Page 1 of 1

DoD BitTorrent client?

Posted: Fri May 29, 2009 5:58 pm
by TaleSlinger
There's a request for BitTorrent work by the US DoD. You can find the request here:
http://tinyurl.com/mp4d4g

If you guys think you can modify Deluge to do what they want, you might want to look into it some more.

Re: DoD BitTorrent client?

Posted: Fri Jun 12, 2009 6:14 pm
by Joshua Vaughan
To the poster,

I am of the students assigned to this project out of the Air Force Research Labs in Rome, NY. We are actually pursuing the use of Deluge because of the powerful development capabilities of Deluge's core, libtorrent. We are preparing a proof of concept prototype and hope to have one by the end of the summer. The purpose of this project at this stage is to disseminate geospatial information in an extremely fast and efficient manner. Here are a few of the project goals:

> When a DoD employee inserts their CAC (Common Access Card) and logs into a system equipped with the Deluge client, the client needs to have a plug-in which accesses the CAC's public key and authenticates with the DoD tracker. I know I really simplified that process, but I can go into more detail if necessary.

> Fully Encrypted data stream (2-way SSL) between seeds, between peers and between seeds and peers. If the information was to be intercepted, the man-in-the-middle would have no idea what the data was. In the current way data is transferred via bittorrent, headers are still unencrypted, so you know it is bittorrent traffic.

> The Deluge client will need to have a modified version of FlexRSS installed. The modification would be a completed encrypted communication (2-way SSL?) between the RSS and the tracker database.

> The Deluge client needs the ability to be installed as a service and be able to seed information to the DoD swarm without the need for a user to be logged in.

Any advice from the community would be greatly appreciated.

Re: DoD BitTorrent client?

Posted: Sat Jun 13, 2009 1:07 am
by andar
Joshua Vaughan wrote: > When a DoD employee inserts their CAC (Common Access Card) and logs into a system equipped with the Deluge client, the client needs to have a plug-in which accesses the CAC's public key and authenticates with the DoD tracker. I know I really simplified that process, but I can go into more detail if necessary.
You could possibly modify the tracker urls in the torrent to post a key to the tracker. This is generally how private trackers authenticate their users by embedding a password into the announce url.
> Fully Encrypted data stream (2-way SSL) between seeds, between peers and between seeds and peers. If the information was to be intercepted, the man-in-the-middle would have no idea what the data was. In the current way data is transferred via bittorrent, headers are still unencrypted, so you know it is bittorrent traffic.
This would require modifications to libtorrent. Currently you can encrypt the whole the stream with RC4.
> The Deluge client will need to have a modified version of FlexRSS installed. The modification would be a completed encrypted communication (2-way SSL?) between the RSS and the tracker database.
You simply want to grab torrents from a HTTPS server? That should be fairly easy to do..
> The Deluge client needs the ability to be installed as a service and be able to seed information to the DoD swarm without the need for a user to be logged in.
Deluge is designed to do this out of the box.. You simply run the daemon (deluged) and run a UI when you need to modify it's state.

Re: DoD BitTorrent client?

Posted: Tue Jun 16, 2009 1:57 pm
by Joshua Vaughan
Thanks for your help. This really helps direct our development. I will be a frequenter of the development forums. :-)