[ANNOUNCE] WireGuard Snapshot `0.0.20180202` Available
Jason A. Donenfeld
Jason at zx2c4.com
Fri Feb 2 19:08:17 CET 2018
-----BEGIN PGP SIGNED MESSAGE-----
A new snapshot, `0.0.20180202`, has been tagged in the git repository.
Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. WireGuard is generally thought to be fairly
stable, and most likely will not crash your computer (though it may).
However, as this is a pre-release snapshot, it comes with no guarantees, and
its security is not yet to be depended on; it is not applicable for CVEs.
With all that said, if you'd like to test this snapshot out, there are a
few relevent changes.
== Changes ==
* curve25519-fiat32: uninline certain functions
This results in much smaller code size and significanat speed gains on smaller
* poly1305: add poly-specific self-tests
Poly is easy to get wrong, so we've added quite a few tests that examine
certain edge cases and places where other implementations of historically
* tools: dedup secret normalization
* tools: share curve25519 implementations with kernel
* contrib: keygen-html: share curve25519 implementation with kernel
There is now only one place where we ship 25519 code.
* qemu: disable PIE for compilation
* qemu: disable AVX-512 in userland
* qemu: update base versions
Test suite enhancements.
* device: let udev know what kind of device we are
This enables folks to query the device type via udev, which is what systemd's
* tools: fread doesn't change errno
This fixes clearing pre-shared keys on old glibc.
* chacha20poly1305: use existing rol32 function
* chacha20poly1305: better buffer alignment
* curve25519: verify that specialized basepoint implementations are correct
Since some implementations have a specialized function for computing
basepoints, it's important to do some basic sanity checking with them.
* curve25519: replace hacl64 with fiat64
For about 24 hours, fiat64 was faster.
* curve25519: replace fiat64 with faster hacl64
Then hacl64 caught up, so we moved back to it.
* curve25519: break more things with more test cases
These extra test cases help break the current "rfc7748_precomputed"
implementation, which we're not using here at the moment, but it is still
useful to ensure that we don't fall victim to the same bugs.
As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.com/ .
This snapshot is available in tarball form here:
If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest
Finally, WireGuard development thrives on donations. By popular demand, we
have a webpage for this: https://www.wireguard.com/donations/
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
More information about the WireGuard