Media Release: PGP Corporation Receives FIPS 140-2 Validation

PGP CORPORATION RECEIVES FIPS 140-2 VALIDATION

NIST validation of PGP Software Developer Kit (SDK) enables PGP Corporation to better serve federal customers

Palo Alto, CA/24 March, 2004 - PGP Corporation, the global leader in digital information security, announced that the PGP® Software Developer Kit (SDK) 3.0.3 has received Federal Information Processing Standards (FIPS) 140-2 Level 1 validation by the National Institute of Standards and Technology (NIST). The PGP SDK is the core software cryptographic module used inside all PGP Corporation's products, including PGP Universal, PGP Desktop, PGP Mobile, and the newly announced PGP Command Line. This module was validated to the standards set forth by the FIPS PUB 140-2 "Security Requirements for Cryptographic Modules" document published by NIST. Validation information is available at the FIPS website http://csrc.nist.gov/cryptval/140-1/1401val2004.htm.

"We understand the many certifications and validations required by U.S. and international government agencies and technology organizations," said Phillip Dunkelberger, President and CEO of PGP Corporation. "One major step is FIPS validation of the core cryptographic capabilities that underlie our comprehensive, secure-messaging solutions. You will see other important announcements from PGP Corporation in the near future."

PGP Corporation has been providing secure-messaging products to the U.S. and international governments and government agencies for many years. With its Ingram Micro partnership, the Company is expanding the number of qualified government partners, many of which hold Government Services Agency (GSA) Schedule Contracts. Adding the FIPS 140-2 validation allows PGP Corporation to continue to facilitate the procurement and deployment of information-security products for government agencies. PGP Corporation's email encryption technology is one of only two email-related encryption standards approved by NIST under in its "Guidelines on Electronic Mail Security".
http://csrc.nist.gov/fasp/FASPDocs/network-security/Electronic-Mail.pdf [PDF: 12.1KB]

PGP Corporation recently hosted a Federal Roundtable in Washington, D.C. The panel included information security industry leaders, a number of whom have served in senior U.S. government cybersecurity positions. Ted Bridis, senior technology writer for the Associated Press, moderated the roundtable. Senior officials of the federal government, business leaders, and members of the media attended.

About PGP Corporation
The recognized worldwide leader in secure messaging and information storage, PGP Corporation develops, markets, and supports products used by a broad installed base of enterprises, businesses, governments, individuals, and cryptography experts to secure proprietary and confidential information.

During the past ten years, PGP® technology has built a global reputation for open and trusted security products. The PGP Corporation family of products includes PGP Universal-an automatic, self-managing, network-based solution for enterprises-as well as desktop, mobile, and SDK solutions. Venture funding is provided by DCM-Doll Capital Management and Venrock Associates. Contact PGP Corporation at www.pgp.com or +1 650 319 9000.

Media and analyst contact for PGP Corporation:
Lori Curtis
Jump Start Communications, LLC
+1 970 887 0044
lori@jumpstartcom.com

###

PGP is a registered trademark and the PGP logo is a trademark of PGP Corporation. Product and brand names used in this document may be trademarks or registered trademarks of their respective owners. Any such trademarks or registered trademarks are the sole property of their respective owners.