Pretty Good Privacy: PGPPretty Good Privacy: PGP

An Encryption System byAn Encryption System by

Philip R. ZimmermannPhilip R. Zimmermann

-Mark, Dave, Bobby--Mark, Dave, Bobby-

ChildhoodChildhood

• Born February 12Born February 12thth, 1954 in Camden, , 1954 in Camden, New JerseyNew Jersey

• Independent Independent

• Dreamt of becoming an astronomerDreamt of becoming an astronomer

• Became interested in codes while Became interested in codes while watching M.T. Graves and the watching M.T. Graves and the DungeonDungeon

EducationEducation

• Attended Florida Atlantic University in Attended Florida Atlantic University in Boca RatonBoca Raton

• Originally wanted to major in PhysicsOriginally wanted to major in Physics

• Ended up majoring in Computer Ended up majoring in Computer ScienceScience

• Created his own code as his final Created his own code as his final projectproject

• Graduated University in 1978Graduated University in 1978

Early AdulthoodEarly Adulthood

• Got Married in 1977 to Kacie Got Married in 1977 to Kacie Cavenaugh (switchboard operator)Cavenaugh (switchboard operator)

• Worked for Harris Computer SystemsWorked for Harris Computer Systems

• Moved to Boulder, Colorado and Moved to Boulder, Colorado and became a freelance computer became a freelance computer consultantconsultant

• Founded Metamorphic SystemsFounded Metamorphic Systems

PGPPGP

Zimmermann released his first Zimmermann released his first version of PGP in 1991version of PGP in 1991

Designed to give the common user a Designed to give the common user a means of totally secure means of totally secure communicationcommunication

Originally distributed as freeware on Originally distributed as freeware on the internetthe internet

What is PGP?What is PGP?

Hybrid of symmetric and asymmetric Hybrid of symmetric and asymmetric encryption systemsencryption systems• Message encrypted with symmetric Message encrypted with symmetric

cipher (IDEA)cipher (IDEA)• Key encrypted with asymmetric cipher Key encrypted with asymmetric cipher

(RSA)(RSA) Message and key were then bundled Message and key were then bundled

and sentand sent Resulted in a secure and resource Resulted in a secure and resource

efficient cipherefficient cipher

The Release of PGPThe Release of PGP

PGP was publicly released onto the PGP was publicly released onto the internetinternet• This meant that anyone internationally This meant that anyone internationally

could see itcould see it

The CaseThe Case

U.S. Customs officials looked into U.S. Customs officials looked into ViaCrypt and Austin Code WorksViaCrypt and Austin Code Works

The National Security Agency argued The National Security Agency argued that it would difficult to keep tabs on that it would difficult to keep tabs on hostile governments and foreign hostile governments and foreign terroriststerrorists

Since WWII the US has regarded Since WWII the US has regarded cryptographic software as a weapon cryptographic software as a weapon of warof war

The Case ContinuedThe Case Continued

Because PGP had such a high strength, Because PGP had such a high strength, it was deemed impermissible to exportit was deemed impermissible to export

The PGP fell under the Arms Export The PGP fell under the Arms Export Control ActControl Act

The main problem with the PGP was that The main problem with the PGP was that it was simply too hard to decipher.it was simply too hard to decipher.

The PGP compromised National SecurityThe PGP compromised National Security

The DefenseThe Defense

Zimmermann along with ViaCrypt felt as Zimmermann along with ViaCrypt felt as though their rights were being infringedthough their rights were being infringed Right to PrivacyRight to Privacy Public access to secure cryptographyPublic access to secure cryptography Right to publish digital writingsRight to publish digital writings Right to equal protection under the lawRight to equal protection under the law

Zimmermann was unable to pay for Zimmermann was unable to pay for legal defenses to fight the governmentlegal defenses to fight the government

The Electronic Frontier FoundationThe Electronic Frontier Foundation

The EFF responded to Zimmerman’s The EFF responded to Zimmerman’s case through three separate actionscase through three separate actions Raised and contributed a great deal of Raised and contributed a great deal of

funds to support Zimmermann legallyfunds to support Zimmermann legally Researched the facts of PGP and other Researched the facts of PGP and other

related cases to prepare themselves for related cases to prepare themselves for future casesfuture cases

Launched a First Amendment campaign in Launched a First Amendment campaign in order to raise money and educate policy order to raise money and educate policy makers along with the general publicmakers along with the general public

Case ConclusionCase Conclusion

Three years after the case began, all Three years after the case began, all the charges were dropped in early the charges were dropped in early 19961996

Zimmerman was then free from any Zimmerman was then free from any more governmental scrutinymore governmental scrutiny

Conclusion

• After the case was dropped, Zimmermann founded his own company and continued to refine his product releasing an updated version of PGP along with other related products

• PGP has had a large effect in many important communications

• Questions?