[ANNOUNCE] WireGuard Snapshot `0.0.20170213` Available

[Jason A. Donenfeld]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

A new snapshot, `0.0.20170213`, has been tagged in the git repository.

Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. WireGuard is generally thought to be fairly
stable, and most likely will not crash your computer (though it may).
However, as this is a pre-release snapshot, it comes with no guarantees, and
its security is not yet to be depended on; it is not applicable for CVEs.

With all that said, if you'd like to test this snapshot out, there are a
few relevent changes.

== Changes ==

  * curve25519: do everything on the stack
  
  Now that OpenWRT ships the MIPS SoftIRQ stack patch, and it's also made it
  upstream, we no longer need to do the mallocing, which should improve
  performance.
  
  * tools: man: recommend correct port
  
  Before we used 41414 in the documentation, which we should be suggesting the
  use of 51820.
  
  * tools: wg-quick: recommend using resolvconf in exclusive mode
  
  -x prevents DNS leakage.
  
  * timers: use setup_timer macro helper
  * timers: use simpler uninit sync technique
  
  Simplifies code a bit.
  
  * socket: synchronize net on socket tear down
  * device: shorter workqueue names to fit in ps
  * main: add `wg` type alias
  
  * socket: general ephemeral ports instead of name-based ports
  
  If no port is specified, a port is selected ephemerally, instead of trying to
  be overly clever with the interface name.
  
  * socket: enable setting of fwmark
  
  This is a nice new feature which enables policy-based routing on fwmarks, used
  by Android and wg-quick.
  
  * tools: setconf should remove existing psk
  * tools: remove key for any empty file
  * tools: wg-quick: support v6 dual stack
  * tools: wg-quick: set LC_ALL for consistent regex
  
  * Kconfig: can be a module
  * create-patch: be sure it's actually after NETFILTER
  
  * compat: backport siphash & dst_cache from mainline
  
  Since siphash is upstream now, we use the mainline implementation. While we're
  at it with reorganizing compat, we also backport dst_cache, so older kernels
  can benefit from it.

As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.io/ .

This snapshot is available in tarball form here:
  https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20170213.tar.xz
  SHA2-256: 256a7d41cf228f2a88e1b03b3911746dc827fe7be5b982c60080e7f81998cc6d
  BLAKE2b-256: 0c63e065c1754c78b9586b24186ccf6bb7513d962fa1f15364a03f4901fa10fc

If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest
snapshot.

Thank you,
Jason Donenfeld


-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEEq5lC5tSkz8NBJiCnSfxwEqXeA64FAliiH/QQHGphc29uQHp4
MmM0LmNvbQAKCRBJ/HASpd4Drt4QEACd93zEsAU+LRJ3WHsRPBXGuIkSuyWzzM4v
+YC4YyXVJzc5c7sfQzmJNg3r25yk3Hj/P7QTty0OqacsT3nerOGSbg4YFUs4z347
s60inL44vrUF6JGlwaQj+VQ+v8hNwQMtMd0PJ5+lNxIcc01ZFDGQVHrTI2LbsL6t
Ho3G0jrGpAkFFyOPpqVVKu81ZWZuqPmnnW2Few6e0/7TuTc0fE62nmb22qhObC8Q
pZn6w0MbwCx2Uyzz//k1XgGaKg9RXYossmnoSnQf4LB1Na4x437vr696hkuQYu43
kcDOBHOmH7bSEZY7/b7Zf3YlTRSwnjYc1yuU4Xw3YKLPXGwQz/GAntVSvqnmEusa
nvE+dgMK/jMGdNW7zFJh6Y5JL7dAHsEYDCcWTunXYsjGUTmFpW61JB9YuI9nfPeS
hrTVWnImiSQL22lnXhuxv6VA0FokFjvFeyO3dZaZZIwnUwXDdtNi8UHvFw6ych1U
Bi+Cw1jVFwM/grqnfkEF/VVVbYYKXzRI/hzsuK7n4rHbe34TOOPPy2/X0AoZUcvZ
dwKWhXFyAqIqmIUYsvfMXS1OYOk+ahdA/TXoH9oTc2/Ppy/tmSzXaf2CPj5mCGeR
dOHvysgyvEVb757C+PYk7lAMDXWSXDNKCVSHHStaXYvPvx0jHe1wuWUvdOqHYDLY
jCa+86zQGg==
=FUCB
-----END PGP SIGNATURE-----