Отличие tls-crypt от tls-crypt-v2

IVAN-DODIK · January 3, 2022, 9:23am

Здравствуйте ! Кто может сказать в чем разница между tlscrypt и tlscrypt-v2 и которую лучше использовать ?

anonymous10 · January 3, 2022, 10:37am

OpenVPN/openvpn/blob/master/doc/tls-crypt-v2.txt

Client-specific tls-crypt keys (--tls-crypt-v2)
===============================================

This document describes the ``--tls-crypt-v2`` option, which enables OpenVPN
to use client-specific ``--tls-crypt`` keys.

Rationale
---------

``--tls-auth`` and ``tls-crypt`` use a pre-shared group key, which is shared
among all clients and servers in an OpenVPN deployment.  If any client or
server is compromised, the attacker will have access to this shared key, and it
will no longer provide any security.  To reduce the risk of losing pre-shared
keys, ``tls-crypt-v2`` adds the ability to supply each client with a unique
tls-crypt key.  This allows large organisations and VPN providers to profit
from the same DoS and TLS stack protection that small deployments can already
achieve using ``tls-auth`` or ``tls-crypt``.

Also, for ``tls-crypt``, even if all these peers succeed in keeping the key
secret, the key lifetime is limited to roughly 8000 years, divided by the

This file has been truncated. show original