News for hackers. Stuff that matters.

A comment on NSA, NIST, and post-quantum crypto: my second lawsuit against the US government. Parent comment

Re:NSA, NIST, and post-quantum crypto: my second lawsuit aga... by dowlingbj on Monday August 08, 2022 @06:33PM (#32391963)
To be clear, WireGuard is a good VPN protocol, and definitely a secure design. I wouldn't recommend another over it. It's just the initial claims of security in the NDSS paper were incompatible with its design.
[ Parent | on HN ]
Re:NSA, NIST, and post-quantum crypto: my second lawsuit aga... by lmeyerov on Monday August 08, 2022 @10:01PM (#32393457)
I'm sure it's a pretty good one, but it's quite hard to trust more than that both on the design + impl side if you ever have tried to verify (vs just test) such a system. Think the years of pain for something much more trivial like paxos + an impl of it.

In this case, looks like the community does value backing up its claims, and the protocol is verified: https://www.wireguard.com/formal-verification/ . Pretty awesome! The implementation itself seems to be written unsafely, so TBD there.

[ Parent | on HN ]