PGP Corporation Logo
select United States productsPurchasedownloadssupportpartnersnewsroomcompanycareerscontact
.
.
.
.

PGP Source Code

PGP Corporation is the only commercial secure-messaging vendor to publish source code for peer review so customers and cryptography experts may validate product integrity.

PGP Universal Source Code
PGP Corporation is making the full source code to PGP Universal Server and PGP Universal Satellite available for review. The source code for PGP Universal Server and PGP Universal Satellite is available via a cost-free process that begins by completely filling out this form .

Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

PGP Universal GPL Source Code
Although PGP Universal itself is not subject to the GNU General Public License (GPL), PGP Universal utilizes certain software subject to the GPL. PGP Corporation made a small number of modifications to some of the GPL software it uses. As required by the GPL, PGP Corporation is making these changes available to the public. To download an archive containing all modifications made by PGP Corporation to software subject to the GPL please click on the following:

PGP Universal 1.0 GPL Source [TGZ: 1.8MB]
PGP Universal 1.1 GPL Source [TGZ: 14.3MB]
PGP Universal 1.2 GPL Source [TGZ: 15MB]
PGP Universal 2.0 GPL Source [TGZ: 14MB]

In compliance with the GPL, PGP Corporation also offers a CD-ROM containing the full modified versions of GPL software source code for the cost of the media and shipping.

Note: This CD does not contain any modifications not also readily available from the GPL source code download URL above

If you would like to obtain the modifications PGP Corporation made to GPL software, you probably want to download the archive above instead of ordering this CD.

To order a copy of the GPL software CD, please send postal mail to:

PGP Corporation
GPL Source Code CD Fulfillment
200 Jefferson Dr.
Menlo Park, CA 94025

Please include your shipping address in all communications to allow calculation of the GPL Source Code CD shipping costs. PGP Corporation will contact you with a quote and payment information. Please allow 6-8 weeks for fulfillment.

PGP Desktop Source Code
The source code for PGP Desktop is available for peer review. To begin the download process, please agree to the Internal Review License Agreement and provide us with a valid email address on the form that follows. After filling out the form, you will then be emailed information on how to download the source code.

I have read and accept to the Internal Review License Agreement.


Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

PGP Command Line Source Code
The source code for PGP Command Line is available for peer review. To begin the download process, please agree to the Internal Review License Agreement and provide us with a valid email address on the form that follows. After filling out the form, you will then be emailed information on how to download the source code.

I have read and accept to the Internal Review License Agreement.

Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

Licensing the PGP SDK
Companies or individuals wishing to license the PGP source code for inclusion into their products should refer to the PGP SDK for details.

Reporting Problems
Users finding what they believe are problems in the source code should follow the procedure described in the license for reporting perceived flaws. By agreeing to the license, required before downloading the source code, users agree to inform PGP Corporation about issues by sending a message to source@pgp.com and describing the problem in as much detail as possible. Users also agree to wait 30 (thirty) days before making information about an issue public in any way. PGP Corporation will acknowledge such reports within 5 (five) business days of receipt via a message signed with an appropriate PGP Corporate Key. If a user does not receive such an acknowledgment, PGP Corporation did not receive the message; in such cases, users are requested to please resend their original message.

General Feedback
PGP Corporation is also interested in general feedback about the source code and the source code release. Please direct such feedback to source@pgp.com.

No Mirroring Permitted
No individual or organization is permitted to mirror or redistribute in any way—electronically or otherwise-the PGP source code. This site is the only PGP-sanctioned source for the PGP source code.

PGP Corporation License Agreement
Users must be authorized to download and use PGP source code and documentation. To become authorized, please click the PGP source code link, which displays the license agreement. Read the entire license to verify the user qualifications for downloading PGP source code. Prior to downloading, users will be required to confirm via a check box that they understand and accept the PGP License Agreement and are eligible to receive the PGP source code download per the U.S. Export Administration Regulations.

.
.

"PGP Corporation is the only commercial encryption vendor that publishes its source code, which has been under scrutiny by the world's cryptography experts for years. Even though we didn't read every line of code, this practice convinced us that its products were safe to use."

Keld Viftrup Møller, Security Designer,
H. Lundbeck A/S

.
.