use wireguard for tunnels

[aparcar]

connections between nodes are mostly via unencrypted wireless connections. to add some security it would be reasonable to encrypt tunnel connections. these happen mostly between a node and a uplink gateway the client trusts.

the current tunnel plugin could be rewritten to use wireguard or an addition plugin is used, as wireguard slows throughput on devices with low resources

the public keys should be announced via descriptive messages

generally it could be worth some research to change the current crypto keys to the ones used by wireguard

[aparcar]

@axn what cryptographic primitives are you currently using?

[luserx0]

This issue is handled by me for the purposes of Google Summer of Code 2019.

• An overview can be found at: Freifunk Blog: WG tunnelling on BMX7

For any clarification on the approach, tips for the implementation or requested functionality, please comment on this thread.

[aparcar]

I assigned the issue to you, make us proud!

[luserx0]

Progress Update:

• Currently two bmx7 nodes that run the wg_tun_plugin are able to automatically exchange keys and configuration details and establish a connection between them.

[luserx0]

• For GSoC purposes, the final report lies here
• More info and continuation of the project, here.