WireGuard - newest, fastest, more secure VPN protocol

Introducing WireGuard Protocol: What You Need to Know

4 min read

The cybersecurity world is evolving and so does KeepSolid VPN Unlimited! Keeping up with the latest technology trends, we are implementing the next-generation VPN protocol WireGuard. Though it’s still under development and in the testing phase, it is already forecasted to outperform the existing protocols in many aspects. What is WireGuard, why use it, what advantages it can boast of, how to use WireGuard in KeepSolid VPN Unlimited app? Read on and find answers in this piece!  

  1. What is the WireGuard protocol 
  2. Why use WireGuard VPN protocol: main advantages 
    1. Updated encryption technology 
    2. Simple code base
    3. Better performance
    4. Cross-platform use 
  3. How to start using WireGuard protocol 
  4. Bottom line on WireGuard VPN protocol

What is the WireGuard protocol 

WireGuard is a new open-source VPN protocol that uses state-of-the-art cryptography and aims to be simpler, faster, and more secure than the existing VPN protocols. It is considered to be better designed than the IPSec protocol and to provide better performance than OpenVPN. 

Developed by Jason Donenfeld and introduced in 2018, WireGuard was quickly accepted by users worldwide. It even caught the attention of Linux Torvalds, the developer behind Linux, who called it a work or art: 

Can I just once again state my love for it (WireGuard) and hope it gets merged soon? Maybe the code isn’t perfect, but I’ve skimmed it, and compared to the horrors that are OpenVPN and IPSec, it’s a work of art. 

What’s so special about WireGuard? Well, it does have some advantages over the existing VPN protocols. 

Why use WireGuard VPN protocol: main advantages 

Updated encryption technology 

Jason Donenfeld intended to upgrade what he considered to be the outdated aspects of OpenVPN and IPSec protocols. This said, WireGuard eschews standard algorithms that have long-lasting weaknesses in favor of the most modern, strongest cryptographic primitives (low-level algorithms). As stated on the WireGuard website, the following ciphers are used:

  • ChaCha20 for symmetric encryption, using Poly1305 for authentication
  • Curve25519 for ECDH (Elliptic-curve Diffie-Hellman, a key agreement protocol for establishing a shared secret over an insecure channel)
  • SipHash24 for hashable keys
  • BLAKE2s for hashing and keyed hashing
  • HKDF for key derivation

Simple code base

The WireGuard protocol features much lighter build than most VPN protocols (at least open-source ones, with visible codes). All in all, WireGuard weighs around 4000 lines of code, which is in stark contrast to 600 000 total lines of OpenVPN and OpenSSL combined. IPSec is also quite bulky, featuring 400 000 lines with XFRM and StrongSwan together. 

WireGuard VPN protocol's code is significantly more simple than its counterparts'

What’s the benefit? Actually, there are several advantages:

  1. Fewer lines of code imply much less attack surface in comparison to OpenVPN and IPSec. 
  2. Smaller code base is much easier to audit. OpenVPN would require a team of auditors who’d be checking it for days, while one person can audit WireGuard’s code in just a few hours. 
  3. Easier audit means it’s easier to find vulnerabilities and keep the protocol secure. 
  4. Less bulky code also means it is more likely to work as it’s supposed to. 

Better performance

High-speed cryptographic primitives and peculiarities of WireGuard technology potentially bring significant performance improvements, both on small devices like smartphones and loaded backbone routers. 

WireGuard’s small code base allows it to offer users quite decent speeds. It should allegedly be capable of establishing connections and handshakes faster, at the same time offering enhanced reliability. Mobile users should especially benefit from WireGuard as it is designed to be less resource-consuming and not eat up too much battery.      

All in all, WireGuard protocol should outperform other protocols in terms of:

  • Speed
  • Reliability
  • Longer battery life on smartphones and tablets
  • Faster connection and reconnection 

Cross-platform use 

Though originally released for Linux-based operating systems, WireGuard can now be adapted for a number of different platforms. For example, it may be used on systems running macOS, Ubuntu, iOS, and Android, thus covering a wide range of devices.

How to start using WireGuard protocol 

Currently, there aren’t many WireGuard VPN providers. However, KeepSolid VPN Unlimited offers you an opportunity to try out this most modern VPN protocol yourself. All you need to do is follow a few simple steps below:  

  1. Download KeepSolid VPN Unlimited app.
  2. Create your KeepSolid ID or log in.
  3. Navigate to the app Menu > Settings.
  4. Go to Protocols and select WireGuard.

    WireGuard VPN protocol in KeepSolid VPN Unlimited app

  5. Start exploring the next-gen protocol! 

Note: Currently, we’ve implemented WireGuard protocol in the macOS and Android versions of KeepSolid VPN Unlimited app. Though already available for Personal Server and Personal IP users, WireGuard on Windows and iOS for all VPN servers is coming soon, stay tuned! 

Bottom line on WireGuard VPN protocol

Providing high-speed connection and unmatched security at the same time is a constant challenge for VPN services. However, the innovative WireGuard solution brings radical change in the industry, featuring simple build, fast connection speed, and strong cryptography.  

Dive into the new enhanced VPN experience with KeepSolid VPN Unlimited and WireGuard, the VPN protocol of the future!  


Comments

  1. WHEN ARE ADDING MORE SERVERS TO SOUTH AMERICA AND MORE LOCATIONS PLEASE ADVISE

    • Hi John,

      To date, we can’t provide you with approximate dates of the implementation of new servers or locations in our security solution. Now we are gathering feedback on the most desired locations, so thank you for voting for South America 😉
      Stay tuned to our updates!

  2. Christopher Wetmore
    December 4, 2019 - 6:24 pm

    OK, I’ll bite: Can it be implemented on Windows? And if so, any idea how soon?

    • Hi Christopher,

      It’s so cool to hear about your interest in our product 🤗
      And, yes, of course, the WireGuard protocol can be implemented on Windows and our team is already working on it! Unfortunately, there is no ETA of the implementation yet, but you can stay tuned for our updates to never miss it 😊

  3. where’s the configuration generator for use with the Wireguard cli tool `wg-quick up /path/to/wgnet0.conf`??

    • Hey there!

      Our team hasn’t implemented the WireGuard configuration for manual setup yet. But we are going to do this in the next updates 😉
      Make sure to subscribe to our monthly digest to never miss our latest news:
      Subscribe to monthly digest

  4. Great news indeed! Waiting for the protocol availability to test it with my Zyxel Keenetic router. Using VPN Unlimited for the second year and very impressed with its speed, quality and constant adding of new features. Never regret that I have chosen then! 👌

    • Hi there,

      Thank you so much for your warm motivating feedback! Our team is really happy you choose KeepSolid VPN Unlimited 😊
      We’ll always keep this high standard and strive to make our services even better for our users.

  5. Wireguard is a great addition to VPN Unlimited. The next step is to add wireguard protocol to DD-wrt routers like a number of your competitors. Is their any timeline on when this might be available ? Thanks

    • Hey there!

      Thank you for your comment 😊
      Our team wants to provide the best service for our users and are taking this time to improve it. We do have WireGuard for DD-WRT routers in our wish list but can provide no ETA of the implementation yet. Stay tuned for our updates!

  6. Outstanding as always, best-in-class VPN vendor all the way. Keep it up.

    • Hey Norman,

      Great to hear your positive feedback as usual! It motivates us to further share news, updates, & cyber security tips, as well as make all our services even better for you 🤗

Leave a Comment

Your email address will not be published / Required fields are marked *