Simple Packet Signing for Linux

SPS allows you to sign and encrypt your IP traffic with minimal configuration. This implementation strives for security, simplicity and robustness. SPS itself adds 'portability' to that goal. We currently plan releasing implementations for:

Linux
Windows 2000
MacOS X

We welcome other implementations, please drop us a line if you are considering joining in!

PLAN

Current very rough PLAN is here. *Very* open to further discussion.

Code

First drop, 25th of August 2001: sps-linux-0.0.tar.gz

State

You can encapsulate packets, and sign them, but this is currently all very bogus. Important bit is that is has been established that:

iptables/netfilter lends itself to this approach
Fragmentation is not a major problem
Packets with strange IP protocol travel the internet well