WireGuard: why it's so small

~4k lines, one cipher suite, no negotiation. The design choices that make it auditable.

September 14, 2025 · 2 min · mc

The TLS 1.3 handshake, in plain terms

One round trip instead of two, and why the ServerHello already carries a key share.

July 18, 2025 · 2 min · mc