PGP Encryption on HP-UX 11.0

[Manjunath Shastry]

Greetings Gurus,

I have a problem at hand and I am looking for a solution. I have to (PGP) encrypt
approximately about 60 GB of Data on HP-UX 11.0. I have downloaded the pgp freeware and have installed it and I am trying to configure the Keys and signatures. A user of mine was using it on windows to encrypt small files and He has all the necessary keys with him.

I am not sure, If I have configured it in the right manner. I have a few queries :

There seem to be two types of keys DSS and RSA, which one should I choose ?

How do I configure the necessary keys ?

How do I go about encrypting 60 GB of Data ?

How do I make sure all is well with the encrypted Data ?

I have a combination of both ASCII and Binary Files, how do i encrypt them ?


Would appreciate your help.


Regards,
Manjunath.

[Brian Bergstrand · Accepted solution]

1. You should have both types of keys. One is used for encryption and one is used for signing. I believe RSA is the encryption one, but don't quote me.

2. man pgp should tell you this. IIRC I think there is a separate 'addkey' or 'keyadd' tool that creates the keys. You just specify the type (RSA, etc) and the bit size. If you can't find a man page, i'm sure http://www.pgpi.com/ has some documentation.

3. Be prepared to wait a LONG time. :) Again look at the pgp man page. Should be something like pgp --encrypt [files].

4. Makes no difference. PGP will encrypt binary or ascii files, but if you enable compression don't expect a lot of savings with binary files.

Discalimer: I've been using gpg (GNU Privacy Guard) for a while, so that may have influenced my memory. You may want to check this out at http://www.gnupg.org/

HTH.

[Steven E. Protter]

I wold not want to encrypt 60 GB of data.

If you want to transmit it in a a secure encrypted way, then use Secure shell

http://www.software.hp.com/cgi-bin/swdepot_parser.cgi/cgi/displayProductInfo.pl?productNumber=T1471AA

Then exchange public keys and nobody will be able to intercept and use the data.

See attachment.

SEP

[Manjunath Shastry]

Greetings Gurus,

Thank you for the response. I think I have progressed from the state of blindly feeling an Elephant to the state of atleast gazing its size.

I am going through the PGP Users Guide. I will keep you updated.


Regards,
Manjunath.

[Manjunath Shastry]

Greetings Gurus,

I am glad to inform that I am successfully able to encrypt the files using PGP. I added the same keys one which was used on the Windows System, it had an extension of .asc, using the pgp -ka option. The Command pgp -kv lists me all the keys installed and pgp -se signs and encrypts the files with the given user id and pass phrase.

Thank you for your valuable inputs.

Regards,
Manjunath.

[Manjunath Shastry]

Greetings Gurus,

I am unable to encrypt files larger than 2 GB in size. The files are stored on a large enabled file system, the PGP encryption utility exits without any error messages.

Would appreciate any further pointers in this regard.

Regards,
Manjunath.

[Manjunath Shastry]

Greetings Gurus,

I have a problem in encrypting files larger than 2 GB in size. The PGP Utility carshes without any error messages.

Would appreciate your help.


Regards,
Manjunath.

[Steven E. Protter]

1) Post the procedure you used to get as far as you have. I'm very interested in what you did.

2) Make sure the filesystem itself is set up for largefiles. If its not, you can use fsadm to convert it to large files. Under 11.00, largefiles must be specified in /etc/fstab

example.
/dev/vg02/orcldata /oracle2 vxfs rw,suid,largefiles,delaylog,datainlog 0 2

3) Check back and make sure the PGP version you are using can handle files that big. Trying to encrypt too much data defeats the purpose of the utility. My prior post deals with that.

Good luck and please, let us know whats going on. I want to try PGP on my HP-UX boxes.

SEP