From: b...@zurich.ai.mit.edu (Brian A. LaMacchia)
Subject: MIT Announces availability of PGP 2.5
Date: 9 May 94 14:04:14
Organization: M.I.T. Artificial Intelligence Lab.
Xref: bga.com sci.crypt:5384 alt.security.pgp:5780
MIT has announced availability of PGP 2.5 (beta). Here's a copy of the
announcement I received:
Date: Mon, 9 May 94 09:32:39 -0400
From: Jeffrey I. Schiller <j...@mit.edu>
Subject: MIT Announces PGP 2.5
Beta Test Release of PGP version 2.5
May 9, 1994
The Massachusetts Institute of Technology announces the distribution
of PGP version 2.5, incorporating the RSAREF 2.0 cryptographic toolkit
under license from RSA Data Security, Inc., dated March 16, 1994. In
accordance with the terms and limitations of the RSAREF 2.0 license of
March 16, 1994, this version of PGP may be used for non-commercial
PGP 2.5 strictly conforms to the conditions of the RSAREF 2.0 license
of March 16, 1994. As permitted under its RSAREF license, MIT's
distribution of PGP 2.5 includes an accompanying distribution of the
March 16, 1994 release of RSAREF 2.0. Users of PGP 2.5 are directed
to consult the RSAREF 2.0 license included with the distribution to
understand their obligations under that license.
This distribution of PGP 2.5, available in source code form, is
available only to users within the United States of America. Use of
PGP 2.5 (and the included RSAREF 2.0) may be subject to export
control. Questions concerning possible export restrictions on PGP 2.5
(and RSAREF 2.0) should be directed to the U.S. State Department's
Office of Defense Trade Controls.
Users in the United States of America can obtain information via FTP
from net-dist.mit.edu in the directory /pub/PGP.
Beta Release Note -- May 7, 1994
Today's release of PGP 2.5 is a beta test release, designed to permit
users to familiarize themselves with the program and to give us
feedback before we make the final release.
This version of PGP2.5 has been tested on the following platforms:
MSDOS, Sun381i, Solaris 2.X, Ultrix 4.X, Linux, RS6000,
Over the next few days, we will be testing PGP2.5 on a variety of
other systems and collecting bug reports from this release.
Please send bug reports to pgp-...@mit.edu.
If you obtain a copy of this beta release code, please keep checking
http://web.mit.edu for the announcement of the final release, so that
you can update your copy of PGP2.5. We expect the final release to
occur within a week.
*** To Get PGP2.5: The directory where PGP2.5 is located is hidden.
To get it you need to telnet to "net-dist.mit.edu" and login as getpgp.
You will be asked to confirm that you will abide by the terms and
conditions of the 3/16/94 RSAREF 2.0 license. The license is in
the file "license.txt" in /pub/PGP on net-dist.mit.edu.
Xref: gmd.de comp.org.eff.talk:26588 sci.crypt:19275 alt.security.pgp:
12886 alt.politics.datahighway:3191 misc.legal:53442 talk.politics.crypto:
5244 alt.wired:8365 alt.activism:44323 alt.activism.d:
From: Stanton McCandlish <me...@eff.org>
Subject: PGP 2.5 now available from EFF's FTP site
Keywords: pgp, pgp2.5 pgp 2.5
Organization: Electronic Frontier Foundation
Date: Sat, 14 May 1994 02:02:02 GMT
PGP 2.5 available from Electronic Frontier Foundation ftp site
With the early May announcement of the availability of the new version of
PGP (Pretty Good Privacy) a free encryption program for email and other
files, EFF has decided to provide PGP and other cryptographic material to
users of the Internet. EFF applauds and congratulates the PGP development
team, MIT (who initially made PGP 2.5 available), and RSA Data Security
(patent holders of the RSA and RSAREF encryption code) for coming to an
agreement and providing this new version of the most popular email encryption
program in the world - a free version that is finally legal in the US.
Previous versions of PGP arguably violated US patent law, with the
exception of ViaCrypt's commercial PGP 2.4, but the new 2.5 is built upon
the free RSAREF encryption functions, rather than the previous RSA functions
which required a special licensing arrangement for use in applications
Despite the patent & licensing issues being resolved, PGP is still not legally
exportable from the United States (except to Canada), due to ITAR export
restrictions which categorize cryptographic materials as weapons of war.
Thus, EFF can only make PGP and other crypto tools and source code available
to US and Canadian nationals currently residing in the US or Canada and
connecting to EFF's site from a US or Canadian site.
PGP and similar material is available from EFF's ftp site in a hidden
directory, and only to Americans and Canadians. Access to this directory
can be obtained by reading and following the instructions in the README.Dist
PGP can only be obtained from EFF via ftp currently. Gopher and WWW
access to the material itself is not supported at this time.
Only the DOS and Unix versions of PGP 2.5 have been released so far.
The Unix version is in source code form, and so can be readily ported to
VMS, NeXT and many other operating systems. A Macintosh version has yet to
If you would like to see US export restrictions on cryptography removed,
please send a message supporting Rep. Cantwell's export reform act (bill
HR3627) to cant...@eff.org, ask your Representatives to co-sponsor this
bill, and ask your Senators to co-sponsor Sen. Murray's companion bill
(S1846) in the US Senate. Congress contact information is available from