• Skip to main content
  • Skip to header right navigation
  • Skip to site footer
Restore Privacy

Restore Privacy

Resources to stay safe and secure online

  • News
  • Tools
    • Secure Browser
    • VPN
    • Ad Blocker
    • Secure Email
    • Private Search Engine
    • Data Removal
      • Incogni Review
    • Password Manager
    • Secure Messaging App
    • Tor
    • Identity Theft Protection
    • Unblock Websites
    • Privacy Tools
  • Email
    • Secure Email
    • ProtonMail Review
    • Tutanota Review
    • Mailfence Review
    • Mailbox.org Review
    • Hushmail Review
    • Posteo Review
    • Fastmail Review
    • Runbox Review
    • CTemplar Review
    • Temporary Disposable Email
    • Encrypted Email
    • Alternatives to Gmail
  • VPN
    • What is VPN
    • VPN Reviews
      • NordVPN Review
      • Surfshark VPN Review
      • VyprVPN Review
      • Perfect Privacy Review
      • ExpressVPN Review
      • CyberGhost Review
      • AVG VPN Review
      • IPVanish Review
      • Hotspot Shield VPN Review
      • ProtonVPN Review
      • Atlas VPN Review
      • Private Internet Access Review
      • Avast VPN Review
      • TorGuard Review
      • PrivadoVPN Review
    • VPN Comparison
      • NordVPN vs ExpressVPN
      • NordVPN vs PIA
      • IPVanish vs ExpressVPN
      • CyberGhost vs NordVPN
      • Surfshark vs NordVPN
      • IPVanish vs NordVPN
      • ExpressVPN vs PIA
      • VyprVPN vs NordVPN
      • CyberGhost vs ExpressVPN
      • NordVPN vs HideMyAss
      • ExpressVPN vs ProtonVPN
      • Atlas VPN vs NordVPN
      • ExpressVPN vs Surfshark
      • NordVPN vs Proton VPN
      • Surfshark vs CyberGhost
      • Surfshark vs IPVanish
    • Best VPNs
      • Best VPN for Torrenting
      • Best VPN for Netflix
      • Best Free VPN
      • VPN for Firestick TV
      • Best VPN for Android
      • Best VPN for Gaming
      • Best VPN for PC
      • Best VPN for Disney Plus
      • Best VPN for Hulu
      • Best VPN for Mac
      • Best VPN for Streaming
      • Best VPN for Windows
      • Best VPN for iPhone
    • VPN Coupons
      • ExpressVPN Coupon
      • NordVPN Coupon
      • Cyber Monday VPN Deals
      • NordVPN Cyber Monday
      • Surfshark VPN Cyber Monday
      • ExpressVPN Cyber Monday
    • VPN Guides
      • Free Trial VPN
      • Cheap VPNs
      • Static IP VPN
      • VPN Ad Blocking
      • No Logs VPN
      • Best VPN Chrome
      • Best VPN Reddit
      • Split Tunneling VPN
      • VPN for Binance
      • WireGuard VPN
      • VPN for Amazon Prime
      • VPN for Linux
      • VPN for iPad
      • VPN for Firefox
      • VPN for BBC iPlayer
    • By Country
      • Best VPN Canada
      • Best VPN USA
      • Best VPN UK
      • Best VPN Australia
      • VPN for Russia
    • VPN Router
  • Password
    • Best Password Managers
    • Comparisons
      • NordPass vs 1Password
      • 1Password vs LastPass
      • NordPass vs LastPass
      • RoboForm vs NordPass
      • 1Password vs Bitwarden
      • Dashlane vs NordPass
      • 1Password vs Dashlane
      • NordPass vs Bitwarden
    • KeePass Review
    • NordPass Review
    • 1Password Review
    • Dashlane Review
    • RoboForm Review
    • LastPass Review
    • Bitwarden Review
    • Strong Password
  • Storage
    • Best Cloud Storage
    • pCloud Review
    • Nextcloud Review
    • IDrive Review
    • SpiderOak Review
    • Sync.com Review
    • MEGA Cloud Review
    • NordLocker Review
    • Tresorit Review
    • Google Drive Alternatives
  • Messenger
    • Secure Messaging Apps
    • Signal Review
    • Telegram Review
    • Wire Review
    • Threema Review
    • Session Review
  • Info
    • Mission
