Hacker GitHub

← All repos

aws/s2n-tls

View on GitHub ↗ ★ 4,786 C

An implementation of the TLS/SSL protocols

35 mentions on Hacker News by 32 people: 5 stories, 30 comments · first 2015-06-30 · latest 2026-01-28

Mentions per year 35 mentions · busiest year 2017 (7)
20082026
AllStoriesComments NewestTopOldest
  1. AWS actually has two libraries they use instead: s2n and aws-lc https://github.com/aws/s2n-tls https://github.com/aws/aws-lc
    comment by sharms · 2026-01-28 · in AISLE’s autonomous analyzer found all CVEs in the January OpenSSL release
  2. Then there was Amazon: https://github.com/aws/s2n-tls I had high hopes for s2n, but looks like it never really caught on outside of AWS.
    comment by jimt1234 · 2025-06-16 · in Why SSL was renamed to TLS in late 90s (2014)
  3. …for stuff, and it's like Java buffered I/O for C. You can get a flavor from reading the header: https://github.com/aws/s2n-tls/blob/main/stuffer/s2n_stuffer... The implementation is incredibly simple. Treat all blocks of memory as blob…
    comment by colmmacc · 2024-07-30 · in OpenSSL bug exposed up to 255 bytes of client heap and existed since 2011
  4. It seems to support multiple options but requires you pick at least one of them. https://github.com/aws/s2n-tls/blob/main/docs/BUILD.md#build... AWS-LC is the recommended option of the supported choices, there doesn't seem to be a…
    comment by zamadatix · 2023-12-03 · in S2n-TLS – A C99 implementation of the TLS/SSL protocol
  5. ▲ 76
    S2n-TLS – A C99 implementation of the TLS/SSL protocol
    story by belter · 2023-12-03 · 11 comments
  6. …as C libraries, though the former isn't widely used, and the latter is very experimental still. https://github.com/aws/s2n-tls and https://github.com/rustls/rustls-ffi respectively.
    comment by TheDong · 2023-09-12 · in OpenSSL 1.1.1 End of Life
  7. …minimal changes to AES-GCM so that it mathematically can't operate on unauthenticated plaintext. https://github.com/aws/s2n-tls/tree/main/scram
    comment by colmmacc · 2023-07-07 · in I want XAES-256-GCM/11
  8. …the server would really process those in parallel and not just let them sit in socket buffers). [1] https://github.com/aws/s2n-tls/blob/46c47a71e637cabc312ce843...
    comment by Matthias247 · 2022-12-30 · in Golang disables Nagle's Algorithm by default
  9. AWS maintains their own TLS stack: https://github.com/aws/s2n-tls
    comment by arianvanp · 2022-11-02 · in The latest OpenSSL vulns were added fairly recently
  10. …uses this TLS implementation, which is not based on the ring crate (though it is written in C) https://github.com/aws/s2n-tls
    comment by agency · 2022-02-17 · in S2n-QUIC (Rust implementation of QUIC)
  11. …s2n does to blind response times of any potential timing leaks, you're probably still vulnerable. https://github.com/aws/s2n-tls#timing-blinding You're probably not using s2n to talk to a Nitro enclave.
    comment by some_furry · 2021-08-10 · in How we built the Evervault Encryption Engine (E3)
  12. I would be interested in the other SSL implementations: - https://github.com/awslabs/s2n - https://boringssl.googlesource.com/boringssl - https://bearssl.org/ Are these subpar implementations or there are other reasons not to use these?
    comment by StreamBright · 2021-01-05 · in LibreSSL Languishes on Linux
  13. Amazon has its own TLS implementation: https://github.com/awslabs/s2n
    comment by sanxiyn · 2021-01-05 · in LibreSSL Languishes on Linux
  14. You don't need to use plain arrays in C either: https://github.com/awslabs/s2n/blob/main/utils/s2n_array.h
    comment by GoblinSlayer · 2020-09-03 · in The problem with C according to a C++ developer
  15. ▲ 4
    S2n: A simple, small, fast, and security-minded C99 implementation of TLS/SSL
    story by beefhash · 2020-09-01 · 0 comments
  16. ▲ 3
    S2n: An implementation of the TLS/SSL protocols
    story by mooreds · 2020-06-25 · 0 comments
  17. …. He's a Senior Principal Engineer at AWS Networking and is the author of s2n - https://github.com/awslabs/s2n . I'm pretty sure he knows what he's doing and it costs what it costs for a reason.
    comment by eyjafjallajokul · 2019-11-03 · in NeverSSL
  18. …Diversity of infrastructure components confers similar resistance as DNA diversity in the wild. https://github.com/awslabs/s2n
