Debian Freedom Tools Project
Summary
Email privacy
Debian Email Privacy Packages

This metapackage will install packages useful for browsing anonymously in Debian.

The list to the right includes various software projects which are of some interest to the Debian Freedom Tools Project. Currently, only a few of them are available as Debian packages. It is our goal, however, to include all software in Debian Freedom Tools which can sensibly add to a high quality Debian Pure Blend.

For a better overview of the project's availability as a Debian package, each head row has a color code according to this scheme:

If you discover a project which looks like a good candidate for Debian Freedom Tools to you, or if you have prepared an unofficial Debian package, please do not hesitate to send a description of that project to the Debian Freedom Tools mailing list

Links to other tasks

Debian Freedom Tools Email privacy packages

Official Debian packages with high relevance

Gnupg
GNU privacy guard - a free PGP replacement
Versions of package gnupg
ReleaseVersionArchitectures
squeeze1.4.10-4+squeeze4amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
squeeze-security1.4.10-4+squeeze4amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy1.4.12-7+deb7u6amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
wheezy-security1.4.12-7+deb7u6amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie1.4.18-6amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid1.4.18-6amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package gnupg:
interfacecommandline
roleprogram
scopeutility
securityprivacy, cryptography, authentication
suitegnu
usechecking
works-withtext, file
Popcon: 62819 users (23218 upd.)*
Versions and Archs
License: DFSG free
Git

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC 4880.

GnuPG 1.4 is the standalone, non-modularized series. In contrast to the version 2 series, shipped with the gnupg2 package, it comes with no support for S/MIME and some other tools useful for desktop environments, but also with less dependencies.

The gnupg package is built without libcurl. So it does not support HKPS keyservers. Install the gnupg-curl package if you want to use the keyserver helper tools built with libcurl and supporting HKPS.

The package is enhanced by the following packages: paperkey
Gnupg-agent
GNU privacy guard - password agent
Versions of package gnupg-agent
ReleaseVersionArchitectures
squeeze2.0.14-2+squeeze2amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
squeeze-security2.0.14-2+squeeze2amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy2.0.19-2+deb7u2amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
wheezy-security2.0.19-2+deb7u2amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie2.0.26-3amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid2.0.26-3amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
experimental2.1.1-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
upstream2.1.1
Debtags of package gnupg-agent:
interfacecommandline
networkclient
roleprogram
securitycryptography
suitegnu
works-withpim
Popcon: 14628 users (5338 upd.)*
Newer upstream!
License: DFSG free
Git

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440.

This package contains the agent program gpg-agent which keeps a temporary secure storage of your passphrases.

The package is enhanced by the following packages: pinentry-gtk2 pinentry-qt4 mew-beta-bin pinentry-curses pinentry-qt mew-bin
Gnupg-curl
GNU privacy guard - a free PGP replacement (cURL)
Versions of package gnupg-curl
ReleaseVersionArchitectures
squeeze1.4.10-4+squeeze4amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
squeeze-security1.4.10-4+squeeze4amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy1.4.12-7+deb7u6amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
wheezy-security1.4.12-7+deb7u6amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie1.4.18-6amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid1.4.18-6amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package gnupg-curl:
interfacecommandline
networkclient
roleprogram, plugin
scopeutility
securitycryptography, authentication
suitegnu
usechecking
works-withtext, file
Popcon: 1142 users (1855 upd.)*
Versions and Archs
License: DFSG free
Git

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC 4880.

This package contains the keyserver helper tools built with libcurl, which replace the ones in the gnupg package built with the "curl shim" variant of gnupg. This package provides support for HKPS keyservers.

Gnupg-pkcs11-scd
GnuPG smart-card daemon with PKCS#11 support
Maintainer: Fabrizio Regalli
Versions of package gnupg-pkcs11-scd
ReleaseVersionArchitectures
squeeze0.06-7amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy0.7.3-1amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie0.7.3-1amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid0.7.3-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Popcon: 21 users (5 upd.)*
Versions and Archs
License: DFSG free
Git

gnupg-pkcs11-scd is a drop-in replacement for the smart-card daemon (scd) shipped with GnuPG. The daemon interfaces to smart-cards by using RSA Security Inc. PKCS#11 Cryptographic Token Interface (Cryptoki).

Gnupg2
GNU privacy guard - a free PGP replacement (new v2.x)
Versions of package gnupg2
ReleaseVersionArchitectures
squeeze2.0.14-2+squeeze2amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
squeeze-security2.0.14-2+squeeze2amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy2.0.19-2+deb7u2amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
wheezy-security2.0.19-2+deb7u2amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie2.0.26-3amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid2.0.26-3amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
experimental2.1.1-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
upstream2.1.1
Debtags of package gnupg2:
interfacecommandline
roleprogram
scopeutility
securitycryptography
suitegnu
useconverting
Popcon: 16687 users (8799 upd.)*
Newer upstream!
License: DFSG free
Git

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440.

GnuPG 2.x is the new modularized version of GnuPG supporting OpenPGP and S/MIME.

The package is enhanced by the following packages: dirmngr
Kleopatra
certificate Manager
Versions of package kleopatra
ReleaseVersionArchitectures
squeeze4.4.7-3amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy4.4.11.1+l10n-3amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
sid4.13.3-2sparc
jessie4.14.1-1amd64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid4.14.2-2amd64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
upstream4.14.3
Debtags of package kleopatra:
interfacex11
networkclient
roleprogram
securityauthentication
suitekde
uitoolkitqt
works-withpim, db
x11application
Popcon: 547 users (424 upd.)*
Newer upstream!
License: DFSG free
Git

Kleopatra is a tool for managing X.509 certificates and pgp keys.

