Table of Contents. WinPT Documentation. Important notice...1 About the file release numbering conventions What is WinPT?...

(1)

(2)

Important notice

_2_ About this documentation

This documentation is preliminary and as of April 15, 2003, a work in progress.

About the file release numbering conventions

The version numbering of releases is as follows:

Release candidates of WinPT (X.X.XrcX) indicate bug fixes releases.

•

When a release is considered stable usually after 2 or 3 rc releases), the "rc" suffix is removed.

•

If you find any inconsistencies or errors in this documentation, please do report them to one of the project members here:

http://sourceforge.net/project/memberlist.php?group_id=71360 Many thanks,

The WinPT team

(5)

Windows Privacy Tools (WinPT) is a collection of multilingual applications for digital encryption and signing of content. WinPT is GnuPG−based, compatible with OpenPGP compliant software (like PGP) and free for commercial and personal use under the GPL.

WinPT helps you protect your privacy. Applications included in WinPT run under the Windows operating system and include:

GnuPG − an RFC2440 (OpenPGP) compliant application free for personal and commercial use, under the terms of the GPL.

•

WinPT−GUI − a traybay application based that uses the Clipboard to let you encrypt, sign, decrypt and verify data; this is performed automatically for you when you select a menu option or via hotkeys. Also includes a key manager and file manager for file security operations;

•

WinPT Explorer Extensions − a component that extends the Windows Explorer context menus for files with single/multiple file security and wipe functions;

•

WinPT Outlook Express plugin − integration of inline signing, and encrypting/decrypting of email communications;

•

WinPT Passphrase Agent − a component to cache passphrases used by GnuPG.

•

WinPT cryptographic functionality relies on the GNU Privacy Guard (GnuPG). GnuPG was written by Werner Koch and is GNU Open Source.

The goal of WinPT is to ease installation, integration and use of applications that implement the OpenPGP security standard. This means protecting your data quickly and easily, including but not limited to email, files, instant messaging and in general any data available through the clipboard or through the file system in

Windows.

(6)

2. Installation

There are two methods of installing the Windows Privacy Tools: Run the installer application

•

Manually install each application you need

•

The first option may be suitable for fast first−time installations, and lets you choose exactly what tools you want to install and in what languages. It also includes shortcuts to important online information, a copy of the WinPT Handbook in PDF format, a shortcut to GnuPG command−line access and other extras.

The applications currently supported by the installer are:

GnuPG (official release from GnuPG or Nullify's release)

•

WinPT GUI

•

WinPT Explorer Extensions

•

WinPT Outlook Express plugin

•

WinPT Passphrase Agent

•

The second option may be used by more advanced users or by anyone wanting to upgrade one of the WinPT tools individually without altering the rest of the existing setup. Please read carefully the Requirements section of each tool manual installation instructions.

Future versions may include special handling of upgrade scenarios.

2.1 Requirements

WinPT applications require a minimum environment to run under the Windows operating system. If you are at premium for either memory or disk space, you can individually install all WinPT applications by following instructions in Appendix B.

General requirements

Windows 98/2000/XP/ME operating system

•

128 Mb RAM recommended

•

3.5Mb disk space for initial installer storage

•

Email client (depending on the plugin you use)

•

Security requirements

(to be completed − describe requirements for user level, file access, etc.)

2.2 Native language support

The WinPT installer natively supports several languages during install time. WinPT applications can handle multiple languages. Those can be activated during installation and will be automatically configured. However, only languages common to all applications will be proposed.

(7)

To activate or change this manually for individual applications, do the following:

Create a directory where you want to store the locale files (the .mo files). If using the installer, look for such directories under "locales", using the two or four code letters described below and skip the

next two steps.

•

Rename your favourite .mo file to winpt.mo

•

Put all .mo files into this directory (For example the gnupg.mo and the winpt.mo)

•

Start WinPT Tray and choose the menu entry GnuPG > preferences.

•

Set your locale directory to the directory containing winpt.mo.

•

Now WinPT Tray runs in the language you have selected.

•

For the moment, the WinPT installer supports these languages: English • German • Spanish • French •

The WinPT Tray application supports these languages: us_en : English

• de: German • es: Spanish • fr: French •

cz : Czech

•

hu: Hungarian

•

it: Italian

•

pt_BR: Portuguese (Brazil)

•

pt_PT: Portuguese (Portugal)

•

ru: Russian

•

zh_CN: Chinese (China)

•

The WinPT Outlook Express Plugin supports these languages: us_en : English

• de: German • es: Spanish • fr: French • hu: Hungarian • it: Italian • pl: Polish •

pt_BR: Portuguese (Brazil)

•

sv: Swedish

•

The WinPT Eudora Plugin supports these languages: us_en : English

• de: German • es: Spanish • fr: French • sv: Swedish •

(8)

If you are interested in translating any of the WinPT applications, or the full installer, or the documentation, please let us know :−) It's not much work and you do NOT need to be a developer!