    • Press
    • Contact
  • News
  • Tools
    • Secure Browser
    • VPN
    • Ad Blocker
    • Secure Email
    • Private Search Engine
    • Data Removal
      • Incogni Review
    • Password Manager
    • Secure Messaging App
    • Tor
    • Identity Theft Protection
    • Unblock Websites
    • Privacy Tools
  • Email
    • Secure Email
    • ProtonMail Review
    • Tutanota Review
    • Mailfence Review
    • Mailbox.org Review
    • Hushmail Review
    • Posteo Review
    • Fastmail Review
    • Runbox Review
    • CTemplar Review
    • Temporary Disposable Email
    • Encrypted Email
    • Alternatives to Gmail
  • VPN
    • What is VPN
    • VPN Reviews
      • NordVPN Review
      • Surfshark VPN Review
      • VyprVPN Review
      • Perfect Privacy Review
      • ExpressVPN Review
      • CyberGhost Review
      • AVG VPN Review
      • IPVanish Review
      • Hotspot Shield VPN Review
      • ProtonVPN Review
      • Atlas VPN Review
      • Private Internet Access Review
      • Avast VPN Review
      • TorGuard Review
      • PrivadoVPN Review
    • VPN Comparison
      • NordVPN vs ExpressVPN
      • NordVPN vs PIA
      • IPVanish vs ExpressVPN
      • CyberGhost vs NordVPN
      • Surfshark vs NordVPN
      • IPVanish vs NordVPN
      • ExpressVPN vs PIA
      • VyprVPN vs NordVPN
      • CyberGhost vs ExpressVPN
      • NordVPN vs HideMyAss
      • ExpressVPN vs ProtonVPN
      • Atlas VPN vs NordVPN
      • ExpressVPN vs Surfshark
      • NordVPN vs Proton VPN
      • Surfshark vs CyberGhost
      • Surfshark vs IPVanish
    • Best VPNs
      • Best VPN for Torrenting
      • Best VPN for Netflix
      • Best Free VPN
      • VPN for Firestick TV
      • Best VPN for Android
      • Best VPN for Gaming
      • Best VPN for PC
      • Best VPN for Disney Plus
      • Best VPN for Hulu
      • Best VPN for Mac
      • Best VPN for Streaming
      • Best VPN for Windows
      • Best VPN for iPhone
    • VPN Coupons
      • ExpressVPN Coupon
      • NordVPN Coupon
      • Cyber Monday VPN Deals
      • NordVPN Cyber Monday
      • Surfshark VPN Cyber Monday
      • ExpressVPN Cyber Monday
    • VPN Guides
      • Free Trial VPN
      • Cheap VPNs
      • Static IP VPN
      • VPN Ad Blocking
      • No Logs VPN
      • Best VPN Chrome
      • Best VPN Reddit
      • Split Tunneling VPN
      • VPN for Binance
      • WireGuard VPN
      • VPN for Amazon Prime
      • VPN for Linux
      • VPN for iPad
      • VPN for Firefox
      • VPN for BBC iPlayer
    • By Country
      • Best VPN Canada
      • Best VPN USA
      • Best VPN UK
      • Best VPN Australia
      • VPN for Russia
    • VPN Router
  • Password
    • Best Password Managers
    • Comparisons
      • NordPass vs 1Password
      • 1Password vs LastPass
      • NordPass vs LastPass
      • RoboForm vs NordPass
      • 1Password vs Bitwarden
      • Dashlane vs NordPass
      • 1Password vs Dashlane
      • NordPass vs Bitwarden
    • KeePass Review
    • NordPass Review
    • 1Password Review
    • Dashlane Review
    • RoboForm Review
    • LastPass Review
    • Bitwarden Review
    • Strong Password
  • Storage
    • Best Cloud Storage
    • pCloud Review
    • Nextcloud Review
    • IDrive Review
    • SpiderOak Review
    • Sync.com Review
    • MEGA Cloud Review
    • NordLocker Review
    • Tresorit Review
    • Google Drive Alternatives
  • Messenger
    • Secure Messaging Apps
    • Signal Review
    • Telegram Review
    • Wire Review
    • Threema Review
    • Session Review
  • Info
    • Mission
    • Press
    • Contact
If you buy through links on this site, we may earn a commission, which helps support our mission.

