SlideShare a Scribd company logo
1 of 18
Download to read offline
Welcome
to LUG!
1
Welcome to Lug
We meet the Third Wednesday of every month (right now
in the cloud)
Our website is at http://cialug.org
We have a mailinglist
And slack / IRC
2
Linux
News
3
About our Presenter
Andrew Denner
โ€ข http://denner.co
โ€ข twitter: @adenner
โ€ข Senior Software Developer
โ€ข Linux Tinkerer
4
Featured
Presentation
5
Wireguard
For Fun and Networking
Andrew Denner
Central Iowa Linux Users Group
May 20, 2020
Networking is
important
7
What are my options
โ€ข PPTP
โ€ข OpenVPN
โ€ข IPSec
โ€ข Wireguard
8
PPTP
โ€ข Stands for โ€Point-to-Point Tunneling Protocolโ€
โ€ข Introduced in 1995 and was improvement on PPP
โ€ข Initially Windows implementation
โ€ข Basic TCP based tunnel on port 1723
โ€ข Most compatible and simple but not very secure
โ€ข NSA likely cracked PPTP traffic
โ€ข MS-CHAP V1 & 2 are cracked (authentication)
โ€ข MPPE uses RC4 Stream Cipher
9
IPSec IKEv2
โ€ข Part of IPSec Protocol RFC7296
โ€ข Uses fixed ports so easier to block
โ€ข Can use large Suite of crypto algorithms (3DES, AES,
Blowfish, Camellia et.al.)
โ€ข No known major vulnerabilities but rumors of NSA
exploit
โ€ข in theory faster than OpenVpn
โ€ข implementation OpenSwan
10
OpenVPN
โ€ข Developed by OpenVPN technologies but not RFC
Standard
โ€ข Uses OpenSSL library for encryption & supports 3DES
AES RC5 blowfish et.al. Using SSL/TLS for Key exchange
โ€ข No known major vulnerabilities
โ€ข Easy to use and configurable can run any port and
UDP TCP
โ€ข Not included in any OS but easy to install
11
Wireguard
โ€ข Very fast with low overhead using Standardized sauce
โ€ข Standardized Encryption
โ€ข ChaCha20 for symmetric encryption (RFC7539)
โ€ข Curve25519 for ECDH
โ€ข Blake2 hashing (RFC 7693)
โ€ข SipHash24 hashtable keys
โ€ข HKDF key derivation (RFC5869)
โ€ข UDP based handshake & key exchange with
perfect forward secrecy protects against
impersonation and replay attacks
12
Wireguard (cont.)
โ€ข No known major vulnerabilities but is new has been
3rd party audited
โ€ข Uses UDP and configurable to any port but may suffer
from traffic shaping more easily
โ€ข In tree support in Kernel 5.6 but other OS require
installation of Client App.
13
14
Demo 1: Install Wireguard on Ubuntu
20.04
15
Demo 2: Install Wireguard on MacOS
16
Demo 3: Install Wireguard on Android
17
References
โ€ข Comparison of VPN Protocols https:
//www.ivpn.net/pptp-vs-ipsec-ikev2-vs-openvpn-vs-wireguard
โ€ข NSA Crack of PPTP: https://hacker10.com/internet-anonymity/
secret-documents-show-the-nsa-is-spying-on-vpn-users/
โ€ข NSA IPSEC: https://www.forbes.com/sites/thomasbrewster/2016/
08/19/cisco-nsa-vpn-hack-shadow-brokers-leak/
โ€ข Set Up Wireguard https://www.linode.com/docs/networking/vpn/
set-up-wireguard-vpn-on-ubuntu/
18

More Related Content

What's hot

The Ransomware Threat: Tracking the Digitial Footprints
The Ransomware Threat: Tracking the Digitial FootprintsThe Ransomware Threat: Tracking the Digitial Footprints
The Ransomware Threat: Tracking the Digitial Footprints
k3vb0t
ย 
Securing Data in Transit -
Securing Data in Transit - Securing Data in Transit -
Securing Data in Transit -
wolfSSL
ย 

What's hot (20)

