.du.edu CIS 71331,2332 PGP key by finger |
 |    ||| \ \_/  |___________________________________________________________|

 -----BEGIN PGP SIGNATURE-----
Version: 2.4

iQCVAgUBLb6LjT9nBjyFM+vFAQG+kQP/buGqCNKYiwhFc5XWUOWbDnTZN5dno4ZT
ZM1/m3yzYXiY9bi0yMzJlOZvxx4jgMEoB5HimsJSvT++RrQ/8m2N1zkLlsXZuW+G
HKQb8oE+XrBK1dJOpvRBq5LBabucKCbycNuyf09LKmKCEnaKDKdApVQWSKNiey4U
+AiOn05nWAU=
=gOJv
 -----END PGP SIGNATURE-----

end of the reposted stuff------------------------------------------

 +---------------------------------------------------------------------+
 |    james hicks     | Give me your tired, your poor,                 |
 | <sonny@netcom.com> | your huddled masses yearning to breathe free,  |
 | ...can you hear    | Send these, the homeless, tempest-tossed to me.|
 |     the music?...  | I lift my lamp beside the golden door!         |
 +---------------------------------------------------------------------+

 


------------------------------


End of Computer Privacy Digest V4 #060
******************************
.