Description: Build post-quantum-secure VPNs with WireGuard!
Rosenpass is a daemon, that, given a private key and a list of peers, performs a key exchange with each peer. The resulting keys are given to WireGuard using its PSK feature – WireGuard remains as secure as it was, Rosenpass adds protection against quantum computers. Rosenpass can also write the keys to files; this can be used to integrate Rosenpass with tools other than WireGuard.
The rp bash program is used to build a VPN with WireGuard and Rosenpass. You can inspect how the tool integrates the wg WireGuard frontend and the rosenpass tool that implements our cryptography using the explain flag.
$ rp explain genkey mykey #! /bin/bash set -e umask 077 mkdir -p mykey wg genkey > mykey/wgsk rosenpass keygen \ private-key mykey/pqsk \ public-key mykey/pqpk Since Rosenpass was released very recently, packaging is an ongoing process. We will provide packages for debian, nix, arch linux, and possibly alpine. You can follow the process in the README .