WIREGUARD

WireGuard is a VPN protocol built around a tiny, auditable codebase and one fixed suite of modern algorithms (Curve25519, ChaCha20, Poly1305, BLAKE2s). Configuration is a short INI-style .conf file with an [Interface] section holding the client private key and address, and [Peer] sections holding the server public key, allowed IPs and UDP endpoint. Authentication is key-pair based with fresh session keys derived per handshake, giving perfect forward secrecy. The WireGuard guide explains the file format and trust model.