This project has so many cryptographic wrong answers, I don't know where to begin. Glaring problems: - The same unchanging aes key is shared between all no

This project has so many cryptographic wrong answers, I don't know where to begin. Glaring problems: - The same unchanging aes key is shared between all nodes on a network. Compromise one, compromise all. Additionally a bad node can impersonate any other node. - The 96 bit nonce is derived randomly and there is no rekeying which means sending more than 2^32 messages will leak your (static, unchanging) key to the world. That's 2^32 total between all clients on a network. Hope everyone is manually updating their keys! - Default unchanging password of `hello-world` is set. Everyone remembers to change that environment variable right? - The KDF is md5, which means attackers can brute force guess the key incredibly fast. - There's no perfect forward secrecy (aging out of old keys). Amazingly, this is still better than their last version, which used AES-CBC and used the same value for both the key and the IV (which is transmitted over the network). Summary: Stick to Wireguard!