WireGuard vs OpenVPN in 2023: 7 Big Differences

January 8, 2023 By Heinrich Long — 48 Comments
WireGuard vs OpenVPN

WireGuard is taking the VPN world by storm. It promises big improvements over existing VPN protocols and so far in 2023, we’ve seen more VPN services moving to WireGuard. But can it deliver better speeds, security, and reliability in real-world testing? This OpenVPN vs WireGuard comparison will answer all of your questions.

Over the past few years, the gold standard of VPN (Virtual Private Network) protocols has been OpenVPN. It is an open source protocol with good performance and is considered to be very secure and reliable, having passed numerous independent audits.

But you’re here looking for answers and probably wondering if WireGuard is better than OpenVPN. Perhaps you are considering switching from your current VPN service to one that supports the WireGuard VPN protocol.

We aim to answer all your questions and more in this WireGuard vs OpenVPN comparison. Here’s what we’ll cover in this in-depth guide:

  1. Background – What is the history behind OpenVPN and WireGuard?
  2. Speeds – We ran back-to-back tests across four different server locations in the US – and there was a big winner.
  3. Encryption – Examining the cryptographic algorithms used by WireGuard and OpenVPN.
  4. Security – Which protocol offers more security?
  5. Auditability – Which protocol is easier to audit?
  6. WireGuard makes it into the Linux and Windows kernels
  7. Privacy – Does OpenVPN or WireGuard do better in terms of privacy?
  8. Conclusion – Test out WireGuard yourself

Without further delay, let’s get into the comparisons and test results!

1. Background: OpenVPN vs WireGuard

Before we dive into the technicals, let’s quickly examine the background of each VPN protocol.

OpenVPN

OpenVPN is both a VPN protocol and the code needed to implement that protocol. It consists of open source software developed by James Yonan and published under the GNU General Public License (GPL). Initially released in 2001, it has become the most widely-used VPN protocol thanks to its flexibility, reliability, and ability to cross Network Address Translators (NATs) and firewalls.

WireGuard

WireGuard is a new approach to a VPN protocol that is meant to be, well, better than current options like IPSec and OpenVPN. Perhaps the best way to explain is to simply quote you from the first paragraph of the WireGuard home page:

WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable.

The simpler, leaner part of this is crucial. Whereas the code for OpenVPN runs into hundreds of thousands of lines, the code for WireGuard is currently around 4,000 lines. This, combined with the use of state-of-the-art cryptography, generates results that have many people very excited.

2. OpenVPN vs WireGuard Speeds

Many people are switching to the WireGuard protocol for the performance advantages — namely faster speeds.

We have been testing WireGuard over the past year and can confirm that performance is (usually) excellent. It not only offers faster speeds, but WireGuard is also faster to establish a connection and is also more reliable on mobile devices.

Minimizing variables: The goal of these speed tests was to see how WireGuard performs in comparison to OpenVPN using a real-world test case and minimizing variables. Because speeds can vary drastically between services, we decided to run back-to-back speed tests with a leading VPN that supports both OpenVPN and WireGuard. For this, we chose NordVPN.

We ran all speed tests on a 500 Mbps wired ethernet connection using the same test machine (MacBook Pro). With the NordVPN client, we were able to quickly switch between OpenVPN and WireGuard for back-to-back speed tests, thereby minimizing variables.

This table summarizes the speed test results, conducted across four different locations in the United States. The table is in the order of latency, from the closest location (Seattle) to the furthest (New York).

CityOpenVPN SpeedWireGuard Speed
Seattle222 Mbps445 Mbps
Los Angeles226 Mbps304 Mbps
Chicago155 Mbps275 Mbps
New York222 Mbps280 Mbps

The fastest speed achieved was with a NordVPN server in Seattle using the WireGuard protocol (NordLynx). Here is a screenshot of this WireGuard speed test result:

OpenVPN vs WireGuard speed tests
This was the fastest speed achieved on our 500 Mbps test connection, and the fastest VPN speed test result we’ve ever had. This officially makes NordVPN the fastest VPN we’ve tested.

