[GH-ISSUE #116] Add steganography #63

New issue

Open

opened 2026-10-13 21:03:12 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-13 21:03:12 +00:00

Owner

Originally created by @hashelq on GitHub (Feb 17, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-go/issues/116

Originally assigned to: @ygurov on GitHub.

Countries like Turkmenistan already use invasive DPI's that block all non-formalized encrypted (high entropic) connections.
Users from Russia report that local government started detecting VPN traffic (VLESS) using Ai's.

I suggest adding steganographic protection into AWG protocol, allowing mixing the encrypted VPN traffic with non encrypted "looking ok" traffic such as images, videos and low-entropic data. This will make the underlying traffic look more natural.
Another way of implementing that would be to pad the data using pregenerated range series to reduce its entropy and mislead dpi.

Originally created by @hashelq on GitHub (Feb 17, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amneziawg-go/issues/116 Originally assigned to: @ygurov on GitHub. Countries like Turkmenistan already use invasive DPI's that block all non-formalized encrypted (high entropic) connections. Users from Russia report that local government started detecting VPN traffic (VLESS) using Ai's. I suggest adding steganographic protection into AWG protocol, allowing mixing the encrypted VPN traffic with non encrypted "looking ok" traffic such as images, videos and low-entropic data. This will make the underlying traffic look more natural. Another way of implementing that would be to pad the data using pregenerated range series to reduce its entropy and mislead dpi.

bsakaguchi commented

2026-10-13 21:03:13 +00:00

Author

Owner

@ygurov commented on GitHub (Feb 19, 2026):

Hi
I think entropy question is a common sense here, but are you really sure current DPI/TSPU mechanisms are actually using it?
Have the similar feature in backlog anyways, assigning to myself

@ygurov commented on GitHub (Feb 19, 2026): Hi I think entropy question is a common sense here, but are you really sure current DPI/TSPU mechanisms are actually using it? Have the similar feature in backlog anyways, assigning to myself

bsakaguchi commented

2026-10-13 21:03:13 +00:00

Author

Owner

@hashelq commented on GitHub (Feb 20, 2026):

Hi I think entropy question is a common sense here, but are you really sure current DPI/TSPU mechanisms are actually using it? Have the similar feature in backlog anyways, assigning to myself

Not sure, but I have heard information that Turkmenistan requiring an approved security certificate before using it on public network, otherwise they block the encrypted traffic. Even if thats not the case, ig its still worth implementing that as a fallback in case it gets activated somewhere somehow.
I don't think I know much more.

@hashelq commented on GitHub (Feb 20, 2026): > Hi I think entropy question is a common sense here, but are you really sure current DPI/TSPU mechanisms are actually using it? Have the similar feature in backlog anyways, assigning to myself Not sure, but I have heard information that Turkmenistan requiring an approved security certificate before using it on public network, otherwise they block the encrypted traffic. Even if thats not the case, ig its still worth implementing that as a fallback in case it gets activated somewhere somehow. I don't think I know much more.

bsakaguchi referenced this issue

2026-10-13 21:03:51 +00:00

[PR #63] [CLOSED] Patch #126