[ 1. SERVER / GATEWAY NODE ]
[ 2. CLIENT PEER NODES ]
All X25519 private/public keypairs are computed locally via Montgomery curve scalar multiplication in browser memory.
Generating WireGuard configuration...

[ WIREGUARD ARCHITECTURAL INVARIANTS ]

  • Cryptographic Identity: Noise_IK handshake using Curve25519 (X25519 ECDH), ChaCha20-Poly1305 AEAD, and BLAKE2s hashing.
  • Zero Network Fingerprint: Silent packet drops on unauthenticated handshakes; zero UDP port response to unauthorized scanners.
  • Kernel Line-Rate Performance: Direct execution inside Linux in-tree network stack without user-space context switches.

[ RELATED LINUX & NETWORK SECURITY RESOURCES ]