Chapter 5a - Pretty Good Privacy (PGP) Email Network Security Spring 2017 Chapter 5a - Pretty Good Privacy (PGP) Email (aka GPG or GnuPG - Gnu Privacy Guard) http://www.faisalakhan.info/Classes/ faisal.khan@buitms.edu.pk Office: SS Block, BUITEMS
Proof of delivery - was received (and read) by addressee Security Services for Email Privacy - only read by intended recipient (confidentiality, access, authorization) Authentication - confidence in ID of sender Non-repudiation - proof that sender sent it (attribution) Integrity - assurance of no data alteration Less Common: Proof of submission - was sent to email server Proof of delivery - was received (and read) by addressee 2
Message Integrity Non-repudiation Proof of Delivery The source authentication methods that include a hash of the message provide MIC Non-repudiation Private-key signing provides non-repudiation. Secret-key method requires a "Notary" to "Sign" a time-stamp + hash of the message Proof of Delivery Acknowledge 3
Sign (optional) PGP Email: before Encryption (also optional) 4 From "PGP Freeware for MacOS, User's Guide" Version 6.5, Network Associates, Inc., www.pgp.com 4
How PGP Encryption Works with signature attached if there is one How PGP Encryption Works From "PGP Freeware for MacOS, User's Guide" Version 6.5, Network Associates, Inc., www.pgp.com 5