Check this important FAQ document first: 4.3 How can I help with translation ?

2.3 Automatic installation

This is a ready−to−use and graphical installation tool for newbies and people who are not familar with advanced configuration.

It's easy and you only need to download and start the program. The rest is done by the installer. This includes registry settings, file copying and shortcuts creation for all applications, local documentation and online help or documents.

Note: If you only want to upgrade one of the WinPT tools do not use the automatic installer. Follow

instructions for manual installation in Appendix B, depending on the tool.

(Section to be updated, these are instructions for WinPT v5.13 installer)

Download the Installer Package. Make sure you have no other programs running on your computer, then run the installer by double−clicking on it.

Click Yes at the installation warning.

May we repeat you must have no other applications running, then click Next.

License Agreement

WinPT Documentation

(9)

You will be presented with the license terms of the application. Use the scroll bar to scroll down the terms in order to read them. If you agree, click Yes to continue, if not click No and the installer will close.

Select Location

Accept the default installation location (c:\Program Files\WinPT) or enter your own. Click Next to continue.

Select Start Menu Folder

(10)

Accept the default Start Menu folder (WinPT), or enter your own. Click Next to continue.

Review Installation Settings

Review your chosen installation settings. If you are happy with these, click Install. The application will then be installed.

WinPT Documentation

(11)

Completing

Once the installation is complete, you can click Finish. The Readme file contains last minute release notes and information. You can also look at the shortcuts under "Windows Privacy Tools" to find further

information and help.

(12)

3. Configuration

Configuration is split into two:

GnuPG Configuration and WinPT configuration

This is because WinPT is a graphical front end to the GnuPG encryption / decryption tool. Configuration is via the WinPT menu.

3.1 GnuPG Preferences

GnuPG settings are controlled from their Preferences box which is accessed from WinPT Menu >

Preferences , GPG Prefs button.

When WinPT is first run it must be configured with a few settings. It needs to know:

where the GnuPG keyrings are. (eg. C:\Documents and Settings\user\Application Data\GnuPG)

•

where the GnuPG program and other files are. (eg. C:\program files\WinPT\gnupggpg.exe). To see a list of the files used by GnuPG and their description, see the FILES section of the GnuPG MAN page (http://www.gnupg.org/gpgman.html), which is included in the GnuPG archive as gpg.man .

•

and where the locale files are (eg. C:\gnupg\locale\pl) Locale files are all files with the ".mo" extension.

•

The "Edit Options" button will let you edit a text file to specify command line options that can be used with GnuPG. For a list of commands you can refer to the GnuPG MAN page previously mentioned.

Once you have entered your settings click Save. If you are successful you will be told so; click OK and then

Cancel.

The GnuPG Preferences window can also be accessed from the Key Management window; GPG Menu > Preferences

(13)

3.2 WinPT Preferences

WinPT Tray settings are accessed from the Preferences dialog box which is accessed by right clicking on the WinPT Tray icon and selecting Preferences > WinPT:

You will then be presented with the Preferences dialog:

Changing the Hotkeys

If you have problems with the current assignment of the hotkeys, you can change them in Preferences. You may also disable hotkeys, although this is not recommended.

See Using Hotkeys for the current assignments.

(14)

3.3 Eudora plugin preferences

_Options configuration_

You can modify EudoraGPG settings using the menu Special −> Message Plugin settings.

Assume user lets you specify which key you want to use for signing. The plugin uses the key corresponding to the sender's address by default. If the mail address of your private key differs from the sender address, you can tell which private key to use instead.

•

Encrypt to self adds your public key to the list of recipients of an encrypted message.

•

Sign encrypted messages automatically signs all outgoing encrypted messages.

•

Remember passphrase as long as Eudora is open keeps the passphrase in memory until you quit Eudora.

•

The tab GPG Program lets you specify the path of GPG.EXE, and ca be useful if you are testing a separate installation of GnuPG (when upgrading only GnuPG, for example).

WinPT Documentation

(15)

In order to encrypt and decrypt, you need keys.

Creating and managing your keys is handled by the Key Manager application window. You can open this by clicking: WinPT menu > Key Manager

4.1 Creating Keys

Create your own key pair so that you can distribute your public key, and then use your private key and passphrase to decrypt the incoming messages.

IMPORTANT: Immediately after a keypair is created, you should generate a revocation certificate for the

primary public key. It is impossible to generate such a certificate after your private key has been compromised or lost.

4.1.1 Creating a Key Pair

This is done from the Keymanager window. Select the Key menu, Generate option.

