Portable PGP?

Discuss anything related to portable freeware here.
Message
Author
User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Portable PGP?

#1 Post by webfork »

Interested in finding a portable PGP tool

Why PGP?

I find myself exchanging more and more personal information and want to do so without exchanging a common password. The technology has been around for some 10 years now, we might as well use it.

Unfortunately it has to be ULTRA simple or no one will use it. Even security professionals I know just don't bother.

Possible Software

I know of only one working, active, awesome program:

Thunderbird + Enigmail
http://portableapps.com/apps/internet/t ... d_portable

... BUT I still use a lot of Webmail services and would like something that doesn't require pop access. AND its a little clunky, meaning I'm not going to be able to get my friends/family/partners to use it.

There's also a program that CLAIMS to be portable but simply didn't work for me: CryptoAnywhere
http://www.bytefusion.com/products/ens/ ... ere/ca.htm

Lastly, I tired to see if there was some way to get PGPTray to behave as a portable program but there were a LOT of files and subdirectories so I had little luck. The program is OSS and might be fixed to behave that way but has been out of use for many years.

http://winpt.sourceforge.net

WinPT also has some other nice security tools like file and freespace wipe (which I realize Portable CCleaner and CyberShredder already perform).

So ... anyone have any ideas? A holy grail would be simple (non-command line), crossplatform, and open source but ... I'll take what I can get.
Last edited by webfork on Fri Jan 23, 2009 11:39 am, edited 1 time in total.

gpg4usb
Posts: 26
Joined: Fri Aug 15, 2008 5:39 am
Contact:

Give gpg4usb a try...

#2 Post by gpg4usb »

You can give gpg4usb a try: As described on the website of the project:

gpg4usb is a very easy to use portable-application, which combines a simple text-editor with a GnuPG-frontend to write, encrypt and decrypt your text-messages. Gpg4usb should work on almost any computer you're working on, should it be a Linux-machine or even one with a Microsoft-OS running.

http://gpg4usb.cpunk.de/

Yucca
Posts: 88
Joined: Sun May 07, 2006 10:59 am

#3 Post by Yucca »

webfork,

GPGShell 3.70 is a GnuPG front end for windows that has been around a long time and is very easy to use.

You can make a portable version of GPGShell by using its companion program Copy2USB 1.04. Just run this utility in the GPGShell directory and it will let you choose a USB directory to install GPGShell to. You can then uninstall GPGShell.

Both GPGShell and Copy2USB are available at http://www.jumaros.de/rsoft/index.html .

If you use Sandboxie, you can install GPGShell in a Sandbox for portabilizing it and never have to touch your real Windows registry. If you don't use Sandboxie, you can uninstall GPGShell with RevoUnistaller (also available from PortableFreeware.com) after portabilizing GPGShell.

Once you have a portable copy of GPGShell, you can just share it directly with your friends and family, so they won't have to portabilize it. All they would have to do is to copy their GPG keys to the GPGShell\GnuPG-Home directory or create a new keyring in that location.

Hope that helps.

Yucca

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Awesome

#4 Post by webfork »

I'll give that a shot! Thanks!

donald
Posts: 561
Joined: Wed Dec 19, 2007 4:14 am
Location: knoxville TN USA

WinPT & GnuPG

#5 Post by donald »

I don't know if anyone else has tried this but.
WinPT Portable 1.3.0 Dev Test 4
Submitted by mstinaff on February 13, 2008 - 1:07pm

Application: WinPT
Category: privacy/security
Description: WinPT is "A graphical taskbar front-end for GnuPG with integrated key management and the ability for file and clipboard encryption." WinPT Portable uses GnuPGPortable.nsh as described in this thread to portablize GnuPG dependencies. WinPT requires an installation of GnuPG. My GnuPG Portable 1.4.9 Dev Test 9 is highly recommended.
http://portableapps.com/node/11404
GnuPG Portable 1.4.9 Dev Test 9
Submitted by mstinaff on February 13, 2008 - 12:59pm

Application: GnuPG
Category: privacy/security
Description: GnuPG is "the GNU project's complete and free implementation of the OpenPGP standard as defined by RFC4880."
GnuPG (aka gpg) is a command line application that is often used in conjunction with a third party graphical front end to encrypt/decrypt or sign/verify files or emails. GnuPG is not inherently portable as it broadcasts its existence to these third party apps via registry keys and environment variables.
http://portableapps.com/node/11402

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Portable PGP?

