Student projects: Difference between revisions

From Libreswan
Jump to navigation Jump to search
No edit summary
No edit summary
Line 10: Line 10:
* Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]]
* Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]]
* Status : Merged and released in Libreswan 3.25
* Status : Merged and released in Libreswan 3.25
=== Code and Testing commits ===
* https://github.com/libreswan/libreswan/commit/83fc58d6996ca05642a6e594bf36a98c0c79a690
* https://github.com/libreswan/libreswan/commit/fd547b0ffa5ec14b50bd25a71d5c220f2e532ed2


= Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA =
= Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA =
Line 21: Line 16:
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]]
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]]
* Status : Merged and released in libreswan 3.27
* Status : Merged and released in libreswan 3.27
=== Code and Testing commits ===
* https://github.com/libreswan/libreswan/commit/19a69d76af24296b1c55d43641acdd893fd882d9
* https://github.com/libreswan/libreswan/commit/4e2c9be13af895ba5c9f37bf20bd1349e78aa35d
* https://github.com/libreswan/libreswan/commit/12f2f1a03de214e1e3ecf5cfa84950f09a8d35c4
* https://github.com/libreswan/libreswan/commit/d3e9708ec36d8ba6ebe201825b47cf615dcbd318
* https://github.com/libreswan/libreswan/commit/8763b07a93a6bfcf148641cbbbdb0f316e4055c3
* https://github.com/libreswan/libreswan/commit/7434edc4544a148a2a2232751a3511bf9efd8186


= RFC 5685 IKEv2 Redirect Mechanism =
= RFC 5685 IKEv2 Redirect Mechanism =
Line 37: Line 22:
* Project Page: [[ RFC 5685 - Redirect Mechanism ]]
* Project Page: [[ RFC 5685 - Redirect Mechanism ]]
* Status: Merged and released in libreswan 3.28
* Status: Merged and released in libreswan 3.28
=== Code and Testing commits ===
* https://github.com/libreswan/libreswan/commit/3cf4d267201f23958d1d5017a348304b1f20e4d8
* https://github.com/libreswan/libreswan/commit/17da792ac544746d3ea4a44ba3e72c55c13d5815
* (plus various followup commits)


= Libreswan Managing Interface =
= Libreswan Managing Interface =
Line 61: Line 39:
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
=== Code and Testing commits ===
* https://github.com/libreswan/libreswan/commit/14c76638612226ab87f8fe14cb8b94282f729651
* https://github.com/libreswan/libreswan/commit/0f69bb7d2d33c64739e83388e8a9e4d914a8971a
* https://github.com/libreswan/libreswan/commit/272301a82178ea1a2c8afd39f26e2e024ef21853


= RFC 8229 TCP Encapsulation of IKE and IPsec Packets =
= RFC 8229 TCP Encapsulation of IKE and IPsec Packets =
Line 73: Line 45:
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
=== Code and Testing commits ===
* https://github.com/mtotale/libreswan/commit/45ab9e00d76dad5950433c06ea9f5bb817e646fc


=  draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 =
=  draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 =

Revision as of 04:59, 25 January 2019

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC

Below is a list of completed student projects. If you are interesting in participating as a student, please contact us.

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

RFC 5685 IKEv2 Redirect Mechanism

  • Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
  • Project Page: RFC 5685 - Redirect Mechanism
  • Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

  • Student: Rishabh Chaudhary - sponsored by Google Summer of Code 2018
  • Project page: Libreswan Managing Interface
  • Status: Development complete, waiting for release

Code and Testing commits

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

  • Student: Sahana Prasad - sponsored by Google Summer of Code 2017
  • Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
  • Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
  • Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2

  • Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
  • Project Page: Postquantum Preshared Keys
  • Status: Passed vendor interop testing
  • Code: Merged and released in libreswan 3.23

Code and Testing commits