Cryptography @ Infosec.pub

380 readers

56 users here now

Questions, answers, discussions, and literature on the theory and practice of cryptography

Rules (longer version here)

Stick to cryptography / infosec
Be a good netizen - be kind, act in good faith, maintain high quality, don't mislead
Link directly to original sources
Don't use us to cheat on challenges or tests!
Crypto review requests must show the algorithm
CTF / challenges and puzzles must use modern crypto
Avoid making duplicate posts
All use of AI / LLM and their prompts MUST be disclosed in your submissions and comments

##Related resources;

Reddit cryptography forums 1 & 2; /r/crypto /r/cryptography
Cryptology ePrint archive
Discussion site for ePrint papers
Libera Chat's IRC:s #crypto - (IRC protocol URL)
Metzdowd cryptography mailing list
Randombit cryptography mailing list
StackExchange cryptography community

founded 2 years ago

MODERATORS

[email protected]

Reviewing the Cryptography Used by Signal - Dhole Moments (soatok.blog)

submitted 4 days ago by [email protected] to c/[email protected]

14 comments fedilink hide all child comments

top 14 comments

sorted by: hot top controversial new old

[–] [email protected] 2 points 4 days ago

This was a nice read. Thanks.

[–] [email protected] 2 points 4 days ago

It's all over. Elon doesn't like it.

[+] [email protected] -15 points 4 days ago (4 children)

In fact: If someone is promoting a VPN service in 2025 and that service doesn’t use WireGuard as its underlying protocol, they are almost certainly LARPing at security expertise rather than offering valuable advice.

Wireguard is not a vpn, there is no usable vpns built on wireguard, is extremely limited primitive that can be used to build one. Security expert, not understanding basic things, as usual. These people live in their own world where unusable but purportedly secure software is the solution to a problem.

[–] [email protected] 12 points 4 days ago (1 children)

Hell, even Mullvad uses WireGuard. Your argument is the most confidently incorrect I've seen on Lemmy ever since that one furry shouted over me to recommend Matrix instead of Signal.

[–] [email protected] 6 points 4 days ago (1 children)

Wireguard is not a vpn, there is no usable vpns built on wireguard,

Tailscale

[–] [email protected] 2 points 4 days ago

eduVPN

[–] [email protected] 3 points 4 days ago (1 children)

Please don't flamewar here, especially not if you haven't fact checked your own claims before posting.

[–] [email protected] -1 points 4 days ago* (last edited 4 days ago) (1 children)

That wasn't flame, I have a dubious honor of supporting wireguard based vpn service. What part of my claims is false? There is no general purpose vpn suite based on wireguard (I'm talking openvpn style, not just pseudo lan that can't even tell if the other end is alive), wg included with kernel is extremely limited and pretty much worthless for anything but p2p connections, and as much as I hate ike I would prefer to use it instead. As for me not replying to the author, I have seen his posts before, he is not a pleasant person to speak to.

Edit: After re-reading my first post it might look as a personal attack, that wasn't my intention at all, just this post came after I've finished trying to debug another wireguard problem in our app. 🫠

[–] [email protected] 4 points 4 days ago

The list of management tools available for it isn't exactly short. Others mentioned specific tools too.

https://github.com/cedrickchee/awesome-wireguard

Before you vent by attacking it and attacking everybody recommending it, how about explaining your problems and what you've already tried?

[–] [email protected] 2 points 4 days ago (1 children)

Tell me your not a security expert without saying your not a security expert

Wireguard is not a vpn, there is no usable vpns built on wireguard, is extremely limited primitive that can be used to build one.

[–] [email protected] 0 points 4 days ago (1 children)

I think I never claimed being a security expert. Do you need to be a security expert to state that wireguard as it is not really usable and needs a lot of resources to build something of it and the final result will be worse than openvpn by all metrics except purity from security standpoint?

[–] [email protected] 3 points 3 days ago

Wireguard is simple and it works. I don't know what your experience has been but it doesn't reflect mine.

Wireguard is also used by many VPN providers.