For
DOS - Windows - Email
Last updated September 23, 1997
(This guide documents an outdated version of PGP and will no longer be updated.)

If this describes your needs, read on.
If you have a good familiarity with DOS/Windows, but don't know much about PGP, read on and ignore the instructions that you don't need.
(If you really feel insulted by the apparent assumption of ignorance, check out PGP Jumpstart, or just take a hike.)

ACKNOWLEDGEMENTS:
To Phillip Zimmerman, creator of PGP, for providing such extremely well designed and documented encryption software and for his tireless work in support of privacy rights.

Back to Top

Back to Top

Back to Top

The public key is what you give to other people for encrypting messages to you. You can put it on a disk, email it, post it on a newsgroup or web page, etc... Anyone who has your public key (and PGP) can encrypt a message to you. The public key is also used to decrypt (verify) a PGP signature encrypted (signed) by the corresponding secret key.

The secret key is what you use to decrypt messages that have been encrypted by someone using your public key. This is the key that unlocks all the messages encrypted to you and should be guarded carefully. The secret key is also used to digitally sign a message, which can then be sent as plain text or encrypted with the recipient's public key.

Back to Top

If you already have pgp262.zip, you can still use this program to unzip and install PGP on your machine. Just skip the step of downloading PGP and answer "yes" when you are asked if you have downloaded PGP.
If you have PGP installed but you haven't set the environmental variables in your autoexec.bat file, you can use PGP QuickStart to do this as well.

First, check in your WINDOWS\SYSTEM directory for the file VBRUN300.DLL. If you don't already have it, you'll need to put a copy in that directory before running QuickStart.
Luckily there happens to be a copy around here somewhere.
This is a zipfile, so you will need to unzip it. If you don't have an unzip utility, just save vbrun300.zip and remember where it is (in this example: C:\TEMP), download PGP Quick Start and extract as described below, but don't run it yet. Then go to the directory that Quick Start is in, and type:
pcdezip c:\temp\vbrun300.zip c:\windows\system\ and press Enter
(don't forget the final " \ " and substitute the directory where vbrun300.zip is for C:\TEMP, if different).

If you would like to use PGP Quick Start, download it after reading this section.
All you need to do then is open up file manager, double click on install.exe, which will self- extract four files. Next double-click on pgpquik.exe to run the program.

When you get to the MIT site you'll need to read the rsalicen.txt and mitlicen.txt, and answer the questions before you can download PGP.

After you have successfully installed PGP on your computer, you may wish to return to this document for information about Using PGP, using DOS and Windows shell programs and using Email PGP-encryption programs.

If you do not wish to use PGP QuickStart, continue with "Getting PGP" below.

Back to Top

Outside the US and Canada PGP is freely available at:
http://www.pgpi.org/

Back to Top

If want to download PKZip/Unzip:
Go to: ftp://ftp.germany.eu.net/pub/comp/msdos/mirror.garbo/arcers/pkz204g.exe
or: ftp://ftp.cdrom.com/pub/garbo/garbo_pc//arcers/pkz204g.exe
Put it into your C:\DOS directory, then, while in C:\DOS type pkz204g.exe and press Enter.
This will self-extract into C:\DOS and you're ready to unzip PGP.

If you want to download WinZip...

For Windows 3.x and Windows 95:
Download the appropriate version.
Go to file manager and double-click on the file (wz16v61.exe or winzip95.exe) and follow the prompts. When you're done, you'll be ready to unzip PGP.

Back to Top

UNZIPPING PGP:

With PKUnzip:
At the DOS prompt (ie: C:\) type:
pkunzip -d c:\temp\pgp262.zip c:\pgp and press Enter.
This assumes that the pgp262.zip file is in C:\TEMP - if it is in a different directory, substitute that for C:\TEMP in the above command.
This should give you the files pgp262i.zip, pgp262i.asc, and setup.doc in the directory C:\PGP.
Now unzip pgp262i.zip into the same directory.
Type: pkunzip -d c:\pgp\pgp262i.zip c:\pgp and press Enter.

Back to Top

With WinZip:
Open up WinZip then click on File|Open and select the pgp262.zip file and click OK.
Then click on Extract, type c:\pgp and click Extract.
This should give you the files pgp262i.zip, pgp262i.asc, and setup.doc in the directory C:\PGP.
Now unzip pgp262i.zip into C:\PGP, just as you did for pgp262.zip.
If you want to use a different directory, substitute that for C:\PGP.
Once you're sure that you have successfully installed PGP, you may delete the pgp262.zip file.

