How to install aws-lc (aarch64)

AWS-LC cryptographic libraries (OpenSSL-compatible) installed under isolated path

License: Apache-2.0 https://github.com/aws/aws-lc

Install

sudo yum -y install https://extras.getpagespeed.com/release-latest.rpm
sudo amazon-linux-extras install epel
sudo yum -y install aws-lc

Description

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team. This package installs libraries and headers in a dedicated directory, avoiding conflicts with the system OpenSSL.

Architecture

Optimized for aarch64 (ARM64) architecture. It can be used on AWS Graviton instances, as well as Raspberry Pi 4 and newer.

RPMs

Package	Size	Changelog
aws-lc-5.0.0-1.amzn2.aarch64	118 KiB	Danila Vershinin (2026-05-30) - Introduced new versioning policy for better clarity. · - Enhanced EVPTest with more extensive key import tests. · - Improved security by zeroing stack secrets before return. · - Fixed various issues in PKCS7 and OCSP error handling. · - Enabled Windows 7 compatibility for MinGW builds. · - Added support for ML-DSA as a TLS 1.3 signature scheme. · - Decoupled FIPS version from AWS-LC version for better management.
aws-lc-3.3.0-1.amzn2.aarch64	108 KiB	Danila Vershinin (2026-03-20) - Prepare for version 3.3.0 release. · - Fix CRL distribution point scope check logic.
aws-lc-3.2.0-1.amzn2.aarch64	102 KiB	Danila Vershinin (2026-03-03) - Added support for P521 in client Hello signature algorithms. · - Fixed reported bugs for improved stability. · - Updated to version 3.2.0 with various enhancements. · - Replaced OPENSSL_memcmp with CRYPTO_memcmp for tag verification.