mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-04-16 08:42:50 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Mention interfaces replaced by PSA drivers

Browse Source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2024-08-10 17:22:45 +02:00
parent a11687e543
commit ee7332104d
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog.d/announce-4.0-removals.txt
View File

@ -17,8 +17,8 @@ New deprecations
- TLS_DHE_*, i.e. cipher suites using finite-field Diffie-Hellman. - TLS_DHE_*, i.e. cipher suites using finite-field Diffie-Hellman.
(Ephemeral ECDH, i.e. TLS_ECDHE_*, is staying.) (Ephemeral ECDH, i.e. TLS_ECDHE_*, is staying.)
- TLS_*CBC*, i.e. all cipher suites using CBC. - TLS_*CBC*, i.e. all cipher suites using CBC.
* The following low-level interfaces are planned to be removed from the * The following low-level application interfaces are planned to be removed
public API in Mbed TLS 4.0: from the public API in Mbed TLS 4.0:
- Hashes: hkdf.h, md5.h, ripemd160.h, sha1.h, sha3.h, sha256.h, sha512.h; - Hashes: hkdf.h, md5.h, ripemd160.h, sha1.h, sha3.h, sha256.h, sha512.h;
- Pseudorandom generation: ctr_drbg.h, hmac_drbg.h; - Pseudorandom generation: ctr_drbg.h, hmac_drbg.h;
- Ciphers and modes: aes.h, aria.h, camellia.h, chacha20.h, chachapoly.h, - Ciphers and modes: aes.h, aria.h, camellia.h, chacha20.h, chachapoly.h,
@ -31,3 +31,9 @@ New deprecations
Mbed TLS 2.28.0) and, where relevant, PK. Mbed TLS 2.28.0) and, where relevant, PK.
For guidance on migrating application code to the PSA API, please consult For guidance on migrating application code to the PSA API, please consult
the PSA transition guide (docs/psa-transition.md). the PSA transition guide (docs/psa-transition.md).
* The following integration interfaces are planned to be removed
in Mbed TLS 4.0:
- MBEDTLS_xxx_ALT replacement of cryptographic modules and functions.
Use PSA transparent drivers instead.
- MBEDTLS_PK_RSA_ALT and MBEDTLS_PSA_CRYPTO_SE_C.
Use PSA opaque drivers instead.