thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

WireGuard

Modern, lightweight VPN protocol using a fixed set of strong cryptographic primitives over UDP.

Definition

WireGuard uses Curve25519 for key exchange, ChaCha20-Poly1305 for encryption, and BLAKE2s for hashing, with a codebase of only a few thousand lines. It is built into the Linux kernel since version 5.6 and is used by many commercial VPN services. It has no algorithm negotiation, which removes downgrade attacks but requires protocol versioning for future changes.

Example

wg-quick up wg0 brings up a WireGuard tunnel defined in /etc/wireguard/wg0.conf.

Exam tip

WireGuard trades crypto agility for simplicity and speed.

Related terms