14.02.2017 Views

Presented by Jason A Donenfeld FOSDEM 2017

2kVT3mc

2kVT3mc

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Solid Crypto<br />

▪<br />

▪<br />

▪<br />

▪<br />

▪<br />

▪<br />

▪<br />

▪<br />

We make use of Trevor Perrin’s Noise Protocol Framework – noiseprotocol.org<br />

▪ Developed with much feedback from WireGuard motivations.<br />

▪ Custom written very specific implementation of NoiseIK for the kernel.<br />

Perfect forward secrecy – new key every 2 minutes<br />

Avoids key compromise impersonation<br />

Identity hiding<br />

Authenticated encryption<br />

Replay-attack prevention, while allowing for network packet reordering<br />

Modern primitives: Curve25519, Blake2s, ChaCha20, Poly1305, SipHash2-4<br />

Lack of cipher agility!

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!