PGP Encryption with SPEEDE

Quick Guide to Using PGP with the UT SPEEDE Server

Register with the Server.

See http://www.utexas.edu/student/giac/speede/ediserv.html, especially the FAQ, for registration instructions and other information about the Server.

Obtain and install a copy of the PGP software.

A PGP version that is compatible with 6.5.8 is what will be needed.

Where to get PGP?

You can download freeware from the International PGP Home Page.

You can buy it from PGP Corporation for around $100. You can download a free 30-day trial copy.

Other options incluce FileCrypt, a command-line PGP clone that costs around $100, and Gnu Privacy Guard (GPG), a command-line PGP clone that is free for commercial or noncommercial use.

Generate your public and private key pair according to instructions.

For command-line PGP, generally, the command is pgp -kg

Choose a large key size. Larger keys are more secure.

Choose a good pass phrase, using the same criteria you would use for choosing any other password.

Extract your public key and send it to the Server.

Extract your key with ASCII armor or Asciified, as it is referred to in some versions..

For command-line PGP, the command is pgp -kxa. PGP will prompt you for your userID and a file to save your key in. Or you can enter pgp -kxa userID filename. The '-a' option means ASCII output.

Please check, before sending it, that the file you just created contains an ASCII-armored key.

Open the file in a text editor like BBEdit, SimpleText, or HomeSite. If the editor can't open the file, you don't have an ASCII file.

If the file doesn't begin with

'-----BEGIN PGP PUBLIC KEY BLOCK-----' and end with

'-----END PGP PUBLIC KEY BLOCK-----' you don't have an ASCII-armored file.

Send the keyfile you've created to the Server via email.

You can send it as an attachment or as part of the body of the message.

Send it to regist@ediserver.reg.utexas.edu.

The file you send must be ASCII-armored.

Add the Server's public key to your public keyring.

We will send you the public key of the Server as an attachment to an email message. Save the attachment as a file.

For command-line PGP, the command is pgp -ka keyfile, where keyfile is the name of the file that contains the Server's public key.

When you have a file ready to send through the Server, encrypt it with the Server's public key.

For command-line PGP, the command is pgp -seat filename Server's-userID. The options mean:

-s = sign

-e = encrypt

-a = ASCIIfy the output file

-t = use recipient's textline conventions

Whatever PGP version you're using, use these same options. They may be worded somewhat differently in different versions.

If you've done everything right, the encrypted file should begin with

'-----BEGIN PGP MESSAGE-----' and end with

'-----END PGP MESSAGE-----'.

The userID on the Server's public key is testserv@reg034.reg.utexas.edu.

Use of the signature option is highly recommended.

The signature allows the Server to verify that the file has not been altered.

The signature also allows the Server to authenticate that the file was sent by you and not someone else.

Send the encrypted file to the Server in the usual way.

Encrypted files can be sent either ftp or email.

Because the Server uses some of the header information, the file must be ASCII-armored.

When you receive an encrypted file from the Server, decrypt it before processing.

For command-line PGP, the command is pgp filename. You can use the option '-o outputfilename' to specify a filename for saving the decrypted file.

Process the file as usual.