Copyright: Copyright ® 1996-1997, Walter E. Heindl


Lock32: Input
Encrypting Using Lock32

INPUT SOURCE

LOCK32 will display the name of the input file (or as much as will fit) in this box.  If you are running LOCK32 without a filename, LOCK32 will encrypt the contents of the clipboard, in which case this box will read “<Clipboard>.”

If you check the “wipe file” box, LOCK32 will cause PGP to erase the original un-encrypted file.  This option will be greyed if the input source is the clipboard.

Pushing the “Compose” button opens an integrated text editor which you can use to compose a text message to be encrypted using PGP.  This is a standard Windows text editor which supports the keyboard shortcuts for copying text to the Clipboard (Ctrl-C), cutting text (Ctrl-X), pasting text (Ctrl-V), and undoing changes (Ctrl-Z).  Watch for menu support of these functions, as well as RichText formatting support, in a future release.

Please note that direct support of RichText in the Windows clipboard has been removed from this version, in order to speed execution of the program.  You can still create a RichText file using any RichText editor (e.g. WordPad), save it as a file, and encrypt the file using Lock & Key.


Lock32: Method
Encrypting Using Lock32

ENCRYPTION METHODS

LOCK32 supports both encryption methods used by PGP: public-private key cryptography and conventional (single key) cryptography.

Public key cryptography uses the public key of a specific recipient to encrypt the message, which can then only be decrypted by that person using his or her secret key.

Conventional cryptography involves using a single pass phrase to encrypt the message.  This pass phrase must be known to both the sender and the recipient.  This method is less secure than public-private key cryptography, as the pass phrase could become known to others unless it is securely transmitted.  Nevertheless, this method makes it possible to send encrypted messages to persons who do not have public keys available.

You may also choose “none.”  This will only be a valid choice in the following situations:

•	You wish to “armor” the file (convert a binary file to 7-bit encoding, so that it may be transmitted through mail channels which do not support binary files).

•	You wish to sign the file, but want to keep the file as plaintext so it can be read without PGP.

Simply select which of the three options you wish to use.  Note that if you choose the option of conventional encryption, the “Recipients” section is changed to a box for entering the secret pass phrase.  If no encryption is selected, both the recipients box and the pass phrase are greyed.

LOCK32 remembers your preferences between uses.


Lock32: Introduction
Introduction to PGP and Lock & Key

The rapid growth of the Internet has fueled great interest in encryption for protecting the security of messages transmitted over the Internet.

Pretty Good Privacy (PGP) has become the de facto standard for high-security encryption.  PGP uses what is known as dual-key cryptography.  For each user, it creates a pair of keys, a public key and a private key.  Either can be used to encrypt messages which can be read by the other.  The private key is kept secure by the owner, and requires a secret pass phrase to use.  The public key, however, can be widely distributed (and often will be available from a BBS or a public key repository).  The public key can be freely distributed because it requires the private key, which only the owner can use, to lock or unlock messages.  This is a significant advantage over conventional cryptography, which uses a single key, where the single key, if intercepted, can be used by an unauthorized person to decrypt messages.

Dual-key cryptography provides for two separate, but related, uses:

•	Encryption.  The sender uses the recipient's public key to encrypt a message or a file for the intended recipient.  This message or file can then be sent through insecure channels such as the Internet.  Only the recipient, who is in possession of the matching private key and who knows its pass phrase, can decrypt the message.

•	Electronic “signatures.”  The sender uses his private key (as to which only he knows the password) to add a “signature” (a brief encrypted string of characters) to any message or file.  The recipient can use the sender's public key to verify that the message was, in fact, sent by the sender, and not by an impostor.

Limitations of PGP

PGP has been described as “public key cryptography for the masses.”  Since PGP is freeware, is widely available, and has become a standard, this statement is largely true.  However, PGP is a DOS-based program, with an obscure command line syntax, which intimidates new users and discourages the use of this potentially valuable program.

There have been many shells and front ends written for PGP to make use easier, especially under Windows.  What makes LOCK & KEY different?  LOCK & KEY, unlike other PGP shells, is completely integrated into the Windows 95 Explorer.  What this means is:

•	You can right-click on any file to bring up a menu choice for encrypting the file.  Simply enter the name(s) of the intended recipient(s) whose public keys you wish to use to encrypt the message.

•	You can double-click on any encrypted file to decrypt that file using your private key.

•	You can double-click on any public key file to add it to your public key ring.

•	If you have Quick View or Quick View Plus installed, you can view the decrypted file using Quick View or Quick View Plus.  Optionally, you can save the result to a file.

•	You can choose to Open (execute) or Print any decrypted file.

•	You can encrypt text in the Windows clipboard; you can encrypt text or binary files to the Windows clipboard (to paste into an e-mail program, for example); you can decrypt encrypted text which has been copied to the Windows clipboard (e.g. from an e-mail program).

LOCK & KEY supports long file names under Windows 95.


Lock32: Using Lock & Key To Encrypt Files
Encrypting Using Lock32

LOCK & KEY automatically adds a shortcut to the Windows 95 SendTo folder.  To encrypt any file, simply right click on the file in Explorer (or on the Windows 95 desktop), select the “Send To” menu item, and choose “Lock & Key.”

This will bring up the main LOCK32 dialog box:

Simply enter the name (or part of the name) of the public key(s) of the intended recipient(s).  If the recipient's name is found in your personal key ring, the file will be encrypted and renamed with a .PGP extension in the same directory where the input file is located.  Unless you choose the “wipe” option, the unencrypted input file is not affected.

Following is a discussion of the various PGP options that can be selected using LOCK32.

Recipients

Input

Output

Encryption Method

Signature


Popup: Public Key Encryption
Public key cryptography uses the public key of a specific recipient to encrypt the message, which can then only be decrypted by that person using his or her secret key.  This is the normal method of operation of PGP and provides the greatest security, since the recipient's secret key is necessary to decrypt the message.  The public key, however, can be freely distributed.

Use public key cryptography if you have the intended recipient's public key.

If you do not have the recipient's secret key, you will need to use conventional cryptography, which uses a single pass phrase to encrypt and decrypt.  You will need a secure channel to send the pass phrase to the intended recipient; if the pass phrase is intercepted, anyone with the pass phrase can decrypt the message.


Popup: InputSource
This displays the source file or data which will be encrypted.

If you've selected a file in Explorer, this will show the name of the file.

If you have not specified a file (for example, if you are running LOCK32 from the Start Menu, LOCK32 will encrypt the contents of the Windows Clipboard.

If you have used LOCK32's built-in editor (selected by pressing the “Compose” button), then this will indicate that Lock & Key's editor is the input source.


