Comment by bayindirh

> It uses Curve25519 for key exchange and ChaCha20-Poly1305 for symmetric encryption.

For now.

> There aren't many hardware primitives that would speed it up,

For now.

> although AVX2 and similar would help process ChaCha20.

So, there's at least a bullet point for experimental branching.

Also, the WireGuard Tunnel Manager on macOS is far from done.