hub / github.com/aws/aws-lc-rs

github.com/aws/aws-lc-rs @v1.17.1

repository ↗ · DeepWiki ↗ · release v1.17.1 ↗ · + Follow

9,675 symbols 18,910 edges 204 files 313 documented · 3%

What it actually does AI analysis from the code graph — generated when you open this

loading…

README

AWS Libcrypto for Rust

aws-lc-rs is a cryptographic library using AWS-LC for its cryptographic operations. This library strives to be API-compatible with the popular Rust library named ring (v0.16). It uses either the auto-generated aws-lc-sys or aws-lc-fips-sys Foreign Function Interface (FFI) crates found in this repository for invoking AWS-LC.

Crates

aws-lc-rs

A ring-compatible crypto library using the cryptographic operations provided by AWS-LC using either aws-lc-sys or aws-lc-fips-sys.

aws-lc-sys

Autogenerated Low-level AWS-LC bindings for the Rust programming language. We do not recommend directly relying on these bindings.

aws-lc-fips-sys

Autogenerated Low-level AWS-LC bindings for the Rust programming language, providing FIPS support. We do not recommend directly relying on these bindings. This crate provides bindings to AWS-LC-FIPS 3.x, which has completed FIPS validation testing by an accredited lab and has been submitted to NIST for certification. The static build of AWS-LC-FIPS is used for Linux targets. (See README).

Refer to the NIST Cryptographic Module Validation Program's Modules In Progress List for the latest status of the static or dynamic AWS-LC Cryptographic Module. A complete list of supported operating environments will be made available in the vendor security policy once the validation certificate has been issued. We will also update our release notes and documentation to reflect any changes in FIPS certification status.

Build

Please see the build instructions in the aws-lc-rs crate.

Motivation

Rust developers increasingly need to deploy applications that meet US and Canadian government cryptographic requirements. We evaluated how to deliver FIPS validated cryptography in idiomatic and performant Rust, built around our AWS-LC offering. We found that the popular ring (v0.16) library fulfilled much of the cryptographic needs in the Rust community, but it did not meet the needs of developers with FIPS requirements. Our intention is to contribute a drop-in replacement for ring that provides FIPS support and is compatible with the ring API. Rust developers with prescribed cryptographic requirements can seamlessly integrate aws-lc-rs into their applications and deploy them into AWS Regions.

Questions, Feedback and Contributing

We use GitHub Issues for managing feature requests, bug reports, or questions about aws-lc-rs API usage.

Otherwise, if you think you might have found a security impacting issue, please instead follow our Security Notification Process below.

Security Notification Process

If you discover a potential security issue in AWS-LC or aws-lc-rs, we ask that you notify AWS Security via our vulnerability reporting page. Please do not create a public GitHub issue.

If you package or distribute aws-lc-rs, or use aws-lc-rs as part of a large multi-user service, you may be eligible for pre-notification of future aws-lc-rs releases. Please contact aws-lc-pre-notifications@amazon.com.

License

This library is licensed under the Apache-2.0 or the ISC License.

Extension points exported contracts — how you extend this code

AsDer (Interface)

Trait for types that can be serialized into a DER format. [16 implementers]

aws-lc-rs/src/encoding.rs

Builder (Interface)

(no doc) [3 implementers]

builder/main.rs

AsBigEndian (Interface)

Trait for values that can be serialized into a big-endian format [8 implementers]

aws-lc-rs/src/encoding.rs

Sealed (Interface)

Traits that are designed to only be implemented internally in *aws-lc-rs*. Usage: ``` use crate::sealed; pub trait MyT [10 …

aws-lc-rs/src/lib.rs

SecureRandom (Interface)

A secure random number generator. [8 implementers]

aws-lc-rs/src/rand.rs

ParsedVerificationAlgorithm (Interface)

Private trait [4 implementers]

aws-lc-rs/src/signature.rs

Core symbols most depended-on inside this repo

as_ptr

called by 2168

aws-lc-rs/src/digest/digest_ctx.rs

aws-lc-rs/src/key_wrap.rs

len

called by 161

aws-lc-rs/src/rsa/key.rs

aws-lc-rs/src/rand.rs

clone

called by 92

aws-lc-rs/src/cmac.rs

Shape

Class 5,176

Function 3,053

Method 1,343

Enum 79

Interface 24

Languages

Rust100%

C1%

Python1%

Modules by API surface

aws-lc-sys/src/x86_64_unknown_linux_gnu_crypto.rs361 symbols

aws-lc-sys/src/x86_64_apple_darwin_crypto.rs361 symbols

aws-lc-sys/src/aarch64_unknown_linux_gnu_crypto.rs360 symbols

aws-lc-sys/src/x86_64_unknown_linux_musl_crypto.rs359 symbols

aws-lc-sys/src/riscv64gc_unknown_linux_gnu_crypto.rs359 symbols

aws-lc-sys/src/i686_unknown_linux_gnu_crypto.rs359 symbols

aws-lc-sys/src/aarch64_apple_darwin_crypto.rs359 symbols

aws-lc-sys/src/aarch64_unknown_linux_musl_crypto.rs358 symbols

aws-lc-sys/src/x86_64_pc_windows_msvc_crypto.rs356 symbols

aws-lc-sys/src/x86_64_pc_windows_gnu_crypto.rs356 symbols

aws-lc-sys/src/i686_pc_windows_msvc_crypto.rs356 symbols

aws-lc-sys/src/aarch64_pc_windows_msvc_crypto.rs356 symbols

For agents

$ claude mcp add aws-lc-rs \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact