Is pgp 2.5 insecure?