So what does all this mean?

WireGuard is consistently faster than OpenVPN in our tests

Key takeaways from testing WireGuard vs OpenVPN speeds:

  • On average, WireGuard was about 58% faster than OpenVPN across all the locations we tested.
  • WireGuard’s performance advantage over OpenVPN is greater with nearby (low latency) servers in comparison to long-distance (high latency) server locations.
  • To get the fastest VPN speeds, use WireGuard on the closest server to your physical location.

We intend to conduct more tests comparing WireGuard and OpenVPN speeds with more locations and will be updating our test results accordingly. Also, note that WireGuard is capable of achieving speeds even beyond 500 Mbps in ideal circumstances.

Additional tests: WireGuard speeds with other VPN providers

Not all VPNs that support WireGuard provide speeds comparable to those above. For example, in the NordVPN vs CyberGhost comparison, both VPNs were tested using the WireGuard VPN protocol, but CyberGhost was significantly slower. Similarly, Private Internet Access also had below-average speeds, even when using the WireGuard VPN protocol.

This suggests that WireGuard has the potential for extremely fast speeds, but as we would expect, there are large differences between VPN services with performance.

Final verdict on speeds

In speed tests run by our team and others, WireGuard normally delivers much faster speeds than OpenVPN — but this can vary by VPN provider.

3. Encryption: OpenVPN vs WireGuard

Now we’ll examine the encryption differences between OpenVPN and WireGuard.

OpenVPN Cryptographic Algorithms

OpenVPN uses the OpenSSL library to provide encryption. OpenSSL supports a number of different cryptographic algorithms, including:

  • AES, Blowfish, Camellia, ChaCha20, Poly1305, DES, Triple DES, GOST 28147-89, SM4 and more for encryption and authentication
  • MD5, MD4, SHA-1, SHA-2, MDC-2, BLAKE2, and more for hashing
  • RSA, DSA, X25519, Ed25519, SM2 and more for key derivation and agreement
  • UDP or TCP as the Transport Layer protocol
  • Perfect Forward Secrecy to protect user data

This range of algorithms makes OpenVPN agile. That is, the code can negotiate the use of different algorithms depending on the circumstances. This makes OpenVPN very flexible, but greatly increases the complexity of the code. OpenVPN’s complexity can slow down execution, which is one of the main reasons people are looking to WireGuard as a possible replacement.

WireGuard Cryptographic Algorithms

The WireGuard philosophy differs greatly from that of OpenVPN when it comes to cryptographic algorithms. Whereas OpenVPN is flexible with the algorithms it uses, each WireGuard version uses one fixed set of algorithms.

The current version of WireGuard (v1.0), uses the following:

  • ChaCha20 for symmetric encryption
  • Poly1305 for authentication using RFC7539’s AEAD construction
  • Curve25519 for Elliptic-curve Diffie–Hellman (ECDH) anonymous key agreement
  • BLAKE2s for hashing (RFC7693)
  • SipHash24 for hashtable keys
  • HKDF for key derivation (RFC5869)
  • UDP as the Transport Layer protocol
  • Perfect Forward Secrecy (PFS) to protect user data

WireGuard also differs from OpenVPN in that OpenVPN uses certificates for identification and encryption. WireGuard uses public key encryption for those tasks. Secure key generation and management are handled in the background, and there is an option to pre-share a key for an additional layer of security.

Verdict on cryptographic agility

Depending on your perspective, this can go either way. OpenVPN can run many different ciphers and protocols, but this agility brings with it more complexity, a larger attack surface for hackers to exploit, and possible susceptibility to downgrade attacks.

Each version of WireGuard runs one set of ciphers and protocols. This leads to less complexity (and far less code), a smaller attack surface, and immunity to downgrade attacks. It will, however, force all endpoints to upgrade to a new version of WireGuard if a problem is discovered in any of the ciphers or protocols used in the current version.

