Student projects: Difference between revisions

From Libreswan
Jump to navigation Jump to search
(Created page with " The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that i...")
 
No edit summary
 
(49 intermediate revisions by 8 users not shown)
Line 1: Line 1:
= Introduction =


The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[ GSoC2017 ]]
The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Sahana Prasad or Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[GSoC]].


Below is a list of projects that students are or have been working on.
Below is a list of student projects. If you are interested in participating as a student, please contact us.


= RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) =
= Current Projects =
 
* No projects in progress right now, contact team@libreswan.org if you are interested in doing a project.
 
 
 
= Completed Projects =
 
== Extend RFC 7427 Signature Authentication support to IKEv2 with EDDSA ==
 
* Student: Rishabh Kumar - sponsored by Google Summer of Code 2021
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with EDDSA]]
* Status: Waiting on NSS Library support for EDDSA. Support for EDDSA has been added to Libreswan as per RFC-8420.
 
== draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2 ==
 
* Student: Yulia Kuzovkova - sponsored by Google Summer of Code 2020
* Project Page: [[ Intermediate Exchange ]]
* Status: merged in libreswan 4.0
 
== Interop testing using OpenBSD ==
 
* Student: Ravi Teja - sponsored by Google Summer of Code 2020
* Project Page: [[ IKEv2_Interop_testing_with_OpenBSD ]]
* Status: merged and released in libreswan 4.0
 
== IKEv2 Session Resumption ==
 
* Student: Nupur Agrawal - sponsored by Google Summer of Code 2020
* Project Page:  [[ Session Resumption ]]
* Status:: not yet merged
 
== Libreswan Opportunistic IPsec using LetsEncrypt ==
 
* Student: Rishabh - sponsored by Google Summer of Code 2019
* Project Page: [[ Libreswan Opportunistic IPsec using LetsEncrypt ]]
* Documentation page: [[ Documentation: Libreswan Opportunistic IPsec using LetsEncrypt ]]
* Status: Development Complete, Merged in [https://libreswan.org/wiki/Libreswan_Opportunistic_IPsec_using_LetsEncrypt#Source_code master branch]. Released in Libreswan [https://github.com/libreswan/libreswan/releases/tag/v3.30 v3.30].
 
== RSA-PSS Support in compliance with RFC 7427 and RFC 8247 ==
 
* Student: Sahana Prasad - sponsored by Google summer of code 2018
* Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]]
* Status: Merged and released in Libreswan 3.25
 
== Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA ==
 
* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]]
* Status: Merged and released in libreswan 3.27
 
== RFC 5685 IKEv2 Redirect Mechanism ==
 
* Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
* Project Page: [[ RFC 5685 - Redirect Mechanism ]]
* Status: Merged and released in libreswan 3.28
 
== Libreswan Managing Interface ==
 
* Student: Rishabh - sponsored by Google Summer of Code 2018
* Project Page: [[ Libreswan Managing Interface ]]
* Status: Development complete, waiting for the release.
 
== RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) ==


* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Project page: [[ Compliance of RFC 7427 - Signature Authentication in IKEv2 ]]
* Project page: [[ Compliance of RFC 7427 - Signature Authentication in IKEv2 ]]
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
* Code: Merged and released in libreswan 3.22
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23


= RFC 8229 TCP Encapsulation of IKE and IPsec Packets =
== RFC 8229 TCP Encapsulation of IKE and IPsec Packets ==


* Student: Mayank Totale - sponsored by Google Summer of Code 2017
* Student: Mayank Totale - sponsored by Google Summer of Code 2017
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Status: Waiting on developer review, interop testing and Linux kernel support for ESPinTCP
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
* Code: [ https://github.com/mtotale/libreswan/commit/db3990c0c195e16189ff43329c7735bcc7ee15d5 github branch ]


= draft-fluhrer-qr-ikev2 Postquantum Preshared Keys for IKEv2 =
==  RFC 8784  Postquantum Preshared Keys for IKEv2 ==


* Student: Vukasin Karadzic - sponsored via The Libreswan Project
* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
* Project Page [[ Postquantum Preshared Keys ]]
* Project Page: [[ Postquantum Preshared Keys ]]
* Status: Waiting on developer review and interop tests
* Status: Passed vendor interop testing
* Code: [ https://github.com/vukasink/libreswan/tree/ikev2 github branch ]
* Code: Merged and released in libreswan 3.23

Latest revision as of 20:56, 10 February 2022

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Sahana Prasad or Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC.

Below is a list of student projects. If you are interested in participating as a student, please contact us.

Current Projects

  • No projects in progress right now, contact team@libreswan.org if you are interested in doing a project.


Completed Projects

Extend RFC 7427 Signature Authentication support to IKEv2 with EDDSA

draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2

  • Student: Yulia Kuzovkova - sponsored by Google Summer of Code 2020
  • Project Page: Intermediate Exchange
  • Status: merged in libreswan 4.0

Interop testing using OpenBSD

IKEv2 Session Resumption

  • Student: Nupur Agrawal - sponsored by Google Summer of Code 2020
  • Project Page: Session Resumption
  • Status:: not yet merged

Libreswan Opportunistic IPsec using LetsEncrypt

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

RFC 5685 IKEv2 Redirect Mechanism

  • Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
  • Project Page: RFC 5685 - Redirect Mechanism
  • Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

  • Student: Rishabh - sponsored by Google Summer of Code 2018
  • Project Page: Libreswan Managing Interface
  • Status: Development complete, waiting for the release.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

  • Student: Sahana Prasad - sponsored by Google Summer of Code 2017
  • Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
  • Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
  • Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

RFC 8784 Postquantum Preshared Keys for IKEv2

  • Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
  • Project Page: Postquantum Preshared Keys
  • Status: Passed vendor interop testing
  • Code: Merged and released in libreswan 3.23