<story><title>Rosenpass – formally verified post-quantum WireGuard</title><url>https://github.com/rosenpass/rosenpass</url></story><parent_chain></parent_chain><comment><author>chaxor</author><text>How does this compare to the work done by the Netherlands group (Hulsing&amp;#x2F;Zimmermann, etc al) [1] and the Kudeldki group from Switzerland (Raynal&amp;#x2F;Genet&amp;#x2F;Romailler) [2]?
It&amp;#x27;s nice to see someone making this more available. I had thought about trying to push the pq-wg implementation from Kudelski group to wg or trying it out, but I never had the time.  Rust implementation seems to be an improvement of implementation, but I don&amp;#x27;t know about the underlying proofs.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;eprint.iacr.org&amp;#x2F;2020&amp;#x2F;379.pdf&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;eprint.iacr.org&amp;#x2F;2020&amp;#x2F;379.pdf&lt;/a&gt;
[2] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;csrc.nist.gov&amp;#x2F;CSRC&amp;#x2F;media&amp;#x2F;Presentations&amp;#x2F;pq-wireguard-we-did-it-again&amp;#x2F;images-media&amp;#x2F;session-5-raynal-pq-wireguard.pdf&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;csrc.nist.gov&amp;#x2F;CSRC&amp;#x2F;media&amp;#x2F;Presentations&amp;#x2F;pq-wireguard-...&lt;/a&gt;
[3] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;kudelskisecurity&amp;#x2F;pq-wireguard&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;kudelskisecurity&amp;#x2F;pq-wireguard&lt;/a&gt;</text></comment>
<story><title>Rosenpass – formally verified post-quantum WireGuard</title><url>https://github.com/rosenpass/rosenpass</url></story><parent_chain></parent_chain><comment><author>yellow_lead</author><text>&amp;gt; We are working on a cryptographic proof of security, but we already provide a symbolic analysis using proverif as part of the software package&lt;p&gt;How can you prove this? There is still no mathematical proof that i.e discrete log is NP complete&lt;p&gt;edit - I see it&amp;#x27;s a WIP but even the definition of secure seems difficult</text></comment>