You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you discover a potential security issue in s2n we ask that you notify
AWS Security via our vulnerability reporting page. Please do not create a public github issue.
Problem:
#4572 introduced the try-compile s2n_libcrypto_supports_evp_aead_tls. This is probably the same thing as our macro S2N_AEAD_AES_GCM_AVAILABLE and potentially can be merged together, but its sort of unknown how large this change is. We have to look carefully at our macros to make sure they all mean the same thing.
Solution:
Look through the code and see where #if defined(OPENSSL_IS_BORINGSSL) || defined(OPENSSL_IS_AWSLC) is used. If it's code thats being used to gate aead logic, we can probably clean this all up to use only the libcrypto_supports macro.
The text was updated successfully, but these errors were encountered:
Security issue notifications
If you discover a potential security issue in s2n we ask that you notify
AWS Security via our vulnerability reporting page. Please do not create a public github issue.
Problem:
#4572 introduced the try-compile s2n_libcrypto_supports_evp_aead_tls. This is probably the same thing as our macro S2N_AEAD_AES_GCM_AVAILABLE and potentially can be merged together, but its sort of unknown how large this change is. We have to look carefully at our macros to make sure they all mean the same thing.
Solution:
Look through the code and see where
#if defined(OPENSSL_IS_BORINGSSL) || defined(OPENSSL_IS_AWSLC)
is used. If it's code thats being used to gate aead logic, we can probably clean this all up to use only the libcrypto_supports macro.The text was updated successfully, but these errors were encountered: