Issues

• s2n-tls is unnecessarily pessimistic with small record sizing

  priority/lowrecord-protocol-refactorsize/medium
  aws/s2n-tls#6059 · Filter by author jmayclin opened on Aug 20, 2026

• original (first) client hello not available on HelloRetryRequest

  priority/lowsize/mediumtype/telemetry
  aws/s2n-tls#5961 · Filter by author Mark-Simulacrum opened on Jun 24, 2026
  2

  

• Two RFC compliance observations: record version not validated pre-negotiation, unknown ContentType silently discarded

  priority/lowsize/small
  aws/s2n-tls#5917 · Filter by author afldl opened on Jun 10, 2026
  1

  

• loading large number of certificates is slow

  priority/lowsize/medium
  Bug

  aws/s2n-tls#5731 · Filter by author jmayclin opened on Feb 13, 2026
  5

• Reduce runtime of slowest unit tests

  priority/lowsize/mediumtype/optimizationtype/performancetype/test
  aws/s2n-tls#5704 · Filter by author alexw91 opened on Jan 15, 2026
  2

• Unit Tests for "dummy" EncryptedClientHello

  priority/lowsize/small
  aws/s2n-tls#5697 · Filter by author alexw91 opened on Jan 12, 2026
  3

• ci: Consolidate kTLS jobs

  priority/lowsize/smalltype/ci
  aws/s2n-tls#5670 · Filter by author dougch opened on Dec 13, 2025
  

• invalid support group state: error classification

  priority/lowsize/small
  Bug

  aws/s2n-tls#5655 · Filter by author jmayclin opened on Dec 5, 2025
  5

• Provide libcrypto override variable

  priority/lowsize/medium
  aws/s2n-tls#5577 · Filter by author goatgoose opened on Oct 23, 2025

• Update duvet scripts to use a duvet config

  priority/lowsize/medium
  aws/s2n-tls#5574 · Filter by author goatgoose opened on Oct 23, 2025

• CI: Remove libcrypto install directories from PATH before updating CMake

  priority/lowsize/smalltype/cmake
  aws/s2n-tls#5573 · Filter by author goatgoose opened on Oct 23, 2025
  2

• aws-kms-tls-auth: more efficient KMS usage

  priority/lowsize/large
  Feature

  aws/s2n-tls#5448 · Filter by author jmayclin opened on Jul 30, 2025
  1

• Audit proofs for counterproductive assertions

  priority/lowsize/large
  aws/s2n-tls#5429 · Filter by author goatgoose opened on Jul 17, 2025

• Add test to ensure OCSP stapling is optional

  priority/lowsize/small
  aws/s2n-tls#5425 · Filter by author goatgoose opened on Jul 16, 2025

• Validate s2n_kem_is_available()

  priority/lowsize/small
  aws/s2n-tls#5377 · Filter by author johubertj opened on Jul 1, 2025

• document config/connection "golden path"

  priority/lowsize/small
  aws/s2n-tls#5325 · Filter by author jmayclin opened on May 21, 2025

• ffdhe client kx performance

  priority/lowsize/medium
  aws/s2n-tls#5320 · Filter by author jmayclin opened on May 21, 2025

• Test external rust bindings build with additional libcryptos

  priority/lowrustsize/medium
  aws/s2n-tls#5248 · Filter by author goatgoose opened on Apr 9, 2025
  1

• openssl-3.0-fips does not support RSA 1024 certs

  priority/lowsize/medium
  aws/s2n-tls#5200 · Filter by author lrstewart opened on Mar 18, 2025

• openssl-3.0-fips does not support chachapoly

  priority/lowsize/medium
  aws/s2n-tls#5199 · Filter by author lrstewart opened on Mar 18, 2025

• Add early AWS-LC version to CI

  priority/lowsize/medium
  aws/s2n-tls#5198 · Filter by author goatgoose opened on Mar 18, 2025
  2

• chore(ci): Refactor GHA rust toolchain install

  priority/lowsize/small
  aws/s2n-tls#5172 · Filter by author dougch opened on Mar 7, 2025

• request: benchmark results for PQ with resumption

  priority/lowsize/small
  aws/s2n-tls#5113 · Filter by author jmayclin opened on Feb 13, 2025

• Update KMS PQ integration test to assert ML-KEM

  good first issuepriority/lowpriority/trackingsize/xsmall
  aws/s2n-tls#5086 · Filter by author goatgoose opened on Feb 5, 2025
  1

• generate coverage report for fuzz target functions

  priority/lowsize/large
  aws/s2n-tls#4966 · Filter by author jouho opened on Dec 10, 2024
  1