The risk being that traffic is stored until quantum computers are capable of breaking Curve25519 at which point traffic could be decrypted. WireGuard supports pre-shared symmetric key mode, which provides an additional layer of symmetric encryption to mitigate any future advances in quantum computing. In May 2019, researchers from INRIA published a machine-checked proof of WireGuard, produced using the CryptoVerif proof assistant. BLAKE2s for cryptographic hash function.Poly1305 for message authentication codes.1.1 Optional Pre-shared Symmetric Key Mode.
