Shanduko dzinosvika zana dzine chekuita nekushandiswa kwerutsigiro rweVPN dzakashandiswa muDragonFly BSD operating system kernel. WireGuard. Mutyairi "wg" ane rutsigiro rweprotocol WireGuard Yakatakurwa kubva kuFreeBSD, nepo mabasa e cryptographic, network interface, uye ioctl API (yekudzora nzvimbo yemushandisi) zvakatorwa kubva kuOpenBSD. Shanduko kune ifconfig utility inodiwa pakugadzirisa VPN dzinotakurwa kubva kuOpenBSD. Kuitwa kwacho kunoenderana nemakasitoma ese epamutemo. WireGuard nokuti Linux, Windows, macOS, *BSD, iOS uye AndroidDragonFly BSD yakava OS yechishanu yakavhurika mushure me Linux, OpenBSD, NetBSD uye FreeBSD nerutsigiro rwakabatanidzwa WireGuard.
В WireGuard Pfungwa yekufambisa makiyi ekuvhara (encryption key routing concept), inosanganisira kusunga kiyi yega yega kune network interface uye kuishandisa pakubatanidza makiyi eruzhinji. Kuti utaure makiyi uye ubatanidze pasina kushandisa daemon yakasiyana munzvimbo yemushandisi, nzira yeNoise_IK kubva kuNoise Protocol Framework, yakafanana neyakagadzirirwa_makiyi muSSH, inoshandiswa. Kutumira data kunoitwa kuburikidza ne encapsulation mumapaketi eUDP. Kupa kero yeIP kunotsigirwa. VPN-maseva (anotenderera) asina kubviswa nekuchinja otomatiki kwemutengi.
Encryption inoshandisa ChaCha20 stream cipher uye Poly1305 message authentication algorithm (MAC), yakagadzirwa naDaniel J. Bernstein, Tanja Lange naPeter Schwabe. ChaCha20 nePoly1305 zvakamisikidzwa seanokurumidza uye akachengeteka analogues eAES-256-CTR neHMAC, iyo software yekumisikidza inobvumira kuwana yakatarwa kuuraya nguva pasina kushandisa yakakosha Hardware rutsigiro. Kugadzira kiyi yakavanzika yakagovaniswa, iyo elliptic curve Diffie-Hellman protocol inoshandiswa mukuitwa kweCurve25519, zvakare yakakurudzirwa naDaniel Bernstein. Iyo BLAKE2s algorithm (RFC7693) inoshandiswa kuita hashing.
Source: opennet.ru
