PGP
An open-source encryption software suite supporting symmetric encryption, public-key encryption, and digital signatures. It uses a web of trust model to manage public keys and is used primarily for email and file encryption.
Core Facts
Timeline (last 90 days)
In the late 1990s, encryption tools such as PGP began to be introduced into instant messaging scenarios by some technical users, and third-party plugins and alternative solutions began to attract attention, but ICQ itself did not natively support end-to-end encryption.
Early PGP was not invulnerable in algorithm design and key management, and the security community later had a great deal of criticism, mostly focused on usability and key lifecycle management (revocation, expiration, recovery from loss, confirmation of public-key authenticity) rather than the encryption algorithms themselves.
PGP initially used the RSA public-key algorithm and the IDEA symmetric algorithm, and managed public keys through a Web of Trust model rather than relying on a centralized certificate authority.
Because of the spread of PGP, Phil Zimmermann was investigated by the U.S. government in the mid-1990s and faced legal risk, and the incident became a landmark case in the debate over encryption export controls.
Phil Zimmermann did not package encryption as an anti-government tool, but instead emphasized citizens' right to self-defense, holding that encryption is basic protection just like locking the door of one's home.
PGP later evolved into the OpenPGP standard and gave rise to widely used open-source implementations such as GnuPG, and its technical approach is still used today in scenarios such as email encryption, software package signing, and code commit signing.
The debates surrounding PGP ultimately pushed the United States to gradually relax encryption export restrictions from the late 1990s to the early 2000s.
The desktop version of Thunderbird is known for extensibility, privacy protection, and a high degree of customization, supporting multi-email account management, PGP encryption, and a plugin ecosystem.
The Web of Trust model was first widely used in the PGP encryption system, where users mutually sign each other's public keys to establish a chain of trust without a central certification authority.
PGP was developed by Phil Zimmermann in 1991 and is one of the earliest end-to-end email encryption solutions.
6 more timeline events
All Facts (16)
Phil Zimmermann released PGP (Pretty Good Privacy) in 1991, providing end-to-end encryption capabilities for email, which later evolved into the open-source GPG (GNU Privacy Guard) standard.
65%UnverifiedPGP uses long-term static keys and lacks Forward Secrecy; once the private key is compromised, all historical communications encrypted with that key will be exposed.
60%UnverifiedIn the late 1990s, encryption tools such as PGP began to be introduced into instant messaging scenarios by some technical users, and third-party plugins and alternative solutions began to attract attention, but ICQ itself did not natively support end-to-end encryption.
50%UnverifiedEarly PGP was not invulnerable in algorithm design and key management, and the security community later had a great deal of criticism, mostly focused on usability and key lifecycle management (revocation, expiration, recovery from loss, confirmation of public-key authenticity) rather than the encryption algorithms themselves.
50%UnverifiedPGP initially used the RSA public-key algorithm and the IDEA symmetric algorithm, and managed public keys through a Web of Trust model rather than relying on a centralized certificate authority.
50%UnverifiedPGP later evolved into the OpenPGP standard and gave rise to widely used open-source implementations such as GnuPG, and its technical approach is still used today in scenarios such as email encryption, software package signing, and code commit signing.
50%UnverifiedPhil Zimmermann did not package encryption as an anti-government tool, but instead emphasized citizens' right to self-defense, holding that encryption is basic protection just like locking the door of one's home.
50%UnverifiedThe debates surrounding PGP ultimately pushed the United States to gradually relax encryption export restrictions from the late 1990s to the early 2000s.
50%UnverifiedThe desktop version of Thunderbird is known for extensibility, privacy protection, and a high degree of customization, supporting multi-email account management, PGP encryption, and a plugin ecosystem.
50%UnverifiedThe Web of Trust model was first widely used in the PGP encryption system, where users mutually sign each other's public keys to establish a chain of trust without a central certification authority.
50%UnverifiedPGP was developed by Phil Zimmermann in 1991 and is one of the earliest end-to-end email encryption solutions.
50%UnverifiedPGP（Pretty Good Privacy）诞生于1991年，因密钥管理繁琐、信任模型去中心化等障碍从未真正大规模普及，2018年发现的EFAIL漏洞暴露了其与HTML邮件交互的设计缺陷
50%UnverifiedPGP诞生于1991年，至今已有30多年历史，是最早被广泛认知的邮件加密方案
50%UnverifiedBecause of the spread of PGP, Phil Zimmermann was investigated by the U.S. government in the mid-1990s and faced legal risk, and the incident became a landmark case in the debate over encryption export controls.
50%UnverifiedThe EFAIL vulnerability discovered by security researchers in 2018 exposed design flaws in PGP when interacting with HTML email.
60%Unverified2019年 SKS 密钥服务器遭受'证书投毒'攻击，导致整个 PGP 生态系统陷入危机
50%