Network Associates welcomes your comments and suggestions. Please use the information provided in this file to contact us.

Warning: Export of this software may be restricted by the U.S. Government.

WHAT'S IN THIS FILE

Fixes in this Release New Features Documentation System Requirements Contacting Network Associates

FIXES IN THIS RELEASE

• This release corrects a security-related bug with Additional Decryption Keys (ADKs) that may allow sophisticated attackers to add unauthorized ADK key IDs to the unhashed areas of PGP public keys.

  For more information about this bug, please review the PGP ADK Security Advisory available on www.pgp.com.

NEW FEATURES

1. Expanded X.509 certificate support
   X.509 certificate requests can be created for existing PGP keys. Additionally, existing X.509 certificates can be imported onto a PGP key ring. The PGPsdk recognizes X.509 certificate revocation lists (CRLs) and incorporates the revoked certificate information therein into validity calculations for imported X.509 certificates.

2. X.509 Certificate Authority (CA) support
   The PGPsdk supports performing online certificate requests and retrievals, CRL retrievals from Network Associates Net Tools PKI 1.0, VeriSign OnSite PKI 4.0, and Entrust PKI 4.0 (using the Entrust VPN Connector 4.1).

3. X.509 TLS support
   X.509 certificates and certificate chains can now be used to authenticate a PGP Transport Layer Security (TLS) session.

4. X.509 private key import
   X.509 private keys created with other products (e.g., web browsers, etc.) can now be imported into a PGP keyring using the PKCS #8 or #12 interchange formats.

5. Low-level session key support
   The session key used to encrypt a PGP message can now be retrieved during encryption and a message can be explicitly encrypted using a given session key. This feature allows for decrypting a specific message without explicit knowledge of the passphrase for the private key if the session key for the message is known.

6. Random pool security enhancement
   Additions to the random pool are bufferred internally to impede state-following attacks.

7. Miscellaneous
   
   • DSS key sizes are now forced to be multiple of 64 bits as required by the standard.
   • The internal limit on the number of outstanding key sets have been increased approximately five fold.

DOCUMENTATION

Also included with this release are the following manuals, which can be viewed on-line as well as printed:

• PGPsdk User's Guide
• PGPsdk Reference Guide

Each document is saved in Adobe Acrobat Portable Document Format (.PDF). You can view and print these documents with Adobe's Acrobat Reader. PDF files can include hypertext links and other navigation features to assist you in finding answers to questions about your Network Associates product.

To download Adobe Acrobat Reader from the World Wide Web, visit Adobe's Web site.

Documentation feedback is welcome. Send e-mail to tns_documentation@nai.com.

SYSTEM REQUIREMENTS

Windows:

• Windows 95 OSR2, 98, or NT 4.0 with Service Pack 3/4/5
• 32 MB RAM

Macintosh:

• System 7.6.1 or later
• Power Macintosh (PowerPC processor required)
• 32 MB RAM

Solaris/Sparc:

• Solaris 2.5.1, 2.6, or 2.7

Linux/x86:

• Linux kernel 2.0 or later

CONTACTING NETWORK ASSOCIATES

For questions, orders, problems, or comments 

Contact the Network Associates Customer Service department between 8:00 a.m. and 8:00 p.m. Central Time, Monday through Friday, at:

Network Associates Customer Service
4099 McEwen Road, Suite 500
Dallas, Texas 75244

Phone: (972) 308-9960
Email:cust_care@nai.com
World Wide Web:http://support.nai.com

Contact Network Associates Customer Service for information about technical support subscription plans.

For corporate-licensed customers:

Phone: (972) 308-9960

For retail-licensed customers:

Phone: (972) 855-7044

To provide the answers you need quickly and efficiently, the Network Associates technical support staff needs some information about your computer and your software. Please have this information ready when you call:

• Program name and version number
• Computer brand and model
• Any additional hardware or peripherals connected to your computer
• Operating system type and version numbers
• Network name, operating system, and version
• Network card installed, where applicable
• Modem manufacturer, model, and speed, where applicable
• Relevant browsers or applications and their version numbers, where applicable
• How to reproduce your problem: when it occurs, whether you can reproduce it regularly, and under what conditions
• Information needed to contact you by voice, fax, or email

For product upgrades

Network Associates has a worldwide range of partnerships and reseller relationships with hundreds of independent vendors, each of which can provide you with consulting services, sales advice, and product support for Network Associates software. For assistance in locating a local reseller, you can contact Network Associates Customer Service at (972) 308-9960.

For reporting problems

Network Associates prides itself on delivering a high-quality product. If you find any problems, please take a moment to review the contents of this file. If the problem you've encountered is documented, there is no need to report the problem to Network Associates.

If you find any feature that does not appear to function properly on your system, or if you believe an application would benefit greatly from enhancement, please contact Network Associates with your suggestions or concerns.

For on-site training information

Contact Network Associates Customer Service at (800) 338-8754.