[gentoo-soc] GSoC 2016: Gentoo-Keys Improvements and the new Meta-Manifest system

[Angel Perivolaropoulos]

Hello,

My name is Angelos Perivolaropoulos and I go by the nickname aeroniero. I
am a first year undergraduate student of Software Engineering at the
University of Glasgow, Scotland but I have been programming since I was
quite young and have experience in Python from both my university's courses
and my own.

I am interested in participating in Gentoo-GPG project of GSoC 2016 and my
goal is to improve and expand the capabilities of Gentoo-Keys, the project
of which Gentoo-GPG is based on, and implement the new Meta-Manifest system
for efficient and secure Gentoo Software distribution.

Gentoo-Keys is a python based project that allows the user/developer to
encrypt and sign their data and communications and ensuring integrity of
distributed data in Gentoo tree (ebuilds, files and distfiles so that
malleability of a distributing server isn't possible) by creating GPG keys.

The Meta-Manifest system will bring security of distribution of Gentoo
Software by providing a much less expensive way of verifiable distribution
from Gentoo Infrastructure to a user system, while data is conveyed over
completely untrusted networks and system. The new Meta-Manifest system is
based on GLEP:58 <https://wiki.gentoo.org/wiki/GLEP:58>.

This will all help to maintain the integrity of the main tree, make the
developer’s job easier by letting him focus on coding alone and also make
Gentoo Distribution safer and more convenient since Gentoo software will be
more widely and more safely distributed.


More detailed information is included in my proposal. I am looking forward
to your feedback and questions.

- Angelos Perivolaropoulos "aeroniero"

GSoC Proposal:
https://docs.google.com/document/d/14ZCjQuuoymPBgEEOgCs3Evu44t5ZWxfKSjOdU1AfPcU/edit?usp=sharing
GLEP:58: https://wiki.gentoo.org/wiki/GLEP:58