(16)

You will then get a box to enter some information:

Enter the required information and a pass−phrase to use for decryption. The recommended subkey length is 1792 bits, and the longer the pass−phrase, the more secure the key.

WinPT Documentation

(17)

Once you have entered all information, click Start. You will see a new task start on the task bar − this is the GnuPG program creating your key. This can take a long time for key sizes of 2048 or more. Once this is completed you will receive a message. Click OK and then click End.

Your key should now be visible in Key Management.

4.1.2 Creating a revocation certificate

If you forget your passphrase or if your private key is compromised or lost, a revocation certificate may be published to notify others that the public key should no longer be used. However, this certificate must have

been generated before. There is no way to generate such a certificate once your passphrase or your private

key has been compromised or lost.

A revoked public key can still be used to verify signatures made by you in the past, but it cannot be used to encrypt future messages to you. It also does not affect your ability to decrypt messages sent to you in the past if you still do have access to the private key.

To generate a revocation key in WinPT: Go to the Key Manager dialog box.

•

Choose a key for which you wish to generate a revocation certificate by clicking once on it.

•

Right click on it and choose Revoke or choose Revoke from the Key menu on the top of the window.

•

Fill in the appropriate information, make sure you indicate a FULL PATH including filename in the "Output file" field.

•

Click OK. A message will indicate "Revocation certificate generated".

•

The generated certificate will be left in the file revoke_joes_key.asc (or whatever name you choose). Since the certificate is short, you may wish to print a hardcopy of the certificate to store somewhere safe such as your

(18)

safe deposit box. The certificate should not be stored where others can access it since anybody can publish the revocation certificate and render the corresponding public key useless.

4.1.3 Revoking an existing key

After you have created a revocation certificate, you only need to import it into WinPT to make it effective. WinPT knows how to handle it and then the key will be revoked. You will also need to publish your revoked key to keyservers where your previously valid key was published (if it was).

To revoke an existing key, simply import a revocation certificate into WinPT using the Key Manager Key −>

Import option.

4.2 Managing Keys

Use Key Management to:

List your keys

•

Edit keys (eg. to change a passphrase)

•

Delete keys

•

Sign keys

•

List or check signatures

•

To open the Key Manager screen click: WinPT Menu > Key Manager.

4.3 Importing Keys

There are three ways to import a key:

WinPT Documentation

(19)

via the clipboard

•

from a file

•

from a keyserver

•

NOTE: Once you have imported a key, the list of keys in the Key Manager window will not automatically be refreshed. This is due to the speed this takes when you have a large number of keys on your keyrings. To refresh the list, select Key Menu > Reload Keycache.

Importing a key from the clipboard

A PGP key looks something like this:

−−−−−BEGIN PGP PUBLIC KEY BLOCK−−−−−

Version: GnuPG v1.0.5 (MingW32) − WinPT 0.2.1 Comment: For info see http://www.gnupg.org

mQGiBDcopz0RBADAcbHfQ4cHWyQVZLmzQFHb1uleLBMoIqTUWQ/M+jgKJWuIS4Bt oxa5SOrAkyRCcIplhcwK3dzmyJdS1IODGT/opa2KPgMSAxGf+OI4ewfl9/weK8ew +vfJ0reJ7GBktf9VU45jx4OYLVg310c2Io1XF1AsOW+r/yewH4HFznjRbQCg/12s S9ueAgzt16T3laWhCxA/BL8D/iWLrUAo2AEInZ1t9PxCuXq1+QAsfjb6I93m4DJl HDpRnn5RTRWsPf5mBSBOlT05PzjC0l2RU6Yf90J+cOHElxDlGv0n6XnC3GYvaMNn O+xRS6y9s7w9ZN9v7XWeUWiQRSXnfT6BsvRnTM1KHkBR1Iw5ydWYSK/92rWTE5qG +ekBA/9IPhfX82t6D42t60q9ntHX8VDbdNk/5c0GzzC2yhA/1unupRpcpL3tIeBc id/95x9vq9ssR2b8LK0XrAm5vbeD30Yj0P6x0kZUUi7tVP/RB6WwMekPtF5xfShN 2FNBofxbsGnAR2cnu8HQ5YqqS2oId0lxcaaInCXR6vptmvaOXLQiVGltbyBTY2h1 bHogPHR3b2FkYXlAZnJlYWttYWlsLmRlPohGBBARAgAGBQI6TGVEAAoJEF3iSZZb A1iiZT0AoI2lh1p9eseJbzJF/CLEkYGTUecyAKCcpxIc+UBqtDV+qwrZJE63mwvr HYhGBBARAgAGBQI60f1RAAoJEJg0ZdshQ5QiOCIAoIdPJFgZt9VBxNxHnl8c5MNM FxDSAKCe9Ppm4yUrntZ4QzcNof2aiDo0AohWBBMRAgAWBQI5c3foBAsKBAMDFQMC AxYCAQIXgAAKCRDtRoHJvz35tOC9AKDIPPEFnPMPabShlr5ETpUGCK3wmgCgkjec eXfIZZrYBQ5dGzoqeC9qQBg==ZBvT

−−−−−END PGP PUBLIC KEY BLOCK−−−−−

to import, first copy the text including the −−−−−BEGIN PGP PUBLIC KEY BLOCK−−−−− and

−−−−−END PGP PUBLIC KEY BLOCK−−−−− to the clipboard and then, in the Key Manager, click: Edit

Menu > Paste. Alternatively, you can use the left−click menu over an existing key and select Paste from Clipboard.

