FreeBSD Contributions

Areas of Work

• Intel PRO Wireless driver iwn(4)
• ATA Security support for atacontrol(8)
• Omnikey CardMan 4040 driver cmx(4)
• FreeBSD Ports related work

Project Ideas

• Add /dev/cmx0 support to libccid
• Smartcard based full disk encryption
  • CCID class support for USB4BSD (ccid0)
  • Kernel smartcard framework
    • In-kernel PKCS#11, PKSC#15, PC/SC, CT-API (?)
    • Manage available readers and smartcards (scr0, sc0)
    • Provides device node or in-kernel object per available smartcard (ops: read/write APDU) (sc0)
    • IFD handler per reader
      • Handler for USB4BSD CCID class devices (ccid0)
      • Handler for cmx0
    • Linux smartK:
      http://smartk.dia.unisa.it/
  • PKI smartcard support (where?)
    • plug into crypto(9) / opencrypto (?) / pki0
    • http://www.paeps.cx/pubs/crypto_acceleration/slides.pdf
    • http://www.leidinger.net/FreeBSD/src_docs/crypto.pdf
    • http://www.delphij.net/fbdoxy/crypto/html/
    • http://www.usenix.org/publications/library/proceedings/bsdcon03/tech/leffler_crypto/leffler_crypto.pdf
  • Patch GELI to be able to use PKI smartcard devices for disk encryption (pki0)
    • use private key on smartcard to decrypt key material
    • boot from /boot on USB stick, as already implemented
      • http://www.freebsd.org/doc/en/books/handbook/disks-encrypting.html
      • http://www.freebsd.org/doc/en/books/handbook/swap-encrypting.html
• Run FreeBSD kernel within a userland process, much like UML or CoLinux
• Fix pf to handle fragmented IPv6 packets more gracefully
  • supposedly, they are working on it, but who is they and what’s the status?
  • http://wiki.freebsd.org/IPv6TODO
• work on ThinkPad accel driver
• get cmm device and write cmm driver
• port /dev/clockctl stuff to allow chroot and unpriv ntpd on FreeBSD (cf. NetBSD article)
• Check out the HAMMER fs from DragonFlyBSD

Reference Material

• Driver writing reference material
• Sysctl analysis
• Hardening and other notes
• Hardening (ger)
• Lock Order Reversal in FreeBSD