Difference between revisions of "Student projects"

From Libreswan
Jump to: navigation, search
Line 69: Line 69:
 
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
 
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
  
==  draft-ietf-ipsecme-qr-ikev2 (now [RFC 8784 https://tools.ietf.org/html/rfc8784]) Postquantum Preshared Keys for IKEv2 ==
+
==  RFC 8784 Postquantum Preshared Keys for IKEv2 ==
  
 
* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
 
* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017

Revision as of 16:48, 11 September 2020

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC.

Below is a list of student projects. If you are interested in participating as a student, please contact us.

Current Projects

draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2

Interop testing using OpenBSD

IKEv2 Session Resumption


Completed Projects

Libreswan Opportunistic IPsec using LetsEncrypt

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

RFC 5685 IKEv2 Redirect Mechanism

  • Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
  • Project Page: RFC 5685 - Redirect Mechanism
  • Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

  • Student: Rishabh - sponsored by Google Summer of Code 2018
  • Project Page: Libreswan Managing Interface
  • Status: Development complete, waiting for the release.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

  • Student: Sahana Prasad - sponsored by Google Summer of Code 2017
  • Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
  • Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
  • Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

RFC 8784 Postquantum Preshared Keys for IKEv2

  • Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
  • Project Page: Postquantum Preshared Keys
  • Status: Passed vendor interop testing
  • Code: Merged and released in libreswan 3.23