You will be presented with a screen verifying the key:

(20)

If you are happy this is the correct key, click Import. Optionally, you may launch Key Management after the import by ticking the box.

Importing a key from a file

Keys may be imported from an ascii (text) file. The format of the key is exactly the same as for the clipboard import.

To import a key from a file, in the Key Manager, click Key Menu > Import. You will be presented with a box to navigate and select your file. Select your file and click Open, you will then be presented with the import box confirming the key(s) in the file:

Click Import to import the key.

Importing a Key from a Keyserver

Keyservers are repositories for public keys. You can import a key from a keyserver by specifying the email address or the id.

To launch the Keyserver access screen, click WinPT menu > Key Manager and then click the Keyserver menu. You will be presented with the following screen:

WinPT Documentation

(21)

Select the local keyserver and enter the id or email address and then click begin transmission. When the key has been received a box will appear.

4.4 Exporting Keys

There are three ways to export a public key: to the clipboard

•

to a file

•

to a keyserver

•

Private keys may only be exported as a text file.

Exporting a public key to the clipboard

To export to the clipboard, from the Key Manager window, select the key and click: Edit menu > Copy. The public key will be copied to the clipboard.

You may also do this by using the context sensitive menu, by right−clicking over the key and selecting Copy

to clipboard.

Once the key has been exported a box will confirm this.

Exporting a Key to a Keyserver

Keyservers are repositories for public keys. You can export a key to a keyserver by specifying the email address or the id.

(22)

To launch the Keyserver access screen, from the Key Manager window, click the Keyserver menu. You will be presented with the following screen:

Select the local keyserver and enter the id or email address, make sure you tick the box 'Send Key' and then click Begin transmission. When the key has been sent a box will appear.

WinPT Documentation

(23)

5.1 Encrypting and Decrypting Text

WinPT can encrypt and decrypt text in a number of ways. The process is performed via the Windows clipboard which makes WinPT universal. The process can be initiated by menu option, but the most convenient way is by using the hotkeys.

5.1.1 Using Hotkeys

WinPT supports shortcuts, or 'Hotkeys', for the main gpg commands. These keys are registered system wide, so you can use them from any window. If you have problems with these keys, you can change the hotkeys in the preferences dialog.

Encrypt Clipboard CTRL+ALT+e

•

Decrypt/verify Clipboard CTRL+ALT+d

•

Sign Clipboard CTRL+ALT+s

•

Export Clipboard CTRL+ALT+x

•

Import Clipboard CTRL+ALT+i

•

Outlook Express v5 encryption CTRL+ALT+o

(The recipients were extracted from the OE5 window: still under construction)

5.1.2 Using the WinPT Menu

The following tasks can be performed via the menu: Edit the Clipboard

•

Encrypt Clipboard

•

Sign and Encrypt Clipboard

•

Sign Clipboard

•

Decrypt / Verify Clipboard

•

(24)

5.1.3 Current Window Support

As a feature new to version 0.2.0 it is possible to use the main operations (sign, encrypt) within the current window. This only works if the current window contains text. For example, a mailer window with the message, a text editor or a simple edit field. The easiest way to access this feature is using the hotkeys.

Note: If you use this feature the text will automatically be cut, encrypted, and pasted again in the window.

You don't need to do anything manually.

Encrypt current window ALT+SHIFT+e

•

decrypt/verify current window ALT+SHIFT+d

•

sign current window ALT+SHIFT+s

•

Alternately you can use the WinPT menu for the current window support.

5.2 Encrypting and Decrypting Files

WinPT also has the facility to encrypt and decrypt files.

To access this, go to WinPT Menu > File Manager.

To decrypt or encrypt a file, simply drag &drop it in this window, then right−click to perform the desired operation.

WinPT Documentation

(25)

[To be completed]

(26)

7. Support, Bugs and Improvements

The WinPT Application

Thorough debugging is attempted. But, if you think you've found a bug, please send the author a message with the error description: [email protected] Please include as much detail as possible including OS version, WinPT version, and GPG version in use.

See also 7.3 WinPT Tray Debug Mode which may provide more useful information to include in your submission.

