Gpg4win is an email and file encryption package for most versions of Microsoft Windows and Microsoft Outlook , which utilises the GnuPG framework for symmetric and public-key cryptography , such as data encryption, digital signatures , hash calculations etc.
29-540: The original creation of Gpg4win was initiated and funded by Germany's Federal Office for Information Security (BSI) in 2005, resulting in the release of Gpg4win 1.0.0 on 6 April 2006; however Gpg4win and all included tools are free and open source software , and it is typically the non-proprietary option for privacy recommended to Windows users. As Gpg4win v1 was a much overhauled derivate of GnuPP, both were using GnuPG v1 for cryptographic operations and thus only supported OpenPGP as cryptography standard. Hence in 2007
58-583: A full set of German dialogue texts in addition to the English ones, new manuals in English and German, plus many other enhancements. In contrast to Gpg4win v2, which focused on new features and software components, the development of Gpg4win v3 focused on usability, plus consolidation of code and features: This resulted in the release of Gpg4win 3.0.0 on 19 September 2017 with proper support for Elliptic Curve Cryptography (ECC) by utilising GnuPG 2.2 (instead of 2.0), broadened, stabilised and enhanced smart card support,
87-506: A fundamentally overhauled Outlook plug-in GpgOL for Outlook 2010 and newer, support of 64-bit versions of Outlook 2010 and newer, supporting dialogues in all languages which KDE supports etc. It is also distributed as GnuPG VS-Desktop with commercial support and approval for handling NATO RESTRICTED , RESTREINT UE/EU RESTRICTED and German VS-NfD documents, which in turn has become the major source of revenue for maintaining and further developing
116-449: Is a cooperation, communication and coordination platform of German Federal agencies and other institutions from different ministries dealing in particular with cyber-related matters of nationwide relevance. On the basis of an exchange on cyber-related matters or incidents every working day, a joint, overall cyber-security situation report for Germany is regularly prepared and updated. To handle issues of (potentially) national importance,
145-553: Is focused on IT security rather than being part of an organisation with a more general IT standards remit. BSI is separate from Germany's signals intelligence , which is part of the military and the foreign intelligence service ( BND ). The BSI's scope of duties is defined by the German Federal Office for Information Security (BSI Act). The aim of the BSI is the promotion of information and cyber security in order to enable and promote
174-554: Is former business executive Claudia Plattner, who took over the presidency from Arne Schönbohm. BSI's predecessor was the cryptographic department of Germany's foreign intelligence agency ( BND ). BSI still designs cryptographic algorithms such as the Libelle cipher and initiated the development of the Gpg4win cryptographic suite. The BSI has a similar role as the Unlike those organizations, BSI
203-411: Is free of charge and can be applied for by any German institution. The UP KRITIS (UP stands for implementation plan) is a public-private cooperation between operators of critical infrastructures (KRITIS), their various associations and the responsible governmental agencies such as the BSI. It addresses eight of the nine critical infrastructure sectors. The sector "state and administration" is covered by
232-505: The German government . Its areas of expertise and responsibility include the security of computer applications, critical infrastructure protection , Internet security , cryptography , counter eavesdropping , certification of security products and the accreditation of security test laboratories. It is located in Bonn and as of 2024 has about 1,700 employees. Its current president, since 1 July 2023,
261-636: The BSI also offers specific and actionable recommendations, for example on topics such as e-mail encryption, smartphone security, online banking, cloud computing or social networks. Private users can also contact the BSI by phone or e-mail with their questions on IT and Internet security issues. In addition, the BSI offers a free warning and information service called "Bürger-CERT", which informs citizens and small businesses quickly and competently about weaknesses, security gaps and other risks and provides practical guidance. Nationales Cyber-Abwehrzentrum The National Cyber Defence Centre ( NCDC or Cyber-DC )
290-464: The BSI include informing and sensitizing citizens to the safe use of information technology, mobile communication media and the Internet. The BSI therefore offers online content specially tailored to the needs of citizens ( BSI für Bürger ). The website covers topics and information on IT and Internet security in a way that is understandable even for technical laypersons. In addition to providing information,
319-464: The BSI will follow. The mission statement of the Cyber Defence Centre defines its core tasks as follows: The Cyber Defence Centre is the cooperation, communication and coordination platform of the appropriate (security) authorities of the different ministries which, in particular through a joint, up-to-date and comprehensive cyber-security situation report for Germany, strategic reporting and
SECTION 10
#1732852431982348-587: The Cyber Defence Centre is able to perform its tasks. In the course of the implementation of the Cybersecurity Strategy for Germany, the Cyber Defence Centre was created in 2011 as a joint, inter-authority and interinstitutional platform for an improved and accelerated information exchange between the participating authorities and institutions and for an increased coordination of protective measures and countermeasures against IT security incidents in Germany. On
377-631: The Cyber and Information Domain Service (Kommando Cyber- und Informationsraum / KdoCIR) - work together even more intensively in the Cyber Defence Centre. The ZKA and the BaFin continue to be involved as associated authorities. The involvement of further relevant institutions at federal and Länder level is currently being tested. This includes representatives of the judiciary as well as the German Länder, which underlines
406-1013: The Federal Criminal Police Office (Bundeskriminalamt / BKA), the Federal Police (Bundespolizei / BPOL), the Central Office of the German Customs Investigation Service (Zollkriminalamt / ZKA), the Federal Intelligence Service (Bundesnachrichtendienst / BND) and the Federal Armed Forces (Bundeswehr) participated as so-called associated authorities. Based on an administrative agreement, the Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht / BaFin) has also been involved since 2015. With
