Acefina VPN
What is WireGuard? WireGuard vs OpenVPN
Short answer: WireGuard is a modern VPN protocol that encrypts your connection with a small, published codebase and a fixed set of modern cryptographic algorithms. Acefina VPN uses WireGuard by default, with a Stealth mode for strict Wi-Fi networks.
What is WireGuard?
WireGuard is a VPN protocol first released publicly in 2016 by developer Jason A. Donenfeld. It builds an encrypted tunnel between your device and a server using a fixed set of modern cryptographic primitives — ChaCha20 for encryption, Poly1305 for authentication, Curve25519 for key exchange, and BLAKE2s for hashing. Because the protocol doesn't let you choose or negotiate different ciphers, there's no weaker fallback mode to misconfigure. WireGuard's reference implementation was merged into the mainline Linux kernel in 2020, which is generally read as a mark of maturity and code-quality review.
Is WireGuard secure?
WireGuard's design and handshake (based on the Noise Protocol Framework) have been the subject of independent, peer-reviewed academic analysis, including a formal verification of its handshake published at a major security conference. Its total codebase is roughly a few thousand lines, compared with much larger, more configurable older VPN implementations — a smaller codebase is generally easier for outside researchers to review line by line.
WireGuard vs OpenVPN: what's the difference?
Both create an encrypted tunnel, but they differ in age, design and typical performance:
| WireGuard | OpenVPN | |
|---|---|---|
| First released | 2016 | 2001 |
| Approximate codebase size | A few thousand lines | Tens of thousands of lines |
| Cryptography | Fixed modern suite (ChaCha20, Poly1305, Curve25519, BLAKE2s) — no negotiation | Configurable via OpenSSL — flexible, but configuration-dependent |
| Typical connection speed | Generally faster to establish a connection and lower overhead, due to its smaller, kernel-friendly design | Generally slower to establish a connection; overhead varies with configuration |
| Configurability | Deliberately minimal | Highly configurable |
| Track record | In the mainline Linux kernel since 2020 | Widely deployed since the early 2000s |
Which does Acefina VPN use?
Acefina VPN connects over WireGuard by default. On networks that block or throttle standard VPN traffic — some hotel, airport and office Wi-Fi — the app offers a Stealth mode that stays reliable where a standard connection would struggle. You choose it from the same screen as any other location.
Frequently asked questions
Is WireGuard faster than OpenVPN?
Independent technical write-ups and WireGuard's own published benchmarks generally report faster throughput and quicker connection setup than OpenVPN, largely because of WireGuard's smaller codebase and kernel-level implementation. Real-world speed also depends on your device, network and server load.
Does WireGuard keep logs?
The WireGuard protocol itself doesn't log anything — logging is a property of whoever runs the server, not the protocol. See Acefina VPN's own privacy policy for exactly what we process.
Sources (checked 28 September 2026):
- WireGuard project — protocol overview and cryptography: wireguard.com
- WireGuard whitepaper — design and Noise-based handshake: wireguard.com/papers/wireguard.pdf
- WireGuard merged into the Linux 5.6 kernel (2020): kernelnewbies.org/Linux_5.6
- OpenVPN project — protocol and configuration documentation: openvpn.net