WireGuard Upstreaming Roadmap (November 2017)

[Bruno Wolff III]

On Thu, Dec 07, 2017 at 11:22:04 +0100,
  Stefan Tatschner <rumpelsepp at sevenbyte.org> wrote:
>
>Assuming I am right according the crypto agility, what's the upgrade
>path if any of the involved cryptographic algorithms will be declared
>insecure/broken? From my point of view wireguard tries to stay as
>simple as possible and in general that's a good idea. I am just a bit
>worrying about the possible lack of a clear upgrade path once
>wireguard is mainlined.

Having alternate crypto paths is also a weakness. There have been lots of 
downgrade attacks against systems that incorporate agility.