It is currently Wed Aug 23, 2017 5:07 pm

All times are UTC - 8 hours




Post new topic Reply to topic  [ 21 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: Portable PGP?
PostPosted: Mon Feb 15, 2010 11:50 am 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
> InstantCrypt has many features PortablePGP does not have

The PGP/MIME, email/webmail, help files, and the rest are pretty cool. I should have looked closer at the software and seeing that before I replied.


>> Freeware license may disappear at any time

> True. But then you can always switch to Portable PGP without loss of keys or files.

Kind of the point of this is to try and insert simplicity and ease of use, not have them switch to another program in the middle. Its not a problem until I try to sell this to a business environment where they don't want to have to switch horses mid-stream.

Additionally, open software has a strange and cool tendency not to disappear. Once its out there, it seems to stick around. Even if its no longer maintained, its always available. I noticed this when I recently bought a used Palm device: all the GPL'd software out there was still available and most of the companies that did shareware had gone out of business and their software had gone who knows where.


> Of course, InstantCrypt could double as a Trojan somehow or secretly do other horrible things (and so could any other proprietary software that you download onto your computer) -- but it does not.

I don't know how to respond to this without sounding like I'm accusing you of something so I'll quote Bruce Schneier here:

"As a cryptography and computer security expert, I have never understood the current fuss about the open source software movement. In the cryptography world, we consider open source necessary for good security; we have for decades."

http://www.schneier.com/crypto-gram-9909.html

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
 Post subject: Re: Portable PGP?
PostPosted: Mon Feb 15, 2010 9:23 pm 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
Spent some time working with Sylpheed http://www.portablefreeware.com/?id=1112 today trying to get it to work with either GPG or PGP (references to both are present in software) without success.

The best information I found was here:

Quote:
Sylpheed can encrypt and sign your messages (also decrypt and verify the signatures of the incoming messages) using GnuPG. GnuPG follows the OpenPGP standard and is compatible with PGP. To enable this feature, you need to install GnuPG and GPGME (interface library to GnuPG). Enable this option with the --enable-gpgme configure switch. (source: http://sylpheeddoc.sourceforge.net/en/manual/manual-4.html)

Although its probably functional, it seems unlikely to be portable so I think I'll keep looking and edit out the GPG mention in the entry.

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
 Post subject: Re: Portable PGP with bundled JRE
PostPosted: Thu Aug 05, 2010 9:03 am 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Portable PGP is now fully portable in terms of no longer needing Java installed. Great news. As a result however, the download is quite large: 50 megs.

The main advantage of Portable PGP over the excellent GPG4USB is its capability to "sign" messages like I signed this one (small text at top and bottom of msg). This allows users to verify the sender.

Whether its portable or stealth I have not tested.

-----BEGIN PGP SIGNATURE-----
Version: BCPG v1.39

iGsEARECACsFAkxa7lUkHGZvbGRpbmdob21lIDxmb2xkaW5naG9tZUBnbWFpbC5j
b20+AAoJEIUxi2IJrFR/oVsAn2zOMyvX7yJpsmxx2HjP47vmXH5iAJ9Nra9gSlSa
S4csjkfO9hYmOPl2FA==
=UPO4
-----END PGP SIGNATURE-----

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
 Post subject: Re: Portable PGP?
PostPosted: Sat Aug 28, 2010 11:35 am 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
webfork wrote:
Portable PGP is now fully portable in terms of no longer needing Java installed.


Update on this: I didn't notice before but the program writes quite a few settings to \User\AppData. I suspect its reasonably portable but its far from stealth.

Detailed update

Registry changes:
    HKCU\Software\JavaSoft\Java2D\1.6.0_06
    HKCU\Software\JavaSoft\Java2D\1.6.0_06\Drivers\.DISPLAY1 VMware SVGA II\32\ddCreation
    HKCU\Software\JavaSoft\Java2D\1.6.0_06\Drivers\.DISPLAY1 VMware SVGA II\32\ddSurfaceCreation

(Not sure if those last two are strictly because I'm running VMware.)

Created very basic settings file:
    C:\Documents and Settings\Administrator\Application Data\PPGP\PortablePGP\mainFrame.session.xml

Edit:I tested this program to see if the JRE from PortableApps Portable Java would do the trick. Could save some serious disk space. Unfortunately, the included JRE for Portable PGP has radically different contents and, although the program would run, it could not generate encryption keys.

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
 Post subject: Re: Portable PGP?
PostPosted: Mon Nov 15, 2010 3:38 pm 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
(I realize I'm really the only one that posts to this thread, but I've been finding some great uses for GPG text encryption lately.)

Found another GPG tool: an open, portable version of the old WinPT program called GnuPT - Portable Edition. Its discussed a bit over at portableapps. A test for portability will likely happen in the next week or so.

There page is in German, but the program is in English. I've had some trouble with the hot key controls. Essentially, I'm seeking to press a key combination and have whatever I'm writing be encrypted/signed, making it application-agnostic.

Edit: Portable PGP authors have been emailed with a hotkey feature request.

Edit2: GnuPT Portable test: Portable.

    Included in the download is a Portable GPGrelay tool that allows the sending of secure email from any email client, but I don't really have a use for that and didn't test it.

    Stealth: Mostly. It writes a lot of settings to the host computer but the launcher program deletes them once its closed. If the program is shut down improperly (there's a warning when the program starts), it might leave those settings behind and would not be stealth.

Edit3: GnuPT Portable has been added. (Do not vote for this, see Edit4 below.)

Edit4: Very frustrating results with continued testing of GnuPT. I neglected to test path portability. Even moving it one directory seems to screw up the program. Bleh.

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
 Post subject: Re: Portable PGP?
PostPosted: Thu Nov 19, 2015 5:03 pm 
Offline
User avatar

Joined: Wed Apr 11, 2007 8:06 pm
Posts: 7125
Location: US, Texas
Old thread update: InstantCrypt (mentioned earlier in this thread) hasn't been updated in over 2 years and uses an outdated version of GPG.EXE (1.4.14). http://www.softpedia.com/progChangelog/ ... 64570.html

_________________
Supporting Net Neutrality - BattleForTheNet | Why this matters | More from EFF.org


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 21 posts ]  Go to page Previous  1, 2

All times are UTC - 8 hours


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

Protected by Anti-Spam ACP Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group