1991, Phil Zimmermann waxa^{(Phil Zimmermann)} uu abuuray Pretty Good Privacy ( PGP ), barnaamij qarsoodi ah oo, markii ugu horeysay, siisay celceliska shakhsiga u dhow sirta heerka militariga. Sanadihii la soo dhaafay, koodka isha PGP waa la sii daayay waxaana ugu dambeyntii dhashay halbeeg furan— PGP Furan — ayaa ugu dambeyntii dhashay. Tani waxay jidka u furtay tiro badan oo alaabooyin il furan ah kuwaas oo sii wada inay bixiyaan qaar ka mid ah kuwa ugu wanaagsan ee la heli karo.

Yaa U Isticmaali Kara OpenPGP

Inta lagu jiro taariikhda PGP , iyo sirta guud ahaan, waxaa jiray naqdiyeyaal aan tiro lahayn oo kor u qaadaya aragtida ah in kaliya kuwa leh shay qarsoodi ah si ay u qariyaan sabab kasta oo ay ku isticmaalaan sirta xooggan. Dhab ahaantii, wax yar ka dib horumarintiisii bilawga ahayd, Zimmermann wuxuu isu arkay inuu bartilmaameed u yahay baadhitaan ay samaysay dawladda Maraykanka^{(US Government)} markii PGP ay ka heshay meel ka baxsan Maraykanka, ku xad-gudbida sharciyada mamnuucaya dhoofinta sirta awoodda leh.

Dhab ahaantii, waxaa jira sababo badan oo uu qofku u isticmaalo sirta, gaar ahaan marka la eego macnaha isgaarsiinta dhijitaalka ah. In kasta oo dad badani u malaynayaan iimaylka inuu yahay wax sir ah oo ammaan ah, marka laga reebo wax yar, ma jiraan wax runta ka fogaan kara.

Iimaylku^(Email) waxa uu la mid yahay kaadhka boostada marka loo eego warqad sir ah oo xidhan. Sida^(Just) kaarka boostada uu u marayo bakhaarro badan, xafiisyo boosto, baabuur boosto iyo gacmo gaar ah—oo fariinteedu caddahay in la arko—imaylka waxa uu dhex maraa adeegayaal tiro badan oo ka socda soo-diraha una socda qofka ugu dambeeya.

Halkaa marka ay marayso, hawlwadeen serfer ah oo aan damiir lahayn ayaa arki kara waxa ku jira iimayladan oo kale, iyada oo aanay jirin si ay u soo diraha ama qaataha u ogaadaan sirtooda in la jabsaday.

In kasta oo tani ay tahay walaac yar marka la wadaagayo fiidiyoow xayawaan ah oo qurux badan, ama cunto karinta cusub ee aad jeceshahay, saamiyadu aad bay u sarreeyaan marka ay xubnaha qoysku ka wada hadlayaan arrimaha maaliyadeed ama welwelka caafimaadka, fulinta oo ka hadlaya siyaasadda gudaha ee shirkadda, barnaamij-sameeyaha la wadaagaya koodka isha mid kale horumariye, ama xaalad kasta oo sharci ah halkaas oo ay muhiim tahay in la awoodo in lala xidhiidho oo la wadaago macluumaadka, ama xitaa faylasha, si ammaan ah oo gaar ah.

Waa xaaladaha noocaan ah oo ka dhigaya OpenPGP qalab muhiim u ah qof kasta oo ay khusayso sirta iyo amniga.

Sida ay u shaqeyso

Xuddunta, OpenPGP waa nidaamka xog-ururinta furaha dadweynaha. Noocan qarsoodiga ah ayaa isticmaala furaha dadweynaha/lammaanaha gaarka ah si loo xafido oo u kala saaro xogta. Iyada oo la adeegsanayo sirta guud ee furaha, marka xogta lagu sireeyo furaha dadweynaha, kaliya furaha gaarka ah ee u dhigma ayaa furfuri kara.