Port Scanning Overview
Port Scanning  OverviewPort Scanning  Overview
Port Scanning Overview
ย 
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...
BlueHat v17 || TLS 1.3 - Full speed ahead... mind the warnings - the great, t...
ย 
VPN Overview and IPsec Intro
VPN Overview and IPsec IntroVPN Overview and IPsec Intro
VPN Overview and IPsec Intro
ย 
Ch 5: Port Scanning
Ch 5: Port ScanningCh 5: Port Scanning
Ch 5: Port Scanning
ย 
Configuring Site-to-Site VPN's on ASA Firewalls
Configuring Site-to-Site VPN's on ASA FirewallsConfiguring Site-to-Site VPN's on ASA Firewalls
Configuring Site-to-Site VPN's on ASA Firewalls
ย 
IOT RASPBERRY PI.pptx
IOT RASPBERRY PI.pptxIOT RASPBERRY PI.pptx
IOT RASPBERRY PI.pptx
ย 
MITM Attacks with Ettercap : TTU CyberEagles Club
MITM Attacks with Ettercap : TTU CyberEagles ClubMITM Attacks with Ettercap : TTU CyberEagles Club
MITM Attacks with Ettercap : TTU CyberEagles Club
ย 
Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...
Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...
Matt Turner: Istio, The Packet's-Eye View (DevSecOps - London Gathering, Janu...
ย 
Bettercap
BettercapBettercap
Bettercap
ย 
Heartbleed Bug: A case study
Heartbleed Bug: A case studyHeartbleed Bug: A case study
Heartbleed Bug: A case study
ย 
The Ransomware Threat: Tracking the Digitial Footprints
The Ransomware Threat: Tracking the Digitial FootprintsThe Ransomware Threat: Tracking the Digitial Footprints
The Ransomware Threat: Tracking the Digitial Footprints
ย 
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
IX 2020 - Internet Security & Mitigation of Risk Webinar: Linux Malware and D...
ย 
Your secret's safe with me
Your secret's safe with meYour secret's safe with me
Your secret's safe with me
ย 
Securing Data in Transit -
Securing Data in Transit - Securing Data in Transit -
Securing Data in Transit -
ย 
Terminal Access Controller
Terminal Access ControllerTerminal Access Controller
Terminal Access Controller
ย 
Ettercap
EttercapEttercap
Ettercap
ย 
Debugging with Strace and Sysdig
Debugging with Strace and SysdigDebugging with Strace and Sysdig
Debugging with Strace and Sysdig
ย 
TLS 1.3: Everything You Need to Know - CheapSSLsecurity
TLS 1.3: Everything You Need to Know - CheapSSLsecurityTLS 1.3: Everything You Need to Know - CheapSSLsecurity
TLS 1.3: Everything You Need to Know - CheapSSLsecurity
ย 
Network Address Translation - pfSense Hangout July 2014
Network Address Translation - pfSense Hangout July 2014Network Address Translation - pfSense Hangout July 2014
Network Address Translation - pfSense Hangout July 2014
ย 
CNIT 141: 1. Encryption
CNIT 141: 1. EncryptionCNIT 141: 1. Encryption
CNIT 141: 1. Encryption
ย 

Similar to Central Iowa Linux Users Group May 2020 Meeting: WireGuard

gkk_2021123rg5hSecurity essentials domain 2
gkk_2021123rg5hSecurity essentials   domain 2gkk_2021123rg5hSecurity essentials   domain 2
gkk_2021123rg5hSecurity essentials domain 2
Anne Starr
ย 
gkkSecurity essentials domain 2
gkkSecurity essentials   domain 2gkkSecurity essentials   domain 2
gkkSecurity essentials domain 2
Anne Starr
ย 
gkk20211e4djwew4dSecurity essentials domain 2
gkk20211e4djwew4dSecurity essentials   domain 2gkk20211e4djwew4dSecurity essentials   domain 2
gkk20211e4djwew4dSecurity essentials domain 2
Anne Starr
ย 
ssl-tls-ipsec-vpn.pptx
ssl-tls-ipsec-vpn.pptxssl-tls-ipsec-vpn.pptx
ssl-tls-ipsec-vpn.pptx
jithu26327
ย 
Vulnerability-tolerant Transport Layer Security
Vulnerability-tolerant Transport Layer SecurityVulnerability-tolerant Transport Layer Security
Vulnerability-tolerant Transport Layer Security
Miguel Pardal
ย 
topicCybersecurity_4
topicCybersecurity_4topicCybersecurity_4
topicCybersecurity_4
Anne Starr
ย 

