Re:WireGuard Gives Linux a Faster, More Secure VPN
by upofadown on Monday March 02, 2020 @06:05PM
(#22470059)
So at midnight July 23 2026 everyone upgrades to wireguard2 all at once? Perhaps I am not getting what you are proposing here...
Re:WireGuard Gives Linux a Faster, More Secure VPN
by tptacek on Monday March 02, 2020 @06:51PM
(#22470402)
Just like with TLS and its "ciphersuites", you expose the vulnerable components for as long as (1) you're required to by your users and (2) the risk is bearable. At some point, you stop exposing the vulnerable component at all. Ciphersuite negotiation doesn't free you from this requirement, but it does make it harder to ensure that peers who agree on non-vulnerable parameters are actually able to use them.
None of this is complicated. It's also worth looking back on the history of TLS vulnerabilities to get a sense of just how little ciphersuite negotiation helped anybody.
Re:WireGuard Gives Linux a Faster, More Secure VPN
by upofadown on Monday March 02, 2020 @08:38PM
(#22471050)
My understanding is that Wireguard has no way to do anything other than what it does now. There is no way to use an upgrade in the protocol.
Re:WireGuard Gives Linux a Faster, More Secure VPN
by tptacek on Monday March 02, 2020 @11:04PM
(#22471694)
The same was true of TLS!
Re:WireGuard Gives Linux a Faster, More Secure VPN
by wglb on Monday March 02, 2020 @10:45PM
(#22471614)
And that is a good thing.
Re:WireGuard Gives Linux a Faster, More Secure VPN
by afiori on Tuesday March 03, 2020 @01:37AM
(#22472326)
not everyone, only a single network at a time. a common use will be corporate VPNs or VPNs on digital ocean-like services, in that case there is little to no reason for interoperability between two distinct network.
or at least you might want different keys anyway
We introduce wireguard2, which is not wire-protocol-compatible with original wireguard. The same configuration files can be used, but you must generate new keys as part of your switch over.
We strongly advise you to stop using original wireguard if there is any possibility of a wealthy, organized, determined attacker intercepting your communications. (See CVE2021-x. and forthcoming paper "64 qubits can deduce Curve25519 points" by D.J. Bernstein et al.)