GnuPG and GPG4USB are open source, so people can see what it's doing: http://cpunk.de/svn/src/gpg4usb/branches/0.3.2-1/ You probably shouldn't trust proprietary software for your security, because it might be backdoored. Skype is definitely backdoored.