Next, proceed to "Setting the Environmental Variables".

Back to Top

You'll need to edit your autoexec.bat file.
At the C:\ prompt type:
edit autoexec.bat and press Enter.
(Use Alt, Tab and the arrows to open menus and move around)
It would be a good idea to backup autoexec.bat before making any changes, just in case.
Just save it as another filename, such as autoexec.fat or autoexec.cat:
Press Alt and choose File|Save As. Now, after the Path statement add the following lines:
SET PGPPATH=C:\PGP
SET PATH=C:\PGP;%PATH%
SET TZ=**** (**** is the timezone you are in)

SET TEMP=C:\TEMP To add your timezone use one of the following examples:
Hawaii: SET TZ=HST10
Alaska: SET TZ=AST9
Los Angeles: SET TZ=PST8PDT
Denver: SET TZ=MST7MDT
Arizona: SET TZ=MST7
Chicago: SET TZ=CST6CDT
New York: SET TZ=EST5EDT
London: SET TZ=GMT0BST
Amsterdam: SET TZ=MET-1DST
Moscow: SET TZ=MSK-3MSD
Auckland: SET TZ=NZT-13

It should now look something like this:
PATH=C:\WINDOWS;C:\WINDOWS\SYSTEM;C:\DOS;C:\TRUMPET;C:\PGP
SET PGPPATH=C:\PGP
SET PATH=C:\PGP;%PATH%
SET TZ=EST5EDT
SET TEMP=C:\TEMP
Don't worry that it looks different, this is just an example. If the "SET TEMP=" line is already there, leave it as is. Just be sure that the lines pertaining to PGP are correct. Don't change anything else. If you accidentally change something and aren't sure you fixed it, just exit the editor without saving the changes and start over. Remember, you always have the backup copy you made. (You DID make one, didn't you?)
Save autoexec.bat and then reboot your computer to update it.
Now proceed to "Using PGP".

If you try to use PGP and your computer can't find it, and you're sure you followed the directions described above, try this (it was what worked when the recommended method did not):
Open autoexec.bat and delete your changes or open up your backup file
(autoexec.fat, etc... you DID back it up, didn't you?)
1)Find the string that starts:
PATH=C:\WINDOWS;C:\WINDOWS\SYSTEM;C:\DOS (This may be different in yours.)
At the end of this string add ;C:\PGP (Don't forget the semicolon)
Then, make a space after this line (just hit Enter with your cursor at the beginning of the next line and go up to the empty line).
2)Now in the empty line type: SET PGPPATH=C:\PGP
3)On the next line down (or after the TEMP= line), type:
SET TZ=**** (**** is the timezone you are in - see list above)
It should now look something like this:
PATH=C:\WINDOWS;C:\WINDOWS\SYSTEM;C:\DOS;C:\TRUMPET;C:\PGP
SET PGPPATH=C:\PGP
SET TEMP=C:\TEMP
SET TZ=EST5EDT
File|Save As autoexec.bat and then reboot your computer to update it.
Now try using PGP again.

Back to Top

If you want to know what the various commands in the examples mean:
For a help list of the basic commands available, type: pgp -h and press Enter.
For a list of key management commands, type: pgp -k and press Enter.

FIRST:
It will print "Pick your RSA key size" with a menu of 3 choices:
1)low commercial grade; 2)high commercial grade; 3)military grade.
I recommend Size 3 (1024 bits).
Type 1 (not!), 2 or 3 and press Enter

SECOND:
You'll be asked for a User ID.
Enter your full name, followed by a further identifier such as your email address <in brackets>, your birth date or your phone number. This is to ensure the uniqueness of your User ID.
Note:
Many Email frontends look for an email address when encrypting and encrypting messages. If you don't expect to change your email address in the near future you might want to consider using that. Three examples:

THIRD:
You'll be asked to enter a passphrase.
This is like a password except that it can be a case-sensitive phrase with spaces, numbers, symbols, etc...
Never make a passphrase consisting of real words or, if you must, at least misspell zomething. This is important since there are already programs out that are designed to crack PGP passphrases. If you can find it in literature, a song, a manual, etc..., don't use it without changing it. Make it AT LEAST eight characters long and be sure that you can remember it. Try very hard not to write it down and certainly don't leave it laying around.
DO NOT forget this password! If you do you will need to generate an entirely new keypair, which could be very inconvenient if you've already distributed the public key.
When you're sure that you have a good passphrase that you can remember, type it in and press Enter.

