WolfGuard: WireGuard with FIPS 140-3 cryptography

WolfGuard is wolfSSL's FIPS 140-3 compliant refactor of WireGuard for Linux, replacing its cryptography with FIPS-approved algorithms like AES-256-GCM and SHA2-256 while maintaining near-identical usage. It consists of a kernel module (wolfguard.ko) and configuration tools (wg-fips, wg-fips-quick) that serve as drop-in replacements for WireGuard, and with Intel ASM acceleration enabled, its performance matches or exceeds WireGuard. FIPS-certified and non-certified WolfGuard builds are interoperable with each other but not with standard WireGuard.