Popup: Signature
PGP permits the use of electronic “signatures” to authenticate messages.  The sender uses his private key (as to which only he knows the password) to add a “signature” (a brief encrypted string of characters) to any message or file.  The recipient can use the sender's public key to verify that the message was, in fact, sent by the sender, and not by an impostor.  Use of an electronic signature requires that the recipient have your public key.

Note that you must enter your pass phrase in order to create a signature.

You need not encrypt a message in order to attach your signature.


Popup: SelectSignature
If you have more than one secret key, you can select which one to use for making signatures by pushing the “Select” button.  This will read your secret keyring and display a pop-up list of available signatures.  Press OK to close the list.  The chosen signature will be displayed.


Popup: EncryptToSelf
If you check this box, PGP will encrypt each file or message so that it can be decrypted with your own secret key.  This is a useful option for creating a “file” copy of messages or files you have encrypted.  If you use this option, you can keep the encrypted copy (with greater security) on your own computer, and be able to access it later.


Lock32: New Features
New Features in Version 3.0

•	LOCK & KEY now features support for languages.  A language glossary is provided for English, German, Spanish, French, Italian, Dutch and Finnish.  Support for other languages can easily be added by editing the language glossary.

•	LOCK & KEY now features context-sensitive Windows 95-style help.

•	LOCK & KEY now features an integrated text editor which you can use to compose a message for automatic encryption using PGP.

•	LOCK & KEY now permits you to append your public key to messages encrypted to the Windows Clipboard, making it easy for the recipient to send an encrypted reply or to view your signature.

•	LOCK & KEY will now allow you to open (execute) or print a decrypted file, in addition to the options of viewing the decrypted file using QuickView, or saving the file to disk.

•	LOCK & KEY now includes KEYGEN, a program which will automatically generate a public-private key pair without requiring the user to run PGP from DOS.

•	A number of runtime errors present in earlier versions have been corrected.  In addition, when a runtime error occurs, a debugging log is created which can help us pinpoint and correct the problem.

For a complete listing of changes, see the revision history.


Lock32: Revision History
Revision History

Version 3.0.0 – January 8, 1997

•	LOCK & KEY now supports languages other than English.  Language glossaries are provided for German, French, Spanish, Dutch, Italian and Finnish.  Other glossaries can easily be added.

•	LOCK & KEY now provides context-sensitive Windows 95 help.

•	LOCK32 now contains an integrated text editor for composing PGP messages.

•	LOCK32 includes an option to append your public key to any message encrypted to the Windows Clipboard, to make it easy for a recipient to encrypt a response, or to view your signature.

•	KEY32 now features an option to open (execute) or to print a decrypted file, without permanently saving the file to disk.

•	KEY32 will decrypt the file without prompting, using the option last specified (View/Save/Open/Print), and without verifying signature, if the PGPPASS environment variable has been set.  This speeds decrypting numerous files.

•	Clipboard support for RichText has been removed, to speed loading.

•	LOCK & KEY now generates a debugging log when a runtime error occurs.

•	LOCK32 now passes the PGP pass phrase to PGP using the PGPPASS environment variable rather than as a command line variable.  This enables use of longer pass phrases without exceeding the maximum length of a DOS command line.  Please note that this environment variable appears only in the virtual machine in which PGP is run, and disappears as soon as PGP finishes, so this does not compromise security.

•	LOCK & KEY now wipes all temporary files which contain confidential data, to prevent recovery of the PGP pass phrase using Norton or other disk utilities.

•	Several runtime errors present in version 2.1.0 have been corrected, including (1) runtime error 76 occurring where the public keyring name in CONFIG.TXT was enclosed in quotes; (2) runtime error 53 occurring with certain filenames; (3) failure of KEY32 to remove the .PGP or .ASC extension when decrypting files; (4) proper handling of encrypted .ZIP files; (5) runtime error 62 encountered with certain non-English versions of Windows 95; and others.

Version 2.1.0 – October 24, 1996

•	LOCK32 and KEY32 modified to display input source (filename or clipboard).

•	LOCK32 now supports PGP “wipe” option (-w).

•	LOCK32 now permits Rich Text support to be disabled, making it possible to send clipboard text as plain text.

•	LOCK32 now supports the PGP encrypt-to-self option, so the user can decrypt messages as well as the recipients.

•	LOCK32 now supports selecting an alternate secret key for making signatures.

•	KEY32 will now recognize a public key block that has been placed in the clipboard, and will offer to add the public key to your public key ring.

•	KEY32 now uses PGP to read the public key ring, which avoids some errors when removing keys.

•	Fixed bug in KEY32 which caused console output to be prematurely closed.

•	LOCK32 and KEY32 now read the location of the public keyring from CONFIG.TXT (or PGP.INI).

•	Certain settings (default user name and encrypt-to-self) are read from and stored in CONFIG.TXT (or PGP.INI).  This should make longer PGP commands more reliable.

Version 2.0.2 – October 7, 1996

•	Fixed bug which would cause some public key rings not to be read completely by LOCK32 and KEY32.

•	Fixed bug introduced in version 2.0 which would prevent encrypting a message for multiple recipients.

•	Fixed bug which caused sound not to play correctly in KEY32.  Sound file is now installed in the program directory.

Version 2.0.0 – September 23, 1996

•	LOCK32 now reads the default public key ring, and permits selection of a public key from a drop-down list.

•	KEY32 can now be used to view the public key ring and to remove individual public keys.

•	The default install option now places a shortcut to LOCK32 in the SendTo folder.  The installation hs been improved and now creates an uninstall option in the Control Panel Add/Remove Programs applet.

•	The registration password can now be entered without running a .REG file or REGEDIT.

Version 1.5.0 – August 28, 1996

•	User preferences for encrypting, decrypting, signature and output are saved in the registry and restored when the program is next run.

•	Registered users' registration password is stored in the registry.

•	The PGPPASS environment variable, if present, is used instead of manual entry of the pass phrase.

•	Signature of plaintext files is supported.

•	The filename extension is stored when a file is encrypted, and restored when the file is decrypted and saved as a file.

Version 1.4.1 – August 13, 1996

•	Added installation options for placing Lock & Key in the SendTo folder (to resolve compatibility issues with MS Office).

•	Added an uninstall option.

•	Added long file name support to LOCK32.EXE, when it is placed in the SendTo folder.

•	Added support to KEY32 for adding public keys to the default public key ring.

Version 1.3.0 – August 8, 1996

•	Added support for LOCK32 to encrypt text (including Rich Text) in the Windows clipboard.

•	Added support for LOCK32 to save its output (in armored ASCII) to the Windows clipboard.

•	Added support for KEY32 to decrypt encrypted data (armored ASCII) from the Windows clipboard.

Version 1.2.0 – August 6, 1996

•	Added option to LOCK32 to encrypt files when armoring.

•	Added option to LOCK32 to add signature when encrypting.

•	Added option to view/save PGP console output when an error occurs.

•	Modified KEY32 to display signature information.

