StrongSWAN (and IPSec in general) supports smartcards. WireGuard does not. I've setup StrongSWAN using smartcards almost 15 years ago, at the time it was the

StrongSWAN (and IPSec in general) supports smartcards. WireGuard does not. I've setup StrongSWAN using smartcards almost 15 years ago, at the time it was the only open source IPSec client that supported it. It was relatively easy to get going (the server was a Cisco VPN appliance, which I managed and it was relatively easy to extract the relevant IKE profiles).