Please summarize your gpg configuration and describe any special programs or configurations on your machine. Bugs are fixed as quickly as possible and updates uploaded to http://www.winpt.org/

The Documentation

If you have any suggestions regarding the documentation, or would like to get actively involved in their development, please email [email protected]

Also, if you would like to translate them into your native language, please email [email protected]

ChangeLog

Version 0.7.92

Revamped GnuPG interface code (keyring handling, options, ...). (75% of the code is done)

•

Expands % like strings from the registry. (exactly the same, newer GPG releases do)

•

Improved the dialogs (sorting for KM, default values).

•

Support to read, but not to add, designated revokers. (key manager −> key properties −> revokers)

•

Most of the file manager parts has been revamped.

•

Import public keys via the current window mode.

•

Ability to copy the userID to the clipboard. (some users mailed me, it would be useful to copy the text of the userid to the clipboard to add it to a address book).

•

Process files via the command line (Explorer). (when you register a .gpg file type, you can use WinPT to decrypt/verify files with a simple double click. This mode is not ready to handle more than one file in a row!)

•

Expired, revoked or ultimate trusted keys are now no longer shown as key pairs.

•

WinPT doesn't crash or output weird messages when it's started from a path with a space in it.

•

The text of the default key is not mangled any more with a second 0x.

•

Version 0.5.11 [25−apr−2002]

List packets inside OpenPGP files. You can use it for the case there are some problems with the file or just to look inside it. (File Manager−>List Packets)

•

(27)

Advanced proxy support. With the new dialog you can dymnamically change the proxy settings (user, pass, host, port). (For 0.6.0 I plan the same for the keyservers)

•

And some other minor changes.

•

Version 0.5.10 [24−apr−2002]

More UTF8 (charst) fixes for some dialogs

•

Sign &encrypt for the File Manager

•

Better support for revocation certs

•

Allow the Key Manager window to maximize

•

Other smaller bug fixes

•

Version 0.5.9

For sign &encrypt there is an optional key selection dialog. That means if you enable the check button, you get a list of all secret keys and you can choose one from the list.

•

A related bug fix concerns the signing dialog. Now WinPT checks how much secret keys are

available and if only one was found, the passphrase is requested immediately without the detour about the dialog.

•

Some UTF8 fixes. For example if the userID contains special characters, the verify dialog only displayed them as black fields. This is now fixed.

•

Verify dialog and the keyserver support. Now it should be possible to retrieve a missing key and that the verification continues without any crashes or problems.

•

Version 0.5.5

More features for the key manager

•

Fixed word wrapping code

•

Fixed current window mode

•

Group support for GPG recipients

•

Faster GPG routines for sign/verify and encrypt/decrypt

•

Passphrase caching for the file manager session

•

Improved GPG configuration

•

Symmetric encryption support

•

7.1. Support

WinPT is an open, free project supported by its community, and this includes you. The best way to obtain support is to research your subject in the documentation or WinPT FAQ, and only then post a message if you did not find the answer to your question(s).

This also encourages you to contribute back the information you find useful for other to benefit from it.

Mailing Lists

If you want to get the latest information, reports, or discussions about WinPT you can subscribe to one of the WinPT mailing lists. There is a list for users and one for developers. Both lists are in English.

(28)

To subcribe send a message to [email protected] with "subscribe listname" in the body.

Example: subscribe winpt−users

Lists are:

winpt−[email protected] − The developer list

•

winpt−[email protected] − The users list

•

Searchable archives of these mailing lists are available online at: winpt−users

•

winpt−dev

•

7.2 Known problems

_2_WinPT Tray

Word wrapping

WinPT Tray can wrap lines at a specific column. You can set the value for this feature in the preferences dialog. If you don't want to use this feature, you only need to set the value to "0".

Warning If you are using Outlook or any other email client that word wraps your messages automatically, set

your client's options to wrap at at least 1 character more than WinPT Tray. You must use wrapping in WinPT if using such clients. You can use values "79" in Outlook and "78" in WinPT. Furthermore, a problem in WinPT (as of 0.7.92) prevents it from wrapping strings that do not have spaces, so you have to break them manually. An example is the use of long URLs.

HINT : Currently the line endings are NOT in network style (carriage return, line feed). But this doesn't

matter, because after you pasted it back to the mail user agent it'll be automatically translated. This is subject to change!

7.3 WinPT Tray Debug Mode

To make the detection of bugs and programming mistakes more easy, WinPT Tray contains a built−in debug mode. It can be activated with the '−−enable−debug' switch on the command line.

The WinPT Tray output is then more verbose and all steps are logged to a file with the name "gpgme.dbg". This file is stored in the current install directory of WinPT Tray. After an error occured, it could be very useful to send this file to the WinPT Tray author or include it in a Bug Report on SourceForge. Don't use the debug mode for usual work, because it slow sdown GnuPG and WinPT Tray operation.

