Student projects

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC

Below is a list of completed student projects. If you are interested in participating as a student, please contact us.

Libreswan Opportunistic IPsec using LetsEncrypt

• Student: Rishabh - sponsored by Google Summer of Code 2019
• Project Page: Libreswan Opportunistic IPsec using LetsEncrypt
• Status: Development Complete, Waiting for the release.

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

• Student: Sahana Prasad - sponsored by Google summer of code 2018
• Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
• Status: Merged and released in Libreswan 3.25

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

• Student: Sahana Prasad - sponsored by Google Summer of Code 2018
• Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
• Status: Merged and released in libreswan 3.27

RFC 5685 IKEv2 Redirect Mechanism

• Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
• Project Page: RFC 5685 - Redirect Mechanism
• Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

• Student: Rishabh Chaudhary - sponsored by Google Summer of Code 2018
• Project Page: Libreswan Managing Interface
• Status: Development complete, waiting for the release.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

• Student: Sahana Prasad - sponsored by Google Summer of Code 2017
• Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
• Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
• Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

• Student: Mayank Totale - sponsored by Google Summer of Code 2017
• Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
• Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan

draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2

• Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
• Project Page: Postquantum Preshared Keys
• Status: Passed vendor interop testing
• Code: Merged and released in libreswan 3.23