Reply to thread

Message

<blockquote data-quote="Malleable" data-source="post: 991681" data-attributes="member: 90907">Speaking strictly of setting up a private vpn application on your own server, in the beginning one of the main selling points (to use, not necessarily to purchase) along with it being a Linux kernel level application with streamlined code, was WireGuard had limited options.&nbsp; Since OpenVpn is quite a bit more difficult to configure regarding encrypted TLS handshakes,&nbsp; ciphers, etc. WireGuard touted the use of limiting its cryptographic algorithm library among other options to greatly reduce the chances of server/client misconfiguration(s) that are a prominent cause of vulnerabilities. At the beginning WireGuard usually was testing somewhere in the area of 50% faster than OpenVpn.&nbsp; It wasn&#039;t then, and to this day still doesn&#039;t appear to be,&nbsp; approved for use in the NIST cryptography standards so at the least it can&#039;t be used for communicating and/or conveying Secret to Top Secret level classified materials.&nbsp; At this time, however, their cryptographic primitives still appear to be top shelf.&nbsp; Here is a small pdf from almost exactly a year ago addressing just a segment of WireGuard&#039;s ongoing attempts to develop quantum-resistant cryptography.&nbsp;<a href="https://csrc.nist.gov/CSRC/media/Presentations/pq-wireguard-we-did-it-again/images-media/session-5-raynal-pq-wireguard.pdf" target="_blank">https://csrc.nist.gov/CSRC/media/Presentations/pq-wireguard-we-did-it-again/images-media/session-5-raynal-pq-wireguard.pdf</a></blockquote>

[QUOTE="Malleable, post: 991681, member: 90907"] Speaking strictly of setting up a private vpn application on your own server, in the beginning one of the main selling points (to use, not necessarily to purchase) along with it being a Linux kernel level application with streamlined code, was WireGuard had limited options. Since OpenVpn is quite a bit more difficult to configure regarding encrypted TLS handshakes, ciphers, etc. WireGuard touted the use of limiting its cryptographic algorithm library among other options to greatly reduce the chances of server/client misconfiguration(s) that are a prominent cause of vulnerabilities. At the beginning WireGuard usually was testing somewhere in the area of 50% faster than OpenVpn. It wasn't then, and to this day still doesn't appear to be, approved for use in the NIST cryptography standards so at the least it can't be used for communicating and/or conveying Secret to Top Secret level classified materials. At this time, however, their cryptographic primitives still appear to be top shelf. Here is a small pdf from almost exactly a year ago addressing just a segment of WireGuard's ongoing attempts to develop quantum-resistant cryptography. [URL]https://csrc.nist.gov/CSRC/media/Presentations/pq-wireguard-we-did-it-again/images-media/session-5-raynal-pq-wireguard.pdf[/URL] [/QUOTE]

Verification