4. Security: OpenVPN vs WireGuard

Is OpenVPN secure?

OpenVPN has no known security vulnerabilities. The code has been audited numerous times and has the backing of many security experts.

Is WireGuard secure?

WireGuard is very secure. It uses faster, state-of-the-art secure ciphers and algorithms. Its small codebase makes it easier to audit while offering a smaller attack surface for anyone trying to hack it. But perhaps most importantly WireGuard,

“…intentionally lacks cipher and protocol agility. If holes are found in the underlying primitives, all endpoints will be required to update. As shown by the continuing torrent of SSL/TLS vulnerabilities, cipher agility increases complexity monumentally.”

— Jason A. Donenfeld, Developer of WireGuard

Forcing all endpoints to move to a new version of WireGuard may cause some headaches. However, since the new version will not include the compromised cipher or protocol, it ensures that no one continues to use the insecure code. It also eliminates the possibility of a downgrade attack forcing the endpoint to drop back to using the compromised code.

Verdict on Security

There are no known security flaws in either protocol. If security is your topmost priority, the conservative option is OpenVPN. It has simply been around much longer than WireGuard, gone through more third-party security audits, and has a far longer track record than WireGuard. However, as WireGuard matures, its updated encryption algorithms and minimal codebase make it all the more attractive.

5. Auditability: OpenVPN vs WireGuard

To know if you can trust a VPN protocol, it needs to be auditable. Auditability is one of the key reasons that open source software is preferred by most privacy advocates.

But just because code is open source doesn’t make it easy to audit. OpenVPN is auditable. But with hundreds of thousands of lines of code, actually doing an audit requires a team of experts and a lot of time.

WireGuard is also open source and auditable. But with somewhere around 4,000 lines of code, it is much more amenable to an audit. A single engineer could conceivably do the job in a short while.

“Can I just once again state my love for it [WireGuard] and hope it gets merged soon? Maybe the code isn’t perfect, but I’ve skimmed it, and compared to the horrors that are OpenVPN and IPSec, it’s a work of art.”

— Linus Torvalds, Principal developer of the Linux kernel, August 2018

We have to give the nod to WireGuard when it comes to auditability.

6. WireGuard in the Linux and Windows kernels

WireGuard was also designed with the Linux operating system in mind. More specifically, with being incorporated into the Linux Kernel.

According to WireGuard: Next Generation Kernel Network Tunnel, there were five reasons to include WireGuard in the Linux Kernel:

  1. Short and simple code to make auditing and reviewing the code enjoyable
  2. To be extremely fast
  3. It must avoid resource-intensive allocations in response to incoming packets
  4. It must integrate as natively and smoothly as possible
  5. It must be buildable as an external kernel module that doesn’t require changes to core Linux code

The result is a fast, efficient VPN protocol running on OSI Layer 3, the Network Layer. On this level, WireGuard has more direct access to network routing tables and data packets, which helps with speed and simplifies authentication and attribution of data packets.

WireGuard’s presence in the Linux Kernel is one of the big reasons for its higher performance relative to OpenVPN and other protocols that run in the operating system’s user space, with its additional overhead.

WireGuard has also made it into the Windows kernel, as of August 2021.

7. Privacy comparison: OpenVPN vs WireGuard

Does OpenVPN protect my privacy?

VPN protocols provide security; they don’t necessarily provide privacy. What determines your privacy when using a VPN is actually the policies of the VPN service. In particular, whether on not a VPN service keeps logs is what determines your privacy when using one.

That may sound odd if you have heard that WireGuard has a privacy problem. We’ll go into more detail later, but that problem comes down to an aspect of the design of WireGuard that can maintain a user’s IP address on the VPN server for extended periods of time.

The design of OpenVPN does not require keeping any such user data on the VPN server, so it doesn’t compromise your privacy.

Does WireGuard have a privacy problem?

