{"id":56025,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/v-yadro-linux-5-6-vklyuchili-vpn-wireguard"},"modified":"2020-02-18T14:04:11","modified_gmt":"2020-02-18T11:04:11","slug":"v-yadro-linux-5-6-vklyuchili-vpn-wireguard","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/v-yadro-linux-5-6-vklyuchili-vpn-wireguard","title":{"rendered":"VPN WireGuard included in the Linux kernel 5.6","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Today, Linus has merged the net-next branch with VPN interfaces. WireGuard<\/a><\/noindex>This event is reported informed<\/a><\/noindex> in the WireGuard mailing list.<\/p>\n

\"VPN
\n
\nCurrently, the code for the new Linux kernel 5.6 is being collected. WireGuard is a fast next-generation VPN that implements modern cryptography. It was initially developed as a simpler and more user-friendly alternative to existing VPNs. Its author is Canadian information security specialist Jason Donenfeld. In August 2018, WireGuard gained praise<\/a><\/noindex> from Linus Torvalds. Around the same time, work began to include the VPN in the Linux kernel. The process took a bit longer than expected.
\n<\/a><\/noindex>
\n\"I see that Jason has made a pull request to include WireGuard in the kernel,\" Linus wrote on August 2, 2018. \"Can I just once again state my love for this VPN and hope for a quick merge? The code may not be perfect, but I\u2019ve looked it over, and compared to the horrors of OpenVPN and IPSec, it's a true work of art.\"<\/p>\n

Despite Linus\u2019s wishes, the merge was delayed for a year and a half. The main issue was the reliance on proprietary implementations of cryptographic functions that were used for performance improvements. After lengthy negotiations, in September 2019, a compromise was reached<\/a><\/noindex> to port the patches to the existing kernel\u2019s Crypto API functions, to which WireGuard developers had performance and overall security concerns. However, it was decided to set apart the native crypto functions of WireGuard in a separate low-level Zinc API and gradually port them to the kernel. In November, kernel developers kept their promise and agreed<\/a><\/noindex> to transfer part of the code from Zinc into the main kernel. For instance, in Crypto API, includes<\/a><\/noindex> the fast implementations of ChaCha20 and Poly1305 algorithms prepared in WireGuard.<\/p>\n

Eventually, on December 9, 2019, David Miller, responsible for the networking subsystem of the Linux kernel, accepted<\/a><\/noindex> into the net-next branch patches<\/a><\/noindex> merged the VPN interface from the WireGuard project.<\/p>\n

And today, on January 29, 2020, the changes were sent to Linus for inclusion in the kernel.<\/p>\n

\"VPN
\n
\nThe stated advantages of WireGuard over other VPN solutions are:<\/p>\n