
From that point on, everything passing through the communication channel is encrypted using that key. Client uses his private key to decrypt the session key by applying his pass-code and Rijndael(256) algorithm. Secured communication starts with the server sending the client a one-time short-term randomly generated session key encrypted with user’s public key. Other Clients use the public portion of a user's asymmetric key to send messages - if they are authorized to do so through active contacts.
CRYPTOHEAVEN ALTERNATIVES SOFTWARE
The user's software uses the private key portion directly or indirectly to decrypt all of the data stored on the server. When the encrypted private key resides on the server, user benefits from ability to access his account from anywhere in the world through the Internet. The private portion of the key is encrypted with user's pass-code and stored on the local computer or sent to the server at user's choice. The public portion of the key is then sent to the server where it can be picked up by others connecting to the system. When a new user account is created, the user generates his personal private/public key pair. Technical explaination follows.As far as i can make it, it works a little like SSL to create a secure channel to crptoheaven then does the normal PGP like functions for email.īut it doesnt say how we know the server is not being spoofed.The client can be checked for tampering using the hash diget but is that enough? There is another web-based service I forgot the name that works even sending encryped mail has longer has receiver uses PGP It appears to work only for sending email to other cyptoheaven users?


Data is being encrypted with your keys before it leaves your computer. You can have an option of storing keys on your computer.and keys are encrypted with your password. When I was singing up, I didn't have to provide any personal info for CryptoHeaven. One can simply use the product (send email, chat.) and not even think that he needs to do something extra for this to be secure. Basically, your data is encrypted behind the scenes. Well, PGP is hard to use, CryptoHeaven uses transparent encryption. They have private and corporate accounts.
CRYPTOHEAVEN ALTERNATIVES CODE
I don't know much about encryption, but I heard from others(security professionals) that it's very strong (2048 to 4096 bit asymmetric and 256 bit symmetric key encryption ), Besides, their client source code is released so I don't think they would do that if they were not offering in their code what they advertise.

They certainly advertise something they are offering. I've been using CryptoHeaven for some time now and will try to answer some of your questions.