WinPT Documentation

(29)

Individuals and companies listed here have contributed their time and effort in making this documentation better and more accurate. If we missed your name, contact us.

Fabián Rodríguez − Toxik Technologies − Project management, quality control, documentation

revision and internationalization

•

Development

The WinPT Team − Localization, debugging, etc.

•

The GnuPG Team − GnuPG

•

Timo Schulz − [email protected] − WinPT Tray author

•

Armin Dobner − Eudora plugin author

•

Gustavo Vasconcelos − Installer, Portuguese localization

•

Benoît Laniel − Installer

•

Other resources

Jonathan Clark − Webmaint − Content management tools for documentation

•

Content credits

Ed Suominen − EEPatents.com − Quick Start section original content

•

Susumu Takahashi − stakahashi − Chapter 4 revision &snapshots

•

If you want to participate to this effort, please contact any of the project managers. To comment on specific parts of this document, please contact any of the documentation managers.

(30)

Appendix A − Quick Guide

This guide is intended for experienced users and references other parts of the WinPT documentation.

1 − Running WinPT for the first time

1.1 − Automatic installation

This is a ready−to−use and graphical installation tool for newbies and people who are not familar with advanced configuration.

It's easy and you only need to download and start the program. The rest is done by the installer. This includes registry settings, file copying and shortcuts creation for all applications, local documentation and online help or documents.

Note: If you only want to upgrade one of the WinPT tools do not use the automatic installer. Follow

instructions for manual installation in Appendix B, depending on the tool.

(Section to be updated, these are instructions for WinPT v5.13 installer)

Download the Installer Package. Make sure you have no other programs running on your computer, then run the installer by double−clicking on it.

Click Yes at the installation warning.

May we repeat you must have no other applications running, then click Next.

License Agreement

(31)

You will be presented with the license terms of the application. Use the scroll bar to scroll down the terms in order to read them. If you agree, click Yes to continue, if not click No and the installer will close.

Select Location

Accept the default installation location (c:\Program Files\WinPT) or enter your own. Click Next to continue.

(32)

Select Start Menu Folder

Accept the default Start Menu folder (WinPT), or enter your own. Click Next to continue.

Review Installation Settings

Review your chosen installation settings. If you are happy with these, click Install. The application will then be installed.

WinPT Documentation

(33)

Completing

Once the installation is complete, you can click Finish. The Readme file contains last minute release notes and information. You can also look at the shortcuts under "Windows Privacy Tools" to find further

information and help.

1.2 − Initial public/private keys generation

Once the WinPT installation is complete, you need to generate your own public and private key pair unless you are a previous user of another application supporting the OpenPGP standard and already have a keypair. The WinPT application will enter the key generation dialog after installation.

If you already have an OpenPGP keypair, simply select "End" and then see section 4.3 Importing Keys for instructions on how to import your existing keypair(s).

If this is the first time you generate a keypair, see section 4.1 Creating Keys for the exact procedure to create keypairs and revocation certificates.

Create your own key pair so that you can distribute your public key, and then use your private key and passphrase to decrypt the incoming messages.

IMPORTANT: Immediately after a keypair is created, you should generate a revocation certificate for the

primary public key. It is impossible to generate such a certificate after your private key has been compromised or lost.

Use Key Management to: List your keys

•

(34)

Edit keys (eg. to change a passphrase)

•

Delete keys

•

Sign keys

•

List or check signatures

•

To open the Key Manager screen click: WinPT Menu > Key Manager.

2 − Encrypting and decrypting email or plain text

2.1 − Encrypting and Decrypting Text

WinPT can encrypt and decrypt text in a number of ways. The process is performed via the Windows clipboard which makes WinPT universal. The process can be initiated by menu option, but the most convenient way is by using the hotkeys.

WinPT supports shortcuts, or 'Hotkeys', for the main gpg commands. These keys are registered system wide, so you can use them from any window. If you have problems with these keys, you can change the hotkeys in the preferences dialog.

Encrypt Clipboard CTRL+ALT+e

•

Decrypt/verify Clipboard CTRL+ALT+d

•

Sign Clipboard CTRL+ALT+s

•

Export Clipboard CTRL+ALT+x

•

Import Clipboard CTRL+ALT+i

•

Outlook Express v5 encryption CTRL+ALT+o

(The recipients were extracted from the OE5 window: still under construction) WinPT Documentation

(35)

2.2 − Encrypting and Decrypting Files

WinPT also has the facility to encrypt and decrypt files. To access this, go to WinPT Menu > File Manager.

To decrypt or encrypt a file, simply drag &drop it in this window, then right−click to perform the desired operation.

