Documentation Archive Developer
Search

Security Changes

Security

CMSDecoder.h
Added CMSDecoderCopySignerSigningTime()
Added CMSDecoderCopySignerTimestamp()
Added CMSDecoderCopySignerTimestampCertificates()
CMSEncoder.h
Added CMSEncoderCopySignerTimestamp()
CSCommon.h
Added errSecCSBadBundleFormat
Added errSecCSDBAccess
Added errSecCSDBDenied
Added errSecCSDbCorrupt
Added errSecCSFileHardQuarantined
Added errSecCSNoMatches
Added errSecCSOutdated
Added kSecCFErrorPath
Added kSecCSEnforceRevocationChecks
CipherSuite.h
Added TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA
Added TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
Added TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
Added TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
Added TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
Added TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Added TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Added TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
Added TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
Added TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Added TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA
Added TLS_DH_DSS_WITH_AES_128_CBC_SHA256
Added TLS_DH_DSS_WITH_AES_128_GCM_SHA256
Added TLS_DH_DSS_WITH_AES_256_CBC_SHA256
Added TLS_DH_DSS_WITH_AES_256_GCM_SHA384
Added TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA
Added TLS_DH_RSA_WITH_AES_128_CBC_SHA256
Added TLS_DH_RSA_WITH_AES_128_GCM_SHA256
Added TLS_DH_RSA_WITH_AES_256_CBC_SHA256
Added TLS_DH_RSA_WITH_AES_256_GCM_SHA384
Added TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
Added TLS_DH_anon_WITH_AES_128_CBC_SHA256
Added TLS_DH_anon_WITH_AES_128_GCM_SHA256
Added TLS_DH_anon_WITH_AES_256_CBC_SHA256
Added TLS_DH_anon_WITH_AES_256_GCM_SHA384
Added TLS_DH_anon_WITH_RC4_128_MD5
Added TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
Added TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
Added TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
Added TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
Added TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
Added TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
Added TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
Added TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Added TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256
Added TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
Added TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384
Added TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384
Added TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256
Added TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
Added TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384
Added TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384
Added TLS_EMPTY_RENEGOTIATION_INFO_SCSV
Added TLS_NULL_WITH_NULL_NULL
Added TLS_RSA_WITH_3DES_EDE_CBC_SHA
Added TLS_RSA_WITH_AES_128_CBC_SHA256
Added TLS_RSA_WITH_AES_128_GCM_SHA256
Added TLS_RSA_WITH_AES_256_CBC_SHA256
Added TLS_RSA_WITH_AES_256_GCM_SHA384
Added TLS_RSA_WITH_NULL_MD5
Added TLS_RSA_WITH_NULL_SHA
Added TLS_RSA_WITH_NULL_SHA256
Added TLS_RSA_WITH_RC4_128_MD5
Added TLS_RSA_WITH_RC4_128_SHA
SecAsn1Coder.h
Added SecAsn1OidCompare()
Modified SecAsn1EncodeItem()
Declaration
FromOSStatus SecAsn1EncodeItem ( SecAsn1CoderRef coder, const void *src, const SecAsn1Template *templates, CSSM_DATA *dest);
ToOSStatus SecAsn1EncodeItem ( SecAsn1CoderRef coder, const void *src, const SecAsn1Template *templates, SecAsn1Item *dest);

Modified SecAsn1AllocItem()
Declaration
FromOSStatus SecAsn1AllocItem ( SecAsn1CoderRef coder, CSSM_DATA *item, size_t len);
ToOSStatus SecAsn1AllocItem ( SecAsn1CoderRef coder, SecAsn1Item *item, size_t len);

Modified SecAsn1AllocCopyItem()
Declaration
FromOSStatus SecAsn1AllocCopyItem ( SecAsn1CoderRef coder, const CSSM_DATA *src, CSSM_DATA *dest);
ToOSStatus SecAsn1AllocCopyItem ( SecAsn1CoderRef coder, const SecAsn1Item *src, SecAsn1Item *dest);

Modified SecAsn1DecodeData()
Declaration
FromOSStatus SecAsn1DecodeData ( SecAsn1CoderRef coder, const CSSM_DATA *src, const SecAsn1Template *templ, void *dest);
ToOSStatus SecAsn1DecodeData ( SecAsn1CoderRef coder, const SecAsn1Item *src, const SecAsn1Template *templ, void *dest);

Modified SecAsn1AllocCopy()
Declaration
FromOSStatus SecAsn1AllocCopy ( SecAsn1CoderRef coder, const void *src, size_t len, CSSM_DATA *dest);
ToOSStatus SecAsn1AllocCopy ( SecAsn1CoderRef coder, const void *src, size_t len, SecAsn1Item *dest);