#6 Post by webfork »

I've been passively working on this and I got something working effectively: FireGPG http://getfiregpg.org/

More on this: http://kitchensinksoftware.blogspot.com ... e-gpg.html

I'm aware there's actually something called "Portable PGP" but it requires Java. Its also not as slick as FireGPG.

Just in case you stumbled across this article and aren't familiar with PortableFreeware's view of Java: we like Java but its not on every computer out there -- that's not portable. Maybe if they could integrate it somehow with PortableApp's Java thing: http://portableapps.com/apps/utilities/java_portable. Hopefully I'll be tackling stuff like that in the next few months and get Java programs to be something that admins here will certify.

donald
Posts: 561
Joined: Wed Dec 19, 2007 4:14 am
Location: knoxville TN USA

Re: Portable PGP?

#7 Post by donald »

Webfork regarding FireGPG

I have a question are you submitting this as portable? Yes I know this is a discussion thread but still are you saying that it is portable?

I believe that while this is freeware, it is not Portable freeware.

It looks like an excellent extension for Firefox but ...

http://getfiregpg.org/s/install
Additional Notes:FireGPG isn't a GnuPG remplacement. You must install the GnuPG software! Have a look at basic documentation!
and the basic documentation link is here http://getfiregpg.org/s/doc

I think this is great software, and I value the info on it but I do not think it is portable unless GnuPG is already installed on the majority of PC's or you use an NSIS etc (please share the wrapper if you do)

I hope I am wrong and this program accepts relative paths, and GnuPG can be installed to work portable under its license and operating requirements.

But I found no documentation to portabalize GnuPG on the web page for FireGPG.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Portable PGP?

#8 Post by webfork »

UPDATE: I found this guide: https://docs.google.com/Doc?id=dgv4b9h3_329f7bwdzhk

Will test that soon.

----

You ask good questions donald. I was so happy to have found something close that I didn't do my homework.

> I have a question are you submitting this as portable? Yes I know this is a discussion thread but still are you saying that it is portable?

* Most add-ons for Firefox have in my experience been very portable.
* Unfortunately -- yes -- this program requires an external download of Gnu Privacy Guard and if you move your folder around, you'll have to go into Add-Ons - Extensions - General - Execute the assistant again and point the computer to the new directory.

So, assuming there are no unexpected registry BS, its close but not really portable. For me its enough but to get other people to use it, its going to have to be super simple. That's what's been missing from GPG all these years and the reason for my initial post.

> I hope I am wrong and this program accepts relative paths, and GnuPG can be installed to work portable under its license and operating requirements. But I found no documentation to portabalize GnuPG on the web page for FireGPG.

I don't know but at this point, I'm motivated to take some action on this and see if I can get them to do something with that.

Thanks for your post.

donald
Posts: 561
Joined: Wed Dec 19, 2007 4:14 am
Location: knoxville TN USA

Re: Portable PGP?

#9 Post by donald »

Webfork
$$ Disregard all comments below as regards FireGPG the link says the changing of the paths is only intermittent so that should not be too bad if you don't have a configuration that causes it.
But I still think a way to make non potable add-ons portable is needed.
********************************************************************************
Have you considered the JauntePe version of Firefox maybe with this installed as it is converted to portable?

Do you think you or someone else could write a simple script or .ini, .cmd, etc to take care of such changes for non portable Firefox extensions a sort of portablize non portable add-ons add-on?
Or maybe a simple program to copy relative paths from a user editable file substituting the drive letter of the flash when needed and erasing for all reg dependent apps and editing the correct files in firefox for those not reg dependant. (Of course it would need to have a list of which files to change and where etc)

Do you know anyone who might be able to do such a thing?

Additionally *******************
All readers of this forum who would like to see more non-portable add-ons made portable please consider contacting Mozilla at http://support.mozilla.com/en-US/kb/
or at http://www.spreadfirefox.com/
or even the add-on development people at https://addons.mozilla.org/en-US/firefox/

for the Spread the fox people I would mention that The Unofficial portable version is seen on more campuses than the installed version. (I first saw Firefox run on a 3.5in floppy at my local college)

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Portable PGP?

#10 Post by webfork »

After a lot of work and interacting with FireGPG and the development site, I'm definitely loosing interest. The project is moving slowly and it seems to just interfere with my browsing experience in Firefox and Gmail. I'll wait until it gets a little further along in the development process.

