Add encryption #73

Merged

tfriesen merged 11 commits from candidate into master 2025-08-10 22:53:22 -04:00

Conversation 1 Commits 11 Files changed 9 +469 -74

tfriesen commented 2025-08-10 01:13:24 -04:00 (Migrated from github.com)

Copy link

Add basic symmetric PSK encryption to pingtunnel.

At command line, can run -encrypt [aes128|aes256|chacha20] -encrypt-key <key> to encrypt communications between client and server. Key can be a full 128- or 256-bit key, base64 encoded, or a passphrase, which PBKDF2'd into an appropriate-sized key. Naturally, client and server must use same key.

Tested on Linux amd64 and arm. Anecdotally, causes about a 20% hit to throughput.

Add basic symmetric PSK encryption to pingtunnel. At command line, can run `-encrypt [aes128|aes256|chacha20] -encrypt-key <key>` to encrypt communications between client and server. Key can be a full 128- or 256-bit key, base64 encoded, or a passphrase, which PBKDF2'd into an appropriate-sized key. Naturally, client and server must use same key. Tested on Linux amd64 and arm. Anecdotally, causes about a 20% hit to throughput.

esrrhs (Migrated from github.com) approved these changes 2025-08-10 22:53:05 -04:00

Sign in to join this conversation.

Reviewers

No reviewers

esrrhs

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

esrrhs/pingtunnel!73

No description provided.