Student projects: Difference between revisions

From Libreswan
Jump to navigation Jump to search
No edit summary
No edit summary
(41 intermediate revisions by 6 users not shown)
Line 1: Line 1:
__FORCETOC__
= Introduction =


The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[ GSoC2017 ]]
The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see [[GSoC]].


Below is a list of projects that students are or have been working on.
Below is a list of student projects. If you are interested in participating as a student, please contact us.


= Current Projects =


= RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) =
* No current projects, contact team@libreswan.org if you are interested in doing a project.
 
 
 
 
 
 
 
= Completed Projects =
 
== draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2 ==
 
* Student: Yulia Kuzovkova - sponsored by Google Summer of Code 2020
* Project Page: [[ Intermediate Exchange ]]
 
== Interop testing using OpenBSD ==
 
* Student: Ravi Teja - sponsored by Google Summer of Code 2020
* Project Page: [[ IKEv2_Interop_testing_with_OpenBSD ]]
 
== IKEv2 Session Resumption ==
 
* Student: Nupur Agrawal - sponsored by Google Summer of Code 2020
* Project Page:  [[ Session Resumption ]]
 
== Libreswan Opportunistic IPsec using LetsEncrypt ==
 
* Student: Rishabh - sponsored by Google Summer of Code 2019
* Project Page: [[ Libreswan Opportunistic IPsec using LetsEncrypt ]]
* Documentation page: [[ Documentation: Libreswan Opportunistic IPsec using LetsEncrypt ]]
* Status: Development Complete, Merged in [https://libreswan.org/wiki/Libreswan_Opportunistic_IPsec_using_LetsEncrypt#Source_code master branch]. Released in Libreswan [https://github.com/libreswan/libreswan/releases/tag/v3.30 v3.30].
 
== RSA-PSS Support in compliance with RFC 7427 and RFC 8247 ==
 
* Student: Sahana Prasad - sponsored by Google summer of code 2018
* Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]]
* Status: Merged and released in Libreswan 3.25
 
== Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA ==
 
* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]]
* Status: Merged and released in libreswan 3.27
 
== RFC 5685 IKEv2 Redirect Mechanism ==
 
* Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
* Project Page: [[ RFC 5685 - Redirect Mechanism ]]
* Status: Merged and released in libreswan 3.28
 
== Libreswan Managing Interface ==
 
* Student: Rishabh - sponsored by Google Summer of Code 2018
* Project Page: [[ Libreswan Managing Interface ]]
* Status: Development complete, waiting for the release.
 
== RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2) ==


* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Student: Sahana Prasad - sponsored by Google Summer of Code 2017
* Project page: [[ Compliance of RFC 7427 - Signature Authentication in IKEv2 ]]
* Project page: [[ Compliance of RFC 7427 - Signature Authentication in IKEv2 ]]
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
* Code: Merged and released in libreswan 3.22
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23


 
== RFC 8229 TCP Encapsulation of IKE and IPsec Packets ==
= RFC 8229 TCP Encapsulation of IKE and IPsec Packets =


* Student: Mayank Totale - sponsored by Google Summer of Code 2017
* Student: Mayank Totale - sponsored by Google Summer of Code 2017
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]]
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
* Code: [ https://github.com/mtotale/libreswan/commit/45ab9e00d76dad5950433c06ea9f5bb817e646fc ]


draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 =
=RFC 8784  Postquantum Preshared Keys for IKEv2 ==


* Student: Vukasin Karadzic - sponsored by The Libreswan Project
* Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
* Project Page [[ Postquantum Preshared Keys ]]
* Project Page: [[ Postquantum Preshared Keys ]]
* Status: Passed vendor interop testing - waiting on IETF / IANA Code Point Allocation
* Status: Passed vendor interop testing
* Code: [ https://github.com/vukasink/libreswan/tree/ikev2 ]
* Code: Merged and released in libreswan 3.23

Revision as of 01:44, 2 October 2020

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC.

Below is a list of student projects. If you are interested in participating as a student, please contact us.

Current Projects

  • No current projects, contact team@libreswan.org if you are interested in doing a project.




Completed Projects

draft-ietf-ipsecme-ikev2-intermediate-04 Intermediate Exchange for IKEv2

Interop testing using OpenBSD

IKEv2 Session Resumption

  • Student: Nupur Agrawal - sponsored by Google Summer of Code 2020
  • Project Page: Session Resumption

Libreswan Opportunistic IPsec using LetsEncrypt

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

RFC 5685 IKEv2 Redirect Mechanism

  • Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
  • Project Page: RFC 5685 - Redirect Mechanism
  • Status: Merged and released in libreswan 3.28

Libreswan Managing Interface

  • Student: Rishabh - sponsored by Google Summer of Code 2018
  • Project Page: Libreswan Managing Interface
  • Status: Development complete, waiting for the release.

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

  • Student: Sahana Prasad - sponsored by Google Summer of Code 2017
  • Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
  • Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
  • Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

RFC 8784 Postquantum Preshared Keys for IKEv2

  • Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
  • Project Page: Postquantum Preshared Keys
  • Status: Passed vendor interop testing
  • Code: Merged and released in libreswan 3.23