•	Modified KEY32 to view/save PGP console output when an error occurs.

•	Corrected bug in LOCK32 that caused window to be truncated.

•	Corrected bug in INSTALL program that resulted in “Runtime Error 53.”

•	INSTALL now adds double click support for .ASC as well as .PGP files.

Version 1.1.0 – August 1, 1996

•	Added option to LOCK32 to encrypt using conventional cryptography.

•	Added option to LOCK32 to armor files (convert to 7-bit ASCII).

•	Fixed bug in LOCK32 where user's TEMP file was other than C:\TEMP.

•	Fixed bug in KEY32 where the user's pass phrase contained spaces.

Version 1.0.1 – July 29, 1996

•	Corrected install routine to work properly on faster computers, avoiding run-time error.

•	Improved install routine for creating registry entries, to properly work with long file names, and to eliminate the REGEDIT message box.

•	Fixed sound effects in KEY32.EXE

Version 1.0.0 – July 27, 1996

•	Original Release.


Lock32: Other Features
Other Features

•	LOCK & KEY includes an option to encrypt all messages with the user's own public key, so that the user (as well as the recipients) can decrypt the encrypted message.

•	LOCK & KEY supports the PGP option to wipe the input file after encryption.

•	LOCK & KEY permits selection of any secret key (not just the default secret key) for signing messages.

•	KEY32 will recognize a public key that has been placed in the clipboard and will offer to add it to your public key ring.

•	LOCK & KEY automatically reads the public key ring specified in the user's PGP configuration file.  When encrypting a message or a file, you can now simply point and click to select the name of a user.  You can still simply type in part of the name of one or more recipients to match names in the public key ring.

•	KEY32 can display the contents of the public key ring and can be used to remove individual public keys.

•	LOCK & KEY supports use of the PGPPASS environment variable.  If the PGPPASS environment variable has been set, this value will be placed in the input fields for which the pass phrase is required (e.g. when signing files, or decrypting files encrypted with your public key).  PLEASE NOTE THAT THE PGPPASS ENVIRONMENT VARIABLE IS POTENTIALLY A SECURITY RISK AND ITS USE IS NOT RECOMMENDED.

•	LOCK & KEY stores last settings for encryption, decryption, output and signature options in the registry, so that the last settings used will be restored when the program is next run.  This makes use of the programs more convenient for those whose preferences differ from the previous defaults.  NOTE THAT THE PASS PHRASE IS NOT SAVED IN THE REGISTRY.  IT MUST BE ENTERED EACH TIME UNLESS THE PGPPASS ENVIRONMENT VARIABLE IS SET.

•	LOCK32 supports signing plaintext files.  If the encryption option “None” is selected, an option to save output as plaintext is added.  If these options are chosen, then the input file (which should be plain text) will not be encrypted, so it can be read without decryption, but the signature is added and can be verified using KEY32.

•	LOCK32 saves the original filename extension when encrypting files.  KEY32 automatically restores this extension when the file is decrypted and saved as a file.

•	KEY32 will detect whether a .PGP file is an encrypted file or a public key file.  If it is a public key file, KEY32 will offer to add the public key to the default public key ring.


Lock32: Language Support
Language Support

LOCK & KEY version 3.0 now supports languages other than English.  A language glossary is provided for English, German, Spanish, French, Italian, Dutch and Finnish.  This language glossary is contained in the file GLOSSARY.INI, which is installed to the Lock & Key directory.

When installing LOCK & KEY, you are asked to choose a language.  This language will be used for displaying labels in the LOCK & KEY dialog boxes, and for message boxes.  This language preference is stored in the Registry and can be most easily changed simply by reinstalling LOCK & KEY.  (Please note that LOCK & KEY will, for some operations, set PGP itself to run in English.  This is necessary because LOCK & KEY must read the PGP output to determine what results have occurred.  This should not be a major limitation, since PGP is run mostly behind the scenes.  LOCK & KEY becomes the user's interface to PGP.)

GLOSSARY.INI is a text file that follows the structure of other Windows .INI files, and can easily be edited with Notepad.  GLOSSARY.INI includes a section for each label or message which LOCK & KEY generate.  Each section is followed by the appropriate language string for each language.  For example, the following section shows English, German, Spanish, French, Italian, Dutch and Finnish wording for the “Recipients” label:

[Recipients]

en=&Recipients

de=&Empfängers

es=&Destinatarios

fr=&Destinataire

it=&Destinatari

nl=O&ntvangers

fi=&Vastaanottajat

Several things should be kept in mind if you decide to edit GLOSSARY.INI to add support for another language or to modify the phrasing that is provided.

First, use the vertical bar {|} to force a hard return in message boxes.  While Windows does word wrap text in message boxes, it is sometimes preferable to cause lines to break differently.  You will notice this is used in some of the longer messages in GLOSSARY.INI.  Please note that all labels and messages must appear on a single line in GLOSSARY.INI.

Second, the ampersand {&} when used in a label controls where Windows places the accelerator key.  The accelerator key is the key following the ampersand, and is underlined in the dialog box.  For example, the above entry creates the following English label:

Recipients

Pressing ALT+R causes this option to be selected, when LOCK & KEY is run.

Third, some entries have a tilde {~}.  This entry is used by LOCK & KEY to control where text generated by the program (such as the name of a signature) is to be merged.  All messages which contain a tilde must have the tilde to tell LOCK & KEY where to merge the variable.  Other messages should not contain a tilde.

Please note that the Lock & Key installation/uninstall programs display messages in English.  Language support is provided only for LOCK32 and KEY32.

Thank you to the following users for their contributions to the existing language glossaries:

Spanish	     	Raúl Fernández García

French	Jean-Paul Kroepfli and Ganix Caldichoury

Dutch	Bert Hankes

Finnish     	Juha Toronen

Italian    	Francesco Lecca

Please contact the author,  Walter E. Heindl, usk77ueb@ibmmail.com, if you would be interested in providing a glossary for additional languages.


Keygen: Generating Public-Private Key Pairs
Generating Public-Private Key Pairs

While many programs have been written as front-ends for encrypting and decrypting files using PGP, one function has still required the user to interact with PGP in a DOS box: the generation of a public-private key pair, which any new PGP user must do in order to use PGP.  This is because PGP makes no provision for automating this function through a DOS batch file.

LOCK & KEY version 3.0 now includes KEYGEN, a utility for generating a public-private key pair without interacting with PGP in a DOS box.  Note that KEYGEN is a 16-bit application which requires VBRUN300.DLL to be present in the user's \Windows\System directory.

KEYGEN presents the user with the following dialog box for generating a public/private key pair:

The user must make the following selections to generate a key pair:

•	Select the number of bits for the key.  The higher the number of bits, the greater the security, but at a tradeoff in speed.

•	Select a user name.  Usually this is the full name of the user followed by an Internet mail address, as shown in the above example.