Marka ugu horraysa ee aad rakibto macmiil OpenPGP ah, waxa lagugu dhiirigelinayaa in aad samaysato xidhmo-lammaanaha furaha ah oo aad furahaaga dadweynaha geliso server-yada muhiimka ah, taas oo u oggolaanaysa dadka in ay ku raadiyaan magacaaga ama ciwaanka iimaylka ee la xidhiidha.

Intaa waxaa dheer, OpenPGP waxay sidoo kale caawisaa shakhsiyaadka si ay u xaqiijiyaan saxnimada iyo daacadnimada fariinta ama faylka sirta ah iyada oo ay ugu wacan tahay saxeexa dhijitaalka ah ee lagu soo daray. Shirkado badan oo software ah ayaa ku dari doona saxeexa dhijitaalka ah ee PGP oo ay weheliyaan rakibayaasha software-ka ay macaamiishu hubin karaan si ay u xaqiijiyaan daacadnimada soo dejinta, oo ay ka caawiyaan hubinta in aan la faragelin ama aan la carqaladayn in lagu daro kood xaasidnimo ah.

Sida Loo Isticmaalo

In kasta oo uu jiro qiimaha OpenPGP, hal shay oo caqabad ku noqday korsashada baahsanaanta ayaa ah adeegsiga fudud. Sida codsiyo badan oo awood leh, caqabadeeda gelitaanka ayaa mararka qaarkood ka sarreyn karta isticmaaleyaal badan oo doonaya inay wax ka qabtaan.

Iyadoo ay jiraan tiro badan oo macaamiisha OpenPGP ah - in ka badan inta baaxadda maqaalkani dabooli karo - tillaabooyinka hoose waa inay bixiyaan hage guud oo ku saabsan rakibidda iyo isticmaalka OpenPGP .

Soo deji macmiil

Markaad soo dejisanayso macmiilka OpenPGP , doorashada kowaad ayaa go'aaminaysa in laga soo dejiyo PGP-ga ganacsiga ee Symantec^{(PGP from Symantec)} , ama la isticmaalo mid ka mid ah macaamiisha isha furan ee bilaashka ah^{(free, open source clients)} .

Guud ahaan, codsiga ganacsigu wuxuu bixiyaa waayo-aragnimada ugu fudud oo la jeexjeexay, oo leh ikhtiyaarrada Mac , Windows iyo iOS, halka macaamiisha isha furan ay ku daraan taageerada Linux iyo Android , ma aha in la xuso inay yihiin lacag-la'aan.

Abuur furayaasha

Talaabada xigta waa inaad abuurto furayaashaaga guud/gaarka ah . Waxaa lagu weydiin doonaa magacaaga iyo ciwaanka iimaylka, iyo sidoo kale erayga sirta ah ee aad geli doonto si aad u xafiddo oo aad xogta u furto.

In kasta oo ay jiraan dhawr doorasho oo algorithms ah oo loo isticmaalo abuurista furayaasha, shakhsiyaadka intooda badan, doorashada algorithm-ka RSA -ga ee saxeexa iyo siraynta labadaba waa ikhtiyaarka ugu fiican. Furaha oo weynaada, ayaa sii xoogeysanaya sirta. Ilaa wakhtiga daabacaadda, furayaasha 2048-bit waa la cuskaday, ama la jabsaday, in kasta oo agabka loo baahan yahay ay aad uga sarreeyaan codsiga la taaban karo, taasoo ka dhigaysa fure 2048-bit ah oo weli ku habboon baahiyaha amniga dhexdhexaadka ah.

Maadaama furaha 4096-bit uu ku dhawaad si xoog leh uga xoog badan yahay 2048-bit, furaha 4096-bit waxaa loo arkaa mid aan la jabsan karin mustaqbalka la arki karo.

Soo rar furaha

Marka furayaashaada la sameeyo, tillaabada xigta waa inaad geliso furahaaga dadweynaha si shakhsiyaadka kale ay u helaan. Marka furahaaga la soo geliyo, qof kasta oo haysta macmiil OpenPGP wuxuu awood u yeelan doonaa inuu raadiyo furahaaga isagoo ku salaynaya cinwaankaaga iimaylka oo uu u isticmaalo si uu u xafido iimaylada iyo faylalka adiga keliya ee aad furi karto.

