Deprecate the low level AES functions
authorMatt Caswell <matt@openssl.org>
Thu, 5 Dec 2019 17:09:49 +0000 (17:09 +0000)
committerMatt Caswell <matt@openssl.org>
Mon, 6 Jan 2020 15:09:57 +0000 (15:09 +0000)
commitc72fa2554f5adc03bcc3c6e4ebcd1929e70efed4
tree181157c82b41fb40f46ada0f30d33468df50aefb
parent2852c672a8ecb02a74d0adeeb93c661b7d2d7511
Deprecate the low level AES functions

Use of the low level AES functions has been informally discouraged for a
long time. We now formally deprecate them.

Applications should instead use the EVP APIs, e.g. EVP_EncryptInit_ex,
EVP_EncryptUpdate, EVP_EncryptFinal_ex, and the equivalently named decrypt
functions.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/10580)
36 files changed:
CHANGES
Configure
apps/speed.c
crypto/aes/aes_cbc.c
crypto/aes/aes_cfb.c
crypto/aes/aes_core.c
crypto/aes/aes_ecb.c
crypto/aes/aes_ige.c
crypto/aes/aes_misc.c
crypto/aes/aes_ofb.c
crypto/aes/aes_wrap.c
crypto/evp/e_aes.c
crypto/evp/e_aes_cbc_hmac_sha1.c
crypto/evp/e_aes_cbc_hmac_sha256.c
engines/e_padlock.c
include/internal/deprecated.h [new file with mode: 0644]
include/openssl/aes.h
include/openssl/macros.h
providers/implementations/ciphers/cipher_aes.c
providers/implementations/ciphers/cipher_aes_ccm.c
providers/implementations/ciphers/cipher_aes_ccm_hw.c
providers/implementations/ciphers/cipher_aes_gcm.c
providers/implementations/ciphers/cipher_aes_gcm_hw.c
providers/implementations/ciphers/cipher_aes_hw.c
providers/implementations/ciphers/cipher_aes_ocb.c
providers/implementations/ciphers/cipher_aes_ocb_hw.c
providers/implementations/ciphers/cipher_aes_siv.c
providers/implementations/ciphers/cipher_aes_siv_hw.c
providers/implementations/ciphers/cipher_aes_wrp.c
providers/implementations/ciphers/cipher_aes_xts.c
providers/implementations/ciphers/cipher_aes_xts_fips.c
providers/implementations/ciphers/cipher_aes_xts_hw.c
test/build.info
test/modes_internal_test.c
test/recipes/90-test_ige.t
util/libcrypto.num