5 ms·
> aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. Why should I use AWS-LC over the myriad cryptography libraries out there
by gfs 3y ago
> aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations.
Why should I use AWS-LC over the myriad cryptography libraries out there already?
- koolba 3y agoI would wager this is a big reason: > This crate provides bindings to AWS-LC-FIPS 2.x, which has completed FIPS validation testing by an accredited lab and has been submitted to NIST for certification. If you are in a regulated environment, that’s reason enough.
- fitzoh 3y agoExactly, see the "Motivation" section of the README
- colmmacc 3y agoAnother nice reason is that AWS-LC includes rewrites and optimizations that make it faster than alternatives, especially on Graviton.
- jpgvm 3y agoAre there benches on this vs say OpenSSL on Graviton and Apple M chips? I would be curious how big the difference is vs whatever NEON optimizations are in OpenSSL (and friends) already.
- JoshTriplett 3y agoOne reason: you can use this as a backend to rustls, and then you no longer have anything under the OpenSSL license in your dependencies, which improves the license compatibility of your project.
- briansmith 3y agoAgain, this is just a temporary situation, and a matter of burning down a list of small tasks. Not that the OpenSSL license issue is a big deal for most anyway. Feel free to help; see this issue filed by Josh Triplett: https://github.com/briansmith/ring/issues/1318#issuecomment-1890239223 https://github.com/briansmith/ring/issues/1318#issuecomment-...
- JoshTriplett 3y agoYeah, I realize, and I am looking forward to having multiple options to choose from that all have the same license compatibility. It's nice that there's a short-term solution that's available for people who need to ship things soon, and it's nice that there's a longstanding library (ring) that'll long-term will be capable of providing a compatible solution as well.
- deleted 3y ago[deleted]
- littlestymaar 3y ago> see this issue filed by Josh Triplett Check who you are replying to ;)