http://arcani5qce7mhpqnemrmj2mv5dx2qjxnfzw5d3vzuvs5bqlzb65nkbyd.onion/notes/crypto.php
Within a WireGuard interface, two endpoints CANNOT share the same network part of an address (AllowedIPs), they must be distinct. For example, you cannot have one side be 10.20.30. 1 /24 and the other as 10.20.30. 2 /24, instead, it should be like 10.20.30 .1/24 and 10.20.31 .1/24. You can also set single addresses as well (e.g. 192.168.23.45/32 or fd12:3456::1/128) WireGuard is strictly unicast.