How does the use of PGP to encrypt or decrypt files fit in with the e-GIF?
The e-Government Security Framework document set can be found on the Cabinet Office website. It presents details of the functional security requirements appropriate for the delivery of e-Government services by, and on behalf of, government. If you deem necessary that the security controls you need to put in place are for protecting data at Level 3 then it should be protected by a CAPS BASELINEproduct such as PGP for HMG. If you decide that the security controls to protect your data are Level 2 then you can protect it with a FIPS 140 product. PGP has been through the FIPS 140-1 process. The certificate is number 64 and can be viewed. The promotion of interoperability through e-Gif V.5 provides three encryption algorithm standards that encryption products should adhere to, these are 3DES, AES and Blowfish.
