Folk encryption

from Wikipedia, the free encyclopedia
Folk encryption

Logo Volksverschluesselung.jpg
Basic data

developer Deutsche Telekom
Fraunhofer SIT
Publishing year 2016
Current  version V1.15-3
(October 17, 2019)
operating system Windows
category Encryption
www.volksverschluesselung.de

People Encryption is a software for encryption , which the Fraunhofer Institute for Secure Information Technology in Darmstadt has developed. The associated infrastructure is operated by Deutsche Telekom in a high-security data center. The software was first made available for free download on June 29, 2016 . It supports the users of S / MIME -compatible e-mail clients with the implementation of X.509 certificates and a central directory service. The software is currently only offered for the Windows platform. On this platform, the programs Mozilla Thunderbird and Outlook support the S / MIME standard.

description

The software can (as of June 2016) only be installed on Windows PCs ; editions for Android , iOS , Linux and macOS are planned. Which is used S / MIME standard with X.509 - certificates ; support for OpenPGP is planned. The software uses the free crypto library Bouncy Castle . The source code of the program is open . The software license agreement contains the text of the GNU General Public License .

After installation, the program automatically connects to common browsers and e-mail programs such as Microsoft Outlook and Mozilla Thunderbird without any further action by the user .

The certificates required for encrypting and decrypting emails can only be obtained from the Fraunhofer Institute after you have disclosed your identity there. In addition to other options, such as direct, personal contact, this can also be done via a Telekom landline connection or with the eID function of the new ID card . Further possibilities, for example through Postident , are planned.

The private keys generated by the software are only on the user's end devices and not in the hands of the Fraunhofer Institute or Telekom.

Since March 2017, the Fraunhofer Institute for Secure Information Technology has also been offering the people's encryption solution for small and medium-sized enterprises (SMEs) and the self-employed. Companies and freelancers can apply for the use of Volksverschleißung. Companies can use the Volksverschleißung free of charge for one year - regardless of the number of users.

criticism

The People's encryption can only work reliably, even if the addressee has the program installed, or also an S / MIME uses compatible e-mail client; here it is criticized that the sender cannot always be informed whether the recipient is using the program.

Another weak point is that the software only runs on Windows; other operating systems such as Linux or macOS are not taken into account. However, the Volksverschörderungs software includes a key export function for iOS. Another criticism is that Telekom's landline customers are preferred because they can receive their certificates over the phone; Customers from alternative providers such as Vodafone are excluded. Due to the mandatory identity check, it is not possible to communicate anonymously with the program. The software cannot be used for people who do not live in Germany. People who do not live in Germany can register in direct contact with the Fraunhofer Institute for Secure Information Technology after presenting their identity card or passport. Dates for this are regularly published on the Volksverschüsselung website.

It is also not possible to send or receive legally compliant documents with this encryption method . However, there are no costs for the transfer.

Alternatives

Software based on the OpenPGP standard such as GnuPG or Pretty Good Privacy also offer end-to-end encrypted e-mail traffic. X.509 certificates that can be used for e-mail are also offered free of charge by the CAcert project .

literature

Individual evidence

  1. ^ People's encryption. Germany mails safely. Fraunhofer-Gesellschaft, June 29, 2016, accessed on April 21, 2017 .
  2. ↑ a b Christian Stöcker: People's encryption. Good idea with a lot of hooks. In: Spiegel Online . June 29, 2016. Retrieved April 21, 2017 .
  3. ↑ a b Dennis Schirrmacher: E-mail encryption for everyone: People's encryption is ready. In: Heise online . June 29, 2016, accessed July 1, 2016 .
  4. ^ People's encryption. In: www.volksverschluesselung.de. Retrieved September 20, 2016 .
  5. ↑ a b Hauke ​​Gierow: Fraunhofer SIT: People encryption starts without source code. In: Golem.de . Retrieved December 22, 2019 .
  6. ↑ Volksverschryption started: Now everyone can send secure e-mails. n-tv , accessed June 29, 2016 .
  7. ↑ Registration for companies. (No longer available online.) Fraunhofer-Gesellschaft, formerly in the original ; accessed on April 21, 2017 .  ( Page no longer available , search in web archives )  Info: The link was automatically marked as defective. Please check the link according to the instructions and then remove this notice.@1@ 2Template: Toter Link / www.volksverschluesselung.de  
  8. ↑ People's encryption for small and medium-sized companies. Fraunhofer-Gesellschaft, March 16, 2017, accessed on April 21, 2017 .
  9. ↑ Can the keys generated by Volksverschleißung be used on the iPad or iPhone? Fraunhofer-Gesellschaft, accessed on April 21, 2017 .
  10. ↑ Dirk Asendorpf: "Volksverschüsselung": Secure e-mails for everyone. The time , accessed June 29, 2016 .
  11. ↑ Dates for on-site registration. Fraunhofer-Gesellschaft, accessed on December 22, 2019 .