Network Security: E-mail Security

Objectives

• To learn to use e-mail security tools– PGP

• To learn the availability of email security libraries– S/MIME

Packages & Libraries in this Lab

• Packages– GPG4win: for Windows

Experiment Scenario

• Signing/verification of files using certificates– Create a new certificate– Encrypt/sign emails – Encrypt/sign the file “original.txt” into another file

“enc.txt” (using sender’s certificate)– Then, we decrypt/verify it and get another file “dec.txt”

(using sender’s certificate), and check if the decrypted file is the same as the original file

• Sending/receiving e-mails with certificates– Set up email account– Read mails– Send mails

GPG4win

• Homepage: http://www.gpg4win.org/

• Latest version: 2.1.0

• OpenPGP: an open standard for e-mail security (RFC 4880) – S/MIME also included

• Installation steps:– Simply follow the instructions on screen

Other Tools Included in GPG4win

• Kleopatra: GnuPG certificate manager– New certificate– Encrypting/Signing a file– Decrypting/Verifying a file

• Claws Mail: a mail reader– Setting up your mail account– Reading mails– Sending mails

Microsoft Outlook Support in GPG4win

• PGP for Outlook– GpgOL 1.0 can support OpenPGP and

S/MIME

Configuring Outlook for S/MIME

• Configure Your Personal Email Certificates• Send a Signed Message• Read a Signed Message• Check the Credentials of a Signed Message• Send an Encrypted Message• Read an Encrypted Message• Get Certificates for Other Users

Summary

• Email security– PGP– S/MIME