•	Select a pass phrase for the secret key.

Then, press OK to generate the key.  Note that the process of creating the key may take several minutes.  You should hear a beep within 15 seconds or so, indicating that PGP has received all the information it needs to generate a key pair.  The KEYGEN window will remain open while PGP works in the background, and will close when the process of generating the key is complete.  If KEYGEN does not close, use Alt-Tab to switch to the PGP window to see whether PGP is working.

When KEYGEN is complete, it extracts the newly created key into a separate file, in the PGP directory, called NEWKEY.PGP.  You may rename this key to anything you wish.  This is a copy of your public key, and should be sent to persons with whom you wish to communicate using PGP, or be uploaded to a public key repository.

Please note that this is the first release of KEYGEN and it may not work on all systems.  Please provide us with your feedback on this new feature.


Key32: Adding keys to your public key ring
Adding Keys To Your Public Key Ring

PGP saves public keys as files with the extension .PGP or .ASC.  These are the same extensions used for encrypted and armored files, respectively.  When you double-click on a file with the .PGP or .ASC extension, KEY32 reads the file to determine whether it contains a public key.  If it does, you will be presented with a dialog box as follows:

Press Yes and KEY32 will attempt to add the key to your default public key ring.

Note: if the key file has an .ASC extension, Lock & Key will recognize that the file contains one or more keys, but will not be able to identify the names of the key owners.

KEY32 will respond with an error message if it is unable to add the key, and will give you an opportunity to review the actual PGP console output to identify why the error occurred.  The most likely reasons are that the file is corrupted, or that the key was already present in your public key ring.

Occasionally, you may receive a user's public key in the form of text.   Such a key block looks like the following (this is the author's actual public key):

-----BEGIN PGP PUBLIC KEY BLOCK-----

Version: 2.6.3i

mQCNAzIQX1gAAAEEALScp5wuTGUmgqxKE0MAAl9gj4LAg01W/s1eOvDNxMlCzUgc

132JTX9XAnMX3SkTX57zTUY8wh5QxzQEEct4A4jpSTiv4qWUwRyF9GJM1G3JgJ2v

2co/a+Y1mjls87rxQSqt+ooLh9pwGP7NlUumC55ZVY8tzk80wlVrqiqKapYRAAUR

tCdXYWx0ZXIgRS4gSGVpbmRsIDx1c2s3N3VlYkBpYm1tYWlsLmNvbT6JAJUDBRAy

EF9ZVWuqKopqlhEBAd9FA/9HosknDNQES9lccQG8QprJ1Wgg+QW+AhMFM2tmESLl

pR065KYZH4v+ibtJpL0XTqp7v9USOSMEwvASiusEnCekrIgni8aMFYrT90Y3uedD

Zwu6/bBeAcOJRlEq6+yefByEK5d3iDiwreJIXA6p2eVExF0uOo7bwVv9s/5yynjD

9w==

=fmve

-----END PGP PUBLIC KEY BLOCK-----

To add such a key to your public keyring, first select the key and copy it to the Windows clipboard.  Then, run KEY32.  If KEY32 finds a public key block in the Windows Clipboard, it will offer to add the key to the default public key ring.


Lock32: Registration
Registration

LOCK & KEY is shareware.  The shareware version is fully functional but includes a time delay.  Registration will remove this delay.  To register LOCK & KEY, send $19.95 to:

Walter E. Heindl

271 Misty Patch Road

Coatesville, PA 19320 USA

Please provide your e-mail address.  You will be sent a personalized password file which will remove the time delay.  The password file will work with future versions of LOCK & KEY, making upgrades free.

You may now register online via CompuServe SWREG.  From CompuServe, GO SWREG for details.  Registration number is 12438.


Lock32: Technical Support
Technical Support

For technical support, please visit our Web site:

http://www.voicenet.com/~wheindl

We will endeavor to post information concerning common questions and problems.  In addition, you will always find the latest version of LOCK & KEY there.

If you have any technical questions, bugs, etc. not addressed at our Web site, or if you have other suggestions or comments, send e-mail to:

Walter E. Heindl, usk77ueb@ibmmail.com

LOCK & KEY are Copyright © 1996-1997 by Walter E. Heindl.  The shareware version may be distributed as a single archive with all files intact.  All rights are reserved.


Lock32: Installation
Step-By-Step Installation

LOCK & KEY requires the following:

1.	A computer running Windows 95 or Windows NT 4.0.

2.	The Visual Basic 4 (32-bit) runtime library (VB40032.DLL, OLEPRO32.DLL and MSVCRT40.DLL).  These files are widely available and are needed to run any application written in Visual Basic 4 (32-bit).  If you do not already have these files in your \Windows\System directory, you may download the files from SIMTEL: http://www.cdrom.com/pub/simtelnet/win95/dll/vb40032.zip

3.	Pretty Good Privacy (PGP) version 2.6.2 or 2.6.3i.  If you do not have PGP, you may obtain it from one of the following sources:

Users in the United States: http://bs.mit.edu:8001/pgp-form.html

            Users outside the United States: http://www.ifi.uio.no/pgp

To install PGP, unzip the files into a directory, e.g. c:\pgp.

You must have the PGPPATH= environment variable set in your AUTOEXEC.BAT file.  For example, if your PGP files are stored in C:\PGP, then you must have the following line in your AUTOEXEC.BAT file:

SET PGPPATH=C:\PGP

You must also have a command in AUTOEXEC.BAT specifying a temporary file directory, e.g.:

SET TEMP=C:\TEMP

It is strongly recommended that the temporary file directory NOT be the root directory of a drive.  If you are using a RAMdrive as a temporary file directory, create a subdirectory of the root directory.  This is because Windows applications create many temporary files and only a limited number of entries can be stored in a root directory.

We strongly recommend that you read the documentation which comes with PGP.  This provides a thorough explanation of public-private key cryptography and PGP features.

4.	To install LOCK & KEY, simply unzip the files into any directory and run INSTALL.EXE.

The install program will first ask you to select a language.  Choices currently available are English, German, Spanish, French, Italian, Dutch and Finnish.  Select one of these languages and press Continue.  You may change your selection later by editing GLOSSARY.INI (installed in the Lock & Key directory), or by reinstalling LOCK & KEY.

Lock & Key's program files and user guide will be copied to a subdirectory of your PGP directory.

The install program will create the following Start Menu options:

Decrypting a message in the Windows Clipboard.

Encrypt a message in the Windows Clipboard.

Generate a public-private key pair.

View the contents of the public keyring.

Read the Lock & Key User Guide (this file).

Uninstall Lock & Key.

The install program will modify the Windows Registry to associate .PGP and .ASC files (extensions for files created by PGP) with Lock & Key.  It will also add a shortcut to the Windows “Send To” menu, so you can right-click to encrypt any file.  The install program will also add Lock & Key to the list of programs which can be uninstalled by the Windows Control Panel “Add/Remove Programs” applet.

