News for hackers. Stuff that matters.

A comment on MacOS command line version of the WireGuard VPN is now available for testing. Parent comment

Re:MacOS command line version of the WireGuard VPN is now av... by Panino on Thursday May 17, 2018 @03:55PM (#17094948)
> Those seem quite the overstatements.

In addition to other comments, OpenVPN's default cipher is Blowfish. Since that sounds unbelievable, here's the manpage:

https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage

"The default is BF-CBC, an abbreviation for Blowfish in Cipher Block Chaining mode."

If you read just a little further you'll see that RC2, 56-bit DES and other obsolete ciphers are supported as well. To put this in perspective, DES is from the same time period as Pink Floyd's Dark Side of the Moon.

I'm very excited for WireGuard to be ported to other platforms.

[ Parent | on HN ]
Re:MacOS command line version of the WireGuard VPN is now av... by aeries on Thursday May 17, 2018 @06:48PM (#17096823)
When both sides are OpenVPN 2.4+, AES-256-GCM will be negotiated by default.
[ Parent | on HN ]
Re:MacOS command line version of the WireGuard VPN is now av... by agnokapathetic on Thursday May 17, 2018 @08:33PM (#17097616)
Emphasis on "negotiated".

The entire negotiation and key agreement stack is a larger codebase than all of Wireguard.

[ Parent | on HN ]
Re:MacOS command line version of the WireGuard VPN is now av... by stouset on Thursday May 17, 2018 @09:24PM (#17097902)
The difference between “it can be made to work securely” and “it works securely” is much more important than most people realize.
[ Parent | on HN ]