2.3 − Current Window Support

As a feature new to version 0.2.0 it is possible to use the main operations (sign, encrypt) within the current window. This only works if the current window contains text. For example, a mailer window with the message, a text editor or a simple edit field. The easiest way to access this feature is using the hotkeys.

Note: If you use this feature the text will automatically be cut, encrypted, and pasted again in the window.

You don't need to do anything manually.

Encrypt current window ALT+SHIFT+e

•

decrypt/verify current window ALT+SHIFT+d

•

sign current window ALT+SHIFT+s

•

Alternately you can use the WinPT menu for the current window support.

(36)

3 − Help and Support

WinPT is an open, free project supported by its community, and this includes you. The best way to obtain support is to research your subject in the documentation or WinPT FAQ, and only then post a message if you did not find the answer to your question(s).

This also encourages you to contribute back the information you find useful for other to benefit from it.

Mailing Lists

If you want to get the latest information, reports, or discussions about WinPT you can subscribe to one of the WinPT mailing lists. There is a list for users and one for developers. Both lists are in English.

To subcribe send a message to [email protected] with "subscribe listname" in the body.

Example: subscribe winpt−users

Lists are:

winpt−[email protected] − The developer list

•

winpt−[email protected] − The users list

•

Searchable archives of these mailing lists are available online at: winpt−users

•

winpt−dev

•

3.1 − Some Useful Links

WinPT main distribution site

•

WinPT main documentation

•

WinPT Frequently Asked Questions

•

GNU Privacy Guard main distribution site

•

OpenPGP Alliance, including information on the OpenPGP standard and companies developing software and offering support for it.

•

WinPT Documentation

(37)

GnuPG Installation

Requirements

There are no special requirements for manual installation of GnuPG.

Manual Installation

Download the latest version of GnuPG from the GnuPG.org download page. Look for the MS−Windows pre−compiled binaries. Alternatively, you can try the GnuPG FTP mirror sites.

•

Extract the Readme.w32 file and open it with your favorite text editor, in ASCII mode. This file contains detailed instructions for manual installation of GnuPG and internationalization support.

•

You don't need to run GnuPG itself for normal OpenPGP tasks. WinPT GUI runs it for you. However having GnuPG installed is a requirement for WinPT GUI. See WinPT GUI Installation.

Options configuration

Once GnuPG has been installed, several options can be controlled. A limited set of those options can be configured with WinPT GUI as described in GnuPG Preferences. For advanced configuration, you can manually edit the options file with a text editor.

WinPT Eudora Plugin Installation

Requirements

Eudora email client − http://www.eudora.com

•

GnuPG − see GnuPG Installation

•

WinPT GUI − for keyring manager and file manager operations

•

Manual installation

Download the most recent WinPT Eudora Plugin package labeled "binary−only" from the files section.

•

Extract all the EudoraGPG−xx.dll into the plugins subdirectory of the directory where Eudora is installed. That file's last 2 letters represent the language supported.

•

Rename the file to EudoraGPG.dll.

•

When you start Eudora the next time, the plugin tries to find GPG.EXE. If it is not found, it will ask you where it is:

(38)

You can then create the following toolbar:

It contains buttons to check the signature, sign, encrypt and decrypt the currently opened message.

Using the Eudora GnuPG Plugin

EudoraGPG operates on the text of outgoing or incoming messages.

If you have finished composing a message, select the button GPG encrypt. EudoraGPG tries to find the public keys of all recipients in your keyring. If at least one recipient is not found, you have to select the recipients yourself:

WinPT Documentation

(39)

If the message is to be signed, enter the passphrase (up to 2047 characters) of a private key in the following dialog:

EudoraGPG works on the text of a message only, so attachments are not automatically en− or decrypted. Future versions will support PGP/MIME but currently this is not supported.

(40)

WinPT Explorer Extensions Installation

Requirements

[To be completed]

•

Manual Installation

Download the file latest version from the WinPT Project Page (currently winptee−0.3.0−dll.zip) and unzip to a temporary folder. Copy the files WinPTEE.dll and OpenCDK.dll to the System folder (usually

C:\Windows\System on Windows 9x/Me and C:\WinNT\System32 on NT/2000).

Edit the file install−opencdk.reg and point it to the public and the secret GnuPG keyring files (use double backslashes for subfolders). An example on how install−opencdk.reg should look like is below:

REGEDIT4

[HKEY_CURRENT_USER\Software\GNU\OPENCDK]

"pubring"="C:\\Windows\Application Data\\GnuPG\\pubring.gpg" "secring"="C:\\Windows\Application Data\\GnuPG\\secring.gpg"

Then save, close and double click it. If Windows asks if you want to merge the contents of this file to the Windows Registry click "Yes". A confirmation will be displayed if the file was successfully merged. If not, check the backslashes and the quotes. Remember that the line starting with HKEY_CURRENT_USER must contain only single backslashes!