Similar to Central Iowa Linux Users Group May 2020 Meeting: WireGuard (20)

gkk_2021123rg5hSecurity essentials domain 2
gkk_2021123rg5hSecurity essentials   domain 2gkk_2021123rg5hSecurity essentials   domain 2
gkk_2021123rg5hSecurity essentials domain 2
ย 
gkkSecurity essentials domain 2
gkkSecurity essentials   domain 2gkkSecurity essentials   domain 2
gkkSecurity essentials domain 2
ย 
gkk20211e4djwew4dSecurity essentials domain 2
gkk20211e4djwew4dSecurity essentials   domain 2gkk20211e4djwew4dSecurity essentials   domain 2
gkk20211e4djwew4dSecurity essentials domain 2
ย 
ssl-tls-ipsec-vpn.pptx
ssl-tls-ipsec-vpn.pptxssl-tls-ipsec-vpn.pptx
ssl-tls-ipsec-vpn.pptx
ย 
Vulnerability-tolerant Transport Layer Security
Vulnerability-tolerant Transport Layer SecurityVulnerability-tolerant Transport Layer Security
Vulnerability-tolerant Transport Layer Security
ย 
501 ch 3 network technologies tools
501 ch 3 network technologies tools501 ch 3 network technologies tools
501 ch 3 network technologies tools
ย 
Chap 1 Network Theory & Java Overview
Chap 1   Network Theory & Java OverviewChap 1   Network Theory & Java Overview
Chap 1 Network Theory & Java Overview
ย 
Phifer 3 30_04
Phifer 3 30_04Phifer 3 30_04
Phifer 3 30_04
ย 
topicCybersecurity_4
topicCybersecurity_4topicCybersecurity_4
topicCybersecurity_4
ย 
IP security and VPN presentation
IP security and VPN presentation IP security and VPN presentation
IP security and VPN presentation
ย 
1086: The SSL Problem and How to Deploy SHA2 Certificates (with Mark Myers)
1086: The SSL Problem and How to Deploy SHA2 Certificates (with Mark Myers)1086: The SSL Problem and How to Deploy SHA2 Certificates (with Mark Myers)
1086: The SSL Problem and How to Deploy SHA2 Certificates (with Mark Myers)
ย 
Managing the SSL Process
Managing the SSL ProcessManaging the SSL Process
Managing the SSL Process
ย 
Owasp Mobile Risk Series : M3 : Insufficient Transport Layer Protection
Owasp Mobile Risk Series : M3 : Insufficient Transport Layer ProtectionOwasp Mobile Risk Series : M3 : Insufficient Transport Layer Protection
Owasp Mobile Risk Series : M3 : Insufficient Transport Layer Protection
ย 
Go paranoid
Go paranoidGo paranoid
Go paranoid
ย 
Slide Deck Class Session 8 โ€“ FRSecure CISSP Mentor Program
Slide Deck Class Session 8 โ€“ FRSecure CISSP Mentor ProgramSlide Deck Class Session 8 โ€“ FRSecure CISSP Mentor Program
Slide Deck Class Session 8 โ€“ FRSecure CISSP Mentor Program
ย 
FD.io Vector Packet Processing (VPP)
FD.io Vector Packet Processing (VPP)FD.io Vector Packet Processing (VPP)
FD.io Vector Packet Processing (VPP)
ย 
FD.IO Vector Packet Processing
FD.IO Vector Packet ProcessingFD.IO Vector Packet Processing
FD.IO Vector Packet Processing
ย 
Ports and protocols
Ports and protocolsPorts and protocols
Ports and protocols
ย 
Decrypting and Selectively Inspecting Modern Traffic
Decrypting and Selectively Inspecting Modern TrafficDecrypting and Selectively Inspecting Modern Traffic
Decrypting and Selectively Inspecting Modern Traffic
ย 
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under LinuxPractical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
Practical Guide to Run an IEEE 802.15.4 Network with 6LoWPAN Under Linux
ย 

