[liberationtech] Identity Based Encryption

[Julian Oliver]

..on Tue, Jun 25, 2013 at 10:57:57AM -0400, Mrs. Y. wrote:
> 
> I'm in a position to recommend/suggest an encryption solution for email.
> The audience is *very* sensitive to privacy, but not very technical. IBE
> seems to solve this, but there are concerns with the PKG (private key
> generator) being in the cloud. Thoughts?

Yes it's crazy to use a cloud based key generator. 

PGP/GNUPG is a better way to go, done locally on the user's machine. It can be
used for encrypting text and email. You can set up Mail.app, Outlook or other
clients to use PGP. Alternatively you can use Desktop software to both manage
keys and encrypt the text you wish to send. 

Here's one for OS X:

    https://gpgtools.org/

Windows:

    http://gpg4win.org/

GNU/Linux users can just use the command line or a GUI like:

    http://utils.kde.org/projects/kgpg/

See 'Understanding Email' in the CryptoParty Handbook for more information:

    http://weise7.org/tmp/cryptobook-v1.1.pdf
    (SHA256 e8d05c9693930dc942200546389eb12673da44647f62f6d22dbe07f35c9f6cd8)

Warm regards from Berlin,

-- 
Julian Oliver
http://julianoliver.com
http://criticalengineering.org