Tag: Cryptography Engineering
  • Sep 5, 2018 |
  • Derek Zimmer |
  • Cybersecurity, General Privacy News, VPN,

The Current Status of WireGuard VPNs – Are We There Yet?

In security circles, WireGuard is an exciting proposition. It is a modern, open-source VPN client and server system that is highly streamlined, lean, and easy to review due to its simplicity. Conceptually, this is something we have been seeing a hard push for in both cryptography and security circles. Code needs to be simple, have … Continue reading “The Current Status of WireGuard VPNs – Are We There Yet?”

0
  • May 11, 2017 |
  • Caleb Chen |
  • Cybersecurity, General Privacy News, VPN,

OpenVPN 2.4.2 fixes critical issues discovered in OpenVPN audit reports

Private Internet Access is happy to release the results of our OpenVPN audit. In concurrence with the release of this report, OpenVPN has released OpenVPN 2.4.2 which is the latest update to the recently released OpenVPN 2.4 technology. The privacy and security community has banded together behind this open source technology to use the Internet openly … Continue reading “OpenVPN 2.4.2 fixes critical issues discovered in OpenVPN audit reports”

0
  • May 11, 2017 |
  • Caleb Chen |
  • Cybersecurity, General Privacy News, VPN,

OpenVPN 2.4 Evaluation Summary and Report

Contents 1 Executive Summary2 Introduction2.1 Scope2.2 Approach2.3 Classification and Severity Rating3 Findings3.1 Summary of Findings3.2 Static Analysis Results3.3 Dynamic Analysis Results3.4 Detailed Findings3.4.1 OVPN-01: Sensitive authentication token not wiped on certain TLSauth errors3.4.2 OVPN-02: Potentially flawed TLS control channel encryption3.4.3 OVPN-03: Insecure configuration options3.4.4 OVPN-04: Possible NULL pointer dereferences3.4.5 OVPN-05: Possible allocation of zero bytes … Continue reading “OpenVPN 2.4 Evaluation Summary and Report”

0