Port details on branch 2024Q2 |
- rosenpass Wireguard-based post-quantum VPN
- 0.2.2 net =0 0.2.2Version of this port present on the latest quarterly branch.
- Maintainer: fuz@FreeBSD.org
- Port Added: 2024-06-16 13:00:12
- Last Update: 2024-06-16 12:59:17
- Commit Hash: 1231f25
- Also Listed In: net-vpn security
- License: MIT APACHE20
- WWW:
- https://rosenpass.eu/
- Description:
- Rosenpass implements a post-quantum-secure key exchange in the spirit of
a Noise protocol. The motivating use case is integrating with the
WireGuard VPN: In this mode, the key generated by Rosenpass is supplied
to WireGuard as its pre-shared symmetric key (PSK). This results in a
WireGuard VPN connection with hybrid post-quantum security.
While Rosenpass is designed with WireGuard in mind, it can be used as a
stand-alone tool to exchange keys. Using this mode, it can be used to
secure other protocols against attacks from quantum computers, given
that they offer using a PSK, and that a secure PSK is sufficient for
security of the protocol. To use this mode, the rosenpass binary must be
used together with the outfile <FILE> parameter. Then, Rosenpass will
write a key to the given file every two minutes, and print a message on
standard out to notify the user or the calling script that the key has
changed.
The implementation is written in Rust but uses libsodium and liboqs --
both of which are C libraries. This does not result in pretty code
everywhere, but enables some advanced security features such as using
libsodium's sodium_malloc. We use a couple of techniques to make sure
the code is secure: We use variable colouring (gating use of a secret
value through a .secret() method), and the code zeroizes all key
material.
- ¦ ¦ ¦ ¦
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- rosenpass>0:net/rosenpass
- To install the port:
- cd /usr/ports/net/rosenpass/ && make install clean
- To add the package, run one of these commands:
- pkg install net/rosenpass
- pkg install rosenpass
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: rosenpass
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1718470305
SHA256 (rust/crates/addr2line-0.21.0.crate) = 8a30b2e23b9e17a9f90641c7ab1549cd9b44f296d3ccbf309d2863cfe398a0cb
SIZE (rust/crates/addr2line-0.21.0.crate) = 40807
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- rust>=1.77.0 : lang/rust
- cmake : devel/cmake-core
- pkgconf>=1.3.0_1 : devel/pkgconf
- llvm-config15 : devel/llvm15
- Runtime dependencies:
-
- bash : shells/bash
- wireguard-tools>0 : net/wireguard-tools
- Library dependencies:
-
- libsodium.so : security/libsodium
- There are no ports dependent upon this port
Configuration Options:
- No options to configure
- Options name:
- net_rosenpass
- USES:
- cargo llvm:build pkgconfig shebangfix
- FreshPorts was unable to extract/find any pkg message
- Master Sites:
|