Amazon yakaunza aws-lc-rs, a cryptographic library yakagadzirirwa kushandiswa muRust application uye inoenderana neiyo API level neRust ring library. Iyo kodhi yeprojekiti yakagoverwa pasi peApache 2.0 uye ISC marezinesi. Raibhurari inotsigira basa paLinux (x86, x86-64, aarch64) uye macOS (x86-64) mapuratifomu.
Kuitwa kwecryptographic mashandiro muaws-lc-rs kwakavakirwa paAWS-LC raibhurari (AWS libcrypto), yakanyorwa muC++ uye, zvakare, zvichibva pane kodhi kubva kuBoringSSL chirongwa (forogo yeOpenSSL inotsigirwa neGoogle). Pamusoro pezvo, maviri akadzika-level crate mapakeji anotsanangurwa: aws-lc-sys (anogadzirwa otomatiki-level wrappers pamusoro peAWS-LC) uye aws-lc-fips-sys (yakaderera-level wrappers yakavakirwa paFFI (Foreign Function Interface) , kuburitsa iyo AWS-LC API.
Iyo AWS-LC raibhurari inosanganisira zvakasimbiswa zviri pamutemo kuita kweSHA-2, HMAC, AES-GCM, AES-KWP, HKDF, ECDH, uye ECDSA algorithms inosangana nezvinodiwa zvekriptographic system inogona kushandiswa nemasangano ehurumende muUnited States uye. Kanadha. Kugadzirwa kwechimiro chemutauro weRust kwakafambiswa nekudiwa kweFIPS-inoenderana crypto library inogona kushandiswa mumapurojekiti eRust. Muraibhurari yeaws-lc-rs, Amazon yakafunga kubatanidza iyo yakajairika uye yakapararira Ring API pakati peRust programmers uye yakasimbiswa mashandisirwo ealgorithms kubva kuAWS-LC raibhurari inoteedzera zvinodiwa neFIPS.
Kushandisa raibhurari yeAWS-LC sehwaro zvakare kwakaita kuti zvikwanise kushandisa ese chaiwo magadzirirwo akagadzirwa neAmazon muaws-lc-rs. Semuyenzaniso, AWS-LC inopa zvakasiyana-siyana zveChaCha20-Poly1305 uye NIST P-256 algorithms ayo akaparadzana akagadziridzwa kune maARM processors, pamwe neakakosha optimizations yex86 masisitimu anokurumidza kugadziridzwa kweECDSA siginecha yedhijitari. Paunenge uchiyedza iyo TLS 1.2 uye 1.3 maprotocol, iyo aws-lc-rs raibhurari yakapfuura zvakanyanya rustls pasuru, ichiratidza kuderedzwa kwekubatanidza nguva yekuseta uye kuwedzera kwekubuda (kupfuura zvakapetwa kaviri mubvunzo dzeECDSA).
Source: opennet.ru