SecAsn1Types.h
Added SecAsn1AlgId
Added SecAsn1Item
Added SecAsn1Oid
Added SecAsn1PubKeyInfo
SecBase.h
Added errSecExtendedKeyUsageNotCritical
Added errSecInDarkWake
Added errSecMissingRequiredExtension
Added errSecSigningTimeMissing
Added errSecTimestampAddInfoNotAvailable
Added errSecTimestampBadAlg
Added errSecTimestampBadDataFormat
Added errSecTimestampBadRequest
Added errSecTimestampInvalid
Added errSecTimestampMissing
Added errSecTimestampNotTrusted
Added errSecTimestampRejection
Added errSecTimestampRevocationNotification
Added errSecTimestampRevocationWarning
Added errSecTimestampServiceNotAvailable
Added errSecTimestampSystemFailure
Added errSecTimestampTimeNotAvailable
Added errSecTimestampUnacceptedExtension
Added errSecTimestampUnacceptedPolicy
Added errSecTimestampWaiting
SecCertificateOIDs.h
Added kSecOIDAPPLE_EXTENSION_APPLEID_INTERMEDIATE
Added kSecOIDSRVName
SecCode.h
Added kSecCodeInfoEntitlementsDict
Added kSecCodeInfoTimestamp
Added kSecCodeSignerFlags
SecCustomTransform.h
Added SecTransformCustomGetAttribute()
Modified SecTranformCustomGetAttribute()
Deprecation
Fromnone
ToOS X 10.8

SecEncodeTransform.h
Added kSecLineLength64
Added kSecLineLength76
SecEncryptTransform.h
Added kSecOAEPEncodingParametersAttributeName
Added kSecOAEPMGF1DigestAlgorithmAttributeName
Added kSecOAEPMessageLengthAttributeName
Added kSecPaddingOAEPKey
SecPolicy.h
Added kSecPolicyAppleTimeStamping
SecStaticCode.h
Added kSecCSCheckNestedCode
SecTask.h
Added SecTaskCreateFromSelf()
SecureTransport.h
Removed SSLGetPeerCertificates()
Removed SSLGetTrustedRoots()
Removed errSSLServerAuthCompleted
Added SSLConnectionType
Added SSLContextGetTypeID()
Added SSLCreateContext()
Added SSLGetDatagramWriteSize()
Added SSLGetMaxDatagramRecordSize()
Added SSLGetProtocolVersionMax()
Added SSLGetProtocolVersionMin()
Added SSLProtocolSide
Added SSLSetDatagramHelloCookie()
Added SSLSetMaxDatagramRecordSize()
Added SSLSetProtocolVersionMax()
Added SSLSetProtocolVersionMin()
Added #def errSSLClientAuthCompleted
Added errSSLPeerAuthCompleted
Added #def errSSLServerAuthCompleted
Added kDTLSProtocol1
Added kSSLClientSide
Added kSSLDatagramType
Added kSSLServerSide
Added kSSLSessionOptionBreakOnClientAuth
Added kSSLStreamType
Added kTLSProtocol11
Added kTLSProtocol12
Modified SSLSetIOFuncs()
Declaration
FromOSStatus SSLSetIOFuncs ( SSLContextRef context, SSLReadFunc read, SSLWriteFunc write);
ToOSStatus SSLSetIOFuncs ( SSLContextRef context, SSLReadFunc readFunc, SSLWriteFunc writeFunc);

Modified SSLSetProtocolVersion()
Deprecation
Fromnone
ToOS X 10.8

Modified SSLGetProtocolVersion()
Deprecation
Fromnone
ToOS X 10.8

cssmapple.h
Added CSSMERR_AC_IN_DARK_WAKE
Added CSSMERR_APPLETP_EXT_KEYUSAGE_NOT_CRITICAL
Added CSSMERR_CL_IN_DARK_WAKE
Added CSSMERR_CSP_IN_DARK_WAKE
Added CSSMERR_CSSM_IN_DARK_WAKE
Added CSSMERR_DL_IN_DARK_WAKE
Added CSSMERR_TP_IN_DARK_WAKE
Added CSSM_ERRCODE_IN_DARK_WAKE
oidsalg.h
Added CSSMOID_APPLE_TP_TIMESTAMPING
oidsattr.h
Added CSSMOID_PKCS9_Id_Ct_TSTInfo
Added CSSMOID_PKCS9_TimeStampToken
oidsbase.h
Added #def APPLE_EXTENSION_APPLEID_INTERMEDIATE
Added #def APPLE_EXTENSION_APPLEID_INTERMEDIATE_LENGTH
oidscert.h
Added CSSMOID_APPLE_EXTENSION_APPLEID_INTERMEDIATE