The install program will check for the presence of QuickView or QuickView Plus.  KEY32 will, if one of these is present, enable you to automatically decrypt and view a file in any file format supported by QuickView or QuickView Plus.  If QuickView/QuickView Plus is not present, and you choose to view a file immediately upon decryption, NOTEPAD will be used.

The install program also places RUNPGP.PIF, CONSOLE.PIF and KEYGEN.PIF in the PGP directory.  These files have been optimized for the PGP operations used by Lock & Key.  Please note that RUNPGP.PIF file is set to run PGP.EXE minimized.  You may, if you wish, change the properties of this .PIF file if you'd prefer to view PGP in action (e.g. to check for error messages).  THIS .PIF FILE IS SET TO RUN IN THE BACKGROUND AND TO CLOSE ON EXIT.  IT IS IMPORTANT THAT THESE SETTINGS NOT BE CHANGED, OR LOCK & KEY WILL NOT RUN PROPERLY.

5.	If you have not used PGP before, you will first need to create your own public-private key pair.  You can do this using KEYGEN – for more information on using KEYGEN, see KEYGEN: Generating Public-Private Key Pairs.  Or, if you want, you can run PGP from DOS.  Type pgp -kg and follow the screen prompts.

6.	Extract your newly-created public key and send it to those with whom you wish to send encrypted or signed messages.  Please note that KEYGEN automatically extracts your public key.  Also, LOCK32 will, if you like, include your public key when sending an encrypted message to the Windows Clipboard, making it easier than ever to use PGP to exchange encrypted and electronically signed correspondence.


Lock32: Recipients
Encrypting Using Lock32

CHOOSING RECIPIENTS

In order to use public-private key encryption, you must enter the name(s) (or portions of the name(s)) of the intended recipient(s).  This will cause the message to be encrypted using the public key of each intended recipient.  Note that this option will be greyed out unless public-private key encryption has been selected.

LOCK32 will automatically read your public key ring and place the contents into the drop-down combo box.  You can scroll down (or type the first letter and scroll) to select a single recipient.  Note: you cannot select multiple recipients this way.  To select multiple recipients, type in a portion of the name of each intended recipient.

If you check the “Encrypt Copy To Self” box, PGP will also use your own public key to encrypt the message.  In this way, you will also be able to decrypt the message after it has been encrypted.  Use this option to make a file copy for yourself!  (Note: this setting is stored in the PGP configuration file and will affect any use of PGP independently of Lock & Key.)


Lock32: Output
Encrypting Using Lock32

OUTPUT OPTIONS

LOCK32 gives you three choices for the encrypted output: a binary file, an “armored” file, or “armored” text placed in the clipboard.

A binary file uses the standard 8-bit character set, and should be used if you will be delivering the encrypted file using diskette, or if you are able to transmit binary files by electronic mail.  Encrypted binary files are given the .PGP extension.

Armored files use low-7-bit encoding, which means that the file can be transmitted by methods that do not support binary files (such as some Internet mail programs).  If you wish to transmit the encrypted output as a specific file but can't send a binary file, use this option.  Armored files are given the .ASC extension.  Note: it is possible to armor a file without encrypting it.  This is similar to UUencoding and is a method for transmitting binary files over the Internet.

You will note that LOCK32 supports Windows 95 long filenames, unlike PGP itself.  If the file you are encrypting has a long filename, the long filename will be preserved.  LOCK32 saves the original extension when encrypting the file, so that SECRET.WK4 becomes SECRET.WK4.PGP (or SECRET.WK4.ASC) when it is encrypted.  This enables the original extension to be restored when the file is decrypted and saved as a file.  NOTE: The output file is saved in the same directory as the input file.

The third option also creates armored (7-bit) output, but places that output in the Windows Clipboard.  This will be the preferred option if you wish to simply paste the encrypted output (message or a file) into an electronic mail message.

If you choose “Include My Public Key,” your default key (MYNAME= in CONFIG.TXT/PGP.INI) will be appended to the message in the Windows Clipboard.  This is useful if the recipient doesn't have your public key, but needs it either to verify your own signature, or to send an encrypted response to you.  This option requires that you have selected a user ID for making signatures.  If no user ID is shown under “Signature,” then press the Select button and choose a user ID.

LOCK32 remembers your preference between uses.


Lock32: Signature
Encrypting Using Lock32

ADDING YOUR SIGNATURE

PGP will also let you use your own secret key to “sign” a message.  This electronic “signature” can be verified by anyone with your public key.  Note: you need to enter the pass phrase for your secret key to make a signature.

Some users may have more than one secret key.  LOCK32 permits you to select any secret key in your secret key ring.  Simply press the “Select” button, and LOCK32 will use PGP to read your secret key ring.  A combo box will appear, with the name of each secret key in your secret key ring.  The “Select” button will change to “OK.”  Simply pick a secret key for creating the signature and press the OK button.  The name of the selected signature will appear in this box.  Note: The selected signature is stored in the PGP CONFIG.TXT file, and will affect uses of PGP independently of Lock & Key.

LOCK & KEY also makes it easy to view signatures added by other users.

LOCK32 remembers your preference between uses.


Key32: Viewing Signatures
Decrypting Using Key32

VIEWING SIGNATURES

You can also use LOCK32 to electronically “sign” files, as a way of authenticating that you, the holder of the private key, and not an impostor, sent the file.  You must enter your secret pass phrase, and PGP will affix an “electronic signature” which the recipient can verify using your public key.  For more information, see how to affix your signature when encrypting files.

When using KEY32 to decrypt the file, it will automatically detect whether the encrypted file was signed, and, if it was signed, it will display information about the signer:

Note that PGP can only verify a signature is present if you have the public key of the signer in your public key ring.  Often, senders will include their public key with a message so you can add the key to your public keyring and verify that the message was signed.  For more information, see how to add a key to your public keyring.

You can sign a file with or without encrypting the file.  If you choose not to encrypt the file, you will be given the option of saving the output as a plaintext file with the signature attached.  The file can be read without KEY32 or PGP; but, using KEY32, you can verify the attached signature.

Note that KEY32 will read the environment for the PGPPASS environment variable, and, if it is found, will place that value automatically in the pass phrase box.  For more information and cautions, read about using PGPPASS.


