AWS payment-cryptography documentation change
Summary
Added PQ TLS support documentation for AWS SDK for .NET and updated unsupported SDKs list
Security assessment
Documents post-quantum TLS (PQ TLS) implementation details for .NET SDK, which is a security feature for quantum-resistant cryptography, but doesn't address a specific vulnerability.
Diff
diff --git a/payment-cryptography/latest/userguide/pqtls-details.md b/payment-cryptography/latest/userguide/pqtls-details.md index 9a95671ad..b7af504b6 100644 --- a//payment-cryptography/latest/userguide/pqtls-details.md +++ b//payment-cryptography/latest/userguide/pqtls-details.md @@ -97,0 +98,4 @@ The AWS SDK for Ruby relies on system libssl/libcrypto. To use PQ TLS, use this +### AWS SDK for .NET + +On Linux, AWS SDK for .NET relies on system libssl/libcrypto. To use PQ TLS, use this SDK on an operating system distribution that has at least OpenSSL 3.5 installed. On Windows and MacOS, PQ TLS is available starting in [.NET 10](https://devblogs.microsoft.com/dotnet/post-quantum-cryptography-in-dotnet/) and [Windows 11](https://techcommunity.microsoft.com/blog/microsoft-security-blog/post-quantum-cryptography-apis-now-generally-available-on-microsoft-platforms/4469093). On MacOS, TLS 1.3 support (a prerequisite for PQ TLS) can be enabled by opting-in to Apple's Network.framework as described [here](https://learn.microsoft.com/en-us/dotnet/core/whats-new/dotnet-10/libraries#tls-13-for-macos-client). Assuming a minimum .NET version of 10, PQ TLS should then be enabled. + @@ -102 +106 @@ There are currently no plans to support the following language SDKs and tools: - * AWS SDK for .NET + * AWS SDK for SAP