Right now I'm a little more enamored with GPG4USB http://www.portablefreeware.com/forums/ ... &hilit=gpg even though its behind in terms of features.

gpg4usb
Posts: 26
Joined: Fri Aug 15, 2008 5:39 am
Contact:

Re: Portable PGP?

#11 Post by gpg4usb »

Since Version 0.2 we've included:
* Keymanagement
* Key-Generation
* File encryption/decryption

There has been a bugfix-release since then - actually, we're at Version 0.2.1

Have a look at http://gpg4usb.cpunk.de/

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Portable PGP?

#12 Post by webfork »

A program previously mentioned actually called "Portable PGP" http://ppgp.sourceforge.net/ has a version with a private JRE bundled in. This is good because its probably the most portable, most feature-rich PGP or GPG option currently available, but bad because the file size is over 50 megs compressed and 155 uncompressed. The program is GPL'd but does not appear to be under active development.

In the absence of alternatives, this will probably be my software of choice for the moment.

Instantcrypt
Posts: 2
Joined: Tue Feb 09, 2010 8:33 am

Re: Portable PGP?

#13 Post by Instantcrypt »

Check out InstantCrypt (http://www.instantcrypt.com/downloads/). It runs on Windows 2000 and up. It uses GPG as its encryption engine and is user friendly, geared toward beginner encrypters. Encrypts text and files and connects with the pre-installed e-mail. Unpacked, it has about 30MB, so it should fit on your USB stick.

Good luck!

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: Portable PGP?

#14 Post by webfork »

Check out InstantCrypt
Great to see someone has the same idea but I would take issue with a few things:
  • * Source code not available (kind of important for security software)
    * Doesn't seem to do something more than PortablePGP, although it certainly takes up less space.
    * Can't find any reviews or information about it
    * Freeware license may disappear at any time:
"The program InstantCrypt is copyrighted, (c) 2005-2009 Wolfgang Schlage. The use in this form is free at this time. Do not redistribute the program, rather refer people to this website http://www.InstantCrypt.com.
Thanks for posting but I think this program will have a difficult time achieving its goals of making security easy and accessible without maintaining the open standards it's built upon.

Instantcrypt
Posts: 2
Joined: Tue Feb 09, 2010 8:33 am

Replay: Discussing InstantCrypt

#15 Post by Instantcrypt »

Webfork, thank you for your comments on InstantCrypt! Let me reply:
* Source code not available (kind of important for security software)
True. However, uses GPG as encryption engine, which is well documented. The encrypted output follows OpenPGP standards; if there was a "backdoor" one should be able to find it there. Of course, InstantCrypt could double as a Trojan somehow or secretly do other horrible things (and so could any other proprietary software that you download onto your computer) -- but it does not.
* Doesn't seem to do something more than PortablePGP, although it certainly takes up less space.
InstantCrypt has many features PortablePGP does not have:

- Connects with your email and webmail (see: Tools | Configure E-Mail).
- Can Encrypt/Decrypt text *and* file(s) in a single process.
- Decrypts PGP/MIME files. (This is a big one: otherwise you are stuck if you get decrypted messages from e-mail plug-ins.)
- Has a reply function for e-mail-like convenience. (And no need to select the keys again!)
- Saves everything you did in chronological order. Thus you can always reconstruct what you encrypted/decrypted when, with whom, and where; and you can find old encryptions and decryptions.
- Has routines to facilitate key exchange via e-mail.
- Has routines, e.g. in the Welcome Page, to give an entry-level user familiarity with the main principles of encryption.
- Has extensive Help that explains the program, the principles of asymmetric encryption, and security risks, to the lay person.
- Has demo videos (quite bulky: 19MB; if you want to delete them, the InstantCrypt installation is even smaller)

To summarize: InstantCrypt tries to present with a low threshold for beginning users ("easy to install, easy to use") without sacrificing security, without giving up too much convenience, and while maintaining interoperability (such as PGP/MIME) with other PGP programs.


InstantCrypt does not have these features that PortablePGP has:
- Clearsign
- Detached signature for files
- Verification of detached signatures
Reason: For normal secure e-mail exchange, these features are not necessary. And for entry-level users, less (in form of features) is more.

And, by the way: I like PortablePGP. Clean, clear, optically pleasing design, easy installation (at least on my machine) and intuitive to use. Nice work!
* Can't find any reviews or information about it
No, not yet. Maybe soon? Any volunteers??
* Freeware license may disappear at any time
True. But then you can always switch to Portable PGP without loss of keys or files.

Post Reply