Firezone releases Rust WireGuard library supporting parallel encryption

Firezone has released sanstun, an Apache 2.0-licensed Rust implementation of WireGuard available on crates.io. The library separates network operations, time and randomness from protocol state, giving applications control over those operations. Its API also separates packet bookkeeping from encryption and decryption, allowing applications to send cryptographic work to other threads while keeping interface management on one thread. Incoming packets pass through an interface that applies rate limits before handing messages to individual tunnels. Firezone has deprecated its boringtun fork in favor of sanstun. The company cautions that a theoretical speedup of more than 45x excludes thread-transfer costs and other overhead, making that effective gain difficult to achieve in practice.