FOURTH:
PGP will ask you to enter some random keystrokes so that it can generate the actual key pair.
Type in some random letters (upper and lower case), numbers and symbols. Try to vary the interval between successive keystrokes. Do this until PGP prompts you to stop. Now wait patiently while PGP generates your key pair. (Exciting, isn't it?)

Once this is done your secret key will be placed automatically in your Secret keyring file (C:\PGP\secring.pgp).
Your public key will be placed in your Public keyring (C:\PGP\pubring.pgp) file.
Next, it would be a good idea to sign your public key (verify its authenticity).

Back to Top

NOTE:
You may use any unique fragment of a userID when using PGP commands. So if your userId was "Jack B. Nimble <jack@flash.com>" you could use Jack, @fl or "Jack B.",for example. If there is a space in the fragment, you must put it in Quotation marks("")

PGP will display your Key ID and Key fingerprint (more on this later).
You will be asked if you are prepared to certify that the key actually belongs to the user specified (you). Of course you can be sure in this case, since you are the person who has generated it.
Type y and press Enter.
Type in your passphrase and press Enter.
PGP will display "Key signature certificate added."
That's it!

Back to Top

Back to Top

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.2
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=HaQe
-----END PGP PUBLIC KEY BLOCK-----

Back to Top

Now view your keyring and verify that you have successfully added the key.
At the DOS prompt type:
pgp -kv and press Enter.

Back to Top

FIRST:
Open up a text editor and compose a short message. Save this message as a plaintext file; let's use the example "message.txt". In this example we'll assume that you save it in the directory C:\TEXT, and that your userID is "Jack B. Nimble", just substitute your ID for "Jack".

SECOND:
At the DOS prompt type:
pgp -eatw c:\text\message.txt Jack
This will generate the transport armor file "message.asc" in C:\TEXT and wipe (overwrite) and delete "message.txt".

THIRD:
Now, in a text editor, open up the file "c:\text\message.asc".
Highlight the entire block, including the dashes at beginning and end. Edit|Copy this and close the editor.
(Note: If you use a UNIX mail client on your server, skip the above process. Instead, you'll need to upload the file "message.asc" to your home directory on your server's machine. Consult the Help file of your terminal emulator -that's the program you use to logon- regarding "uploading files". You'll probably have to move the file to your upload directory. Once you have done this, go to the "Note" in step Four.)

In either case you could skip steps Three and Four and go right to "Decrypting An Email Message" and start at the Second step.

FOURTH:
Go into your email client and open up a message, then Edit|Paste the PGP Message Block into the message window and send it to yourself.
(Note: If you use a mail client on your server, just open a new message and Import the file "message.asc", then send the message to yourself.)
Now go to the next section: "Decrypting An Email Message".

Back to Top

SECOND:
At the DOS prompt type:
pgp c:\text\message.asc -o c:\text\message.txt and press Enter.
PGP will ask you for your passphrase, type it in and press Enter.
PGP will now display "plaintext filename: c:\text\message.txt".

THIRD:
In a text editor, open up the file "c:\text\message.txt" and read the message that you have decrypted.

Congratulations! You are now PGP enabled!
Remember, when you go to do this with a message that you have recieved from another person, substitute those filenames for the ones in this example.

See the section entitled "PRECAUTIONS" below.
Now go read the manual! Really!
At least read Volume I of The PGP User's Guide (pgpdoc1.txt) included with PGP for a good overview and some important precautions.
Then read Volume II (pgpdoc2.txt).

Back to Top

If you would like to make your public key widely available, you could add it to a Public Key Server's keyring. This is a site which allows people to download other people's public keys. There are many such sites but let's go back to MIT. If you would like to submit your public key go to:
http://www-swiss.ai.mit.edu/~bal/pks-commands.html
Follow the instructions there. It is a process similar to that of copying your key for email.

Back to Top

PROTECTING YOUR SECRET KEY:
The most important precaution is to choose a passphrase which can not be guessed or broken with a program designed to test words and phrases against the key. Equally important is to make sure that you do not write down the passphrase. If you share the computer, it's best to keep your secret keyring on a disk and/or your home computer and use the disk as the keyring.
Regardless, always backup your secret key (secring.pgp) on a disk and store it safely.It is also a very good idea to backup your public keyring (pubring.pgp).
(See the docs for more info.)

