Issues

• CPU jitter seeding aborts the process on RK3399 (Cortex-A72, 24 MHz arch timer): ~12% of process starts

  aws/aws-lc#3604 · Filter by author lgnap opened on Sep 30, 2026

• Add pkeyutl -encrypt and -decrypt to tool-openssl

  aws/aws-lc#3601 · Filter by author justsmth opened on Sep 29, 2026

• tool-openssl enc rejects common supported cipher options

  aws/aws-lc#3600 · Filter by author justsmth opened on Sep 29, 2026

• A failed RNDR or RDRAND read aborts the process; fall back to the OS CSPRNG for that input

  aws/aws-lc#3594 · Filter by author adalundhe opened on Sep 29, 2026

• CPU jitter entropy: the startup health test's samples are discarded and a fresh collector refilled, doubling a process's first-randomness cost

  aws/aws-lc#3593 · Filter by author adalundhe opened on Sep 29, 2026

• Tracking: packaging AWS-LC for Linux distributions

  aws/aws-lc#3565 · Filter by author JoshuaGWilliams1025 opened on Sep 24, 2026
  1

• control over defining _GNU_SOUCE in bcm.c

  aws/aws-lc#3564 · Filter by author divygobi opened on Sep 24, 2026

• tree_jitter_zeroize_drbg crashes on Windows when AWS-LC is built as a static library and linked into a third-party DLL

  aws/aws-lc#3540 · Filter by author benrushcc opened on Sep 17, 2026
  1

• Validate X.509 certificates before passing them to legacy stack.

  aws/aws-lc#3534 · Filter by author DemiMarie opened on Sep 16, 2026

• Backport "Service Indicator: Add error call trampoline to avoid delocator issue" to fips-2025-09-12-lts?

  aws/aws-lc#3533 · Filter by author grahamc opened on Sep 16, 2026
  1

• performance: sha2 is slower than OpenSSL provided one

  aws/aws-lc#3531 · Filter by author oech3 opened on Sep 15, 2026
  3

• SSL_reset_early_data_reject does not clear out unreported bytes written

  aws/aws-lc#3522 · Filter by author tatsuhiro-t opened on Sep 14, 2026

• Name-constraint CN check rejects ordinary non-DNS common names since v1.71.0

  aws/aws-lc#3521 · Filter by author arpitjain099 opened on Sep 13, 2026

• Make any structure with potentially variable size opaque

  aws/aws-lc#3495 · Filter by author DemiMarie opened on Sep 7, 2026
  4

• CWE 214: ssl session secret scrubbing/zeroization hardening

  aws/aws-lc#3494 · Filter by author ravikanthreddy89 opened on Sep 7, 2026
  1

• The "SHA256"/"SHA384" cipher aliases fail to be killed/removed simultaneously in non-strict mode

  aws/aws-lc#3455 · Filter by author aydinmercan opened on Aug 31, 2026

• s2n-bignum: Curve25519 assembly assumes readable text segment

  aws/aws-lc#3408 · Filter by author amrfti opened on Aug 6, 2026
  2

  

• CI: Add Graviton5 to CodeBuild when available

  aws/aws-lc#3404 · Filter by author nebeid opened on Aug 4, 2026

• DH_check takes >20s on RFC 3526 groups

  aws/aws-lc#3335 · Filter by author reaperhulk opened on Jul 5, 2026
  4

• AES-GCM seal/open scatter paths redundantly zero-initialize the full GCM128_CONTEXT on every call (~2.7% seal throughput at QUIC packet sizes)

  aws/aws-lc#3334 · Filter by author thedjpetersen opened on Jul 3, 2026
  1

• Allow nonce reuse

  aws/aws-lc#3326 · Filter by author erenon opened on Jun 30, 2026
  3

• Build error due to discarded-qualifiers

  aws/aws-lc#3312 · Filter by author kiefernforst opened on Jun 24, 2026
  1

  

• Add public CRYPTO_cts128_encrypt/_decrypt and <openssl/modes.h> for krb5 integration

  aws/aws-lc#3309 · Filter by author WillChilds-Klein opened on Jun 23, 2026

• SLH-DSA Support

  aws/aws-lc#3305 · Filter by author DarkaMaul opened on Jun 18, 2026
  1

• incomplete go.sum file in 4.0.0 branch

  aws/aws-lc#3289 · Filter by author darix opened on Jun 5, 2026