From balenson@TIS.COM Fri Oct  1 10:16:39 1993
Received: from azalea.tis.com by scss3.cl.msu.edu (4.1/4.7)  id AA00243; Fri, 1 Oct 93 10:16:38 EDT
Received: by azalea.tis.com; id AA15518; Fri, 1 Oct 93 10:10:29 EDT
Received: from tis.com/192.33.112.100 via smap
Received: from TIS.COM by TIS.COM (4.1/SUN-5.64)
	id AA02170; Fri, 1 Oct 93 10:12:02 EDT
Message-Id: <9310011412.AA02170@TIS.COM>
Reply-To: David M Balenson <balenson@TIS.COM>
To: jim@rsa.com (Jim Bidzos)
Cc: mrr@scss3.cl.msu.edu, mch@sqwest.wimsey.bc.ca
Subject: Re: Question 
In-Reply-To: Your message of Thu, 30 Sep 93 09:44:17 PDT.
             <9309301644.AA11138@RSA.COM> 
Date: Fri, 01 Oct 93 10:11:50 -0400
From: "David M. Balenson" <balenson@TIS.COM>
Status: OR

-----BEGIN PRIVACY-ENHANCED MESSAGE-----
Proc-Type: 4,MIC-CLEAR
Content-Domain: RFC822
Originator-ID-Asymmetric: MFMxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNRDE
 kMCIGA1UEChMbVHJ1c3RlZCBJbmZvcm1hdGlvbiBTeXN0ZW1zMREwDwYDVQQLEwh
 HbGVud29vZA==,07
MIC-Info: RSA-MD5,RSA,g/j2GorPGAHjdmNeHEKTqLfZY6li55Oh/4ddW/pxmIq
 VqGI36V2zRL96XsiZkgFWdvhJAZ2atvp49N3JxmX0MQs9Gc4sUP27s8RavTs6xwT
 qqSGGqz/bZA746+QrEKqE


> ... there are (and this my
> assumption, and question) PEM implementations available in Sweden and
> Germany?  Someone told me that Europe has PEM available on servers. Do
> you know where?

Jim-

I am aware of several European PEM implementations.  Most of them are
part of an EC-sponsored project called PASSWORD.

A quick summary of what I know about these implementations is attached.

Of particular interest, is the UK DRA-PEM implementation, which *is*
available via anonymous FTP.  I have obtained a copy myself.  I'm
not currently aware if the other implementations are available, yet.

I'd appreciate any further information that you or the others may have
about tehse or other PEM implementations.  I'd like to keep my list of
such implementations as up-to-date as possible.

Thanks.

- -DB

- -----

    EUROPEAN PEM IMPLEMENTATIONS

    COST Computer Security Technologies AB (Sweden)
    
        Commercial product.  Runs on DEC and Sun workstations.  Includes
        CA software.
    
    
    University College London (UCL) (UK)
    UK DRA-PEM
    
        Currently offered as part of OSI Security Pilot Software Package,
        which has been developed and is being distributed by the UK
        PASSWORD Consortium.  (PASSWORD is a European Community-sponsored
        VALUE program, comprised of consortia from France, Germany and the
        UK, who are working to establish a pilot security infrastructure
        for network applications for the European rsearch community.  The
        consortium has developed secured applications based on the CCITT
        X.509 Directory Authentication Framework.  These applications
        include an X.509 Toolkit (OSISEC), Secure X.500 (Secured ISODE/QUIPU),
        Secure X.400 (SecXUA), Secure ODA (DOCSEC), and Privacy Enhanced
        Mail (PEM)(DRA-PEM)).  DRA-PEM includes support for X.500
        directories and includes CA software.  It is built over ISODE/QUIPU and
        uses the OSISEC toolkit.  Written in C, the software is
        UNIX-based.  It was developed under SunOS, but is designed to be
        portable to other UNIX platforms.  Complete source code distributed
        via anonymous FTP to cs.ucl.ac.uk.  Contact
        password-pilot@cs.ucl.ac.uk for more information.
    
    
    Cambridge University (UK)
    
        Part of EC-sponsored PASSWORD project.  Supports both symmetric and 
        asymmetric key management.  Includes support for use of
        X.500 directories and includes CA software.  Subject of experimentation
        with alternative algorithms, including DSA/SHA.
    
    
    GDM (Germany)
    
        Part of EC-sponsored PASSWORD project.  Stand-alone implementation.
        Integrated with X.500 directory access code for certificates and
        CRLs.  Includes CA software.  To be distributed via anonymous FTP.
    
    
    Inria (France)
    
        Part of EC-sponsored PASSWORD project.  Includes support for use of
        X.500 directories and includes CA software.
    
    ***
-----END PRIVACY-ENHANCED MESSAGE-----