Key32: Using PGPPASS
Technical Issues

USING PGPPASS

PGP supports use of the PGPPASS environment variable as a way to avoid repetitive entry of your pass phrase.  If it is found, the pass phrase will automatically be entered in the pass phrase box in KEY32 (when decrypting files encrypted with your public key) and LOCK32 (when signing files with your public key).  From a DOS prompt, type SET PGPPASS=secretpassphrase, where secretpassphrase is your secret pass phrase.  Note: for this to work within Windows, this command must be typed before Windows is launched.  THE PGPPASS ENVIRONMENT VARIABLE IS A POTENTIAL SECURITY HOLE, SINCE ANYONE WITH ACCESS TO YOUR MACHINE CAN INSPECT THE ENVIRONMENT VARIABLES OR ANY BATCH FILES THAT SET ENVIRONMENT VARIABLES, E.G. AUTOEXEC.BAT.  While support for this PGP feature has been added at the request of users, its use is not recommended where this security risk is present.

NEW IN VERSION 3.0:  If KEY32 finds that the PGPPASS environment variable has been set, it will decrypt the file using the most recently saved decryption option (View, Save, Open or Print), and without displaying any signature.  This speeds the process of decrypting numerous files.


Key32: Viewing the Public Key Ring
Viewing the Public Key Ring

You can use Lock & Key to view the public key ring.  You can either double click on the default public key ring, PUBRING.PGP, or you can run the shortcut which Lock & Key adds to the Start Menu.  This will bring up a list of all public keys:

You can select any key and remove it by pressing the “Remove Key” button.

KEY32 uses PGP to read the public keyring, instead of reading the file directly.  KEY32 does this to obtain the unique Key ID for each key.  KEY32 then uses the Key ID to delete the key.  This makes it possible to delete a key which has multiple user names.  (It is possible using PGP to create a single key with multiple user names, or multiple keys with the same user name.)  Note that KEY32 will only show the first user name for each key.  (LOCK32, however, reads the public key ring directly, and places each user name in the drop down list.)


Lock32: Security Issues
Technical Issues

SECURITY CONSIDERATIONS

While public key cryptography provides reliable security for messages transmitted through external channels, the user must still take certain precautions to assure that confidential data in its unencrypted form, as well as the secret key and especially its pass phrase, is safeguarded from persons who may gain access to the user's computer.

LOCK & KEY itself observes certain precautions to assure that no vulnerabilities are introduced into the system.  Specifically, note the following:

•	The unencrypted input file is copied to the temporary directory by LOCK32 prior to encryption, and the decrypted output file is first created in the temporary directory by KEY32 upon decryption.  These files are “wiped” by LOCK32 and KEY32; that is, they are overwritten three times and then deleted.  This makes it impossible to recover the file using conventional disk recovery utilities such as Norton (though the data may still be recovered using more sophisticated tools, as noted in the PGP documentation).  You can reduce this risk further by using a temporary directory on a RAMdrive; e.g. D:\TEMP (where D: is a RAMdrive).  Please note that in order for Lock & Key to operate the temporary directory MUST be a subdirectory; it cannot be the root directory of any drive.

•	The same precaution is followed with respect to the batch file used to call PGP.  This file must necessarily contain the pass phrase used to unlock the secret key, making the same precautions necessary.

•	LOCK & KEY uses the PGPPASS environment variable to send the pass phrase to PGP.  This appears only in the environment given to PGP; it disappears once PGP closes, and never appears in the master environment.  This should pose no security risk.

•	It has been observed that Windows 95 swaps portions of memory to hard disk.  While this memory is deallocated by Windows when PGP exits, the data may remain in the Windows 95 swap file even after PGP closes.  In theory, this file can be read by an intruder.  As a practical matter, this risk should be slight, as (1) Windows 95 does not let other programs (such as a disk editor) access this file while Windows 95 is running; (2) if you have configured Windows 95 to dynamically adjust the size of the swap file, this file is deleted if Windows 95 exits normally; (3) the contents of this file is dynamic; and (4) this file is many megabytes in size and finding a few bytes of data would be difficult.  To reduce this risk, it is recommended that you configure Windows 95 to dynamically adjust the size of the swapfile (using the Control Panel System applet) and exit Windows 95 (thus deleting the swap file) before powering down the computer.  Note that this security issue is present whenever PGP is run within Windows 95, whether it is run directly from a DOS box or by a Windows-based front end.


Lock32: PGP Console Output
Technical Issues

VIEWING PGP CONSOLE OUTPUT

LOCK & KEY captures PGP console output.  If LOCK32 is unable to create an encrypted file for any reason, or if KEY32 is unable to decrypt a file or perform some other operation, it will report the error:

If you press Yes, you will view the PGP console output in Windows:

This will let you pinpoint the error.  Likely causes include the following:

•	The recipient's name does not appear in your public key ring.

•	You attempted to sign the file but did not enter the correct pass phrase for your private key.

•	You did not properly enter your pass phrase when decrypting the file.

•	The file was not encrypted with your public key.

•	PGP is not installed correctly.


Key32: Decrypting Files
Decrypting Using Key32

Encrypted files have a .PGP or .ASC extension and, after LOCK & KEY is installed, will appear in Explorer with a lock for an icon.  To decrypt an encrypted file, simply double-click on that file in Explorer or on the Windows 95 desktop, and KEY32 will be launched.

You may also receive a message encrypted with PGP as plain text.  Such a message looks like this:

-----BEGIN PGP MESSAGE-----

Version: 2.6.3i

hIwDcCTG46t3n3EBA/4sJq9YiqVlTO1HjFV6guUczxS2IzHWhAoWcmyBQyKuVjWG

ovdWgSQfQttuFlLFEpePbx72zWrWDcPzlzHxmPOEtFuPOA9iu5nVMYi52bcspxw3

GY2ZjDuTKEUkbUb0TOOcnm3tx3+J+kgQQ/+sFWn8/OHNoHpaFt75mKBJFFgw8YSM

A1VrqiqKapYRAQQAgj6Llb+RxiSF1kX2UHm3A6kcR8fIAoqHMfimXj5TMX0rbSmJ

UwFBwuDq1mGc6HbNHnaWIfLvMOj9lS8Dvx+MUBklE4gNsYsup4qvz0U+2yAzQ0DC

wonVggUbzyPbRhjahUHyOU+IdXm43OsUVkqSvRoncfM4ynStK45eMtbMpPemAAAA

cy6KEbmdxCxs8RMg+AxHkPGVqq58xFiqxwizFOOnfpZtIIOtKRjgrghF/PwtDzkP

BJxHmODktRY/d4dyV9Z8afh740OTDPzZWq339Pdb9Oz+Xp4jBFopUwpnRZhXN8ET

TF7hyR8Hgy8ep2Gb5Aem/Pg0J/E=

=/ifs

-----END PGP MESSAGE-----

To decrypt such a message, select the message (including the first and last lines), copy it to the Windows Clipboard, and run KEY32.EXE (“Decrypt Clipboard Contents” on the Windows 95 Start Menu).

KEY32 will prompt you for the pass phrase.  Enter one of the following:

•	If the file was encrypted using your public key, you should enter the pass phrase which unlocks your secret key.

•	If the file was encrypted using conventional encryption, you should enter the pass phrase which was used to encrypt the message.

