hi this is Charles Hoskinson director of the Bitcoin education project and chief executive officer of NEX cryptography today we're going to go ahead and discuss how to go ahead and use PGP effectively with Melville Oh PGP was invented in the early 90s by a gentleman named Philip Zimmerman and basically what he wanted to do was come up with a way to encrypt emails without using any really special software and a very friction seamless way unfortunately at the time most of the people who used email were fairly computer savvy and they were willing to embrace a lot more complexity than your end user typically does today so although PGP actually works and it's cryptography is incredibly elegant very powerful it generally does not have a lot of mainstream usage that said there's been a browser extension that was recently created called Melville op' which I will teach you how to install and use today which I think makes the process significantly simpler and also if you are using it with your friends family and others we'll actually go ahead and make your emails completely NSA proof regardless of how much money they invest in trying to figure out what you're doing for the most part so let's go ahead and get started if you click right here in the upper right hand corner of Google Chrome you can click on tools and extensions and you'll see down here get more extensions click on that and go ahead and enter in the store Melville up MA il de ello PE and you'll see this extension right here Melville op' I already have it installed so it says added to Chrome if not you're just going to go ahead and click up there and it'll just take a moment to install after you've installed it go ahead in the upper right hand corner click on Melville oh click on options and the first thing you're going to see is Melville op' options documentation about and a bunch of options down here display keys and Porky's generate keys general security and watchlist and so forth so don't care much about these guys this is the functioning area of Melville oh so Melville op' currently works with Gmail Yahoo Outlook and GM X in the future they'll probably support more email clients it does not work with Outlook nor does it work with Thunderbird so any desktop mail client that you physically install Melville up will not work with but if you're using a mail client in the cloud meaning you actually have Outlook or outlook from Outlook calm or Gmail or so forth this will work quite nicely ok so I'll assume that you guys are on gmail yahoo gmx or outlook.com and we're going to go ahead and use Gmail to send an email so you see I have a key right here with Charles dot Hoskinson that's my email address and what we're going to go ahead and do is generate a new key for another email address I currently control and I'm gonna call this person Satoshi and that particular email address is Satoshi archive at gmail.com and I'll go ahead and enter a passphrase ok and you just click Submit and I'll say hey I have to go ahead and wait on a while to generate it because there's a lot of enter entropy being generated from the screencast it generates quickly but sometimes can take up to a minute to go ahead and generate the your key ok so it went ahead and generated a key for mr. Satoshi yay what does it actually look like so a PGP key and because this is a one-time key that I'm not going to use I'll go ahead and display it for you actually looks like this it's this terribly ugly chain of letters and numbers and so forth which is 404 kilobytes long and then there's an Associated private key block so this is the public key which is used to encrypt things and this is the private key which is used to decrypt it it's important to never share the private key with anybody by default this will be encrypted on your computer and the only way to get it is to go ahead and use the passphrase which I entered or you you'll enter when you generate the key to go ahead and decrypt it but in any event this stays client-side it stays in your browser and it's always encrypted by default never show this to anybody this is terribly bad practice for me but I'm going to delete this key right after I send this encrypted email it's important to note out that if these keys are not backed up if you lose the private key you will not be able to decrypt the messages that are sent to you to your public key okay so let's go ahead and encrypt an email so I'm gonna go to Gmail and here's my gmail account and so what I'm gonna do is click compose type in Satoshi and since I've already sent an email there before it recognizes my email address and I'll say test okay so what you'll do is you'll notice since I've installed malevolent it's little guy up here that this thing appears this little pencil with a piece of paper so click on that and all of a sudden you actually have a new window and all you really have to do is just go ahead and type something like test whatever you want to compose this message and really what the magic is is when we click this little lock right here and it says who do you want to encrypt this for and since it recognized that I have in my library the public key for Satoshi I'll click Add okay and it went ahead and encrypted the message with my PGP key and I'll click transfer that's really all I have to do so I'm gonna send it to myself and I'm gonna go over to my archive and here it is now if I didn't show you that private key the only person in the world who would be able to decrypt this message is me as long as I have both the private key and the passphrase to decrypt it Melva looks really cool in that it actually automatically recognizes PGP messages and it will show you this nice little graphic and all you got to do is just click the mailbox and it says hey enter your password and I can decrypt this for you so I'll go ahead and enter the password and it says this is an example message so a few things to point out first this PGP message that's sent is decrypted client-side which means it's been decrypted on this computer and this computer only from Google's perspective it still looks like this Google has never seen a decrypted part of this message as this message traversed the internet it was encrypted so the only person capable of seeing the this is a test is actually me or anybody who has access to that private key as you all do because I displayed it on the on the screencast video ok so that's basically melville open net shell you probably have a question of well what do I do if I I want to set a PGP message to somebody okay that's fair so let's go ahead and Google satoshis public key so Satoshi Nakamoto actually just goes Nakamoto this right here is Satoshi nakamoto's public key this is the public key that Satoshi used to identify himself when he went ahead and published Bitcoin the specification for it so all you have to do to import a key into your address book somebody has to give you the key okay you click on the little lock you click on options you click on import keys and you just paste the key in and click Submit and it says ha ha I've successfully imported it and what's so cool about the import process is that once you've imported it it actually identifies the email address that's associated with a key and the standard for making these keys Phillip Zimmerman embedded email addresses so every PGP key to be generated actually requires an email address and then an email address works its way into the PGP key block so when you import a PGP key you also get the email associated with it and if you click on display keys I now have the real Satoshi nakamoto's public key okay so all I have to do to to sense a Toshi Nakamoto and email is I can just copy and paste an email address I can go through the same process that I went through here and Satoshi Nakamoto will get an encrypted email and the only person in the world who can decrypt it is the person who has a copy of Satoshi nakamoto's private key which ideally would be him so that's basically how to use millville open a nutshell it's completely free software it's very secure software it's wonderful for sending secure messages to your friends and family and if you have to do anything that requires a secure conversation I would highly recommend using PGP to do so and hopefully this tutorial has been easy enough to get you on your way a couple of security tips again never ever ever ever ever go ahead and share your private key with anybody what I did in this lecture was showing you the private keys very bad he's not secure if you've shared it even once another thing is if you want to export your key my recommendation is to go ahead select this key export is to display the key pair okay create a key file and encrypt the key file using some program like TrueCrypt or ami a script or so forth and then store that encrypted file on a flash drive or on a burn CD or something like that but always make sure that when you export that key file that you take it and encrypt it with a strong password so never ever try to move your keys unencrypted and try to leave the keys in the browser the good thing about mail Volokh is that once you've generated a key pair they live in the browser for as long as you want them there I will warn you however the keys are not portable so if you lose the Paiva key you will not be able to regenerate it on a new computer it basically anything that's encrypted with that key is lost forever so it's a good idea to create a backup somewhere where it's encrypted okay so that's all I have to say give me some comments and feedback and let me know if there's anything else you'd like to know about mail VeloPark PGP thank you very much
