strongSwan II - die neue IKEv2 Implementation

von Andreas Steffen (Institute of Internet Technologies and Applications, Hochschule für Technik Rapperswil)

Samstag, 06.05.2006, Raum 1A-4, 10:00-11:00 Uhr

Das strongSwan Entwicklerteam stellt die Architektur des neuen IKEv2 Keying Dämons charon vor, der in den nächsten zwei Jahren im Rahmen des strongSwan II Projekts des Instituts für Internet Technologien und Anwendungen der Hochschule für Technik Rapperswil (Schweiz) zu einer vollen IKEv2 Implementation gemäss RFC 4306 ausgebaut werden soll. Wir werden einen provisorischen Ausblick auf die Roadmap geben und die strongSwan Migrationsstrategie erläutern, die es erlauben wird, IKEv1 und IKEv2 im Mischbetrieb zu betreiben. Auf Wunsch können auch beliebige andere Aspekte von strongSwan im Detail diskutiert werden.

Über den Autor Andreas Steffen:

Andreas Steffen is currently professor for Security in Communications at the Rapperswil University of Applied Sciences in Switzerland where he is heading the Institute of Internet Technologies and Applications.

From 1998 to 2004 he was a professor at the Zurich University of Applied Sciences in Winterthur where he developed the popular X.509 patch for Linux FreeS/WAN in collaboration with his students. After the demise of the FreeS/WAN project in March 2004 he forked off the Linux strongSwan project which he is still actively maintaining.

Andreas Steffen received both his Master's degree in Electrical Engineering in 1982 and his Ph.D. in 1991 from the Swiss Federal Institute of Technology in Zurich (ETHZ). From 1982 until 1998 he was an R&D engineer with Siemens Switzerland where he worked in such diverse areas as RF circuit design for RADAR and medical Magnetic Resonance Imaging systems as well as Integrated Circuit design for broadband multiplexers. In his last position with Siemes he was head of the R&D department "Wireless Systems" where he was responsible for one of the first Wireless LAN products.

Andreas Steffen has a long-standing interest in computing and cryptology. He teaches and does active research and development in the area of network security. He was a speaker at the IPsec Global Summit 2002 in Paris and the DFN Arbeitstagungen für Kommunikationsnetze in 2003, 2004, and 2005 in Düsseldorf. At the LinuxTag 2005 he presented the advanced features of the strongSwan VPN software. He was an invited speaker at several VPN seminars organized by NetworkWorld, LANline and the German Telekom. Lately he's been giving talks on VoIP security. He has also published several articles in the popular c't computer magazine.