s2n

s2n is an open-source implementation of the Transport Layer Security (TLS) protocol; the name comes from the signal-to-noise ratio.[2]

s2n
Developer(s)Amazon Security Labs
Stable release
0.9.0[1] / 16 May 2019 (16 May 2019)
Repository
Written inC99
Operating systemCross-platform
TypeSecurity library
LicenseApache License 2.0
Websitegithub.com/awslabs/s2n

It is developed by Amazon Security Labs as a way to provide some code that would be easier to review than OpenSSL.[2] It was released on June 30, 2015 on GitHub.[3]

The code of s2n is about 6,000 lines long, compared to the 500,000 lines of OpenSSL. It has already been the subject of several external reviews as well as penetration testing.[2] It has a strong focus on usability and simplicity.[3]

Features

TLS extensions

Common TLS extensions supported by this software are Server Name Indication, Application-Layer Protocol Negotiation and Online Certificate Status Protocol.

Cryptography

s2n supports the main ciphers in use today, such as AES in CBC and GCM modes, 3DES and RC4. It also provides support for perfect forward secrecy through Diffie–Hellman or Elliptic curve Diffie–Hellman ephemeral keys.

The weaker ciphers and key exchange modes are disabled by default.[3]

Language bindings

LuaJIT 2.0 binding

References
  1. "Release 0.9.0". 16 May 2019. Retrieved 17 May 2019.
  2. Stephen Schmidt, Introducing s2n, a New Open Source TLS Implementation, on the Amazon Security Blog
  3. s2n : an implementation of the TLS/SSL protocols, on GitHub
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.