[quote author=“OnMyWayUp”][quote author=“tatical”]PGP is open source software, this means that anyone can view the source code. This is done because they want people to trust PGP. Anyone can view the source code to check it for security holes, a back door, or a “master-keyâ€ÂÂ. PGP is by no means weak! PGP algorithms encrypt using keys up to 4096-bits.
The fact that it is an open source software weakens it. If someone made a backup of your hard drive, found out which version of PGP you were using, and looked around for the code for that version, they could find a hole and easily exploit it. Open-source in this case has both some good and some bad, don’t you think? :|
Someone could find security-hole for the PGP program it self. But not the encryption algorithms used to encrypt the data. These have not been broken/cracked yet, so the data would still be safe.
In the case of encryption, an open-source model would be more trusted than a closed-source one. If a company says that they’re closed-source software is secure, with no back doors or master keys into encrypted data, how could they prove it? They can’t. You’d just have to take their word for it. But if it was open-source, the code could be inspected by the public to solidify their claims, thereby gain the users trust.