Developer(s) Amazon Security Labs Operating system License Apache License 2.0 | Written in C99 Type Security library Website github.com/awslabs/s2n | |
s2n is an open-source implementation of the Transport Layer Security (TLS) protocol; the name comes from the signal-to-noise ratio.
Contents
It is developed by the Amazon Security Labs as a way to provide some code that would be easier to review than OpenSSL. It has been released on June 30, 2015 on GitHub.
The code of s2n is about 6,000 lines long, compared to the 500,000 lines of OpenSSL. It has already been the subject of several external reviews as well as penetration testing. It makes a strong focus on usability and simplicity.
TLS extensions
Common TLS extensions supported by this software are Server Name Indication, Application-Layer Protocol Negotiation and Online Certificate Status Protocol.
Cryptography
s2n support the main ciphers in use today, such as AES in CBC and GCM modes, 3DES and RC4. It also provides support for perfect forward secrecy through Diffie–Hellman or Elliptic curve Diffie–Hellman ephemeral keys.
The weaker ciphers and key exchange modes are disabled by default.
Language Bindings
LuaJIT 2.0 binding