s2n Files

Release summary

• Removed s2n's internal DRBG and delegates randomness generation to libcrypto when supported.
• Added the strict CNSA 2.0 TLS policy and a transitional policy from CNSA 1.0 to 2.0
• mTLS TLS1.3 handshakes are ~4% faster

What's Changed

• chore(s2n-tls): v0.3.35 release by @boquan-fang in https://github.com/aws/s2n-tls/pull/5765
• fix: update memory snapshots by @jmayclin in https://github.com/aws/s2n-tls/pull/5771
• fix: make get_alert idempotent by @jmayclin in https://github.com/aws/s2n-tls/pull/5767
• chore: fix crate name by @jmayclin in https://github.com/aws/s2n-tls/pull/5769
• chore: delete unused s2n_stuffer_alloc_ro functions by @firedog1234 in https://github.com/aws/s2n-tls/pull/5757
• fix: add required metadata for subscriber by @jmayclin in https://github.com/aws/s2n-tls/pull/5776
• docs: add comments about sslv3 weaknesses by @WesleyRosenblum in https://github.com/aws/s2n-tls/pull/5777
• fix(bindings): replace bare as usize casts in Tokio I/O callbacks by @WesleyRosenblum in https://github.com/aws/s2n-tls/pull/5780
• feat(s2n-metric-subscriber): add supported parameters by @jmayclin in https://github.com/aws/s2n-tls/pull/5768
• build(deps): bump jidicula/clang-format-action from 4.16.0 to 4.17.0 in /.github/workflows in the all-gha-updates group by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5784
• refactor(rand): deprecate internal DRBG implementation by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5775
• docs: clarify integrity protection requirements for connection serialization by @WesleyRosenblum in https://github.com/aws/s2n-tls/pull/5782
• build(deps): bump the all-gha-updates group in /.github/workflows with 2 updates by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5787
• feat: add strict and interop CNSA 2.0 policies by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5760
• ci: add 'style' to PR title check by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5792
• fix(aws-lc): Update test for https://github.com/aws/aws-lc/pull/3101 by @alexw91 in https://github.com/aws/s2n-tls/pull/5788
• feat(build): Add option to enforce correct libcrypto feature probing by @goatgoose in https://github.com/aws/s2n-tls/pull/5579
• ci: fix install_awslc_fips script by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5790
• fix: Gates rolling hash of all supported hash algorithms to TLS1.2 by @maddeleine in https://github.com/aws/s2n-tls/pull/5803
• chore: remove codeowners by @dougch in https://github.com/aws/s2n-tls/pull/5797
• docs: clean up DRBG references across docs, APIs, and templates by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5789
• fix: reject certs with literal-IP CN and no SAN by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5804
• ci: upgrade nix awslc version by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5805
• fix(ci): update MSRV for extended crates from 1.72 to 1.77 by @jouho in https://github.com/aws/s2n-tls/pull/5810

New Contributors

• @firedog1234 made their first contribution in https://github.com/aws/s2n-tls/pull/5757

Full Changelog: https://github.com/aws/s2n-tls/compare/1.7.1...v1.7.2