Re: [riot-devel] IPSEC/IKEv2

2018-07-12 Thread Baptiste Clenet
Hi Tobias,
Great to hear that ESP is getting ported as well as G-IKEv2 and Diet-ESP.
A good Iot µOS must provide security features

I would like to contribute to the port of ESP. Could you create a WIP
merge request or a branch on a repo so I can see status of port and
test.

Have you thought about using an external library?

Cheers,

Le mer. 4 juil. 2018 à 14:50, Tobias Guggemos  a écrit :
>
> Hey
>
> Tobias Heider implemented G-IKEv2 [1], which should be fairly easy to port to 
> IKEv2 as the messages are more the less the same.
> It has some a dependency on gnrc_pktbuf_merge [2], which has not yet included 
> in RIOT (hopefully he will finish this soon).
> If you're interested I'm pretty sure that we can share the code with you.
>
> I had several students starting a RIOT port of ESP, but none finished it. I 
> probably have to do it myself when time allows...
> I heard that Olaf Bergmann had a student who wanted to implement Diet-ESP 
> [3], but I don't know a state of that. (obviously that would require an ESP 
> port)
>
> Cheers
> Tobias
>
> [1] https://tools.ietf.org/html/draft-yeung-g-ikev2-13
> [2] https://github.com/RIOT-OS/RIOT/pull/6487
> [3] https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/
>
> > -Ursprüngliche Nachricht-
> > Von: devel  Im Auftrag von Thomas C. Schmidt
> > Gesendet: Dienstag, 3. Juli 2018 12:53
> > An: devel@riot-os.org
> > Betreff: Re: [riot-devel] IPSEC/IKEv2
> >
> > Hi Baptiste,
> >
> > as far as I remember, Tobias Guggemos http://www.mnm-
> > team.org/~guggemos/
> > from LMU Munich was working on this.
> >
> > Plese back check with him.
> >
> > Cheers,
> >   Thomas
> >
> > On 03/07/2018 08:50, Baptiste Clenet wrote:
> > > Hi,
> > > Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has
> > > anyone planned to implement it?
> > >
> > > Cheers,
> > >
> >
> > --
> >
> > Prof. Dr. Thomas C. Schmidt
> > ° Hamburg University of Applied Sciences  Berliner Tor 7 °
> > ° Dept. Informatik, Internet Technologies Group   20099 Hamburg, Germany °
> > ° http://inet.haw-hamburg.de/members/schmidt  Fon: +49-40-42875-8452
> > °
> >
> > ___
> > devel mailing list
> > devel@riot-os.org
> > https://lists.riot-os.org/mailman/listinfo/devel
>
> ___
> devel mailing list
> devel@riot-os.org
> https://lists.riot-os.org/mailman/listinfo/devel



-- 
Baptiste
___
devel mailing list
devel@riot-os.org
https://lists.riot-os.org/mailman/listinfo/devel


Re: [riot-devel] IPSEC/IKEv2

2018-07-04 Thread Tobias Guggemos
Hey

Tobias Heider implemented G-IKEv2 [1], which should be fairly easy to port to 
IKEv2 as the messages are more the less the same.
It has some a dependency on gnrc_pktbuf_merge [2], which has not yet included 
in RIOT (hopefully he will finish this soon).
If you're interested I'm pretty sure that we can share the code with you.

I had several students starting a RIOT port of ESP, but none finished it. I 
probably have to do it myself when time allows...
I heard that Olaf Bergmann had a student who wanted to implement Diet-ESP [3], 
but I don't know a state of that. (obviously that would require an ESP port)

Cheers
Tobias

[1] https://tools.ietf.org/html/draft-yeung-g-ikev2-13
[2] https://github.com/RIOT-OS/RIOT/pull/6487 
[3] https://datatracker.ietf.org/doc/draft-mglt-ipsecme-diet-esp/ 

> -Ursprüngliche Nachricht-
> Von: devel  Im Auftrag von Thomas C. Schmidt
> Gesendet: Dienstag, 3. Juli 2018 12:53
> An: devel@riot-os.org
> Betreff: Re: [riot-devel] IPSEC/IKEv2
> 
> Hi Baptiste,
> 
> as far as I remember, Tobias Guggemos http://www.mnm-
> team.org/~guggemos/
> from LMU Munich was working on this.
> 
> Plese back check with him.
> 
> Cheers,
>   Thomas
> 
> On 03/07/2018 08:50, Baptiste Clenet wrote:
> > Hi,
> > Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has
> > anyone planned to implement it?
> >
> > Cheers,
> >
> 
> --
> 
> Prof. Dr. Thomas C. Schmidt
> ° Hamburg University of Applied Sciences  Berliner Tor 7 °
> ° Dept. Informatik, Internet Technologies Group   20099 Hamburg, Germany °
> ° http://inet.haw-hamburg.de/members/schmidt  Fon: +49-40-42875-8452
> °
> 
> ___
> devel mailing list
> devel@riot-os.org
> https://lists.riot-os.org/mailman/listinfo/devel

___
devel mailing list
devel@riot-os.org
https://lists.riot-os.org/mailman/listinfo/devel


Re: [riot-devel] IPSEC/IKEv2

2018-07-03 Thread Thomas C. Schmidt

Hi Baptiste,

as far as I remember, Tobias Guggemos http://www.mnm-team.org/~guggemos/ 
from LMU Munich was working on this.


Plese back check with him.

Cheers,
 Thomas

On 03/07/2018 08:50, Baptiste Clenet wrote:

Hi,
Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has
anyone planned to implement it?

Cheers,



--

Prof. Dr. Thomas C. Schmidt
° Hamburg University of Applied Sciences  Berliner Tor 7 °
° Dept. Informatik, Internet Technologies Group   20099 Hamburg, Germany °
° http://inet.haw-hamburg.de/members/schmidt  Fon: +49-40-42875-8452 °

___
devel mailing list
devel@riot-os.org
https://lists.riot-os.org/mailman/listinfo/devel


[riot-devel] IPSEC/IKEv2

2018-07-03 Thread Baptiste Clenet
Hi,
Is there any implementation of IPSEC/IKEv2 in RIOT network stack? Has
anyone planned to implement it?

Cheers,

-- 
Baptiste
___
devel mailing list
devel@riot-os.org
https://lists.riot-os.org/mailman/listinfo/devel