What's New in PGP Software Developer's Kit Version 1.7.8 Copyright (c) 1990-2000 by Network Associates Technology, Inc., and its Affiliated Companies. All Rights Reserved. Thank you for using Network Associates' products. This What's New file contains important information regarding the PGPsdk. Network Associates strongly recommends that you read this entire document. Network Associates welcomes your comments and suggestions. Please use the information provided in this file to contact us. Warning: Export of this software may be restricted by the U.S. Government. ___________________ WHAT'S IN THIS FILE - Fixes in this Release - New Features - Documentation - System Requirements - Contacting Network Associates _____________________ FIXES IN THIS RELEASE * This release corrects a security-related bug with Additional Decryption Keys (ADKs) that may allow sophisticated attackers to add unauthorized ADK key IDs to the unhashed areas of PGP public keys. For more information about this bug, please review the PGP ADK Security Advisory available on www.pgp.com. ____________ NEW FEATURES 1. Expanded X.509 certificate support. X.509 certificate requests can be created for existing PGP keys. Additionally, existing X.509 certificates can be imported onto a PGP key ring. The PGPsdk recognizes X.509 certificate revocation lists (CRLs) and incorporates the revoked certificate information therein into validity calculations for imported X.509 certificates. 2. X.509 Certificate Authority (CA) support. The PGPsdk supports performing online certificate requests and retrievals, CRL retrievals from Network Associates Net Tools PKI 1.0, VeriSign OnSite PKI 4.0, and Entrust PKI 4.0 (using the Entrust VPN Connector 4.1). 3. X.509 TLS support. X.509 certificates and certificate chains can now be used to authenticate a PGP Transport Layer Security (TLS) session. 4. X.509 private key import. X.509 private keys created with other products (e.g., web browsers, etc.) can now be imported into a PGP keyring using the PKCS #8 or #12 interchange formats. 5. Low-level session key support. The session key used to encrypt a PGP message can now be retrieved during encryption and a message can be explicitly encrypted using a given session key. This feature allows for decrypting a specific message without explicit knowledge of the passphrase for the private key if the session key for the message is known. 6. Random pool security enhancement. Additions to the random pool are bufferred internally to impede state-following attacks. 7. Miscellaneous. - DSS key sizes are now forced to be multiple of 64 bits as required by the standard. - The internal limit on the number of outstanding key sets have been increased approximately five fold. _____________ DOCUMENTATION Also included with this release are the following manuals, which can be viewed on-line as well as printed: * PGPsdk User's Guide * PGPsdk Reference Guide Each document is saved in Adobe Acrobat Portable Document Format (.PDF). You can view and print these documents with Adobe's Acrobat Reader. PDF files can include hypertext links and other navigation features to assist you in finding answers to questions about your Network Associates product. To download Adobe Acrobat Reader from the World Wide Web, visit Adobe's Web site at: http://www.adobe.com/ Documentation feedback is welcome. Send e-mail to tns_documentation@nai.com. ___________________ SYSTEM REQUIREMENTS Windows: - Windows 95 OSR2, 98, or NT 4.0 with Service Pack 3/4/5 - 32 MB RAM Macintosh: - System 7.6.1 or later. - Power Macintosh (PowerPC processor required). - 32 MB RAM Solaris/Sparc: - Solaris 2.5.1, 2.6, or 2.7 Linux/x86: - Linux kernel 2.0 or later. _____________________________ CONTACTING NETWORK ASSOCIATES You may direct all questions, comments, or requests concerning the software you purchased, your registration status, or similar issues to the Network Associates Customer Service department at the addresses or phone numbers listed below. Contact the Network Associates Customer Service department between 8:00 a.m. and 8:00 p.m. Central Time, Monday through Friday, at: Network Associates Customer Service 4099 McEwen Road, Suite 500 Dallas, Texas 75244 Contact information for corporate-licensed customers: Phone: (972) 308-9960 Email: services_corporate_division@nai.com Web: http://support.nai.com Contact information for retail licensed customers: Phone: (972) 308-9960 Email: cust_care@nai.com Web: http://www.pgp.com Send correspondence to the following Network Associates location: Network Associates Corporate Headquarters 3965 Freedom Circle McCandless Towers Santa Clara, CA 95054 Or, you can receive online assistance through any of the following resources: 1. World Wide Web: http://support.nai.com 2. Telephone technical support Corporate-licensed customers: (972) 308-9960 Contact Network Associates Customer Service for information about technical support subscription plans. Retail-licensed customers: (972) 855-7044 To provide the answers you need quickly and efficiently, the Network Associates technical support staff needs some information about your computer and your software. Please have this information ready when you call: - Program name and version number - Computer brand and model - Any additional hardware or peripherals connected to your computer - Operating system type and version numbers - Network name, operating system, and version - Network card installed, where applicable - Modem manufacturer, model, and speed, where applicable - Relevant browsers or applications and their version numbers, where applicable - How to reproduce your problem: when it occurs, whether you can reproduce it regularly, and under what conditions - Information needed to contact you by voice, fax, or e-mail We also seek and appreciate general feedback. * FOR PRODUCT UPGRADES * Network Associates has a worldwide range of partnerships and reseller relationships with hundreds of independent vendors, each of which can provide you with consulting services, sales advice, and product support for Network Associates software. For assistance in locating a local reseller, you can contact Network Associates Customer Service at (972) 308-9960. * FOR REPORTING PROBLEMS * Network Associates prides itself on delivering a high-quality product. If you find any problems, please take a moment to review the contents of this file. If the problem you've encountered is documented, there is no need to report the problem to Network Associates. If you find any feature that does not appear to function properly on your system, or if you believe an application would benefit greatly from enhancement, please contact Network Associates with your suggestions or concerns. * FOR ON-SITE TRAINING INFORMATION * Contact Network Associates Customer Service at (800) 338-8754.