diff options
Diffstat (limited to 'contrib/keygen-html/README')
| -rw-r--r-- | contrib/keygen-html/README | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/contrib/keygen-html/README b/contrib/keygen-html/README new file mode 100644 index 0000000..f1c3412 --- /dev/null +++ b/contrib/keygen-html/README @@ -0,0 +1,19 @@ +WireGuard Key Generation in JavaScript +====================================== + +Various people believe in JavaScript crypto, unfortunately. This small +example helps them fuel their poor taste. + +It's possible to generate WireGuard keys (and thus configurations) in the +browser. The webpage here simulates talking to a server to exchange keys +and then generates a configuration file for the user to download. + +Bugs +---- + +Who knows how emscripten actually compiles this and whether or not it +introduces interesting side-channel attacks. + +Secrets aren't zerored after use. Maybe you can get around this with +some tricks taking advantage of browser allocator behavior and different +processes, but it seems pretty hard. |