If you already have OpenSSH installed, it has a built-in tunnel you can activate with a single command-line argument that exposes a SOCKS server on localhost.
jedisct1 sure is prolific with all these lean and friendly crypto-related applications.<p>dnscrypt-proxy, libsodium, libhydrogen, minisign, dsvpn, probably others I've never heard of.
This is exactly what I have been looking for. One executable, symmetric keys and any port I want.<p>TCP is sometimes a must (library Wi-Fi that supports only known ports). But UDP is (i think?) better for wrapping TCP traffic.
Does this provide some benefit over a Wireguard setup? (<a href="https://www.wireguard.com/" rel="nofollow">https://www.wireguard.com/</a>)
So correct me if I am wrong but this is doing IP in TCP right ? Iirc, this is a big issue for tcp flow control, which relies on packet loss to detect congestion: as you encapsulate stuff in tcp stream, there will be no more packet loss and the tunelled tcp will not throttle correctly.<p>Did not read the code yet, so maybe there is something to simulate congestion packet loss.
Does this provide some benefit over Algo? (<a href="https://github.com/trailofbits/algo" rel="nofollow">https://github.com/trailofbits/algo</a>)
Pretty damn cool, but I can't see this giving you much in way of anonymity. Yet, should be all fine for getting through to region-locked DRM content.
What are the implications of:<p><a href="https://eprint.iacr.org/2019/447" rel="nofollow">https://eprint.iacr.org/2019/447</a><p>"Practical Key-recovery Attacks on Round-Reduced Ketje Jr, Xoodoo-AE and Xoodyak"?<p>As far as I understand round-reduced doesn't have to mean all rounds are broken, but it is still something to think about.
DSVPN does not seem to support PFS [1] which would immediately disqualify for any purpose for me.<p>[1] <a href="https://en.wikipedia.org/wiki/Forward_secrecy" rel="nofollow">https://en.wikipedia.org/wiki/Forward_secrecy</a>
I don't really understand network much.
> dsvpn server /root/vpn.key auto 443 auto 10.8.0.254 10.8.0.2<p>So what does those last two ip means? Similarly for the client.