[codewiz]

Is BoringSSL affected?

[ccktlmazeltov]

or LibreSSL?

[notaplumber]

No. LibreSSL fork predates the issue, and has its own TLS 1.3 implementation. I'd expect the situation to be similar with Google's BoringSSL, but I don't how closely they track OpenSSL, if at all.