← Back to context

Comment by keepamovin

1 month ago

Interesting. What is the FIPS version of wireguard?

There are some forks that are not compatible with regular wireguard, for example from wolfssl. Or just classic mTLS.

> What is the FIPS version of wireguard?

IPsec or TLS-based overlays which use AES encryption and NIST-approved ECC curves or (gasp) RSA for key exchange and authentication. They generally suck in comparison with wireguard, which is a clean-sheet modern cryptographic protocol.