435-609: The German Association for Information Technology, Telecommunications and New Media (Bitkom). As a members-only association major players in the field of cyber security in Germany aim to provide up-to-date and valid information on threats in cyberspace and supports the exchange of information, experience and best practices between participants. More than 6,800 institutions as of 2023 belong to the Alliance for Cyber Security, including 180 partner companies and 110 multipliers. Participation
464-528: The GnuPG framework and Gpg4win. Gpg4win 4.0.0, released on 21 December 2021, switched to using GnuPG 2.3 (from 2.2) and continued to refine and enhance the feature set of Gpg4win v3. Federal Office for Information Security The Federal Office for Information Security ( German : Bundesamt für Sicherheit in der Informationstechnik , abbreviated as BSI ) is the German upper-level federal agency in charge of managing computer and communication security for
493-687: The Green Book, ITSEC and the Common Criteria. The BSI is a national authority in the field of cryptography, which draws up recommendations and technical guidelines for cryptographic procedures and is involved in the development of international cryptographic standards. The IT Baseline Protection Catalog, or IT-Grundschutz , is a collection of enterprise security guidelines established by the office, which serve to identify and combat security-relevant vulnerabilities in IT environments. With introduction and catalogs,
522-596: The IT systems and networks of the federal administration. Once a year, the BSI reports on this to the Committee on Internal Affairs of the German Bundestag. The tasks of the BSI include: The BSI is the central certification body for the security of IT systems in Germany (computer and data security, data protection). Testing and certification is possible with regard to the standards of the IT-Grundschutzhandbuch,
551-570: The UP BUND and activities on state and municipal level. The goal of the UP KRITIS cooperation is to maintain the supply of critical infrastructure services in Germany. All organizations based in Germany that operate critical infrastructures in Germany, national professional and industry associations from the KRITIS sectors and the responsible authorities can participate in UP KRITIS upon application. The tasks of
580-616: The basis of a cabinet decision dated 23 February 2011, the Cyber Defence Centre took up its work on 01 April 2011 - initially under the leadership of the BSI and with the direct involvement of the Federal Office for the Protection of the Constitution (Bundesamt für Verfassungsschutz / BfV) as well as the Federal Office of Civil Protection and Disaster Assistance (Bundesamt für Bevölkerungsschutz und Katastrophenhilfe / BBK). During this stage,
609-446: The collection comprises more than 4,800 pages and serves companies and authorities as a basis for obtaining certification according to IT-Grundschutz. By obtaining certification, a company demonstrates that it has taken appropriate measures to protect its IT systems against IT security threats. Nationales Cyber-Abwehrzentrum (National Cyber Defence Centre), Cyber-AZ is a cooperative institution of German authorities at federal level for
SECTION 20
#1732852431982638-470: The coordinating operational and interdisciplinary case management, provides indispensable contributions to Germany's national cyber-security and thus - also in the event of a crisis - to the Federal Government's capacity to act. The focus is on the whole-of-government, i.e. cross-authority and cross-ministry approach to the handling of matters without interfering with the individual responsibilities of
667-595: The defense of electronic attacks on IT infrastructures of the Federal Republic of Germany and its economy. It was launched on April 1, 2011 and is located at the BSI. The center is a core element of the Cyber Security Strategy adopted by the German government in 2011. It aims to optimize operational cooperation and coordinate protection and defense measures. This is based on a holistic approach that brings together
696-603: The development of a fundamentally enhanced version was started, also with support from the German BSI ( Federal Office for Information Security ); this effort culminated in the release of Gpg4win 2.0.0 on 7 August 2009 after a protracted beta testing phase, which was based on GnuPG 2.0, included S/MIME support, Kleopatra as a new certificate manager, the Explorer plug-in GpgEX for cryptography operations on files, basic support of smart cards ,
725-705: The entry into force of the currently valid rules of procedure on 01 September 2019, the Cyber Defence Centre underwent a significant further development. Taking into account their respective tasks, responsibilities and legal powers, now eight core authorities with equal rights - the BBK, BSI, BfV, BKA, BND, the Federal Police Headquarters as well as for the Bundeswehr the Military Counterintelligence Service (Militärischer Abschirmdienst / BAMAD) and
754-452: The participants in the Cyber Defence Centre harmonise and coordinate the individual authorities' activities. Their implementation remains the responsibility of the respective authority or institutions. The Cyber Defence Centre is not an authority of its own. The Federal Office for Information Security is the host of the Cyber Defence Centre and thus provides premises and technology in Bonn so that
783-411: The use of secure information and communication technology in government, business and society. For example, the BSI develops practice-oriented minimum standards and target group-specific recommendations for handling IT and Internet security. The BSI is also responsible for protecting the IT systems of the federal government. This involves defending against cyber attacks and other technical threats against
812-440: The various threats in cyberspace: Cyber espionage, cyber spying, cyber terrorism and cyber crime. The goal is a rapid exchange of information, rapid assessments and concrete recommendations for action derived from these. The Alliance for Cyber Security, or Allianz für Cyber-Sicherheit , is an initiative of the German Federal Office for Information Security (BSI). It was launched 2012 in public–private partnership cooperation with
841-512: The whole-of-government and federal approach to maintaining Germany's cyber-security. In addition, the position of a coordinator was created: This position is filled by the different authorities on a rotating basis for two years at a time. The BKA has provided the first coordinator since December 2019. The coordinator is supported by two deputies, who are currently provided by the BfV and the KdoCIR. The BND and
#981018