logoalt Hacker News

selfmodruntimelast Tuesday at 10:19 PM1 replyview on HN

There are little other options. `Ring` is not for production use. WolfSSL lags behind in features a bit. BoringSSL and AWS-LC are the best we have.


Replies

thaynelast Wednesday at 3:33 AM

BoringSSL has an unstable API, and Google specifically recommends against using it[1].

AWS-LC is ok, but afaict there aren't really any pre-built binaries available, and you need to compile it yourself, and is a little difficult to use if you aren't using c/c++ or rust. (The same is largely true of boringssl).

[1]: https://github.com/google/boringssl?tab=readme-ov-file#borin...