WireGuard was designed for speed and security. It was not specifically designed for people like us, who look to their VPN service for both security and privacy. However, in order to give users the benefits of WireGuard, VPN services have come up with WireGuard solutions that add strong privacy protections without sacrificing what makes WireGuard special. Here’s the problem:

WireGuard stores user IP addresses on the VPN server

As part of its cryptokey routing algorithm, WireGuard maps the public keys and allowed IP (Internet Protocol) addresses. This simplifies certain aspects of WireGuard, but by default, it results in user IP addresses remaining stored on the VPN server until the server is rebooted. Storing your IP address on the server like this could be considered logging your IP address and is incompatible with the concept of a no-logs VPN. This static IP address could also be exposed by a WebRTC leak.

How can WireGuard’s privacy problem be fixed?

VPN services have come up with a few different solutions to WireGuard’s privacy problem.

NordVPN developed a double-NAT system for their WireGuard implementation, which they call NordLynx. The system,

…creates two local network interfaces for each user. The first interface assigns a local IP address to all users connected to a server. Unlike in the original WireGuard protocol, each user gets the same IP address.

Once a VPN tunnel is established, the second network interface with a dynamic NAT system kicks in. The system assigns a unique IP address for each tunnel. This way, internet packets can travel between the user and their desired destination without getting mixed up.

The double NAT system allows us to establish a secure VPN connection without storing any identifiable data on a server. Dynamic local IP addresses remain assigned only while the session is active. Meanwhile, user authentication is done with the help of a secure external database.

Open VPN vs WireGuard privacy

More info on NordVPN and NordLynx is here.

This solution is now available across all NordVPN clients, which is what we used for all tests in this guide.

Other services such as Mullvad and OVPN have addressed the WireGuard privacy issue by erasing the records that map IP addresses to encryption keys as soon as there has been no communication between the VPN client and server for three minutes. Keeping the data only as long as it is necessary greatly reduces the risk of personal data being revealed.

Additional protection in cases like these is to ensure that you are not experiencing any WebRTC leaks. Here’s a link to our complete guide to fixing WebRTC leaks.

Final Verdict on Privacy

This is one area where OpenVPN has an advantage. The default design of WireGuard requires user IP addresses to remain on the VPN server for extended periods of time. If privacy is a top concern, we recommend that you only use solutions that address this potential privacy issue.

NordVPN’s NordLynx is the solution we are currently using, but Mullvad and OVPN also have practical solutions available as well. We fully expect that as other VPN services roll out their WireGuard solutions, they too will deal with the IP address privacy issue.

Note: See other VPNs that support WireGuard here.

Conclusion: Test WireGuard for yourself

We weren’t always fans of WireGuard.

When it first came out, there were lingering concerns about privacy, IP address logs stored on the server, and the new and experimental nature of the protocol. It simply did not seem like a great solution for people who use VPNs with privacy in mind. But a lot has changed in the past year:

  • Many VPNs have found good solutions to support WireGuard while still ensuring user privacy.
  • WireGuard has officially been released (no longer experimental code) and is gaining traction with more VPN services.
  • WireGuard has now been incorporated into the Linux kernel, a major landmark.
  • Lots of tests have proven the significant performance advantage that WireGuard enjoys over existing VPN protocols.

WireGuard has a lot to offer VPN users, in many different use cases. If you have considered using WireGuard, give it a shot to see the advantages yourself.

While there are a handful of VPNs that support WireGuard, our current top-recommended VPN for WireGuard is NordVPN. It delivers on speed, security, privacy, and many other areas, as discussed in our NordVPN review.

Tip: Test WireGuard for yourself and use the coupon below for the best savings.

NordVPN Cyber Deal is live:


Get 68% Off NordVPN (drops the price to $2.99 per month) plus 3 months FREE with 2-year plans:

Get 68% Off NordVPN + 3 Months FREE >>

(Coupon is applied automatically.)

You can read about many other VPNs that support WireGuard here.

Feel free to share your experiences in using WireGuard in comparison with OpenVPN below.

This WireGuard vs OpenVPN guide was last updated on January 8, 2023.

About Heinrich Long

Heinrich is an associate editor for RestorePrivacy and veteran expert in the digital privacy field. He was born in a small town in the Midwest (USA) before setting sail for offshore destinations. Although he long chafed at the global loss of online privacy, after Edward Snowden’s revelations in 2013, Heinrich realized it was time to join the good fight for digital privacy rights. Heinrich enjoys traveling the world, while also keeping his location and digital tracks covered.