More from Andrew Denner

January 2022: Central Iowa Linux Users Group: Git
January 2022: Central Iowa Linux Users Group: GitJanuary 2022: Central Iowa Linux Users Group: Git
January 2022: Central Iowa Linux Users Group: Git
Andrew Denner
ย 

More from Andrew Denner (20)

All about Time, or how to stop from going back to the future
All about Time, or how to stop from going back to the futureAll about Time, or how to stop from going back to the future
All about Time, or how to stop from going back to the future
ย 
CIALUG October 2022 linux news
CIALUG October 2022 linux newsCIALUG October 2022 linux news
CIALUG October 2022 linux news
ย 
January 2022: Central Iowa Linux Users Group: Git
January 2022: Central Iowa Linux Users Group: GitJanuary 2022: Central Iowa Linux Users Group: Git
January 2022: Central Iowa Linux Users Group: Git
ย 
Cialug August 2021
Cialug August 2021Cialug August 2021
Cialug August 2021
ย 
Local Kubernetes for Dummies: STLLUG March 2021
Local Kubernetes for Dummies: STLLUG March 2021Local Kubernetes for Dummies: STLLUG March 2021
Local Kubernetes for Dummies: STLLUG March 2021
ย 
December 2020 CIALUG: Local Kubernetes for Dummies-So you want to move on fro...
December 2020 CIALUG: Local Kubernetes for Dummies-So you want to move on fro...December 2020 CIALUG: Local Kubernetes for Dummies-So you want to move on fro...
December 2020 CIALUG: Local Kubernetes for Dummies-So you want to move on fro...
ย 
Central Iowa Linux Users Group: August 2020 Jupyter Lab
Central Iowa Linux Users Group: August 2020 Jupyter LabCentral Iowa Linux Users Group: August 2020 Jupyter Lab
Central Iowa Linux Users Group: August 2020 Jupyter Lab
ย 
Central Iowa Linux Users Group June 2020 Meeting Apache Guacamole
Central Iowa Linux Users Group June 2020 Meeting  Apache GuacamoleCentral Iowa Linux Users Group June 2020 Meeting  Apache Guacamole
Central Iowa Linux Users Group June 2020 Meeting Apache Guacamole
ย 
A brief intro to Ansible-CIALUG March 2020
A brief intro to Ansible-CIALUG March 2020A brief intro to Ansible-CIALUG March 2020
A brief intro to Ansible-CIALUG March 2020
ย 
Central Iowa Linux Users Group-December 2019: Windows Managers
Central Iowa Linux Users Group-December 2019: Windows ManagersCentral Iowa Linux Users Group-December 2019: Windows Managers
Central Iowa Linux Users Group-December 2019: Windows Managers
ย 
Central Iowa Linux Users Group: November Meeting -- Container showdown
Central Iowa Linux Users Group: November Meeting -- Container showdownCentral Iowa Linux Users Group: November Meeting -- Container showdown
Central Iowa Linux Users Group: November Meeting -- Container showdown
ย 
Central Iowa Linux Users Group October Meeting: Centos 8
Central Iowa Linux Users Group October Meeting: Centos 8Central Iowa Linux Users Group October Meeting: Centos 8
Central Iowa Linux Users Group October Meeting: Centos 8
ย 
Intro to networking
Intro to networkingIntro to networking
Intro to networking
ย 
A Brief overview of Linux, or How I learned to stop worrying and love the pen...
A Brief overview of Linux, or How I learned to stop worrying and love the pen...A Brief overview of Linux, or How I learned to stop worrying and love the pen...
A Brief overview of Linux, or How I learned to stop worrying and love the pen...
ย 
August CIALUG meeting: Debian buster
August CIALUG meeting: Debian busterAugust CIALUG meeting: Debian buster
August CIALUG meeting: Debian buster
ย 
Central Iowa Linux Users group July 2019--Jupyter Notebook on a Raspberry Pi
Central Iowa Linux Users group July 2019--Jupyter Notebook on a Raspberry PiCentral Iowa Linux Users group July 2019--Jupyter Notebook on a Raspberry Pi
Central Iowa Linux Users group July 2019--Jupyter Notebook on a Raspberry Pi
ย 
CIALUG June 2019: Raspberry Pi Facial Recognition
CIALUG June 2019: Raspberry Pi Facial RecognitionCIALUG June 2019: Raspberry Pi Facial Recognition
CIALUG June 2019: Raspberry Pi Facial Recognition
ย 
CIALUG May 2019 Meeting: An intro to docker and using rootless docker
CIALUG May 2019 Meeting: An intro to docker and using rootless dockerCIALUG May 2019 Meeting: An intro to docker and using rootless docker
CIALUG May 2019 Meeting: An intro to docker and using rootless docker
ย 
July 18, 2018 Central Iowa Linux User's Group: Tor onion services
July 18, 2018 Central Iowa Linux User's Group: Tor onion servicesJuly 18, 2018 Central Iowa Linux User's Group: Tor onion services
July 18, 2018 Central Iowa Linux User's Group: Tor onion services
ย 
CIALUG: Encrypt all the things
CIALUG: Encrypt all the thingsCIALUG: Encrypt all the things
CIALUG: Encrypt all the things
ย 

