Re: [riot-devel] IPSEC/IKEv2
Hi Tobias, Great to hear that ESP is getting ported as well as G-IKEv2 and Diet-ESP. A good Iot µOS must provide security features I would like to contribute to the port of ESP. Could you create a WIP merge request or a branch on a repo so I can see status of port and test. Have you thought about using an external library? Cheers, Le mer. 4 juil. 2018 à 14:50, Tobias Guggemos a écrit : > > Hey > > Tobias Heider implemented G-IKEv2 [1], which should be fairly easy to port to > IKEv2 as the messages are more the less the same. > It has some a dependency on gnrc_pktbuf_merge [2], which has not yet included > in RIOT (hopefully he will finish this soon). > If you're interested I'm pretty sure that we can share the code with you. > > I had several students starting a RIOT port of ESP, but none finished it. I > probably have to do it myself when time allows... > I heard that Olaf Bergmann had a student who wanted to implement Diet-ESP > [3], but I don't know a state of that. (obviously that would require an ESP > port) > > Cheers > Tobias > > [1] https://tools.ietf.org/html/draft-yeung-g-ikev2-13 > [2] https://github.com/RIOT-OS/RIOT/pull/6487 > [3] https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/ > > > -Ursprüngliche Nachricht- > > Von: devel Im Auftrag von Thomas C. Schmidt > > Gesendet: Dienstag, 3. Juli 2018 12:53 > > An: devel@riot-os.org > > Betreff: Re: [riot-devel] IPSEC/IKEv2 > > > > Hi Baptiste, > > > > as far as I remember, Tobias Guggemos http://www.mnm- > > team.org/~guggemos/ > > from LMU Munich was working on this. > > > > Plese back check with him. > > > > Cheers, > > Thomas > > > > On 03/07/2018 08:50, Baptiste Clenet wrote: > > > Hi, > > > Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has > > > anyone planned to implement it? > > > > > > Cheers, > > > > > > > -- > > > > Prof. Dr. Thomas C. Schmidt > > ° Hamburg University of Applied Sciences Berliner Tor 7 ° > > ° Dept. Informatik, Internet Technologies Group 20099 Hamburg, Germany ° > > ° http://inet.haw-hamburg.de/members/schmidt Fon: +49-40-42875-8452 > > ° > > > > ___ > > devel mailing list > > devel@riot-os.org > > https://lists.riot-os.org/mailman/listinfo/devel > > ___ > devel mailing list > devel@riot-os.org > https://lists.riot-os.org/mailman/listinfo/devel -- Baptiste ___ devel mailing list devel@riot-os.org https://lists.riot-os.org/mailman/listinfo/devel
Re: [riot-devel] IPSEC/IKEv2
Hey Tobias Heider implemented G-IKEv2 [1], which should be fairly easy to port to IKEv2 as the messages are more the less the same. It has some a dependency on gnrc_pktbuf_merge [2], which has not yet included in RIOT (hopefully he will finish this soon). If you're interested I'm pretty sure that we can share the code with you. I had several students starting a RIOT port of ESP, but none finished it. I probably have to do it myself when time allows... I heard that Olaf Bergmann had a student who wanted to implement Diet-ESP [3], but I don't know a state of that. (obviously that would require an ESP port) Cheers Tobias [1] https://tools.ietf.org/html/draft-yeung-g-ikev2-13 [2] https://github.com/RIOT-OS/RIOT/pull/6487 [3] https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/ > -Ursprüngliche Nachricht- > Von: devel Im Auftrag von Thomas C. Schmidt > Gesendet: Dienstag, 3. Juli 2018 12:53 > An: devel@riot-os.org > Betreff: Re: [riot-devel] IPSEC/IKEv2 > > Hi Baptiste, > > as far as I remember, Tobias Guggemos http://www.mnm- > team.org/~guggemos/ > from LMU Munich was working on this. > > Plese back check with him. > > Cheers, > Thomas > > On 03/07/2018 08:50, Baptiste Clenet wrote: > > Hi, > > Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has > > anyone planned to implement it? > > > > Cheers, > > > > -- > > Prof. Dr. Thomas C. Schmidt > ° Hamburg University of Applied Sciences Berliner Tor 7 ° > ° Dept. Informatik, Internet Technologies Group 20099 Hamburg, Germany ° > ° http://inet.haw-hamburg.de/members/schmidt Fon: +49-40-42875-8452 > ° > > ___ > devel mailing list > devel@riot-os.org > https://lists.riot-os.org/mailman/listinfo/devel ___ devel mailing list devel@riot-os.org https://lists.riot-os.org/mailman/listinfo/devel
Re: [riot-devel] IPSEC/IKEv2
Hi Baptiste, as far as I remember, Tobias Guggemos http://www.mnm-team.org/~guggemos/ from LMU Munich was working on this. Plese back check with him. Cheers, Thomas On 03/07/2018 08:50, Baptiste Clenet wrote: Hi, Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has anyone planned to implement it? Cheers, -- Prof. Dr. Thomas C. Schmidt ° Hamburg University of Applied Sciences Berliner Tor 7 ° ° Dept. Informatik, Internet Technologies Group 20099 Hamburg, Germany ° ° http://inet.haw-hamburg.de/members/schmidt Fon: +49-40-42875-8452 ° ___ devel mailing list devel@riot-os.org https://lists.riot-os.org/mailman/listinfo/devel
[riot-devel] IPSEC/IKEv2
Hi, Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has anyone planned to implement it? Cheers, -- Baptiste ___ devel mailing list devel@riot-os.org https://lists.riot-os.org/mailman/listinfo/devel