cargo / aws-lc-sys

aws-lc-sys

cargo

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.

1 audit github.com/aws/aws-lc-rs

Audits

PE Patrick Elsen 2026-05-28

aws-lc-sys@0.41.0 · 1 finding

aws-lc-sys 0.41.0 is the FFI binding crate for AWS-LC, vendoring the full C crypto library and a substantial build system. The build makes no network requests, compiles only from vendored sources, and writes only to OUT_DIR under normal invocation. 26 prebuilt NASM objects for Windows x86_64 match VCS copies byte-for-byte. One low-severity finding: a developer-only mode writes generated bindings to the source tree. The vendored C crypto and 12,500 auto-generated unsafe blocks are out of scope.

binaries-provenancebinaries-reproduciblebinaries-safebuild-exec-deterministicbuild-exec-minimalbuild-exec-no-networkbuild-exec-no-write-outbuild-exec-safecrypto-safeenvironment-safeexec-safefilesystem-safehas-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignuses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe