Phil Zimmermann

Phil Zimmermann
Zimmermann in the early 2000s
Born	1954 (age 71–72)[1] Camden, New Jersey, U.S.[1]
Occupation	Cryptographer, professor
Known for	Creator of Pretty Good Privacy
Awards	EFF Pioneer Award (1995) Internet Hall of Fame (2012)
Website	philzimmermann.com

Philip R. Zimmermann^[2] (born 1954)^[1] is an American computer scientist and cryptographer. He is the creator of Pretty Good Privacy (PGP), the most widely used email encryption software in the world.^[2] He is also known for his work in VoIP encryption protocols, notably ZRTP and Zfone. Zimmermann is co-founder and Chief Scientist of the global encrypted communications firm Silent Circle.

Zimmermann was born in Camden, New Jersey.^[1] He received a B.S. degree in computer science from Florida Atlantic University in Boca Raton, Florida, in 1978.^[2] In the 1980s, he worked in Boulder, Colorado, as a software engineer on the Nuclear Weapons Freeze Campaign as a military policy analyst.^[3] From 2016 to 2021, he worked at Delft University of Technology as an associate professor in the Cybersecurity section at the Faculty of Electrical Engineering, Mathematics, and Computer Science.

In 1991, he wrote the popular Pretty Good Privacy (PGP) program, and made it available (together with its source code) through public FTP for download, the first widely available program implementing public-key cryptography. Shortly thereafter, it became available overseas via the Internet, though Zimmermann has said he had no part in its distribution outside the United States.

The very first version of PGP included an encryption algorithm, BassOmatic, developed by Zimmermann.^[4]

PGP was made to democratize software and digital privacy. But Zimmerman sold PGP to Network Associates (now McAfee) in 1997, for around 10 million dollars, and let them put the software behind a paywall.

After a report from RSA Security, who were in a licensing dispute with regard to the use of the RSA algorithm in PGP, the United States Customs Service started a criminal investigation of Zimmermann, for allegedly violating the Arms Export Control Act.^[5] The United States Government had long regarded cryptographic software as a munition, and thus subject to arms trafficking export controls. At that time, PGP was considered to be impermissible ("high-strength") for export from the United States. The maximum strength allowed for legal export has since been raised and now allows PGP to be exported. The investigation lasted three years, but was finally dropped without filing charges after MIT Press published the source code of PGP.^[6]

In 1995, Zimmermann published the book PGP Source Code and Internals as a way to bypass limitations on exporting digital code. Zimmermann's introduction says the book contains "all of the C source code to a software package called PGP" and that the unusual publication in book form of the complete source code for a computer program was a direct response to the U.S. government's criminal investigation of Zimmermann for violations of U.S. export restrictions as a result of the international spread of PGP's use.^[7]

After the government dropped its case without indictment in early 1996, Zimmermann founded PGP Inc. and released an updated version of PGP and some additional related products. That company was acquired by Network Associates (NAI) in December 1997, and Zimmermann stayed on for three years as a Senior Fellow. NAI decided to drop the product line and in 2002, PGP was acquired from NAI by a new company called PGP Corporation. Zimmermann served as a special advisor and consultant to that firm until Symantec acquired PGP Corporation in 2010.^[2] Zimmermann is also a fellow at the Stanford Law School's Center for Internet and Society. He was a principal designer of the cryptographic key agreement protocol (the "association model") for the Wireless USB standard.

Along with Mike Janke and Jon Callas, in 2012 he co-founded Silent Circle, a secure hardware and subscription based software security company.^[3][8]

In October 2013, Zimmermann, along with other key employees from Silent Circle, teamed up with Lavabit founder Ladar Levison to create the Dark Mail Alliance. The goal of the organization is to work on a new protocol to replace PGP that will encrypt email metadata, among other things that PGP is not capable of.

Zimmermann was also involved in the social network Okuna, formerly Openbook, which aimed to be an ethical and privacy-friendly alternative to existing social networks, especially Facebook.^[9] He sees today's established social media platforms as a threat to democracy and privacy, because of their profit-oriented revenue models that "are all about exploiting our personal information" and "[deepen] the political divides in our culture", and hoped Okuna would help solve these problems.^[10]

In 2013, an article on "Zimmermann's Law" quoted Phil Zimmermann as saying "The natural flow of technology tends to move in the direction of making surveillance easier", and "the ability of computers to track us doubles every eighteen months",^[11] in reference to Moore's law.

Zimmermann has received numerous technical and humanitarian awards for his pioneering work in cryptography:

• In 2018, Zimmermann was inducted into Information Systems Security Association (ISSA) hall of fame by the ISSA International Organization on October 16, 2018.
• In 2016, Zimmermann was awarded an honorary doctorate from the Université libre de Bruxelles ^[12]
• In 2012, Zimmermann was inducted into the Internet Hall of Fame by the Internet Society.^[13]
• In 2008, PC World named Zimmermann one of the "Top 50 Tech Visionaries" of the last 50 years.^[14]
• In 2006, eWeek ranked PGP 9th in the 25 Most Influential and Innovative Products introduced since the invention of the PC in 1981.^[15]
• In 2003, Reason named him a "Hero of Freedom"^[16]
• In 2001, Zimmermann was inducted into the CRN Industry Hall of Fame.^[17]
• In 2000, InfoWorld named him one of the "Top 10 Innovators in E-business".^[18]
• In 1999, he received the Louis Brandeis Award from Privacy International.
• In 1998, he received a Lifetime Achievement Award from Secure Computing Magazine.
• In 1996, he received the Norbert Wiener Award for Social and Professional Responsibility for promoting the responsible use of technology.
• In 1996, he received the Thomas S. Szasz Award for Outstanding Contributions to the Cause of Civil Liberties from the Center for Independent Thought.^[19]
• In 1995, he received the Chrysler Design Award for Innovation, and the Pioneer Award from the Electronic Frontier Foundation.
• In 1995, Newsweek also named Zimmermann one of the "Net 50", the 50 most influential people on the Internet.

Simon Singh's The Code Book devotes an entire chapter to Zimmermann and PGP.^[20] In 2022 Steven Johnson covered his story and achievements in Zimmermann's profile for Hidden Heroes - The Crypto Wars: How Philip Zimmermann Fought for Our Right to Privacy.^[21]

• The Official PGP User's Guide, MIT Press, 1995^[22]
• PGP Source Code and Internals, MIT Press, 1995^[23]

• Data privacy
• GNU Privacy Guard
• Information privacy
• Information security
• PGPfone
• PGP word list

Wikimedia Commons has media related to Phil Zimmermann.

Wikiquote has quotations related to Phil Zimmermann.

• Official website
• Why I wrote PGP
• Conversation With Phil Zimmermann, Mikael Pawlo, GrepLaw, June 6, 2003.
• E-mail security hero takes on VoIP, Declan McCullagh, C|net, 15 August 2006.
• VON Pioneers: Philip Zimmermann Encrypts VoIP, VON Magazine, Jan 2007.
• Silent Circle – Global Encrypted Communications Service