1. Network Security: E-mail Security

2. Objectives To learn to use e-mail security tools –PGP To learn the availability of email security libraries –S/MIME

3. Packages & Libraries in this Lab Packages –GPG4win: for Windows

4. Experiment Scenario Signing/verification of files using certificates –Create a new certificate –Encrypt/sign emails –Encrypt/sign the file “original.txt” into another file “enc.txt” (using sender’s certificate) –Then, we decrypt/verify it and get another file “dec.txt” (using sender’s certificate), and check if the decrypted file is the same as the original file Sending/receiving e-mails with certificates –Set up email account –Read mails –Send mails

5. GPG4win Homepage: http://www.gpg4win.org/http://www.gpg4win.org/ Latest version: 2.1.0 OpenPGP: an open standard for e-mail security (RFC 4880) –S/MIME also included Installation steps: –Simply follow the instructions on screen

6. Other Tools Included in GPG4win Kleopatra: GnuPG certificate manager –New certificate –Encrypting/Signing a file –Decrypting/Verifying a file Claws Mail: a mail reader –Setting up your mail account –Reading mails –Sending mails

7. Microsoft Outlook Support in GPG4win PGP for Outlook –GpgOL 1.0 can support OpenPGP and S/MIME

8. Configuring Outlook for S/MIME Configure Your Personal Email Certificates Send a Signed Message Read a Signed Message Check the Credentials of a Signed Message Send an Encrypted Message Read an Encrypted Message Get Certificates for Other Users

9. Summary Email security –PGP –S/MIME