Depending on your operating system edit either install−win9x.reg or install−winnt2kreg and check if the line which points to winptee.dll is correct. If it's not, then change it to fit the winptee.dll file on your system and save, close and double click the file, merging it just like you've done with the install−opencdk.reg file. Remember that the lines starting with HKEY_LOCAL_MACHINE and HKEY_CLASSES_ROOT must contain only single backslashes!

Done! Now the file menu in Explorer should display a new entry, WinPT with options to Encrypt, Decrypt, Sign and Wipe files.

WinPT Outlook Express plugin Installation

Requirements

[To be completed]

•

Manual Installation

Download the file latest version from the WinPT Project Page (currently gpgoe−0.4.1−dll.zip) and unzip to a temporary folder. Then create a folder in which place the files (e.g. C:\Program Files\Windows Privacy Tools\GPGOE) and copy to it the files GPGOEInit.exe and GPGOE.dll. You can create a shortcut in the Startup folder in the Start Manu to GPGOEInit.exe in order to the plugin launch automatically with Windows.

WinPT Documentation

(41)

Other wise execute it manually before starting Outlook Express.

To setup the translation files create a folder (e.g. C:\Windows\Application Data\Locale) and copy the .mo files

to it. Edit the file *nls−w32.reg and point it to the folder containing the .mo files (use double backslashes for

subfolders). An example on how nls−w32.reg should look like is below: REGEDIT4

[HKEY_CURRENT_USER\Control Panel\Mingw32\NLS] "MODir"="C:\\Windows\\Application Data\\Locale"

Then save, close and double click. If Windows asks if you want to merge the contents of this file to the Windows Registry click "yes". A confirmation will be displayed if the file was successfully merged. If not check the backslashes and the quotes. Remember that the line starting with HKEY_CURRENT_USER must contain only single backslashes!

After merging rename the file you want to use as your language to gpgoe.mo and run GPGOEInit. The language files currently avaible are:

gpgoe−de.mo − German

•

gpgoe−es.mo − Spanish

•

gpgoe−fr.mo − French

•

gpgoe−hu.mo − Hungria

•

gpgoe−it.mo − Italian

•

gpgoe−pl.mo − Polish

•

Start Outlook Express and begin using it!

WinPT Passphrase Agent Installation

Manual Installation

Download the most recent WinPT Passphrase Agent package from the downloads section.

•

Simply copy the file to the same folder of winpt.exe

•

In the GnuPG options file, add the following text on an empy line: use−agent

•

WinPT Tray Installation

Requirements

There must be an existing GnuPG installation on your system for succesful WinPT Tray installation and operation. The current WinPT Tray requires GnuPG version 1.2.1 or later. Please see GnuPG Installation.

(42)

Manual installation

Download the most recent WinPT Tray package labeled "binary−only" from the files section. If the stable version is under 0.7.95, it is advised you download a Development and Test release. Despite this description, 0.7.x versions are considered more stable than previous versions but will only be moved to the stable package once thoroughly tested.

•

Create a directory and extract all the WinPT Tray archived files. WinPT Tray files can be extracted to their own directory, at the same level or under the GnuPG application (c:\gnupg if you followed GnuPG Installation)

•

You can now start it for the first time by double−clicking WinPT.exe. If all is well, you should get a configuration box that will let WinPT Tray know where to find GnuPG to work properly. (see GnuPG Preferences)

1. Getting WinPT to Run Automatically on Startup

WinPT will not normally be available for use until you run the program (eg. by double−clicking the winpt.exe file). You can get WinPT to run automatically when your computer starts by following these steps.

Create a shortcut to the executable

Locate the winpt.exe file using Windows Explorer. Right−click the file and click Create Shortcut. Once the shortcut has been created, rename it to WinPT.

Add the shortcut to Startup

Still in Windows Explorer, click and drag the shortcut to the Start Menu. Hold it there until the Start Menu opens, then hover over Programs, then Startup so that the Startup items are visible (if any). Drop the shortcut into the Startup list.

2. Running WinPT for the first time

Once the WinPT installation is complete, you need to generate your own public and private key pair unless you are a previous user of another application supporting the OpenPGP standard and already have a keypair. The WinPT application will enter the key generation dialog after installation.

If you already have an OpenPGP keypair, simply select "End" and then see section 4.3 Importing Keys for instructions on how to import your existing keypair(s).

If this is the first time you generate a keypair, see section 4.1 Creating Keys for the exact procedure to create keypairs and revocation certificates.

To report a problem in the documentation, please submit a bug in the Documentation category, or contact a documentation writer mentioning this reference: [(complete content)]

Content managed with Helpem. Switch HelpCode on/off WinPT Documentation