PGP Extract

MIT PGP Key Server (pgp.mit.edu) is one of the oldest public PGP (Pretty Good Privacy) keyservers, providing a searchable database of public keys submitted by users worldwide. Public keys contain the owner's name, email addresses, and key creation date, and are associated with a cryptographic key fingerprint.

For OSINT investigators, PGP keyserver searches are a useful identity research technique. When investigating individuals who use encrypted communication, their public key — which they must share for others to encrypt messages to them — contains identity information they have voluntarily associated with their cryptographic identity.

Searching the MIT keyserver by name or email address returns all keys associated with those identifiers. A public key submission links a name, email address, and sometimes additional information to a specific cryptographic identity. When the same key fingerprint appears across multiple contexts (dark web forums, encrypted communication records, or other investigation artifacts), the associated identity information from the keyserver provides investigative leads.

Email address recovery from PGP keys is an important technique. When a public key is known (from email signatures, keybase, or other sources) but the associated email is unknown, the keyserver lookup returns the email addresses bound to that key.

Cross-referencing PGP keys against investigation materials: if encrypted communications from a suspect include the sender's PGP key, looking up that key on keyservers may reveal additional email addresses and identity information the sender has associated with the key.

Key creation and modification dates provide temporal intelligence — a key created on a specific date establishes when an individual began using cryptographic communication, and key updates may reflect changes in communication infrastructure.

Other public keyservers (keys.openpgp.org, keyserver.ubuntu.com) should be queried alongside MIT's server, as key submission is voluntary and different servers may have different subsets of keys.

Document keys searched, identity information found, and query timestamps for investigation records.