AUTHENTICATING PUBLIC KEYS:
Unless you have physically received it or it has been signed by a trusted third party, you are not necessarily sure that the key that you have is actually the key the person had sent. It is possible, although perhaps unlikely for most people, that the message was intercepted and another key was substituted. The best way to verify a public key is by using a different form of communication than the one that was used to transmit the key. If it is practical, a good way to do this is over the phone. Each public key has a sixteen byte "fingerprint" which can then be read over the phone. To see the fingerprint type pgp -kvc userid where userid is the name of the person.
Next you could certify the key as described in the section "SIGNING YOUR PUBLIC KEY". Just substitute their userID in the command.

USING THE WIPER:
It's a good idea to use the "wipe" option (-w) when encrypting a file. This command will instruct PGP to overwrite the original file (making it harder to undelete) and then delete it. Unless you really need to keep the original unencrypted file around (and thus risk having it read) it is a good habit to always use the wiper.
Of course, if you are encrypting a file that you would like to keep, simply omit the "w" option from the command (-eat instead of -eatw).

There are many more considerations, see the section "Vulnerabilities" in pgpdoc2.txt

Back to Top

PGP WinFront 3.1 (Windows 3.x)
(You'll need VBRUN300.DLL - see section "Using PGP QuickStart" above.)
1)Download;
2)Unzip PWF31.ZIP into C:\TEMP;
3)Read instructions in "readme.text".
4)Unzip C:\TEMP\PWF.ZIP into C:\TEMP;
5)In File Manager, double click on C:\TEMP\SETUP.EXE and follow the prompts.
6)You may now delete the ZIPfiles and the temporary files in C:\TEMP

PGP Pretty Good Shell (DOS)
1)Download file;
2)Unzip PGS.ZIP into C:\PGS;
3)In C:\PGS, type: pgs and press enter;
4)Enter setup info: (ie: editor= c:\dos\edit.com) if you press Enter in selection window, you'll get a file directory;
5)Once you have all the neccessary setup information correctly entered, select from the main menu to use the shell. (Follow step 3 above to use it later.)
6)You may now delete pgs199c.ZIP

Back to Top

PGP Eudora
1)Download peics128.zip (Eudora 3 and above - otherwise choose the appropriate version.;
2)Unzip to C:\TEMP;
3)Copy the program C:\TEMP\PEICS16.EXE (for Windows 3.x) or C:\TEMP\PEICS32.EXE (for Win95) to Eudora's directory.

(if you downloaded a different version, substitute the .exe file for peics16.exe or peics32.exe)
4)Copy the file MANUAL.HTM to Eudora's directory . (This is the manual for PGPEudora. To view: select in File Manager and run or open it as a file in your web browser);
5)Adding PgpEudra icon : In Windows program manager, open Eudora's program group. Choose File|New...|Program Item
select OK.
Enter the description. Click on the Command Line text window, choose Browse and select the Eudora directory.
Select PEICS16.EXE; (or whatever file you copied in step 3).

6)You may now delete the ZIPfile and the files in the temporary directory;
7)To use:
Click on the PGPEudora icon. If you opened Eudora with the normal icon and want to use PGP to decrypt/encrypt a message, you'll need to open PGPEudora with its icon in Eudora's program group in Program Manager.
When you are ready to encrypt or decrypt a message, open the message and click on the key at upper right or choose Message|Run PGP.

Back to Top

PGPJN for Pegasus - 16 Bit Version
1)Download;
2)Unzip in a subdirectory of FORMS called PGPJN
(e.g., C:\PMAIL\FORMS\PGPJN). Do NOT use a different name -- it MUST be exactly PGPJN!
3) Copy the PGPJNP.FFF file up to your WinPMail directory (e.g., C:\PMAIL);
4)Make sure that you have set the environment variable TEMP (in your AUTOEXEC.BAT file) to point to a valid hard disk directory where this interface can create temporary files. (See example line in section "Setting The Environmental Variables" above);
5)Open the file "read.me" from the PGPJN directory (choose File|Associate in File Manager to associate the extension ".me" with a text editor if it is not already). Read the "Simple use instructions for this interface" and the "Troubleshooting" instructions.
6)You may now delete the ZIPfile.

Back to Top

Back to Top

Comments and suggestions welcome.