Are cookie-required handshakes at least REKEY_TIMEOUT long?

Reid Rankin reidrankin at
Wed Aug 7 23:31:17 CEST 2019

Quick question: I've been looking at the code in
 wg_cookie_message_consume() and wg_receive_handshake_packet(), and as far
as I can tell there's no mechanism that re-initiates a handshake after
receiving a cookie reply to a first handshake other than the  REKEY_TIMEOUT
+ jitter timer.

Is this correct, and do, therefore, all handshakes involving cookies take
at least 5 seconds to complete?

Reid Rankin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the WireGuard mailing list