Waxa kale oo aad si toos ah ugu diri kartaa furahaaga guud shaqsiyaadka aad si joogto ah ula xidhiidho si ay ugu isticmaali karaan si ay u xafidaan faylasha iyo iimaylada adiga laguu qorsheeyay.

^(Integrate)Ku dhexgal Codsigaaga iimaylka^{(Your Email Application)}

Maaddaama siraynta iimaylka ay tahay mid ka mid ah isticmaalka aasaasiga ah ee sirta OpenPGP , la-qabsiga barnaamijka emailkaaga ee doorashada ayaa ah tallaabada xigta. Baakado badan-sida GPG Suite ee GPGTools-^{(GPG Suite by GPGTools)} waxay si toos ah ugu rakibi doontaa plugin loogu talagalay macaamiisha iimaylka caanka ah, oo ay ku jiraan Apple Mail , Microsoft Outlook ama Mozilla Thunderbird .

Marka aad iimaylka u direyso qof furihiisa PGP -ga aad leedahay, software kaaga OpenPGP waa in uu bixiyaa ikhtiyaarka ah in aad sir iyo/ama saxiixdo iimaylka. Sidoo kale^(Likewise) , marka aad hesho iimaylka sir sir ah iyadoo la isticmaalayo furahaaga dadweynaha, software-ku wuxuu kugu dhiirigelin doonaa inaad furto fariinta.

Shaki la'aan, sirta OpenPGP waa qalab awood u leh macaamiisha iyo xirfadlayaasha si isku mid ah. In kasta oo qalooca waxbarashadu uu ka yara sarreyn karo marka loo eego dad badan oo ay caadaysteen, faa'iidooyinku aad bay u mudan yihiin.

Haddi uu saxafi ka shaqeeyo deegaan khatar ah, ganacsade ka hadlaya siyaasada gudaha ee xasaasiga ah, horumarinta kood wadaaga ama xubnaha qoysku ay isu soo dirayaan macluumaadka gaarka ah, OpenPGP waxa ay siisaa isticmaaleyaasheeda nabad-qabka maskaxda ee la socota sirta heerka militariga.

How to Use OpenPGP to Secure Email

In 1991, Phil Zimmermann created Pretty Good Privaсy (PGP), a cryptographiс prоgram that, for the first time, gave the average individual near militarу-grade encryption. Over the years, PGP’s source code was released and аn open standard—OpenPGP—was еventually born. This opened the way for a mуriad of open source products that continue to offer some of thе best cryptography available.

Who Should Use OpenPGP

Throughout the history of PGP, and encryption in general, there have been countless critics promoting the theory that only those with something nefarious to hide have any reason to use such strong encryption. In fact, shortly after its initial development, Zimmermann found himself the target of an investigation by the US Government when PGP found its way outside the US, violating laws forbidding the export of such powerful encryption.

In point of fact, there are many reasons why a person should use encryption, especially in the context of digital communication. While many people think of email as something relatively private and secure, with few exceptions, nothing could be further from the truth.

Email is more akin to a postcard than a private, sealed letter. Just as a postcard makes its way through multiple depots, post offices, mail trucks and individual hands—with its message plain to see—an email travels through a myriad of individual servers en route from the sender to the ultimate recipient.

Along the way, an unscrupulous server operator could view the contents of such emails, with no way for the sender or recipient to know their privacy had been compromised.

While this is of little concern when sharing a cute pet video, or your favorite new recipe, the stakes become much higher when it’s family members discussing financial issues or health concerns, an executive discussing an internal corporate policy, a programmer sharing source code with another developer, or any number of legitimate situations where it’s important to be able to communicate and share information, or even files, in a secure and private manner.

It is just these kind of situations that makes OpenPGP an important tool for anyone concerned with privacy and security.

