Send in your ideas. Deadline October 1, 2024
Grant
Theme fund: NGI TALER Fund
Start: 2024-06

MTE - the MirageOS Taler Exchange

Implement Taler Exchange functionality in OCaml-based unikernel

This project will develop a drop-in implementation for a GNU Taler exchange with the unikernel framework MirageOS. The GNU Taler Exchange is a service that needs to be robust and high secure (plus allow very high security deployments). MirageOS uses OCaml, a functional programming language with a static type system which catches lots of errors at compile time, and provides memory-safety. With MirageOS, one only embeds the code that is really required to run the service in the virtual machine image - resulting in a relatively much smaller attack surface.

The resulting solution will use very little resources (memory usage / CPU cycles), which is beneficial both from a green computing perspective, and from a performance perspective. The plan is to use existing tests of GNU Taler exchange, in addition to our own fuzz testing, to ensure that MTE acts the same as GNU Taler exchange.

Run by Robur

Logo NLnet: abstract logo of four people seen from above Logo NGI TALER: letterlogo shaped like a tag

This project was funded through the NGI TALER Fund, a fund established by NLnet with financial support from the European Commission's Next Generation Internet programme under the aegis of DG Communications Networks, Content and Technology. NGI TALER is part of NGI TALER, an R&D pilot programme under Horizon Europe research and innovation programme under grant agreement No. 101135475. Additional funding is made available by the Swiss State Secretariat for Education, Research and Innovation (SERI).