aws/aws-lc

View on GitHub

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.

Stars: 830
Forks: 212
Open beginner issues: 0
Indexed issues: 31
Avg merge: 2d 22h
Merged PRs (30d): 61

Dominant language: Assembly
License: No license data
Last GitHub push: Sep 11, 2026
Latest indexed: Sep 14, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

30 open issues indexed

Add soname Open

enhancement

aws/aws-lc#1098 · 40 comments · 3 reactions · 1 assignee · Indexed Sep 14, 2026
Go required for FIPS build. Open

aws/aws-lc#2129 · 1 comment · 16 reactions · 0 assignees · Indexed Sep 14, 2026
AES-GCM slower than BoringSSL on Zen3 Open

aws/aws-lc#2283 · 5 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Ed448 support Open

aws/aws-lc#2742 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
When negotiating TLS 1.3, AWS-LC always prefer client ciphers order Open

aws/aws-lc#2814 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Is TLSv1.2 and TLSv1.3 approved in any versions of AWS-LC-FIPS? Open

aws/aws-lc#2921 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026
Feature Request: Support for Brainpool Curves (RFC 5639) in TLS 1.2 and TLS 1.3 Open

aws/aws-lc#2939 · 6 comments · 2 reactions · 0 assignees · Indexed Sep 14, 2026
Building fips compliant dll on Windows targets from an Ubuntu machine Open

aws/aws-lc#3021 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Update vendored Wycheproof RSA-OAEP vectors and remove workaround Open

vectors

aws/aws-lc#3097 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
support for registering new ech certs dynamically Open

enhancement

aws/aws-lc#3173 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 14, 2026
Serious startup slowdown caused by unoptimized jitterentropy code Open

aws/aws-lc#3180 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
FIPS builds for nixpkgs Open

FIPS

aws/aws-lc#3184 · 3 comments · 1 reaction · 1 assignee · Indexed Sep 14, 2026
`cpu_arm_linux.c` and `cpu_aarch64_linux.c` unconditionally require `getauxval` / `<sys/auxv.h>` Open

aws/aws-lc#3188 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Adding MinGW support for the FIPS build Open

aws/aws-lc#3207 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
ssl_test segfaults on Alpine Linux Edge ppc64le Open

aws/aws-lc#3210 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
FIPS build fails with `zig cc` Open

aws/aws-lc#3261 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
incomplete go.sum file in 4.0.0 branch Open

aws/aws-lc#3289 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
SLH-DSA Support Open

aws/aws-lc#3305 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Add public CRYPTO_cts128_encrypt/_decrypt and <openssl/modes.h> for krb5 integration Open

aws/aws-lc#3309 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Build error due to discarded-qualifiers Open

aws/aws-lc#3312 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 14, 2026
Allow nonce reuse Open

aws/aws-lc#3326 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
AES-GCM seal/open scatter paths redundantly zero-initialize the full GCM128_CONTEXT on every call (~2.7% seal throughput at QUIC packet sizes) Open

aws/aws-lc#3334 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
DH_check takes >20s on RFC 3526 groups Open

aws/aws-lc#3335 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
CI: Add Graviton5 to CodeBuild when available Open

aws/aws-lc#3404 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
s2n-bignum: Curve25519 assembly assumes readable text segment Open

aws/aws-lc#3408 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 14, 2026
The "SHA256"/"SHA384" cipher aliases fail to be killed/removed simultaneously in non-strict mode Open

aws/aws-lc#3455 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
CWE 214: ssl session secret scrubbing/zeroization hardening Open

aws/aws-lc#3494 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Make any structure with potentially variable size opaque Open

aws/aws-lc#3495 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 14, 2026
Name-constraint CN check rejects ordinary non-DNS common names since v1.71.0 Open

aws/aws-lc#3521 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 14, 2026
SSL_reset_early_data_reject does not clear out unreported bytes written Open

aws/aws-lc#3522 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 14, 2026

aws/aws-lc

Get new issues in your inbox