Student projects

Introduction

The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC

Below is a list of completed student projects. If you are interesting in participating as a student, please contact us.

RSA-PSS Support in compliance with RFC 7427 and RFC 8247

• Student: Sahana Prasad - sponsored by Google summer of code 2018
• Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
• Status : Merged and released in Libreswan 3.25

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/83fc58d6996ca05642a6e594bf36a98c0c79a690
• https://github.com/libreswan/libreswan/commit/fd547b0ffa5ec14b50bd25a71d5c220f2e532ed2

Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA

• Student: Sahana Prasad - sponsored by Google Summer of Code 2018
• Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
• Status : Merged and released in libreswan 3.27

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/19a69d76af24296b1c55d43641acdd893fd882d9
• https://github.com/libreswan/libreswan/commit/4e2c9be13af895ba5c9f37bf20bd1349e78aa35d
• https://github.com/libreswan/libreswan/commit/12f2f1a03de214e1e3ecf5cfa84950f09a8d35c4
• https://github.com/libreswan/libreswan/commit/d3e9708ec36d8ba6ebe201825b47cf615dcbd318
• https://github.com/libreswan/libreswan/commit/8763b07a93a6bfcf148641cbbbdb0f316e4055c3
• https://github.com/libreswan/libreswan/commit/7434edc4544a148a2a2232751a3511bf9efd8186

RFC 5685 IKEv2 Redirect Mechanism

• Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
• Project Page: RFC 5685 - Redirect Mechanism
• Status: Merged and released in libreswan 3.28

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/3cf4d267201f23958d1d5017a348304b1f20e4d8
• https://github.com/libreswan/libreswan/commit/17da792ac544746d3ea4a44ba3e72c55c13d5815
• (plus various followup commits)

Libreswan Managing Interface

• Student: Rishabh Chaudhary - sponsored by Google Summer of Code 2018
• Project page: Libreswan Managing Interface
• Status: Development complete, waiting for release

Code and Testing commits

• https://github.com/Rishabh04-02/Libreswan-managing-interface

RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)

• Student: Sahana Prasad - sponsored by Google Summer of Code 2017
• Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
• Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
• Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/14c76638612226ab87f8fe14cb8b94282f729651
• https://github.com/libreswan/libreswan/commit/0f69bb7d2d33c64739e83388e8a9e4d914a8971a
• https://github.com/libreswan/libreswan/commit/272301a82178ea1a2c8afd39f26e2e024ef21853

RFC 8229 TCP Encapsulation of IKE and IPsec Packets

• Student: Mayank Totale - sponsored by Google Summer of Code 2017
• Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
• Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan

Code and Testing commits

• https://github.com/mtotale/libreswan/commit/45ab9e00d76dad5950433c06ea9f5bb817e646fc

draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2

• Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
• Project Page: Postquantum Preshared Keys
• Status: Passed vendor interop testing
• Code: Merged and released in libreswan 3.23

Code and Testing commits

• https://github.com/libreswan/libreswan/commit/d8e0c68c0dc19d95dfcf19fec934e9dc69c293ac
• https://github.com/libreswan/libreswan/commit/b02c9d18b56c38abfe15bc4bc8b806ef3f758002