Just to point out, in America, if the vendor was caught (either for face-to-face dealing or SR sales, whatever), he can be forced to give up all information like passwords to his account, PIN, PGP passphrase, etc.. If he doesn't, he sits in jail. Until he decides to give up the info. Or dies first.It's ridiculous that the fifth amendment right to not incriminate yourself doesn't apply, but it's been decided that it doesn't by the courts. Using PGP doesn't help if the guy's been replaced by a DEA stiff who has his private key & passphrase (assuming he even used a passphrase and didn't leave it blank).Granted, I think it's pretty unlikely... but I'm just saying that PGP doesn't guarantee you anything. If it is a cop, then he's got the code to decrypt it just like the vendor did.