WireGuard: why it's so small~4k lines, one cipher suite, no negotiation. The design choices that make it auditable.