[ANNOUNCE] WireGuard Snapshot `0.0.20180809` Available

Jason A. Donenfeld Jason at zx2c4.com
Fri Aug 10 04:25:28 CEST 2018

Hash: SHA256


A new snapshot, `0.0.20180809`, has been tagged in the git repository.

Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. WireGuard is generally thought to be fairly
stable, and most likely will not crash your computer (though it may).
However, as this is a pre-release snapshot, it comes with no guarantees, and
its security is not yet to be depended on; it is not applicable for CVEs.

With all that said, if you'd like to test this snapshot out, there are a
few relevent changes.

== Changes ==

  * send: switch handshake stamp to an atomic
  Rather than abusing the handshake lock, we're much better off just using
  a boring atomic64 for this. It's simpler and performs better. Also, while
  we're at it, we set the handshake stamp both before and after the
  calculations, in case the calculations block for a really long time waiting
  for the RNG to initialize. 
  * compat: better atomic acquire/release backport
  This should fix compilation and correctness on several platforms.
  * crypto: move simd context to specific type
  This was a suggestion from Andy Lutomirski on LKML.
  * chacha20poly1305: selftest: use arrays for test vectors
  We no longer have lines so long that they're rejected by SMTP servers.
  * qemu: add easy git harness
  This makes it a bit easier to use our qemu harness for testing our mainline
  integration tree.
  * curve25519-x86_64: avoid use of r12
  This causes problems with RAP and KERNEXEC for PaX, as r12 is a
  reserved register.
  * chacha20: use memmove in case buffers overlap
  A small correctness fix that we never actually hit in WireGuard but is
  important especially for moving this into a general purpose library.
  * curve25519-hacl64: simplify u64_eq_mask
  * curve25519-hacl64: correct u64_gte_mask
  Two bitmath fixes from Samuel, which come complete with a z3 script proving
  their correctness.
  * timers: include header in right file
  This fixes compilation in some environments.
  * netlink: don't start over iteration on multipart non-first allowedips
  Matt Layher found a bug where a netlink dump of peers would never terminate in
  some circumstances, causing wg(8) to keep trying forever. We now have a fix as
  well as a unit test to mitigate this, and we'll be looking to create a fuzzer
  out of Matt's nice library.

This snapshot contains commits from: Jason A. Donenfeld and Samuel Neves.

As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.com/ .

This snapshot is available in compressed tarball form here:
  SHA2-256: 3e351c42d22de427713f1da06d21189c5896a694a66cf19233a7c33295676f19
  BLAKE2b-256: 7a17f67c92c78fbf2fc2ed95721032894983854f4c804862b3bf848f55798468

A PGP signature of that file decompressed is available here:
  Signing key: AB9942E6D4A4CFC3412620A749FC7012A5DE03AE

If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest

Finally, WireGuard development thrives on donations. By popular demand, we
have a webpage for this: https://www.wireguard.com/donations/

Thank you,
Jason Donenfeld



More information about the WireGuard mailing list