{"id":5607,"date":"2015-08-19T07:00:02","date_gmt":"2015-08-19T15:00:02","guid":{"rendered":"http:\/\/formtek.com\/blog\/?p=5607"},"modified":"2015-07-02T06:23:45","modified_gmt":"2015-07-02T14:23:45","slug":"amazon-tls-amazon-offers-simpler-more-secure-open-source-replacement-to-openssl","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/amazon-tls-amazon-offers-simpler-more-secure-open-source-replacement-to-openssl\/","title":{"rendered":"Amazon TLS: Amazon Offers Simpler More-Secure Open-Source Replacement to OpenSSL"},"content":{"rendered":"

Amazon Web Services (AWS) has released an alternative cryptographic module for transmitting data across the Internet. \u00a0They’re calling it “s2n<\/a>“, short for “signal-to-noise”. \u00a0s2n is an implementation of the Transport Layer Security (TLS) and could be a successor to OpenSSL (Open Secure Sockets Layer).<\/p>\n

Last year a hack called Heartbleed <\/a>exploited a critical vulnerability of OpenSSL, a cryptographic library used to secure communication between users and web services. \u00a0OpenSSL has been used<\/a> by Internet businesses like Google, Facebook, Instagram, Yahoo, Twitter and Amazon.<\/p>\n

A key design criteria for s2n was that the code be short to make it comprehensible and auditable. \u00a0At only 6000 lines of code, s2n is considerable shorter than the 70,000-line implementation of TLS by OpenSSL.<\/p>\n

 <\/p>\n

Stephen Schmidt<\/a>, AWS chief security officer , said that<\/a> “naturally with each line of code there is a risk of error, but the large size of OpenSSL also presents challenges for code audits, security reviews, performance, and efficiency. \u00a0s2n is a library that has been designed to be small, fast, with simplicity as a priority. s2n avoids implementing rarely used options and extensions, and today is just more than 6,000 lines of code. \u00a0As a result of this, we\u2019ve found that it is easier to review s2n; we have already completed three external security evaluations and penetration tests on s2n, a practice we will be continuing.\u00a0TLS is a standardized protocol and s2n already implements the functionality that we use, so this won’t require any changes in your own applications and everything will remain interoperable.”<\/p>\n

Daniel Heacock<\/a>, a consultant with c3\/consulting, commented to TechTarget <\/a>that “in the wake of all the security breaches over the last year, it makes sense that Amazon wants to take some ownership of the open-source security technology that the cloud so heavily relies upon. \u00a0I’m really not sure about adoption, though, and I think it remains to be seen.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Amazon Web Services (AWS) has released an alternative cryptographic module for transmitting data across the Internet. \u00a0They’re calling it “s2n“, short for “signal-to-noise”. \u00a0s2n is an implementation of the Transport Layer Security (TLS) and could be a successor to OpenSSL…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-5607","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=5607"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/5607\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=5607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=5607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=5607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}