Recently uploaded

๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
ย 
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ydyuyu
ย 
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
SUHANI PANDEY
ย 
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
SUHANI PANDEY
ย 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
@Chandigarh #call #Girls 9053900678 @Call #Girls in @Punjab 9053900678
ย 
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
nirzagarg
ย 
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
SUHANI PANDEY
ย 
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
nirzagarg
ย 
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
ย 
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
Call Girls In Delhi Whatsup 9873940964 Enjoy Unlimited Pleasure
ย 
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
SUHANI PANDEY
ย 

Recently uploaded (20)

๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
๐Ÿ“ฑDehradun Call Girls Service ๐Ÿ“ฑโ˜Ž๏ธ +91'905,3900,678 โ˜Ž๏ธ๐Ÿ“ฑ Call Girls In Dehradun ๐Ÿ“ฑ
ย 
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
ย 
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ๅœจ็บฟๅˆถไฝœ็บฆๅ…‹ๅคงๅญฆๆฏ•ไธš่ฏ๏ผˆyuๆฏ•ไธš่ฏ๏ผ‰ๅœจ่ฏป่ฏๆ˜Ž่ฎค่ฏๅฏๆŸฅ
ย 
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
Pirangut | Call Girls Pune Phone No 8005736733 Elite Escort Service Available...
ย 
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
Ganeshkhind ! Call Girls Pune - 450+ Call Girl Cash Payment 8005736733 Neha T...
ย 
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
ย 
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
ย 
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
6.High Profile Call Girls In Punjab +919053900678 Punjab Call GirlHigh Profil...
ย 
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...Katraj ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready For S...
Katraj ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready For S...
ย 
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Salem Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
ย 
Microsoft Azure Arc Customer Deck Microsoft
Microsoft Azure Arc Customer Deck MicrosoftMicrosoft Azure Arc Customer Deck Microsoft
Microsoft Azure Arc Customer Deck Microsoft
ย 
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
Wadgaon Sheri $ Call Girls Pune 10k @ I'm VIP Independent Escorts Girls 80057...
ย 
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
Call Girls Sangvi Call Me 7737669865 Budget Friendly No Advance BookingCall G...
ย 
WhatsApp ๐Ÿ“ž 8448380779 โœ…Call Girls In Mamura Sector 66 ( Noida)
WhatsApp ๐Ÿ“ž 8448380779 โœ…Call Girls In Mamura Sector 66 ( Noida)WhatsApp ๐Ÿ“ž 8448380779 โœ…Call Girls In Mamura Sector 66 ( Noida)
WhatsApp ๐Ÿ“ž 8448380779 โœ…Call Girls In Mamura Sector 66 ( Noida)
ย 
Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...Pune Airport ( Call Girls ) Pune  6297143586  Hot Model With Sexy Bhabi Ready...
Pune Airport ( Call Girls ) Pune 6297143586 Hot Model With Sexy Bhabi Ready...
ย 
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
20240510 QFM016 Irresponsible AI Reading List April 2024.pdf
ย 
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
๐Ÿ’š๐Ÿ˜‹ Bilaspur Escort Service Call Girls, 9352852248 โ‚น5000 To 25K With AC๐Ÿ’š๐Ÿ˜‹
ย 
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
Thalassery Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call G...
ย 
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
valsad Escorts Service โ˜Ž๏ธ 6378878445 ( Sakshi Sinha ) High Profile Call Girls...
ย 
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
VIP Model Call Girls NIBM ( Pune ) Call ON 8005736733 Starting From 5K to 25K...
ย 

