2 ms·
> WireGuard is also orders of magnitude more secure than OpenVPN. This entirely depends on how you configure OpenVPN, which encryption to allow it to support,
by TedDoesntTalk 5y ago
> WireGuard is also orders of magnitude more secure than OpenVPN.
This entirely depends on how you configure OpenVPN, which encryption to allow it to support, HMAC, hashes, etc. If you configure it with maximum security, it is equally secure as WireGuard. If you configure it less so, then you allow older clients to connect.
- BlackLotus89 5y agoI think what the parent post meant isn't necessarily security in the transport, but security in the code. The wireguard has around 4k LOC [0] and you can read and understand it in a weekend (or faster depending on your skill). Also you not only don't have to configure the ciphers, but you actually can't. If any of the chosen defaults isn't considered secure anymore they will be replaced [citation needed]. So even thought the code resides in the linux kernel you could still reasonably well argue that it is indeed on several levels more secure than OpenVPN. Here [1] is the whitepaper for anyone who is interested. [0] https://git.zx2c4.com/wireguard-linux/tree/drivers/net/wireguard/ https://git.zx2c4.com/wireguard-linux/tree/drivers/net/wireg... [1] https://www.wireguard.com/papers/wireguard.pdf https://www.wireguard.com/papers/wireguard.pdf
- tptacek 5y agoNo, it does not depend on configuration. You cannot configure OpenVPN to be "equally as secure as WireGuard".