This package is part of the KDE PIM module.

Screenshots of package kleopatra
Monkeysign
OpenPGP key signing and exchange for humans
Maintainer: Antoine Beaupré
Versions of package monkeysign
ReleaseVersionArchitectures
jessie2.0.2all
sid2.0.2all
Debtags of package monkeysign:
hardwarecamera
interfacex11, text-mode
mailsmtp
networkclient
roleprogram
scopeapplication
securitycryptography, authentication
uitoolkitgtk
usechecking
works-withmail
x11application
Popcon: 26 users (85 upd.)*
Versions and Archs
License: DFSG free
Git

monkeysign is a tool to overhaul the OpenPGP keysigning experience and bring it closer to something that most primates can understand.

The project makes use of cheap digital cameras and the type of bar code known as a QRcode to provide a human-friendly yet still-secure keysigning experience.

No more reciting tedious strings of hexadecimal characters. And, you can build a little rogue's gallery of the people that you have met and exchanged keys with!

Monkeysign is the commandline signing software, a caff replacement. Monkeyscan is the graphical user interface that scans qrcodes.

Monkeysphere
leverage the OpenPGP web of trust for SSH and TLS authentication
Versions of package monkeysphere
ReleaseVersionArchitectures
squeeze0.31-4all
wheezy0.35-2all
jessie0.37-2all
sid0.37-2all
Debtags of package monkeysphere:
securityauthentication
Popcon: 91 users (81 upd.)*
Versions and Archs
License: DFSG free
Git

SSH key-based authentication is tried-and-true, but it lacks a true Public Key Infrastructure for key certification, revocation and expiration. Monkeysphere is a framework that uses the OpenPGP web of trust for these PKI functions. It can be used in both directions: for users to get validated host keys, and for hosts to authenticate users. Current monkeysphere SSH tools are designed to integrate with the OpenSSH implementation of the Secure Shell protocol.

Monkeysphere can also be used by a validation agent to validate TLS connections (e.g. https).

The package is enhanced by the following packages: msva-perl
Other screenshots of package monkeysphere
VersionURL
0.25-1http://screenshots.debian.net/screenshots/m/monkeysphere/2188_large.png
Screenshots of package monkeysphere
Parcimonie
privacy-friendly helper to refresh a GnuPG keyring
Maintainer: intrigeri
Versions of package parcimonie
ReleaseVersionArchitectures
wheezy0.7.1-1+deb7u1all
wheezy-security0.7.1-1+deb7u1all
jessie0.8.4-1all
sid0.8.4-1all
Debtags of package parcimonie:
roleprogram
securitycryptography
uitoolkitgtk
Popcon: 97 users (4 upd.)*
Versions and Archs
License: DFSG free
Git

parcimonie is a daemon that slowly refreshes a gpg public keyring from a keyserver.

Its refreshes one OpenPGP key at a time; between every key update, parcimonie sleeps a random amount of time, long enough for the previously used Tor circuit to expire.

This process is meant to make it hard for an attacker to correlate the multiple performed key update operations.

See the included design document to learn more about the threat and risk models parcimonie attempts to help coping with.

Seahorse-nautilus
Nautilus extension for Seahorse integration
Maintainer: Janos Guljas
Versions of package seahorse-nautilus
ReleaseVersionArchitectures
jessie3.11.92-1amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid3.11.92-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package seahorse-nautilus:
uitoolkitgtk
Popcon: 286 users (17 upd.)*
Versions and Archs
License: DFSG free

Seahorse nautilus is an extension for nautilus which allows encryption and decryption of OpenPGP files using GnuPG - the GNU Privacy Guard program.

Screenshots of package seahorse-nautilus
Signing-party
Various OpenPGP related tools
Maintainer: Guilhem Moulin
Versions of package signing-party
ReleaseVersionArchitectures
squeeze1.1.3-1amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy1.1.4-1amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie1.1.10-3amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid1.1.11-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package signing-party:
interfacecommandline
roleprogram
scopeutility
securitycryptography
works-withtext, mail
works-with-formatpostscript
Popcon: 176 users (111 upd.)*
Versions and Archs
License: DFSG free
Svn

signing-party is a collection for all kinds of PGP/GnuPG related things, including tools for signing keys, keyring analysis, and party preparation.

  • caff: CA - Fire and Forget signs and mails a key
  • pgp-clean: removes all non-self signatures from key
  • pgp-fixkey: removes broken packets from keys
  • gpg-mailkeys: simply mail out a signed key to its owner
  • gpg-key2ps: generate PostScript file with fingerprint paper slips
  • gpgdir: recursive directory encryption tool
  • gpglist: show who signed which of your UIDs
  • gpgsigs: annotates list of GnuPG keys with already done signatures
  • gpgparticipants: create list of party participants for the organiser
  • gpgwrap: a passphrase wrapper
  • keyanalyze: minimum signing distance (MSD) analysis on keyrings
  • keylookup: ncurses wrapper around gpg --search
  • sig2dot: converts a list of GnuPG signatures to a .dot file
  • springgraph: creates a graph from a .dot file
  • keyart: creates a random ASCII art of a PGP key file
  • gpg-key2latex: generate LaTeX file with fingerprint paper slips
*Popularitycontest results: number of people who use this package regularly (number of people who upgraded this package recently) out of 169921