Current PGP versions

PGP exists in several different versions. If you are not sure which version is the right one for you, you may find help here. The following is a list of the most popular PGP versions available today:

PGP 2.3a

 This is the "classic" PGP version, and until recently, this was the version generally used by PGP users all over the world. You may still use PGP 2.3a if you want to, but you may experience problems when trying to process messages and keys generated with PGP 2.6 and later versions, or when using keys that are larger than 1280 bits (the maximum size is now 2048 bits). PGP 2.3a is presumably illegal to use within the USA because of patent restrictions.


PGP 2.6ui

This is an unofficial, "hacked" version of PGP 2.3a, which aimed at correcting the incompatibility problems introduced by MIT PGP 2.6. Please observe that PGP 2.6ui is not a "true" 2.6 version as it is based on the source code for PGP 2.3a, and as such does not include the improvements and bug fixes found in the newer versions. PGP 2.6ui was published by mathew in the UK, but is no longer supported.


PGP 2.62ui

Tony Lezard in the UK based this version of PGP on mathew's 2.6ui, but tried to bring it up-to-date with the latest PGP 2.6x improvements (bigger keys, bug-fixes, new command options etc.). PGP 2.62ui can be downloaded from ftp.mantis.co.uk.


MIT PGP 2.6.2

This is the latest official version of PGP, released by MIT and adapted (some would say mangled) for use in the USA:
  1. It creates messages that cannot be read by PGP versions prior to 2.5.
  2. It uses the RSAREF encryption library, making it slightly slower on most platforms. Furthermore, it does not understand the old signature format used by PGP 2.2 and earlier versions.
PGP 2.6.2 is illegal to export from USA, but once exported anyone may use it freely. This version corrects a number of bugs found in PGP 2.6 and 2.6.1. If you are a US citizen living in the US, this is probably the PGP version you want. MIT PGP 2.6.2 can be downloaded here.


PGP 2.6.3i

This is the latest international version of PGP, based on the source code for MIT PGP 2.6.2 and modified for international use. PGP 2.6.3i is published by Ståle Schumacher in Norway, and differs from MIT PGP 2.6.2 in the following ways:
* It does not use the RSAREF encryption library
* It is 100% compatible with all other PGP 2.x versions
* It corrects a number of bugs present in PGP 2.6.2(i)
* It compiles "out of the box" for many new platforms
* It adds some new features without breaking compatibility with earlier versions
PGP 2.6.3i is the most flexible, up-to-date version of PGP available today. PGP 2.6.3i is probably illegal to use within the USA, so if you are a US citizen, you should use MIT PGP 2.6.2 or PGP 2.6.3 instead. For more information on PGP 2.6.3i, and how to download a copy, refer to the International PGP Home Page.


PGP 2.6.3

If you compile the source code for PGP 2.6.3i using the -DUSA option and linking with RSAREF (rsaglue2.c) instead of MPILIB (rsaglue1c.), you will get a version that identifies itself as PGP 2.6.3. It contains all the same bug-fixes and improvements as PGP 2.6.3i, but it will be slightly slower, and the "legal kludge" cannot be disabled. PGP 2.6.3 is not an official PGP version, but is still perfectly legal to use inside the USA. It is only distributed as source code. However, some helpful individuals that have compiled it for their own use, have also made it available to the general public: I cannot guarantee the authenticity of these compilations. On the other hand, I have no reason to believe that they have been tampered with, either.


ViaCrypt 2.7.1 and 4.0

ViaCrypt PGP is a commercial version of PGP available in the US and Canada only. Phil Zimmermann says that no compromises in the cryptographic strength of PGP were made for ViaCrypt's version of PGP. The ViaCrypt PGP package includes program disks (executables only, no source code), a user manual, and an individual user license. The current release is available for Windows, MS-DOS, Macintosh and UNIX. There is a special version available which interfaces to CompuServe's CIM. Prices start at $100 for the DOS version.

To purchase ViaCrypt PGP, click here.

Last updated March 5, 1997 by Ståle Schumacher <stale@hypnotech.com>