Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread James Bottomley
On Mon, 2018-08-13 at 10:55 -0700, Jason A. Donenfeld wrote: > > but it's very hard for a flow classifier because you have to > > The construction and identifier strings might not obviously help with > the extremely narrow idea you've brought up, but it is very important > for safely introducing a

Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread Jason A. Donenfeld
> but it's very hard for a flow classifier because you have to The construction and identifier strings might not obviously help with the extremely narrow idea you've brought up, but it is very important for safely introducing additional versions. Namely, it prevents against cross-protocol key reus

Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread James Bottomley
On Mon, 2018-08-13 at 10:02 -0700, Jason A. Donenfeld wrote: > > Could we please build planning for this crypto failure day into > > wireguard now rather than have to do it later?  It doesn't need to > > be full cipher agility, it just needs to be the ability to handle > > multiple protocol version

Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread Jason A. Donenfeld
Hi James, On 8/13/18, James Bottomley wrote: >> Ample information, including documentation, installation >> instructions, >> and project details, is available at: >> >> * https://www.wireguard.com/ >> * https://www.wireguard.com/papers/wireguard.pdf > > In your paper you say this: > >> Finall

Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread Willy Tarreau
On Mon, Aug 13, 2018 at 08:40:11AM -0700, James Bottomley wrote: > Could we please build planning for this crypto failure day into > wireguard now rather than have to do it later? It doesn't need to be > full cipher agility, it just needs to be the ability to handle multiple > protocol versions ..

Re: [PATCH v1 0/3] WireGuard: Secure Network Tunnel

2018-08-13 Thread James Bottomley
> Ample information, including documentation, installation > instructions, > and project details, is available at: > >   * https://www.wireguard.com/ >   * https://www.wireguard.com/papers/wireguard.pdf In your paper you say this: > Finally, WireGuard is cryptographically opinionated. It intenti