> Where? Neither a search nor a brief manual inspection of the protocol design mentions such a feature. Pages 9 and 10 in the whitepaper, see IDENTIFIER and CO

> Where? Neither a search nor a brief manual inspection of the protocol design mentions such a feature. Pages 9 and 10 in the whitepaper, see IDENTIFIER and CONSTRUCTION. That being said, supporting broken crypto is a bad idea. Should any of the crypto primitives be broken, the way to move forward would be to replace them, not have WireGuard support 2 protocol versions simultaneously.