Reader Interactions

Comments

  1. Charlie Day

    January 6, 2023

    > OpenVPN has no known security vulnerabilities. The code has been audited numerous times and has the backing of many security experts.

    I would recommend revising this statement. The security of OpenVPN is highly dependent on the specific configuration of an OpenVPN server. For example, on some distributions, the default OpenVPN configuration may be insecure with outdated defaults (e.g. TLS 1.1 or 1.2).

    One could argue that less configuration options reduce surface area for vulnerabilities and attacks.

    Reply
  2. Sam

    December 20, 2022

    UPDATE for readers:
    NordVPN is running a Christmas sale with 3 months free.

    Reply
  3. Steven

    December 13, 2022

    AES 256 CBC, GCM can be cached timed attacked downgraded to either 192, or 128, bit encryption and used a not so secret index with backdoors for you know who, AES is only random 2^68 at best before birthday collisions occur, Wireguard at least 2^80 open VPN has up to 400,000 lines of code IPSec 600,000 and several venerability’s Open Vpn does use a Dynamic IP address Wireguard at static one that’s why you pair it with Nord Lynx double NAT or CyberGhost restful API an 4096 bit RSA key for secondary authentication and a daemon with can dynamically assign IP addresses where Wireguard cant plus 4096bit ECDH Diffie Hellmann keys for perfect forward secrecy AES is also 24 years old so it is not so secure anymore but was great at the time Interestingly some Cryptography experts say AES 128 bit may be more secure than AES 256 due to fewer Birthday collisions.

    Reply
  4. Monkey

    November 12, 2022

    Wireguard App design is for monkeys
    It has practically “no settings!” for http and proxy

    Reply
    • Steven

      December 13, 2022

      AES 256 CBC, GCM can be cached timed attacked downgraded to either 192, or 128 bit encryption and used a not so secret index with backdoors for you know who, AES is only random 2^68 at best before birthday collisions occur, Wireguard at least 2^80 open VPN has up to 400,000 lines of code IPSec 600,000 and several venerability’s Open Vpn does use a Dynamic IP address Wireguard at static one that’s why you pair it with Nord Lynx double NAT or CyberGhost restful API an 4096 bit RSA key for secondary authentication and a daemon with can dynamically assign Ip addresses where Wireguard cant plus 4096bit EDCH Diffie Hellmann keys for perfect forward secrecy AES is also 24 years old so it is not so secure anymore but was great at the time.

      Reply
  5. Robert

    October 20, 2022

    and what about SoftEther?

    Reply
  6. FutchDav

    October 7, 2022

    Its already 2022, but WiredGuard doesn’t offer to publish routes for split tunnel purposes? Correct me on this regard Sven.

    Reply
    • Steven

      December 15, 2022

      The reason they don’t is this creates a potential back door through the unencrypted tunnel an unnecessary risk the encryption could be bypassed the original version of IKEV1 was only encrypted one way eg… one direction any could be completely bypassed that’s why IKEV2 was released Microsoft got caught out bigtime that’s why I don’t use it only Wireguard paired with additional security measures.

      Reply
« Older Comments

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Restore Privacy Checklist

  1. Secure browser: Modified Firefox or Brave
  2. VPN: NordVPN (68% Off Coupon) or Surfshark
  3. Ad blocker: uBlock Origin or AdGuard
  4. Secure email: Mailfence or Tutanota
  5. Secure Messenger: Signal or Threema
  6. Private search engine: MetaGer or Brave
  7. Password manager: NordPass or Bitwarden

About

Restore Privacy is a digital privacy advocacy group committed to helping people stay safe and secure online. You can support this project through donations, purchasing items through our links (we may earn a commission at no extra cost to you), and sharing this information with others. See our mission here.

We’re available for Press and media inquiries here.

Restore Privacy is also on Twitter

COPYRIGHT © 2023 RESTORE PRIVACY, LLC · PRIVACY POLICY · TERMS OF USE · CONTACT · SITEMAP