Student projects
Jump to navigation
Jump to search
Introduction
The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC2018
Below is a list of completed student projects. If you are interesting in participating as a student, please contact us.
RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
- Student: Sahana Prasad - sponsored by Google Summer of Code 2017
- Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
- Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
- Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
Code and Testing commits
- https://github.com/libreswan/libreswan/commit/14c76638612226ab87f8fe14cb8b94282f729651
- https://github.com/libreswan/libreswan/commit/0f69bb7d2d33c64739e83388e8a9e4d914a8971a
- https://github.com/libreswan/libreswan/commit/272301a82178ea1a2c8afd39f26e2e024ef21853
RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Student: Sahana Prasad - sponsored by Google summer of code
- Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Status : Merged and released in Libreswan 3.25
Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA
- Student: Sahana Prasad - sponsored by Google Summer of Code 2018
- Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
- Status : Initial framework is implemented and is found to be partly working. Yet to overcome some issues to fully implement ECDSA.
RFC 8229 TCP Encapsulation of IKE and IPsec Packets
- Student: Mayank Totale - sponsored by Google Summer of Code 2017
- Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
- Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
Code and Testing commits
- Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
- Project Page: Postquantum Preshared Keys
- Status: Passed vendor interop testing
- Code: Merged and released in libreswan 3.23
Code and Testing commits
- https://github.com/libreswan/libreswan/commit/d8e0c68c0dc19d95dfcf19fec934e9dc69c293ac
- https://github.com/libreswan/libreswan/commit/b02c9d18b56c38abfe15bc4bc8b806ef3f758002
RFC 5685 IKEv2 Redirect Mechanism
- Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
- Project Page: RFC 5685 - Redirect Mechanism
- Status: Code pending review