Hacker GitHub

← All repos

aws/s2n-tls

View on GitHub ↗ ★ 4,786 C

An implementation of the TLS/SSL protocols

35 mentions on Hacker News by 32 people: 5 stories, 30 comments · first 2015-06-30 · latest 2026-01-28

Mentions per year 35 mentions · busiest year 2017 (7)
20082026
AllStoriesComments NewestTopOldest
  1. AWS actually has two libraries they use instead: s2n and aws-lc https://github.com/aws/s2n-tls https://github.com/aws/aws-lc
    comment by sharms · 2026-01-28 · in AISLE’s autonomous analyzer found all CVEs in the January OpenSSL release
  2. Then there was Amazon: https://github.com/aws/s2n-tls I had high hopes for s2n, but looks like it never really caught on outside of AWS.
    comment by jimt1234 · 2025-06-16 · in Why SSL was renamed to TLS in late 90s (2014)
  3. …for stuff, and it's like Java buffered I/O for C. You can get a flavor from reading the header: https://github.com/aws/s2n-tls/blob/main/stuffer/s2n_stuffer... The implementation is incredibly simple. Treat all blocks of memory as blob…
    comment by colmmacc · 2024-07-30 · in OpenSSL bug exposed up to 255 bytes of client heap and existed since 2011
  4. It seems to support multiple options but requires you pick at least one of them. https://github.com/aws/s2n-tls/blob/main/docs/BUILD.md#build... AWS-LC is the recommended option of the supported choices, there doesn't seem to be a…
    comment by zamadatix · 2023-12-03 · in S2n-TLS – A C99 implementation of the TLS/SSL protocol
  5. …as C libraries, though the former isn't widely used, and the latter is very experimental still. https://github.com/aws/s2n-tls and https://github.com/rustls/rustls-ffi respectively.
    comment by TheDong · 2023-09-12 · in OpenSSL 1.1.1 End of Life
  6. …minimal changes to AES-GCM so that it mathematically can't operate on unauthenticated plaintext. https://github.com/aws/s2n-tls/tree/main/scram
    comment by colmmacc · 2023-07-07 · in I want XAES-256-GCM/11
  7. …the server would really process those in parallel and not just let them sit in socket buffers). [1] https://github.com/aws/s2n-tls/blob/46c47a71e637cabc312ce843...
    comment by Matthias247 · 2022-12-30 · in Golang disables Nagle's Algorithm by default
  8. AWS maintains their own TLS stack: https://github.com/aws/s2n-tls
    comment by arianvanp · 2022-11-02 · in The latest OpenSSL vulns were added fairly recently
  9. …uses this TLS implementation, which is not based on the ring crate (though it is written in C) https://github.com/aws/s2n-tls
    comment by agency · 2022-02-17 · in S2n-QUIC (Rust implementation of QUIC)
  10. …s2n does to blind response times of any potential timing leaks, you're probably still vulnerable. https://github.com/aws/s2n-tls#timing-blinding You're probably not using s2n to talk to a Nitro enclave.
    comment by some_furry · 2021-08-10 · in How we built the Evervault Encryption Engine (E3)
  11. I would be interested in the other SSL implementations: - https://github.com/awslabs/s2n - https://boringssl.googlesource.com/boringssl - https://bearssl.org/ Are these subpar implementations or there are other reasons not to use these?
    comment by StreamBright · 2021-01-05 · in LibreSSL Languishes on Linux
  12. Amazon has its own TLS implementation: https://github.com/awslabs/s2n
    comment by sanxiyn · 2021-01-05 · in LibreSSL Languishes on Linux
  13. You don't need to use plain arrays in C either: https://github.com/awslabs/s2n/blob/main/utils/s2n_array.h
    comment by GoblinSlayer · 2020-09-03 · in The problem with C according to a C++ developer
  14. …. He's a Senior Principal Engineer at AWS Networking and is the author of s2n - https://github.com/awslabs/s2n . I'm pretty sure he knows what he's doing and it costs what it costs for a reason.
    comment by eyjafjallajokul · 2019-11-03 · in NeverSSL
  15. …Diversity of infrastructure components confers similar resistance as DNA diversity in the wild. https://github.com/awslabs/s2n
    comment by koolba · 2019-01-30 · in Alpine Linux 3.9.0 Released
