Security-59754.80.3.tar.gz

[apple/security.git] / OSX / sec / Security / SecServerEncryptionSupport.h

diff --git a/OSX/sec/Security/SecServerEncryptionSupport.h b/OSX/sec/Security/SecServerEncryptionSupport.h
index 54dedc5abcad3357032b51ffb3805c5b949761d9..eec06daa8c58b82f5caed3940d52107cb5f3d3a2 100644 (file)
--- a/OSX/sec/Security/SecServerEncryptionSupport.h
+++ b/OSX/sec/Security/SecServerEncryptionSupport.h
@@ -11,17 +11,24 @@
 #include <Security/SecKey.h>
 #include <Security/SecTrust.h>
 
+// Deprecating for security motives (28715251).
+// Compatible implementation still available in SecKey with
+// kSecKeyAlgorithmECIESEncryptionStandardX963SHA256AESGCM but should also be
+// deprecated for the same reason (28496795).
+
 CFDataRef SecCopyEncryptedToServer(SecTrustRef trustedEvaluation, CFDataRef dataToEncrypt, CFErrorRef *error)
-    __OSX_AVAILABLE_STARTING(__MAC_10_12, __IPHONE_8_0);
+    __OSX_AVAILABLE_BUT_DEPRECATED_MSG(__MAC_10_12, __MAC_10_13, __IPHONE_8_0, __IPHONE_11_0, "Migrate to SecKeyCreateEncryptedData with kSecKeyAlgorithmECIESEncryptionStandardVariableIV* or Security Foundation SFIESOperation for improved security (encryption is not compatible)");
 
 //
 // For testing
 //
 /* Caution: These functions take an iOS SecKeyRef. Careful use is required on OS X. */
 CFDataRef SecCopyDecryptedForServer(SecKeyRef serverFullKey, CFDataRef encryptedData, CFErrorRef* error)
-    __OSX_AVAILABLE_STARTING(__MAC_NA, __IPHONE_8_0);
+    API_DEPRECATED("Migrate to SecKeyCreateEncryptedData with kSecKeyAlgorithmECIESEncryptionStandardVariableIV* or Security Foundation SFIESOperation for improved security (encryption is not compatible)", macos(10.12,10.13), ios(8.0,11.0));
+// SFIESCiphertext
+
 
 CFDataRef SecCopyEncryptedToServerKey(SecKeyRef publicKey, CFDataRef dataToEncrypt, CFErrorRef *error)
-    __OSX_AVAILABLE_STARTING(__MAC_10_12, __IPHONE_8_0);
+    __OSX_AVAILABLE_BUT_DEPRECATED_MSG(__MAC_10_12, __MAC_10_13, __IPHONE_8_0, __IPHONE_11_0,"Migrate to SecKeyCreateEncryptedData with kSecKeyAlgorithmECIESEncryptionStandardVariableIV* or Security Foundation SFIESOperation for improved security (encryption is not compatible)");
 
 #endif