WireGuard works by securely encapsulates IP packets over UDP. It’s authentication and interface design has more to do with Secure Shell (SSH) than other VPNs. You simply configure the WireGuard interface with your private key and your peers’ public keys, and you’re ready to securely talk.
When it arrives, I expect WireGuard to quickly become the new standard for Linux VPNs. With its tiny code-size, high-speed cryptographic primitives, and in-kernel design, it should be faster than all other existing VPN technologies. WireGuard’s not just fast, it’s secure as well, with its support of state-of-the-art cryptography technologies such as the Noise protocol framework, Curve25519, ChaCha20, Poly1305, BLAKE2, SipHash24, and HKD.
So this VPN service is not intended to be used for circumventing geoblocking services. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable.
See https://www.zdnet.com/article/at-long-last-wireguard-vpn-is-on-its-way-into-linux/
#vpn #security #linux
#^At long last, WireGuard VPN is on its way into Linux | ZDNet
For years, developers have been working on this new take on the virtual private network, and now it’s finally ready to go.