s2n

An implementation of the TLS/SSL protocols (by awslabs)

S2n Alternatives

Similar projects and alternatives to s2n

  1. go

    2,274 s2n VS go

    The Go programming language

  2. InfluxDB

    InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.

    InfluxDB logo
  3. .NET Runtime

    .NET is a cross-platform runtime for cloud, mobile, desktop, and IoT apps.

  4. void-packages

    675 s2n VS void-packages

    The Void source packages collection

  5. Caddy

    438 s2n VS Caddy

    Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

  6. git-lfs

    163 s2n VS git-lfs

    Git extension for versioning large files

  7. plan9port

    Plan 9 from User Space

  8. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  9. quiche

    26 s2n VS quiche

    🥧 Savoury implementation of the QUIC transport protocol and HTTP/3

  10. quinn

    23 s2n VS quinn

    Async-friendly QUIC implementation in Rust

  11. boringssl

    14 s2n VS boringssl

    Mirror of BoringSSL

  12. neqo

    13 s2n VS neqo

    Neqo, the Mozilla Firefox implementation of QUIC in Rust

  13. OpenSSL

    173 s2n VS OpenSSL

    TLS/SSL and crypto library

  14. certificate-transparency-go

    Auditing for TLS certificates (Go code)

  15. LibreSSL

    2 s2n VS LibreSSL

    LibreSSL Portable itself. This includes the build scaffold and compatibility layer that builds portable LibreSSL from the OpenBSD source code. Pull requests or patches sent to [email protected] are welcome.

  16. s2n-quic

    8 s2n VS s2n-quic

    An implementation of the IETF QUIC protocol

  17. LibTomCrypt

    LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

  18. mbedTLS

    11 s2n VS mbedTLS

    An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.

  19. libhydrogen

    A lightweight, secure, easy-to-use crypto library suitable for constrained environments.

  20. GnuTLS

    GnuTLS

  21. Botan

    6 s2n VS Botan

    Cryptography Toolkit

  22. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better s2n alternative or higher similarity.

s2n discussion

Log in or Post with

s2n reviews and mentions

Posts with mentions or reviews of s2n. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-07-30.
  • Why SSL was renamed to TLS in late 90s (2014)
    1 project | news.ycombinator.com | 16 Jun 2025
    Then there was Amazon: https://github.com/aws/s2n-tls

    I had high hopes for s2n, but looks like it never really caught on outside of AWS.

  • OpenSSL bug exposed up to 255 bytes of server heap and existed since 2011
    4 projects | news.ycombinator.com | 30 Jul 2024
    I started writing s2n the day after Heartbleed and the first lines of code were for the stuffer interface. A stuffer is a buffer for stuff, and it's like Java buffered I/O for C. You can get a flavor from reading the header: https://github.com/aws/s2n-tls/blob/main/stuffer/s2n_stuffer...

    The implementation is incredibly simple. Treat all blocks of memory as blob with a known size and then read/write into those blobs with a cursor to track progress and bounds checks on every access. Fence all serialization/deserialization through a safe low level interface. Not only do you get memory safety (which we later proved using formal reasoning) ... but when you're parsing message formats it lends itself to a declarative coding style that makes it very clear what the structure is. You can also do lifecycle things, like erasing sensitive memory with zeroes when you're done with it, making sure things don't show up in core dumps, etc. BoringSSL introduced a Crypto_bytes API that also did some of this plus bounds checking, and retrofit it into OpenSSL.

    OpenSSL on the other hand is a horrific mash up of raw pointer arithmetic, ad-hoc parsers interleaved with business logic and control flow. I could never keep it straight, and it always scared me to review.

  • S2n-TLS – A C99 implementation of the TLS/SSL protocol
    1 project | /r/programming | 5 Dec 2023
    4 projects | news.ycombinator.com | 3 Dec 2023
    It seems to support multiple options but requires you pick at least one of them. https://github.com/aws/s2n-tls/blob/main/docs/BUILD.md#build...
  • OpenSSL 1.1.1 End of Life
    3 projects | news.ycombinator.com | 11 Sep 2023
    I think GnuTLS is probably the second most popular TLS library, after openssl.

    I'll also mentions s2n and rustls-ffi for completeness as C libraries, though the former isn't widely used, and the latter is very experimental still. https://github.com/aws/s2n-tls and https://github.com/rustls/rustls-ffi respectively.

  • I want XAES-256-GCM/11
    2 projects | news.ycombinator.com | 6 Jul 2023
    I've seen operating on unauthenticated plaintext enough times to list it as my own pet peeve with AES-GCM. But it's a problem for chunked messages too. A few years ago we released a SCRAM mode that makes very minimal changes to AES-GCM so that it mathematically can't operate on unauthenticated plaintext. https://github.com/aws/s2n-tls/tree/main/scram
  • Golang is evil on shitty networks
    21 projects | news.ycombinator.com | 29 Dec 2022
    > The documentation is kind of vague, but apparently you have to re-enable it regularly.[3]

    This is correct. And in the end it means more or less that setting the socket option is more of a way of sending an explicit ACK from userspace than a real setting.

    It's not great for common use-cases, because making userspace care about ACKs will obviously degrade efficiency (more syscalls).

    However it can make sense for some use-cases. E.g. I saw the s2n TLS library using QUICKACK to avoid the TLS handshake being stuck [1]. Maybe also worthwhile to be set in some specific RPC scenarios where the server might not immediately send a response on receiving the request, and where the client could send additional frames (e.g. gRPC client side streaming, or in pipelined HTTP requests if the server would really process those in parallel and not just let them sit in socket buffers).

    [1] https://github.com/aws/s2n-tls/blob/46c47a71e637cabc312ce843...

  • S2n-QUIC (Rust implementation of QUIC)
    6 projects | news.ycombinator.com | 17 Feb 2022
    It looks like by default s2n-quic uses this TLS implementation, which is not based on the ring crate (though it is written in C)

    https://github.com/aws/s2n-tls

  • LibreSSL Languishes on Linux
    5 projects | news.ycombinator.com | 4 Jan 2021
    I would be interested in the other SSL implementations:

    - https://github.com/awslabs/s2n

    - https://boringssl.googlesource.com/boringssl

    - https://bearssl.org/

    Are these subpar implementations or there are other reasons not to use these?

  • A note from our sponsor - SaaSHub
    www.saashub.com | 18 Jun 2025
    SaaSHub helps you find the best software and product alternatives Learn more →

Stats

Basic s2n repo stats
11
4,601
9.7
6 days ago

awslabs/s2n is an open source project licensed under Apache License 2.0 which is an OSI approved license.

The primary programming language of s2n is C.


Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com

Did you know that C is
the 6th most popular programming language
based on number of references?