Issues

• SSL_client_hello_get0_ciphers() returns 0 inside the client hello callback

  aws/aws-lc#3686 · Filter by author MeGunes opened on Oct 23, 2026

• SSL_certs_clear() leaves cert_private_key_idx at -1, so no certificate can be set on that SSL again

  aws/aws-lc#3685 · Filter by author MeGunes opened on Oct 23, 2026

• VM UBE: test vmclock→SysGenID fallback and report rejected vmclock devices

  aws/aws-lc#3683 · Filter by author dougch opened on Oct 22, 2026

• Opt-in strict mode: fail when VM UBE detection is unavailable

  aws/aws-lc#3682 · Filter by author dougch opened on Oct 22, 2026

• Request: Public API for KMAC and cSHAKE (SP 800-185) in AWS-LC

  aws/aws-lc#3678 · Filter by author h0tc0d3 opened on Oct 21, 2026

• Please add BN_bn2lebinpad, BN_lebin2bn, BN_bn2nativepad, BN_native2bn for compatibility with microsoft/go

  aws/aws-lc#3656 · Filter by author xnox opened on Oct 14, 2026

• SSL_set_SSL_CTX(): per-SNI cipher lists are not applied, and the deprecation plan

  aws/aws-lc#3614 · Filter by author ygkat opened on Oct 2, 2026
  4

• CPU jitter seeding aborts the process on RK3399 (Cortex-A72, 24 MHz arch timer): ~12% of process starts

  aws/aws-lc#3604 · Filter by author lgnap opened on Sep 30, 2026
  1

• Add pkeyutl -encrypt and -decrypt to tool-openssl

  aws/aws-lc#3601 · Filter by author justsmth opened on Sep 29, 2026

• A failed RNDR or RDRAND read aborts the process; fall back to the OS CSPRNG for that input

  aws/aws-lc#3594 · Filter by author adalundhe opened on Sep 29, 2026

• CPU jitter entropy: the startup health test's samples are discarded and a fresh collector refilled, doubling a process's first-randomness cost

  aws/aws-lc#3593 · Filter by author adalundhe opened on Sep 29, 2026

• Tracking: packaging AWS-LC for Linux distributions

  aws/aws-lc#3565 · Filter by author JoshuaGWilliams1025 opened on Sep 24, 2026
  2

• control over defining _GNU_SOUCE in bcm.c

  aws/aws-lc#3564 · Filter by author divygobi opened on Sep 24, 2026

• tree_jitter_zeroize_drbg crashes on Windows when AWS-LC is built as a static library and linked into a third-party DLL

  aws/aws-lc#3540 · Filter by author benrushcc opened on Sep 17, 2026
  2

• Validate X.509 certificates before passing them to legacy stack.

  aws/aws-lc#3534 · Filter by author DemiMarie opened on Sep 16, 2026
  3

• Backport "Service Indicator: Add error call trampoline to avoid delocator issue" to fips-2025-09-12-lts?

  aws/aws-lc#3533 · Filter by author grahamc opened on Sep 16, 2026
  3

• performance: sha2 is slower than OpenSSL provided one

  aws/aws-lc#3531 · Filter by author oech3 opened on Sep 15, 2026
  3

• SSL_reset_early_data_reject does not clear out unreported bytes written

  aws/aws-lc#3522 · Filter by author tatsuhiro-t opened on Sep 14, 2026

• Name-constraint CN check rejects ordinary non-DNS common names since v1.71.0

  aws/aws-lc#3521 · Filter by author arpitjain099 opened on Sep 13, 2026

• Make any structure with potentially variable size opaque

  aws/aws-lc#3495 · Filter by author DemiMarie opened on Sep 7, 2026
  4

• CWE 214: ssl session secret scrubbing/zeroization hardening

  aws/aws-lc#3494 · Filter by author ravikanthreddy89 opened on Sep 7, 2026
  1

• The "SHA256"/"SHA384" cipher aliases fail to be killed/removed simultaneously in non-strict mode

  aws/aws-lc#3455 · Filter by author aydinmercan opened on Aug 31, 2026

• s2n-bignum: Curve25519 assembly assumes readable text segment

  aws/aws-lc#3408 · Filter by author amrfti opened on Aug 6, 2026
  4

  

• CI: Add Graviton5 to CodeBuild when available

  aws/aws-lc#3404 · Filter by author nebeid opened on Aug 4, 2026
  1

• AES-GCM seal/open scatter paths redundantly zero-initialize the full GCM128_CONTEXT on every call (~2.7% seal throughput at QUIC packet sizes)

  aws/aws-lc#3334 · Filter by author thedjpetersen opened on Jul 3, 2026
  1