Wireguard specifically was not designed for enterprise use, quite the opposite, and enterprise has to do quite a bit of wrapping around it to ensure keys are rotated and this is why tailscale has become so popular.
> Instead of reconstructing existing protocols, we built one from scratch. One that’s designed around what actually matters to you: security and performance.
Sigh.
AEGIS-256X2 can be hardware accelerated but its not really any stronger in the end than ChaCha20-Poly1305. The limitations of that hardware acceleration are not even felt in my experience on single-client connections, and its really the server where you see the pain.
Did surfshark just rewrite or vibe code wireguard with a new encryption algorithm?
1 comment
[ 4.5 ms ] story [ 13.3 ms ] thread> Instead of reconstructing existing protocols, we built one from scratch. One that’s designed around what actually matters to you: security and performance.
Sigh.
AEGIS-256X2 can be hardware accelerated but its not really any stronger in the end than ChaCha20-Poly1305. The limitations of that hardware acceleration are not even felt in my experience on single-client connections, and its really the server where you see the pain.
Did surfshark just rewrite or vibe code wireguard with a new encryption algorithm?