I would wager this is a big reason:
> This crate provides bindings to AWS-LC-FIPS 2.x, which has completed FIPS validation testing by an accredited lab and has been submitted to NIST for certification.
If you are in a regulated environment, that’s reason enough.
Another nice reason is that AWS-LC includes rewrites and optimizations that make it faster than alternatives, especially on Graviton.
Are there benches on this vs say OpenSSL on Graviton and Apple M chips? I would be curious how big the difference is vs whatever NEON optimizations are in OpenSSL (and friends) already.
Exactly, see the "Motivation" section of the README
Re:AWS Libcrypto for Rust
by JoshTriplett on Friday January 12, 2024 @10:07PM
(#38976968)
One reason: you can use this as a backend to rustls, and then you no longer have anything under the OpenSSL license in your dependencies, which improves the license compatibility of your project.
Re:AWS Libcrypto for Rust
by briansmith on Friday January 12, 2024 @11:22PM
(#38977309)
Again, this is just a temporary situation, and a matter of burning down a list of small tasks. Not that the OpenSSL license issue is a big deal for most anyway. Feel free to help; see this issue filed by Josh Triplett: https://github.com/briansmith/ring/issues/1318#issuecomment-...
Re:AWS Libcrypto for Rust
by JoshTriplett on Saturday January 13, 2024 @12:36AM
(#38977615)
Yeah, I realize, and I am looking forward to having multiple options to choose from that all have the same license compatibility. It's nice that there's a short-term solution that's available for people who need to ship things soon, and it's nice that there's a longstanding library (ring) that'll long-term will be capable of providing a compatible solution as well.
Re:AWS Libcrypto for Rust
by littlestymaar on Saturday January 13, 2024 @03:36AM
(#38978211)
> see this issue filed by Josh Triplett
Check who you are replying to ;)
Why should I use AWS-LC over the myriad cryptography libraries out there already?