strongSwan Open Source Project
Open Source
strongSwan open source project has been provided courtesy of HSR University of Applied Sciences Rapperswil and its ITA Institute for Internet Technologies and Applications.
The strongSwan VPN software fully supports Network Endpoint Assessment (NEA) and is able to collect evidence from the Integrity Measurement Architecture (IMA) on a Linux client and to transfer measurement data on more than 1000 system files via the Trusted Network Connect (TNC) protocols PA-TNC, PB-TNC, and PT-EAP over IKEv2 EAP-TTLS to a strongSwan TNC server. A quote signature by the Trusted Platform Module (TPM) on the TNC client establishes the trustworthiness of the IMA measurements. The overall decision process of either giving a client full network access or to relegate it to an isolation network takes less than 20 seconds.
strongSwan's open source project can be viewed here.
Dr. Andreas Steffen has published a paper titled "The Linux Integrity Measurement Architecture and TPM-Based Network Endpoint Assessment" and is available here.
Explore other documents
Reference
TCG Trusted Attestation Protocol (TAP) Use Cases for TPM Families 1.2 and 2.0 and DICE
Specification
TCG Trusted Attestation Protocol (TAP) Information Model for TPM Families 1.2 and 2.0 and DICE Family 1.0
One Pager
TCG Trusted Network Communications for Mobile Platforms
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.