Compression – Save Space

• PGP compresses (ZIP) the message after applying the signature but before encryption (default)

• Better to sign an uncompressed message

• PGP’s compression algorithm is non-deterministic

• Security is greater if message is encrypted after compression

• Appendix 5A - ZIP