Abstract

WireGuard is a new and promising VPN software. It relies on ECDH for the key agreement and server authentication. This makes the tunnel vulnerable to future attacks with quantum computers.

Three incremental improvements to WireGuard's handshake protocol are proposed, giving differently enhanced levels of post-quantum security. Performance impacts of these are shown to be moderate.

Figure

BibTeX

@misc{kniep2020bsc,
  author    = {Q.M. Kniep},
  title     = {Post-Quantum Cryptography in WireGuard VPN},
  year      = {2020},
  howpublished = {B.Sc. Thesis, Humboldt-Universit{\"a}t zu Berlin}
}