4 ms·
> that cannot use NIST cryptography Do you mean as a matter of Donenfeld's engineering decisions (that those algorithms are unavailable in WireGuard)?
by schoen 3y ago
> that cannot use NIST cryptography
Do you mean as a matter of Donenfeld's engineering decisions (that those algorithms are unavailable in WireGuard)?
- tptacek 3y agoYes: they use, for lack of a better term, DJB cryptography, and like many modern cryptosystems they eschew negotiation, so it's not straightforward to fit NIST algorithms in.
- gonzo 3y agoit's entirely straight-forward to substitute AES-256-GCM for ChaCha20/Poly1305 in Wireguard, and the result, while not "wireguard" is substantially faster than Wireguard.