diff options
| author |   Jason A. Donenfeld <Jason@zx2c4.com> | 2017-12-01 13:31:33 +0100 |
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2017-12-03 15:07:52 +0100 |
| commit | b1aa43c51e72fb0744ae1e98f4251d09f5b20bfb (patch) | |
| tree | e796a6aac07924daac52c67350dd549bc9826ed2 /contrib/examples/keygen-html/README | |
| parent | kernel-tree: jury rig is the more common spelling (diff) | |
| download | wireguard-monolithic-historical-b1aa43c51e72fb0744ae1e98f4251d09f5b20bfb.tar.xz wireguard-monolithic-historical-b1aa43c51e72fb0744ae1e98f4251d09f5b20bfb.zip | |
contrib: keygen-html for generating keys in the browser
Diffstat (limited to 'contrib/examples/keygen-html/README')
| -rw-r--r-- | contrib/examples/keygen-html/README | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/contrib/examples/keygen-html/README b/contrib/examples/keygen-html/README new file mode 100644 index 0000000..f1c3412 --- /dev/null +++ b/contrib/examples/keygen-html/README @@ -0,0 +1,19 @@ +WireGuard Key Generation in JavaScript +====================================== + +Various people believe in JavaScript crypto, unfortunately. This small +example helps them fuel their poor taste. + +It's possible to generate WireGuard keys (and thus configurations) in the +browser. The webpage here simulates talking to a server to exchange keys +and then generates a configuration file for the user to download. + +Bugs +---- + +Who knows how emscripten actually compiles this and whether or not it +introduces interesting side-channel attacks. + +Secrets aren't zerored after use. Maybe you can get around this with +some tricks taking advantage of browser allocator behavior and different +processes, but it seems pretty hard. |