How It Works

At its core, OpenPGP is a public-key cryptography system. This kind of cryptography uses a public/private key-pair to encrypt and decrypt data. With public-key cryptography, once data is encrypted with a public key, only the corresponding private key can decrypt it.

When you first install an OpenPGP client, you’re prompted to create a key-pair set and upload your public key to key servers, allowing people to search for it by your name or associated email address.

In addition, OpenPGP also helps individuals to verify the authenticity and integrity of a message or encrypted file thanks to the included digital signature. Many software companies will include a PGP digital signature along with their software’s installer that customers can check to verify the integrity of a download, and help ensure it hasn’t been tampered with or compromised to include malicious code.

How to Use It

In spite of OpenPGP’s value, the one thing that has stymied its widespread adoption is ease-of-use. Like many powerful applications, its barrier-to-entry can sometimes be higher than many users want to deal with.

While there are a myriad of OpenPGP clients—far more than the scope of this article can cover—the steps below should provide a general guide to installing and using OpenPGP.

Download a Client

When downloading an OpenPGP client, the first choice is deciding whether to download the commercial PGP from Symantec, or use one of the free, open source clients available.

Generally, the commercial application offers the most streamlined and polished experience, with options for Mac, Windows and iOS, while the open source clients add support for Linux and Android, not to mention being free-of-charge.

Create the Keys

The next step is to create your public/private keys . You will be asked for your name and email address, as well as the password you will enter encrypting and decrypting data.

While there are a couple of choices of algorithms to use for creating the keys, for most individuals, choosing the default RSA algorithm for both signing and encrypting is the best option. The larger the key, the stronger the encryption. As of the time of publication, 2048-bit keys had been factored, or hacked, although the resources required were well beyond practical application, making a 2048-bit key still viable for moderate security needs.

Since a 4096-bit key is almost exponentially stronger than 2048-bit, a 4096-bit key is considered unhackable for the foreseeable future.

Upload the Key

Once your keys have been created, the next step is to upload your public key so other individuals can find it. Once your key is uploaded, anyone with a OpenPGP client will be able to search for your key based on your email address and use it to encrypt emails and files that only you can open.

You can also directly email your public key to individuals you regularly communicate with so they can use it to encrypt files and emails destined for you.

Integrate With Your Email Application

Since encrypting email is one of the fundamental uses for OpenPGP encryption, integration with your email program of choice is the next step. Many packages—such as GPG Suite by GPGTools—will automatically install a plugin for popular email clients, including Apple Mail, Microsoft Outlook or Mozilla Thunderbird.

When emailing someone whose PGP key you possess, your OpenPGP software should give the option to encrypt and/or sign the email. Likewise, when receiving an email that has been encrypted using your public key, the software will prompt you to decrypt the message.

Without a doubt, OpenPGP encryption is a powerful tool for consumers and professionals alike. Although the learning curve may be a little steeper than many people are accustomed to, the benefits are well worth it.

Whether a journalist working in a dangerous environment, a businessman discussing sensitive internal policy, developers sharing code or family members emailing each other private information, OpenPGP provides its users the peace-of-mind that comes with near military-grade encryption.

Alexis Walker

About the author

Ganacsi ahaan, waxay ku saabsan tahay abuurista qiimaha macaamiishaada iyo macaamiishaada. Waxaan diiradda saarayaa bixinta tilmaamo tallaabo-tallaabo ah oo ka caawinaya akhristayaashayda inay sida ugu badan uga faa'iidaystaan qalabkooda iyo software-kooda, anigoo isticmaalaya Microsoft Office. Xirfadahayga waxaa ka mid ah kiiboodhka iyo rakibida darawalada, iyo sidoo kale taageerada Microsoft Office. Sannadaha aan khibrad u leeyahay warshadaha, waxaan kaa caawin karaa inaad daboosho baahi kasta oo hardware ama software ah oo aad u baahan tahay.

Sida loo isticmaalo OpenPGP si loo sugo iimaylka

Yaa U Isticmaali Kara OpenPGP

Sida ay u shaqeyso