Discussion
Is there some easy/reliable UDP/datagram security layer I can use from Rust? Something simple, shared keys or pub/privkey auth (both directions).
If there's nothing better I'm tempted to take wireguard-rs and just remove the routing/tun part...
Edit: Solved, https://noiseprotocol.org it is!
@alwayscurious No I definitely don't need PQC. This is nowhere near that important...
@lina Something like iroh.computer?
@lina QUIC supports datagrams
@lina DTLS is probably less simple than QUIC but also a good option if you want 'TLS but with UDP network semantics'.
@lina There’s also DTLS from the usual places; OpenSSL, BoringSSL, AWS-LC.
PQC support in noise is still being researched AFAIK, e.g. https://github.com/nata11/NoisePQCpp
@lina I'd recommend using one of the noiseprotocol libs. See https://noiseprotocol.org/ for details, and https://noiseexplorer.com/ to choose whichever handshake pattern suits your use case best.
It's transport agnostic, so you can use it wherever you want.
@OliverUv @lina noise is good, yeah. (this also assumes that you're fine with the usual UDP properties of packet reordering/dropping/maybe duplication idk if noise will catch that, probably not?)
just stealing wireguard's code to handle reconnection/handshake and such isn't a bad strategy imo though, wireguard is largely a thin layer ontop of noise.
@lina @OliverUv also worth looking at how wireguard uses it ( https://www.wireguard.com/protocol/ )
if "simple" wasn't quite of a requirement i'd personally just use QUIC, especially if that simplifies the stack elsewhere, but that's not "encrypted IP" the way wireguard is. and that needs significantly more code than noise/wireguard.
Install Fedizen
Get the full app experience
![[4FBB09]](https://furry.engineer/system/accounts/avatars/113/492/736/406/839/262/original/40371c5be8ce0caf.png "[4FBB09]")
@lina You’ll want something with post-quantum support, which mostly means not assuming you can fit a public key in a single UDP packet, unless you hardly need to fit anything else in the packet.