Building virtual networks using cryptographic algorithms

Kozlov Alexander Vladimirovich, Mashihin Alexander Yurievich

The article describes the principles of network configuration using the Docker tool and methods for developing a prototype of a system that allows you to create a virtual private network. The developed system provides protection of data transmitted between the parties of VPN tunnels through the use of authenticated encryption with additional data. This system implements the concept of traffic routing using cryptographic keys, providing the generation of key pairs using the elliptic curve Curve25519 on all network nodes necessary for the subsequent receipt of a shared secret key for data exchange using the Diffie-Hellman protocol on elliptic curves. The article presents the structure of the test stand and demonstrates the results of testing the system.

Keywords:virtual private network, Ansible, Fireguard, Jinja2, automation.