PGP Source Code

PGP Corporation is the only commercial secure-messaging vendor to publish source code for peer review so customers and cryptography experts may validate product integrity.

PGP Desktop Source Code
The source code for PGP Desktop is available for peer review. To begin the download process, please agree to the Internal Review License Agreement and provide us with a valid email address on the form that follows. After filling out the form, you will then be emailed information on how to download the source code.

I have read and agree to the Internal Review License Agreement.

Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

PGP Universal Source Code
PGP Corporation is making the full source code to PGP Universal Server and PGP Universal™ Satellite available for review. The source code for PGP Universal Server and PGP Universal Satellite is available via a cost-free process that begins by completely filling out this form.

Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

PGP Command Line Source Code
The source code for PGP Command Line is available for peer review. To begin the download process, please agree to the Internal Review License Agreement and provide us with a valid email address on the form that follows. After filling out the form, you will then be emailed information on how to download the source code.

I have read and agree to the Internal Review License Agreement.

Please note that PGP Corporation does not make its source code available to others for reuse or to provide information about implementation details.

Licensing the PGP SDK
Companies or individuals wishing to license the PGP source code for inclusion into their products should refer to the PGP SDK for details.

Reporting Problems
Users finding what they believe are problems in the source code should follow the procedure described in the license for reporting perceived flaws. By agreeing to the license, required before downloading the source code, users agree to inform PGP Corporation about issues by sending a message to source@pgp.com and describing the problem in as much detail as possible. Users also agree to wait 30 (thirty) days before making information about an issue public in any way. PGP Corporation will acknowledge such reports within five (5) business days of receipt via a message signed with an appropriate PGP® Corporate Key. If a user does not receive such an acknowledgment PGP Corporation did not receive the message and in such cases are requested to resend their original message.

PGP Corporation License Agreement
Users must be authorized to download and use PGP® source code and documentation. To become authorized, please click the PGP source code link, which displays the license agreement. Read the entire license to verify the user qualifications for downloading PGP source code. Prior to downloading, users will be required to confirm via a check box that they understand and accept the PGP License Agreement and are eligible to receive the PGP source code download per the U.S. Export Administration Regulations.

Modifications to GPL Code
Although PGP® software itself is not subject to the GNU General Public License (GPL), PGP Corporation utilizes certain code subject to the GPL. PGP Corporation made a small number of modifications to some of the GPL code it uses. As required by the GPL, PGP Corporation is making these changes available to the public. To download an archive containing all modifications made by PGP Corporation to the GPL code please click on the following:

GPL Modifications for PGP Universal 1.0 [TGZ: 1.8MB]
GPL Modifications for PGP Universal 1.1 [TGZ: 14.3MB]
GPL Modifications for PGP Universal 1.2 [TGZ: 15MB]
GPL Modifications for PGP Universal 2.0 [TGZ: 14MB]

In compliance with the GPL, PGP Corporation also offers a CD-ROM containing all modifications made by PGP Corporation to the GPL code.

Note: This CD does not contain any modifications not also readily available from the GPL source code download URL above.

To order a copy of the GPL software CD, please send a written request to:

PGP Corporation
GPL Source Code CD Fulfillment
200 Jefferson Dr.
Menlo Park, CA 94025
USA

Please include your shipping address in all communications to allow calculation of the GPL Source Code CD shipping costs. PGP Corporation will contact you with a quote and payment information. Please allow six to eight weeks for fulfillment.

No Mirroring Permitted
No individual or organization is permitted to mirror or redistribute in any way—electronically or otherwise—the PGP source code. This site is the only PGP®-sanctioned source for the PGP source code.

General Feedback
PGP Corporation is also interested in general feedback about the source code and the source code release. Please direct such feedback to source@pgp.com.