Student projects

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC2018

Below is a list of completed student projects. If you are interesting in participating as a student, please contact us.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

• Student: Sahana Prasad - sponsored by Google Summer of Code 2017
• Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
• Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
• Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/14c76638612226ab87f8fe14cb8b94282f729651
• https://github.com/libreswan/libreswan/commit/0f69bb7d2d33c64739e83388e8a9e4d914a8971a
• https://github.com/libreswan/libreswan/commit/272301a82178ea1a2c8afd39f26e2e024ef21853

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

• Student: Sahana Prasad - sponsored by Google summer of code
• Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
• Status : Merged and released in Libreswan 3.25

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

• Student: Sahana Prasad - sponsored by Google Summer of Code 2018
• Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
• Status : Initial framework is implemented and is found to be partly working. Yet to overcome some issues to fully implement ECDSA.

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

• Student: Mayank Totale - sponsored by Google Summer of Code 2017
• Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
• Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan

Code and Testing commits

• https://github.com/mtotale/libreswan/commit/45ab9e00d76dad5950433c06ea9f5bb817e646fc

draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2

• Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
• Project Page: Postquantum Preshared Keys
• Status: Passed vendor interop testing
• Code: Merged and released in libreswan 3.23

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/d8e0c68c0dc19d95dfcf19fec934e9dc69c293ac
• https://github.com/libreswan/libreswan/commit/b02c9d18b56c38abfe15bc4bc8b806ef3f758002

RFC 5685 IKEv2 Redirect Mechanism

• Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
• Project Page: RFC 5685 - Redirect Mechanism
• Status: Code pending review