Central Iowa Linux Users Group May 2020 Meeting: WireGuard

  • 2. Welcome to Lug We meet the Third Wednesday of every month (right now in the cloud) Our website is at http://cialug.org We have a mailinglist And slack / IRC 2
  • 4. About our Presenter Andrew Denner โ€ข http://denner.co โ€ข twitter: @adenner โ€ข Senior Software Developer โ€ข Linux Tinkerer 4
  • 6. Wireguard For Fun and Networking Andrew Denner Central Iowa Linux Users Group May 20, 2020
  • 8. What are my options โ€ข PPTP โ€ข OpenVPN โ€ข IPSec โ€ข Wireguard 8
  • 9. PPTP โ€ข Stands for โ€Point-to-Point Tunneling Protocolโ€ โ€ข Introduced in 1995 and was improvement on PPP โ€ข Initially Windows implementation โ€ข Basic TCP based tunnel on port 1723 โ€ข Most compatible and simple but not very secure โ€ข NSA likely cracked PPTP traffic โ€ข MS-CHAP V1 & 2 are cracked (authentication) โ€ข MPPE uses RC4 Stream Cipher 9
  • 10. IPSec IKEv2 โ€ข Part of IPSec Protocol RFC7296 โ€ข Uses fixed ports so easier to block โ€ข Can use large Suite of crypto algorithms (3DES, AES, Blowfish, Camellia et.al.) โ€ข No known major vulnerabilities but rumors of NSA exploit โ€ข in theory faster than OpenVpn โ€ข implementation OpenSwan 10
  • 11. OpenVPN โ€ข Developed by OpenVPN technologies but not RFC Standard โ€ข Uses OpenSSL library for encryption & supports 3DES AES RC5 blowfish et.al. Using SSL/TLS for Key exchange โ€ข No known major vulnerabilities โ€ข Easy to use and configurable can run any port and UDP TCP โ€ข Not included in any OS but easy to install 11
  • 12. Wireguard โ€ข Very fast with low overhead using Standardized sauce โ€ข Standardized Encryption โ€ข ChaCha20 for symmetric encryption (RFC7539) โ€ข Curve25519 for ECDH โ€ข Blake2 hashing (RFC 7693) โ€ข SipHash24 hashtable keys โ€ข HKDF key derivation (RFC5869) โ€ข UDP based handshake & key exchange with perfect forward secrecy protects against impersonation and replay attacks 12
  • 13. Wireguard (cont.) โ€ข No known major vulnerabilities but is new has been 3rd party audited โ€ข Uses UDP and configurable to any port but may suffer from traffic shaping more easily โ€ข In tree support in Kernel 5.6 but other OS require installation of Client App. 13
  • 14. 14
  • 15. Demo 1: Install Wireguard on Ubuntu 20.04 15
  • 16. Demo 2: Install Wireguard on MacOS 16
  • 17. Demo 3: Install Wireguard on Android 17
  • 18. References โ€ข Comparison of VPN Protocols https: //www.ivpn.net/pptp-vs-ipsec-ikev2-vs-openvpn-vs-wireguard โ€ข NSA Crack of PPTP: https://hacker10.com/internet-anonymity/ secret-documents-show-the-nsa-is-spying-on-vpn-users/ โ€ข NSA IPSEC: https://www.forbes.com/sites/thomasbrewster/2016/ 08/19/cisco-nsa-vpn-hack-shadow-brokers-leak/ โ€ข Set Up Wireguard https://www.linode.com/docs/networking/vpn/ set-up-wireguard-vpn-on-ubuntu/ 18