2.6 KiB
Deprecated functions were removed from AES
The functions mbedtls_aes_encrypt() and mbedtls_aes_decrypt() were removed.
Please use mbedtls_internal_aes_encrypt() and mbedtls_internal_aes_decrypt()
respectively.
Deprecated functions were removed from bignum
The function mbedtls_mpi_is_prime() was removed. Please use
mbedtls_mpi_is_prime_ext() instead which additionally allows specifying the
number of Miller-Rabin rounds.
Deprecated functions were removed from cipher
The functions mbedtls_cipher_auth_encrypt() and
mbedtls_cipher_auth_decrypt() were removed. They were superseded by
mbedtls_cipher_auth_encrypt_ext() and mbedtls_cipher_auth_decrypt_ext()
respectively which additionally support key wrapping algorithms such as
NIST_KW.
Deprecated functions were removed from DRBGs
The functions mbedtls_ctr_drbg_update() and mbedtls_hmac_drbg_update()
were removed. They were superseded by mbedtls_ctr_drbg_update_ret() and
mbedtls_hmac_drbg_update_ret() respectively.
Deprecated functions were removed from ECDSA
The functions mbedtls_ecdsa_write_signature_det() and
mbedtls_ecdsa_sign_det() were removed. They were superseded by
mbedtls_ecdsa_write_signature() and mbedtls_ecdsa_sign_det_ext()
respectively.
Deprecated functions were removed from SSL
The functions mbedtls_ssl_conf_dh_param() and
mbedtls_ssl_get_max_frag_len() were removed. Please use
mbedtls_ssl_conf_dh_param_bin() or mbedtls_ssl_conf_dh_param_ctx() and
mbedtls_ssl_get_output_max_frag_len() instead.
Deprecated hex-encoded primes were removed from DHM
The macros MBEDTLS_DHM_RFC5114_MODP_2048_P, MBEDTLS_DHM_RFC5114_MODP_2048_G,
MBEDTLS_DHM_RFC3526_MODP_2048_P, MBEDTLS_DHM_RFC3526_MODP_2048_G,
MBEDTLS_DHM_RFC3526_MODP_3072_P, MBEDTLS_DHM_RFC3526_MODP_3072_G,
MBEDTLS_DHM_RFC3526_MODP_4096_P and MBEDTLS_DHM_RFC3526_MODP_4096_G were
removed. The hex-encoded primes from RFC 5114 are deprecated because their
derivation is not documented and therefore their usage constitutes a security
risk. They are removed from the library without replacement.
Deprecated net.h file was removed
The file include/mbedtls/net.h was removed because its only function was to
include mbedtls/net_sockets.h which now should be included directly.