•	If the file is not encrypted (either armored without being encrypted, or plaintext with a signature attached), you do not need to enter anything..

KEY32 will also give you the following choices on what to do with the decrypted output:

•	View the file using QuickView or QuickView Plus (if installed), or Notepad.

•	Save the file to disk.  If the input source is a file, the file will be saved using the original filename, minus the .PGP or .ASC extension.  Note that if the input source was the clipboard, the file is saved as C:\OUTPUT.

•	Open (launch) the file with the associated application.  Note that this option will not be available if the input source was the clipboard.  This option is intended for use where LOCK & KEY was used to encrypt the file, and the file was transported with the long file name intact.  In this way, the original file's extension is preserved, and Windows 95 uses this information to open the file.

•	Print the file with the associated application.  Note that this option will not be available if the input source was the clipboard.  This option is intended for use where LOCK & KEY was used to encrypt the file, and the file was transported with the long file name intact.  In this way, the original file's extension is preserved, and Windows 95 uses this information to print the file.


Lock32: Lock & Key Errors
Technical Issues

LOCK & KEY ERRORS

LOCK & KEY detects when a runtime error occurs and displays a message:

If this occurs, LOCK32 or KEY32, as the case may be, will write a log file into the PGP directory, as LOCK32.LOG, or KEY32.LOG, respectively.  This file contains information which will help us pinpoint the cause of any error.  Please send this file to the author at:

Walter E. Heindl, usk77ueb@ibmmail.com

Because binary files are not always sent properly through Internet mail channels, it is best if this file is copied to the clipboard and pasted into the message.


Popup: Recipients
You must choose the name of a recipient from the drop-down list of keys in your public key ring.

If you wish to encrypt the message for more than one recipient, do not choose a recipient from the list.  Instead, type a portion of the user ID (which must be unique) of each intended recipient, e.g. “Tom Dick Harry”

If “Encrypt To Self” is checked, then all messages will also be encrypted using your own public key, so you can decrypt the encrypted file too.


Popup: Wipe File
If this option is checked, then PGP will wipe the unencrypted input file after successful encryption.  The file, once wiped, cannot be recovered using conventional file recovery tools.  This option should be used with caution, and should not be used if the original file is “read only.”


Popup: Binary
The “Binary” option will cause the encrypted output to be saved as a file in the same directory as the input (source) file.  The filename will be the same as the input file, but with the .PGP extension added.  Use this option if you plan to transmit the encrypted file via a diskette, or through an e-mail channel capable of handling binary files.  Note: If the input source is the Windows Clipboard or the Lock & Key editor, the file will be saved as C:\OUTPUT.PGP.


Popup: Armored
The “Armored” option will cause the encrypted output to be saved as a file in the same directory as the input (source) file.  The file will first be converted to a 7-bit format, which can be transmitted through most Internet mail channels.  The filename will be the same as the input file, but with the .ASC extension added.  Use this option if you plan to transmit the encrypted file via an e-mail channel that is not capable of handling binary files.  Note: If the input source is the Windows Clipboard or the Lock & Key editor, the file will be saved as C:\OUTPUT.ASC.


Popup: Clipboard
The “Clipboard” option will cause the encrypted output to be placed in the Windows Clipboard, from which it can be pasted into an e-mail editor.  This is the most convenient way to send an encrypted message using Internet mail.


Popup: Output Options
You must select the form in which Lock & Key will save the encrypted output.

The Binary option will cause the encrypted output to be saved as a file in the same directory as the input (source) file.  The filename will be the same as the input file, but with the .PGP extension added.  Use this option if you plan to transmit the encrypted file via a diskette, or through an e-mail channel capable of handling binary files.  Note: If the input source is the Windows Clipboard or the Lock & Key editor, the file will be saved as C:\OUTPUT.PGP.

The Armored option will cause the encrypted output to be saved as a file in the same directory as the input (source) file.  The file will first be converted to a 7-bit format, which can be transmitted through most Internet mail channels.  The filename will be the same as the input file, but with the .ASC extension added.  Use this option if you plan to transmit the encrypted file via an e-mail channel that is not capable of handling binary files.  Note: If the input source is the Windows Clipboard or the Lock & Key editor, the file will be saved as C:\OUTPUT.ASC.

The Clipboard option will cause the encrypted output to be placed in the Windows Clipboard, from which it can be pasted into an e-mail editor.  This is the most convenient way to send an encrypted message using Internet mail.  If the Include My Public Key option is checked, your public key will be appended to the message, so the recipient can verify your signature or send an encrypted response.


Popup: Conventional
Use conventional encryption to encrypt the file or message using conventional (single key) encryption.  You must enter a pass phrase here which will be used to encrypt and to decrypt the file or message.  Use this option if the recipient has PGP but you do not have the recipient's public key, and if you can transmit the pass phrase to the recipient by secure means.


Popup: None
Use this option if you do not wish to encrypt the file.  This option is valid only in the following cases:

•	You are choosing to use ASCII armoring (Output options Armored or Clipboard) to encode the file for transmission over mail channels that do not support sending binary files.

•	You wish to add your signature without encrypting the file.


Popup: Compose
This causes the Lock & Key integrated editor to appear.  Use this editor to compose a text message for encryption using PGP.  The editor supports Windows keyboard shortcuts for cutting, copying and pasting text.


Popup: Key32 Input
Displays the file or data which will be decrypted.  If a file was specified, this will be the file name, minus the .PGP or .ASC extension.  If no file is specified, KEY32 assumes that there is encrypted data in the Windows Clipboard.


Popup: Key32 Pass Phrase
If the file or message was encrypted with your public key, you must enter the pass phrase which unlocks your secret key.  If the file or message was encrypted with conventional encryption, you must enter the pass phrase which was used to encrypt the message.


Popup: View
If QuickView/QuickView+ is installed, the decrypted file will be opened in QuickView.  You can use QuickView to view or print the file or to copy file data to the Windows Clipboard.  If QuickView is not installed, the decrypted file will be opened in Notepad.


Popup: Save
This option will cause the decrypted output to be saved as a file, in the current directory, with the filename shown in blue.  If KEY32 is decrypting data in the Windows Clipboard, the file will be saved as c:\output.


Popup: Open
This option will cause the decrypted file to be opened in the associated application.  This option will only work properly if the correct extension is included with the filename above.  (If LOCK32 was used to encrypt the file, the original filename and extension is preserved.)  This option will be unavailable if data in the Windows Clipboard is being decrypted.


Popup: Print
This option will cause the decrypted file to be printed by the associated application.  This option will only work properly if the correct extension is included with the filename above.  (If LOCK32 was used to encrypt the file, the original filename and extension is preserved.)  This option will be unavailable if data in the Windows Clipboard is being decrypted.  However, you can still use QuickView to print the file (if you have QuickView installed) by selecting the View option.