  16. …application programming should be done (in my opinion). [1] https://github.com/ARMmbed/mbedtls [2] https://github.com/awslabs/s2n [3] https://github.com/nginx/nginx
    comment by guidovranken · 2018-09-21 · in Ask HN: What open source project, in your opinion, has the highest code quality?
  17. Looks like soon s2n will release support for TLS 1.3? https://github.com/awslabs/s2n/issues/388
    comment by leonardyu · 2018-08-15 · in Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library
  18. …will only add TLS 1.3 once it is finalized . Most likely this is why Facebook implemented its own. https://github.com/awslabs/s2n/issues/388
    comment by sandGorgon · 2018-08-06 · in Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library
  19. s2n: Amazon pet TLS implementation ( https://github.com/awslabs/s2n ). Whose code is actually sane.
    comment by brohee · 2018-04-03 · in MesaLink: A memory-safe and OpenSSL-compatible TLS library
  20. …But if it helps reassure you, we also have a test case to make sure that the fork detection works: https://github.com/awslabs/s2n/blob/master/tests/unit/s2n_ra... The test checks that a child and a parent really do produce different random…
    comment by colmmacc · 2017-11-22 · in Better Random Number Generation for OpenSSL, Libc, and Linux Mainline
  21. …path they have to maintain forever. That part of the code is already screaming "goto fail": https://github.com/awslabs/s2n/blob/master/utils/s2n_random.... (And to be clear, I mean "goto fail" as in "I'm sure it's correct, but it's also…
    comment by revelation · 2017-11-22 · in Better Random Number Generation for OpenSSL, Libc, and Linux Mainline
  22. …If this is something you would be interested in, feel free to fire up an issue for tracking: https://github.com/awslabs/s2n/issues
    comment by raycoll · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  23. …half either it seems. They use openssl for ASN.1 / certificate parsing too (opensl/x509.h) here: https://github.com/awslabs/s2n/blob/b9e3636db98e4ba765fb2193...
    comment by zvrba · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  24. …with approximately 6,000 lines of code (compared to OpenSSL’s approximately 500,000 lines). 0: https://github.com/awslabs/s2n/blob/master/crypto/s2n_dhe.h#...
    comment by frutiger · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  25. …coming from the combo of simplicity, design-for-verification, and actual reviews by pentesters: https://github.com/awslabs/s2n Note: There's also quite a few designed for robustness in smartcard industry. The EAL5+ one from IBM's…
    comment by nickpsecurity · 2016-10-20 · in OpenSSL after Heartbleed
  26. Alex, an SDE from AWS S3, recently added LibFuzzer fuzzing to s2n: https://github.com/awslabs/s2n/pull/263 . The integration has been very simple, very impressive, and it has already found an issue we hadn't triggered with afl (a small…
    comment by colmmacc · 2016-07-22 · in Fuzzing with AFL is an Art
  27. …( https://github.com/mirleft/ocaml-tls ) [1] 2. miTLS ( http://www.mitls.org/wsgi/home ) 3. s2n ( https://github.com/awslabs/s2n ) [1] Home of the epic Bitcoin Pinata! http://ownme.ipredator.se/
    comment by dguido · 2015-10-19 · in Qualys Security Advisory – LibreSSL
  28. I don't think that this is true. See https://github.com/awslabs/s2n/blob/master/bin/s2nc.c
    comment by mback2k · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation
  29. Github says: C 98.2%, Makefile 1.8% https://github.com/awslabs/s2n Where is the OCaml source / repo?
    comment by frik · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation
  30. https://github.com/awslabs/s2n/blob/master/docs/USAGE-GUIDE.... Looks like currently you must set a file descriptor (though the docs mention the possibility of using a pipe). Once an FD is set, you do control pulling/pushing data to s2n.…
    comment by pquerna · 2015-06-30 · in Introducing s2n, a New Open-Source TLS Implementation