Protocols

Revisiting PQ WireGuard: A Comprehensive Security Analysis With a New Design Using Reinforced KEMs
WireGuard is a VPN protocol with an efficient, DH-based handshake. Prior attempts at making it PQ heavily relied on Classic McEliece, which has deployment complications. We revisit PQ WireGuard and manage to get rid of one of the uses of Classic McEliece by providing optimized KEMs. We also fix a flaw in the security of post-quantum WireGuard, which assumed KEM binding properties not necessarily provided by Classic McEliece.
Keitaro Hashimoto, Shuichi Katsumata, Guilhem Niot, Thom Wiggers
Preprint Cite