Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
MIME-Version: 1.0
References: <CAHhAz+jC7kJfJRT6AB15xFBTSGpQs6VmufN8J9=gRZuwxZPpjA@mail.gmail.com>
In-Reply-To: <CAHhAz+jC7kJfJRT6AB15xFBTSGpQs6VmufN8J9=gRZuwxZPpjA@mail.gmail.com>
Reply-To: noloader@gmail.com
From:   Jeffrey Walton <noloader@gmail.com>
Date:   Mon, 22 Mar 2021 17:16:08 -0400
Message-ID: <CAH8yC8m5C3E9BNK+4UX307GsAoGH7T6ehJ=6acrO9whJXbRc0Q@mail.gmail.com>
Subject: Re: kernel projects for students
To:     Muni Sekhar <munisekharrms@gmail.com>
Cc:     kernelnewbies <kernelnewbies@kernelnewbies.org>,
        LKML <linux-kernel@vger.kernel.org>
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

On Mon, Mar 22, 2021 at 11:37 AM Muni Sekhar <munisekharrms@gmail.com> wrote:
>
> What are some good Linux projects in kernel space for final year
> computer.science engineering students?
> Could someone help and share your ideas on this please.

Hedging deployed cryptography.

Hedging can be used to keep the state of a machine unique and the
rng's in good working order to minimize/eliminate the risk associated
with low entropy devices and virtual machine resets.

You would hook the network stack and look for the other party's random
secret, like ClientHello.random in SSL/TLS [RFC 5246]. When the data
arrives you add it to the machine's entropy pools.

In addition to SSL/TLS, you also have SSH and IPsec to grab another
party's entropy. I am sure there are others, but SSH, SSL/TLS and
IPsec are the ones I would focus on.

Also see "When Virtual is Harder than Real: Resource Allocation
Challenges in Virtual Machine Based IT Environments,"
http://static.usenix.org/event/hotos05/final_papers/full_papers/garfinkel/garfinkel.pdf
; and "When Good Randomness Goes Bad: Virtual Machine Reset
Vulnerabilities and Hedging Deployed Cryptography,"
http://www.isoc.org/isoc/conferences/ndss/10/pdf/15.pdf .

Jeff