[ANNOUNCE] WireGuard Snapshot `0.0.20170421` Available

[ANNOUNCE] WireGuard Snapshot `0.0.20170421` Available

[Jason A. Donenfeld]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

A new snapshot, `0.0.20170421`, has been tagged in the git repository.

Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. WireGuard is generally thought to be fairly
stable, and most likely will not crash your computer (though it may).
However, as this is a pre-release snapshot, it comes with no guarantees, and
its security is not yet to be depended on; it is not applicable for CVEs.

With all that said, if you'd like to test this snapshot out, there are a
few relevent changes.

== Changes ==

  * tools: check for malloc failure
  * tools: argc is always 1
  * tools: no hyphen in preshared, to keep uniformity
  * device: use rcu_barrier_bh
  * cookie: move the bangs
  * config: don't allow no-privatekey to mask preshared
  * receive: netif_rx consumes
  
  General bug fixes.
  
  * qemu: work on ARM64
  * netns: cleanup and add diagram
  
  Our QEMU test suite now works on ARM64.
  
  * tools: side channel resistant base64
  
  Our implementation of base64 in wg(8) no longer uses the
  system base64 and instead uses a handrolled constant time
  implementation, in order to avoid timing side-channel attacks
  on private key data.
  
  * compat: work on old 3.10
  
  Supporting ancient 3.10 allows us to run on the Ubiquiti
  EdgeRouter. There's now a package for this:
  https://community.ubnt.com/t5/EdgeMAX/Release-WireGuard-for-EdgeRouter/td-p/1904764
  
  * routingtable: rewrite core functions
  
  The routing table has had some core utilities rewritten, bugs
  fixed, and the test suite greatly expanded, complete with a
  randomized comparison against a slow reference implementation
  and a graphviz output option, which produced these amazing PDFs:
  https://data.zx2c4.com/trie_v4.pdf
  https://data.zx2c4.com/trie_v6.pdf

As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.io/ .

This snapshot is available in tarball form here:
  https://git.zx2c4.com/WireGuard/snapshot/WireGuard-0.0.20170421.tar.xz
  SHA2-256: 03c82af774224cd171d000ee4a519b5e474cc6842ac04967773cf77b26750000
  BLAKE2b-256: 17c1f2b50155b4d6838d9493e4b406484d839a40e77433cf7e0c1aadb2f010a9

If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest
snapshot.

Thank you,
Jason Donenfeld


-----BEGIN PGP SIGNATURE-----
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=6TuM
-----END PGP SIGNATURE-----