Popup: Key32 Output
KEY32 gives you the following choices on what to do with the decrypted output:

•	View the file using QuickView or QuickView Plus (if installed), or Notepad.

•	Save the file to disk.  If the input source is a file, the file will be saved using the original filename, minus the .PGP or .ASC extension.  If the input source was the clipboard, the file is saved as C:\OUTPUT.

•	Open (launch) the file with the associated application.

•	Print the file with the associated application.

The Open and Print options will only work if the filename (shown) contains an extension associated with an application in Windows 95.  These options will not be available if the input source was the clipboard.


Popup: Language
When installing LOCK & KEY, you are asked to choose a language.  This language will be used for displaying labels in the LOCK & KEY dialog boxes, and for message boxes.  This language preference is stored in the Registry and can be most easily changed simply by reinstalling LOCK & KEY.  The language text is stored in GLOSSARY.INI in the PGP directory and can easily be modified to support additional languages.  See the Lock & Key User Guide for details.


Popup: QuickView
Lock & Key lets you view decrypted files with QuickView or QuickView Plus, if these are installed.  These are file viewers that let you view various wordprocessing, spreadsheet, graphic and other files without using the application which created them.  This is an especially convenient means of decrypting and viewing files in a single step.  If Lock & Key can't find QuickView or QuickView Plus, it will offer to let you view decrypted files in Notepad.


Popup: Author's Key
If you answer Yes, the author's public key will be added to your public keyring, which means you will be able to send encrypted messages to the author.  You do not need to answer Yes if you have installed Lock & Key previously and have already done this step.


Popup: Viewing User Guide
Answer Yes if you wish to view the Lock & Key user guide (a Windows Help file) now.  If you answer No, you can view the User Guide by pressing the Help button in Lock & Key, or by selecting the Start Menu shortcut.


Popup: AppendKey
If this option is checked, your public key will be appended to the encrypted message which is placed in the Windows Clipboard.  This will enable the recipient to verify your signature (if you've added your "electronic signature"), or to encrypt a reply using your public key.  This option is available only if you have chosen the Windows Clipboard output option.  The user name will be your name shown in the Signature box.  If no user name is shown, press the Select button and choose a user name.


Popup: Registration
LOCK & KEY is shareware.  The shareware version is fully functional but includes a time delay.  Registration will remove this delay.  To register LOCK & KEY, send $19.95 to:

Walter E. Heindl

271 Misty Patch Road

Coatesville, PA 19320 USA

Please provide your e-mail address.  You will be sent a personalized password file which will remove the time delay.  The password file will work with future versions of LOCK & KEY, making upgrades free.

You may now register online via CompuServe SWREG.  From CompuServe, GO SWREG for details.  Registration number is 12438.


Popup: Method
Public key cryptography uses the public key of a specific recipient to encrypt the message, which can then only be decrypted by that person using his or her secret key.  This is the normal method of operation of PGP and provides the greatest security, since the recipient's secret key is necessary to decrypt the message.  The public key, however, can be freely distributed.

Use conventional encryption to encrypt the file or message using conventional (single key) encryption.  You must enter a pass phrase here which will be used to encrypt and to decrypt the file or message.  Use this option if the recipient has PGP but you do not have the recipient's public key, and if you can transmit the pass phrase to the recipient by secure means.

You may also choose not to encrypt the file by selecting none.  This option is valid only in the following cases:

•	You are choosing to use ASCII armoring (Output options Armored or Clipboard) to encode the file for transmission over mail channels that do not support sending binary files.

•	You wish to add your signature without encrypting the file.


About

Lock & Key

Windows 95 Explorer PGP Interface

Version 3.0.0 – January 8, 1997

Copyright © 1996-1997, Walter E. Heindl

Mail:     usk77ueb@ibmmail.com

http://www.voicenet.com/~wheindl/lock&key.htm


Glossary

C

CompuServe SWREG

console output

conventional cryptography

D

dual-key cryptography

E

electronic signature

encryption

environment variable

K

keys

P

pass phrase

plaintext

Pretty Good Privacy (PGP)

private key

public key

public key repository

public keyring

Q

Quick View

Quick View Plus


CompuServe SWREG

A service offered to CompuServe subscribers for registering shareware.  The charge for the shareware is collected from the subscriber by CompuServe as part of the CompuServe charges.


console output

The messages displayed by PGP when it is run from DOS, including status reports and error messages.  This information is captured by Lock & Key and can be viewed within Windows if an error occurs.


conventional cryptography

A system of cryptography which uses a single key to encrypt a message.  The same key is used to decrypt the message.  Anyone who can obtain the key can use it to decrypt a message encrypted with that key.


dual-key cryptography

A system of cryptography which uses matched pairs of keys: a public key (which is freely distributed) and a private (secret) key known only to the owner.  A message encrypted with one key can only be decrypted with the other key.


electronic signature

Additional data added to a file which was created using the sender's private (secret) key, and which the recipient, by using the sender's public keys, can verify that the message originated with the sender.


encryption

A process of altering the characters in a message, using a formula or algorithm, so that the message is not readable to anyone not having the formula or algorithm needed to decrypt the message.


environment variable

A place where the operating system stores information needed by programs (such as the location where temporary files are kept).  PGP (and Lock & Key) uses the PGPPATH environment variable to locate the PGP program files.


keys

Strings of characters which are used to encrypt a message.  The characters in the key are processed with the characters in the message using an encryption algorithm (formula) to produce an encrypted message.


pass phrase

A word or phrase which must be entered in order to encrypt or decrypt a message using the private (secret) key.  You need this word or phrase to read a message encrypted with your public key; or to affix an electronic signature to a file or message.


plaintext

Text which can be read by an ordinary text editor, and which does not require decryption or a particular application program to read.


Pretty Good Privacy (PGP)

A DOS-based cryptography which uses public-private key encryption.  PGP is widely available and has become the international standard for high security encryption.


private key

The half of a public-private key which is kept secret by the owner.  It is used to decrypt messages which others have encrypted using the public key, or to add an "electronic signature" which can be verified by someone having the corresponding public key.


public key

The half of a public-private key pair which is freely distributed.  Someone wishing to send a message to the owner of the key uses that key to encrypt a message, which can only be decrypted by the recipient using his private (secret) key.


public key repository

A source, such as a BBS or an Internet site, for public keys for many users.


public keyring

A file which contains a collection of public keys and which is used like an address book for encrypting messages.  These keys are used to send encrypted messages to others, or to verify electronic signatures on messages sent by others.


Quick View

A file-viewing program which is included on the Microsoft Windows 95 CD or which can be obtained at the Microsoft Internet site, www.microsoft.com.


Quick View Plus

A file viewing program for Windows 95 by Inso Corporation.  Quick View Plus offers enhanced capabilities in comparison to the file viewers included with Windows 95.