Student projects: Difference between revisions

From Libreswan
Jump to navigation Jump to search
No edit summary
No edit summary
Line 3: Line 3:
The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[GSoC]].
The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[GSoC]].


Below is a list of completed student projects. If you are interested in participating as a student, please contact us.
Below is a list of student projects. If you are interested in participating as a student, please contact us.


= draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2 =
= Current Projects =
 
== draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2 ==


* Student: Yulia Kuzovkova - sponsored by Google Summer of Code 2020
* Student: Yulia Kuzovkova - sponsored by Google Summer of Code 2020
* Project Page: [[ Intermediate Exchange ]]
* Project Page: [[ Intermediate Exchange ]]


= Libreswan Opportunistic IPsec using LetsEncrypt =
== Interop testing using OpenBSD ==
 
* Student: Ravi Teja - sponsored by Google Summer of Code 2020
* Project Page: [[ IKEv2_Interop_testing_with_OpenBSD ]]
 
== IKEv2 Session Resumption ==
 
* Student: Nupur Agarwal
* Project Page:  TBD
 
 
= Completed Projects =
 
== Libreswan Opportunistic IPsec using LetsEncrypt ==


* Student: Rishabh - sponsored by Google Summer of Code 2019
* Student: Rishabh - sponsored by Google Summer of Code 2019
Line 17: Line 32:
* Status: Development Complete, Merged in [https://libreswan.org/wiki/Libreswan_Opportunistic_IPsec_using_LetsEncrypt#Source_code master branch]. Released in Libreswan [https://github.com/libreswan/libreswan/releases/tag/v3.30 v3.30].
* Status: Development Complete, Merged in [https://libreswan.org/wiki/Libreswan_Opportunistic_IPsec_using_LetsEncrypt#Source_code master branch]. Released in Libreswan [https://github.com/libreswan/libreswan/releases/tag/v3.30 v3.30].


= RSA-PSS Support in compliance with RFC 7427 and RFC 8247 =
== RSA-PSS Support in compliance with RFC 7427 and RFC 8247 ==


* Student: Sahana Prasad - sponsored by Google summer of code 2018
* Student: Sahana Prasad - sponsored by Google summer of code 2018
Line 23: Line 38:
* Status: Merged and released in Libreswan 3.25
* Status: Merged and released in Libreswan 3.25


= Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA =
== Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA ==


* Student: Sahana Prasad - sponsored by Google Summer of Code 2018
* Student: Sahana Prasad - sponsored by Google Summer of Code 2018
Line 29: Line 44:
* Status: Merged and released in libreswan 3.27
* Status: Merged and released in libreswan 3.27


= RFC 5685 IKEv2 Redirect Mechanism =
== RFC 5685 IKEv2 Redirect Mechanism ==


* Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
* Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
Line 35: Line 50:
* Status: Merged and released in libreswan 3.28
* Status: Merged and released in libreswan 3.28


= Libreswan Managing Interface =
== Libreswan Managing Interface ==


* Student: Rishabh - sponsored by Google Summer of Code 2018
* Student: Rishabh - sponsored by Google Summer of Code 2018
Line 41: Line 56:
* Status: Development complete, waiting for the release.
* Status: Development complete, waiting for the release.


= RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) =
== RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) ==


* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
Line 48: Line 63:
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23


= RFC 8229 TCP Encapsulation of IKE and IPsec Packets =
== RFC 8229 TCP Encapsulation of IKE and IPsec Packets ==


* Student: Mayank Totale - sponsored by Google Summer of Code 2017
* Student: Mayank Totale - sponsored by Google Summer of Code 2017
Line 54: Line 69:
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan


=  draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 =
==  draft-ietf-ipsecme-qr-ikev2 (now [RFC 8784 https://tools.ietf.org/html/rfc8784]) Postquantum Preshared Keys for IKEv2 ==


* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017

Revision as of 03:18, 31 August 2020

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC.

Below is a list of student projects. If you are interested in participating as a student, please contact us.

Current Projects

draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2

Interop testing using OpenBSD

IKEv2 Session Resumption

  • Student: Nupur Agarwal
  • Project Page: TBD


Completed Projects

Libreswan Opportunistic IPsec using LetsEncrypt

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

RFC 5685 IKEv2 Redirect Mechanism

  • Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
  • Project Page: RFC 5685 - Redirect Mechanism
  • Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

  • Student: Rishabh - sponsored by Google Summer of Code 2018
  • Project Page: Libreswan Managing Interface
  • Status: Development complete, waiting for the release.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

  • Student: Sahana Prasad - sponsored by Google Summer of Code 2017
  • Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
  • Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
  • Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

draft-ietf-ipsecme-qr-ikev2 (now [RFC 8784 https://tools.ietf.org/html/rfc8784]) Postquantum Preshared Keys for IKEv2

  • Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
  • Project Page: Postquantum Preshared Keys
  • Status: Passed vendor interop testing
  • Code: Merged and released in libreswan 3.23