    comment by koolba · 2019-01-30 · in Alpine Linux 3.9.0 Released
  19. …application programming should be done (in my opinion). [1] https://github.com/ARMmbed/mbedtls [2] https://github.com/awslabs/s2n [3] https://github.com/nginx/nginx
    comment by guidovranken · 2018-09-21 · in Ask HN: What open source project, in your opinion, has the highest code quality?
  20. Looks like soon s2n will release support for TLS 1.3? https://github.com/awslabs/s2n/issues/388
    comment by leonardyu · 2018-08-15 · in Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library
  21. …will only add TLS 1.3 once it is finalized . Most likely this is why Facebook implemented its own. https://github.com/awslabs/s2n/issues/388
    comment by sandGorgon · 2018-08-06 · in Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library
  22. s2n: Amazon pet TLS implementation ( https://github.com/awslabs/s2n ). Whose code is actually sane.
    comment by brohee · 2018-04-03 · in MesaLink: A memory-safe and OpenSSL-compatible TLS library
  23. …But if it helps reassure you, we also have a test case to make sure that the fork detection works: https://github.com/awslabs/s2n/blob/master/tests/unit/s2n_ra... The test checks that a child and a parent really do produce different random…
    comment by colmmacc · 2017-11-22 · in Better Random Number Generation for OpenSSL, Libc, and Linux Mainline
  24. …path they have to maintain forever. That part of the code is already screaming "goto fail": https://github.com/awslabs/s2n/blob/master/utils/s2n_random.... (And to be clear, I mean "goto fail" as in "I'm sure it's correct, but it's also…
    comment by revelation · 2017-11-22 · in Better Random Number Generation for OpenSSL, Libc, and Linux Mainline
  25. ▲ 12
    S2n – new C99 SSL/TLS implementation used by AWS universally now
    story by ausjke · 2017-03-12 · 0 comments
  26. ▲ 1
    S2N: An implementation of the TLS/SSL protocols
    story by febin · 2017-02-24 · 0 comments
  27. …If this is something you would be interested in, feel free to fire up an issue for tracking: https://github.com/awslabs/s2n/issues
    comment by raycoll · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  28. …half either it seems. They use openssl for ASN.1 / certificate parsing too (opensl/x509.h) here: https://github.com/awslabs/s2n/blob/b9e3636db98e4ba765fb2193...
    comment by zvrba · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  29. …with approximately 6,000 lines of code (compared to OpenSSL’s approximately 500,000 lines). 0: https://github.com/awslabs/s2n/blob/master/crypto/s2n_dhe.h#...
    comment by frutiger · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  30. …coming from the combo of simplicity, design-for-verification, and actual reviews by pentesters: https://github.com/awslabs/s2n Note: There's also quite a few designed for robustness in smartcard industry. The EAL5+ one from IBM's…
    comment by nickpsecurity · 2016-10-20 · in OpenSSL after Heartbleed
  31. Alex, an SDE from AWS S3, recently added LibFuzzer fuzzing to s2n: https://github.com/awslabs/s2n/pull/263 . The integration has been very simple, very impressive, and it has already found an issue we hadn't triggered with afl (a small…
    comment by colmmacc · 2016-07-22 · in Fuzzing with AFL is an Art
  32. …( https://github.com/mirleft/ocaml-tls ) [1] 2. miTLS ( http://www.mitls.org/wsgi/home ) 3. s2n ( https://github.com/awslabs/s2n ) [1] Home of the epic Bitcoin Pinata! http://ownme.ipredator.se/
    comment by dguido · 2015-10-19 · in Qualys Security Advisory – LibreSSL
  33. I don't think that this is true. See https://github.com/awslabs/s2n/blob/master/bin/s2nc.c
    comment by mback2k · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation
  34. Github says: C 98.2%, Makefile 1.8% https://github.com/awslabs/s2n Where is the OCaml source / repo?
    comment by frik · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation
  35. https://github.com/awslabs/s2n/blob/master/docs/USAGE-GUIDE.... Looks like currently you must set a file descriptor (though the docs mention the possibility of using a pipe). Once an FD is set, you do control pulling/pushing data to s2n.…
    comment by pquerna · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation