Merge branch 'develop'

[DOC] Minor corrections

[DOC] Remove ugly scheme

Replace XTEA with BLAKE2b-based MAC

Refactor and simplify CPR work code

[DOC] Document -syslog option

Use RFC 5424-like structured log format

Initial syslog support

[DOC] Currently I do not know how to forcefully close files

crypto/rand does not guarantee full read at once

Useful make dist target

GoVPN article moved from FSFE's blogs, because of their closing

[DOC] Much more compact handshake scheme

[DOC] Link to english article

[DOC] Download link for 5.7 release

Merge branch 'develop'

Update Argon2 library to use 1.3 version of the algorithm

Update yaml parsing library

-warranty CLI option

Execute all down script when server is terminated

Pass parameters to scripts through environment variables

Also benchmark memory allocations

Increase default MTU value

It is convenient to be able to use common 1500 MTU TAP interfaces out of
box. They have 1500 bytes MTU + 14 bytes Ethernet header overhead. But
also we have got single padding byte.

Reported-by: alxkor <alxkor@protonmail.ch>

[DOC] Download link for 5.6 release

Merge branch 'develop'

[DOC] Preparation for 5.6 release

[DOC] Fix output .info filename during generation

sed can be safely invoked without -e for simple scripts

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Explicitly use local scope of function variables for safety

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

bash is absolutely unnecessary for running the script

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Simple script to handle default routing

[DOC] Route traffic through GoVPN the safer way

Adding routes for 0/1 and 128/1 instead of 0/0 has the same effect of
routing all traffic through VPN tunnel, without the risk of wiping /
messing up with the original gateway.

Do not print Conn field in statistics

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.5 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Texinfo 6.1 can work without @setfilename

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Texinfo 6.1 can automatically create menus

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Align statistics counters for correct sync.atomic work on 32-bit systems

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Let all counters will be unsigned, as sign does not mean anything

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

It is possible that frame counters will be bigger than 32-bit

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Thanks to Zhuoyun Wei

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Replace uml_utilites with iproute2

`tunctl` is provided by `uml_utilities` package for "User Mode Linux", which is a long-dead-since-year-2007 project. Some distros (e.g. Arch Linux) have dropped support for `uml_utilities` years ago (Arch Linux dropped it in May 2013: https://lists.archlinux.org/pipermail/aur-general/2013-May/023611.html). One should now use `ip tuntap` provided by `iproute2` package on modern distros.
Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Fix a typo in FAQ

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.4 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Our Release links are without underscores

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Check that verifier is provided for client

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Refactoring and more russian translation

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

"identity" looks better than "identity"

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Add time synchronization requirement option

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Base64 peer identifiers, not hex, as they are used in verifiers

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] ssh -R, stunnel like features are too complicated

That complexity does not correspond to UNIX way. It is better to use
specialized well-known mature specific instruments for those tasks.

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

No need in buffers outside the reading goroutine

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Link downloads to release news

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Repair version substitution due to package namespace renaming

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.3 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Use stderr for passphrase prompt, to prevent newclient.sh from catching it

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Add common cypherpunks.ru prefix for govpn Go package names

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Minimal Go version is 1.4

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.2 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Use ssh/terminal package for reading passwords directly from terminal

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

No need in constant time comparison in CLI utility

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] FAQ additions

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Add various concept indexes

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Less words about PAKE

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Insert blank spaces for convenience

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Synchronize russian readme contents

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.1 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Sort repositories list

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Replace HSalsa20 with already got BLAKE2b well-known hash

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Various small corrections

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Encless mode also enables noise option

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Signing public key with long keyid format

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Explicitly mention that BSD and GNU makes are fine

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Use YAML instead of JSON for server configuration file

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

up.sh is not forcefully required

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Do not exit if JSON configuration failed during runtime

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Allow 9000 MTUs on TAP interfaces, consider Ethernet header size

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Trivial remark about inverse Elligator

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Apply bettermotherfuckingwebsite.com's CSS

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Lower Argon2 parameters for tests speedup

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

doc target is always outdated in the root directory

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Download link for 5.0 release

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Merge branch 'develop'

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Various small corrections

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Add Ron Rivest's CnW to thanks page

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

[DOC] Just notion of used algorithms is excessive

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Prefix testing-related global variables for clarity

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Input transport data size check

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Check that specified MTUs are not greater than MTUMax

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Lock-values are better passed as a pointer

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Move handshake make-target above, as others are dependent on it

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Take into account user's MTU and encryptionless settings for CPR calculations

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

EncLess -> Encless for convenience

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Move cprCycleCalculate to peer.go, as it is the only user of it

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Use faster Salsa20 instead of HKDF in AONT

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>

Faster chaffing

Signed-off-by: Sergey Matveev <stargrave@stargrave.org>