https://www.wireguard.io/protocol/

https://www.wireguard.io/papers/wireguard.pdf section 5.4