Security

The Libreswan Project

Encrypting the Internet with IKE / IPsec VPN

ckvmnamespacespythonvirtualizationRFCsshellkernellibeventnss

Organization website

Participation history

7 GSoC years

2026 2022 2021 2020 2019 2018 2017

2026

3 projects

Official year page

Add HOST-TO-HOST Support on BSD

The host to host ipsec transport mode works on Linux but does not work on any of the BSDs. The problem is a lack of IKE socket bypass , transport...

Project page

Add Support For Announcing Authentication Methods To Libreswan

Currently, during an IKEv2 negotiation in Libreswan, each peer independently selects its authentication method without knowing what the other side...

Project page

Optimising the lookup time for ACQUIRE messages sent by kernel

When an IPsec-encrypted packet matches a trap policy in the kernel, the kernel notifies IKE daemon (Pluto) via an ACQUIRE Netlink message. Then Pluto...

Project page

2022

0 projects

Official year page

This year is recorded for the organization, but project-level links are not present in the source dataset.

2021

1 project

Official year page

Extend RFC-7427 Signature Authentication Support To IKEv2 With EDDSA Support

The Internet Key Exchange Protocol Version 2 can use arbitrary signature algorithms for authentication as described in RFC-7427. Currently, Libreswan...

Code Project page

2020

3 projects

Official year page

IKEv2 Interop testing with OpenBSD

IPSec standards are produced and maintained by Internet Engineering Task Force which are implemented by many software including Libreswan. OpenIKED...

Code Project page

Add Support for RFC 5723 'Session Resumption' and RFC 6023 'Childless Initiation of SA'

The project involves work on adding support for RFC 5723 primarily. RFC 5723 proposes an extension to IKEv2 (Internet Key Exchange v2) that allows a...

Code Project page

INTERMEDIATE exchange for IKEv2

Libreswan implements IPsec protocol, which uses IKEv2 for authentication and key establishment. IKEv2 uses the classical Diffie-Hellman key exchange...

Code Project page

2019

1 project

Official year page

Opportunistic IPsec development using LetsEncrypt

Opportunistic IPsec is an attempt to encrypt the internet at large. The idea is to build VPN tunnels directly to all internet hosts irrespective of...

Code Project page

2018

3 projects

Official year page

Extend RFC-7427 Signature Authentication support to IKEv2 with ECC / EDDSA support

Libreswan itself currently only supports RSA as Digital Signature Authentication method, so it needs to be extended internally as well to be able to...

Code Project page

Implementing “Group Key Management using IKEv2” IETF draft, RFC 5685 - “Redirect Mechanism for IKEv2” and/or RFC 5723 - “IKEv2 Session Resumption”

This project is sort of a hybrid project and it consists of implementation of atleast two out of three IETF RFCs/Drafts. The three features in...

Code Project page

Web based Certificate and Profile User Interface

There are shell scripts for creating X.509 certificates, revoking certificates and signing CRLs and scripts for the creation of Profile certificate...

Code Project page

2017

2 projects

Official year page

RFC-7427 Signature Authentication support to IKEv2 for Libreswan

Currently in IKEv2 , signature based authentication is per algorithm i.e., there is one for RSA digital signatures, one for DSS digital signatures...

Code Project page

Implement TCP Encapsulation of IKE and IPsec Packets

Currently, the IKE and IPsec use UDP encapsulation whenever faced with NAT gateways which do not allow ESP or IKE packets. But some NAT rules even...

Code Project page