Security iOS 12.4 to 13.0 API Differences

	Availability	Deprecation Message
From	Available	none
To	Deprecated	Use an accessibility level that provides some user protection, such as kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly

SecProtocolMetadata.h

Added sec_protocol_metadata_get_negotiated_tls_protocol_version()

Added sec_protocol_metadata_get_negotiated_tls_ciphersuite()

Added sec_protocol_metadata_access_pre_shared_keys()

Added sec_protocol_metadata_get_server_name()

Modified sec_protocol_metadata_get_negotiated_protocol_version()

	Availability	Replacement
From	Available	none
To	Deprecated	sec_protocol_metadata_get_negotiated_tls_protocol_version

Modified sec_protocol_metadata_get_negotiated_ciphersuite()

	Availability	Replacement
From	Available	none
To	Deprecated	sec_protocol_metadata_get_negotiated_tls_ciphersuite

SecProtocolOptions.h

Added sec_protocol_options_are_equal()

Added sec_protocol_options_append_tls_ciphersuite()

Added sec_protocol_options_append_tls_ciphersuite_group()

Added sec_protocol_options_set_min_tls_protocol_version()

Added sec_protocol_options_get_default_min_tls_protocol_version()

Added sec_protocol_options_get_default_min_dtls_protocol_version()

Added sec_protocol_options_set_max_tls_protocol_version()

Added sec_protocol_options_get_default_max_tls_protocol_version()

Added sec_protocol_options_get_default_max_dtls_protocol_version()

Added sec_protocol_options_set_tls_pre_shared_key_identity_hint()

Added sec_protocol_pre_shared_key_selection_complete_t

Added sec_protocol_pre_shared_key_selection_t

Added sec_protocol_options_set_pre_shared_key_selection_block()

Modified sec_protocol_options_add_tls_ciphersuite()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	Use sec_protocol_options_append_tls_ciphersuite

Modified sec_protocol_options_add_tls_ciphersuite_group()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	Use sec_protocol_options_append_tls_ciphersuite_group

Modified sec_protocol_options_set_tls_min_version()

	Availability	Replacement
From	Available	none
To	Deprecated	sec_protocol_options_set_min_tls_protocol_version

Modified sec_protocol_options_set_tls_max_version()

	Availability	Replacement
From	Available	none
To	Deprecated	sec_protocol_options_set_max_tls_protocol_version

Modified sec_protocol_options_set_tls_diffie_hellman_parameters()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	DHE ciphersuites are no longer supported

Modified sec_protocol_challenge_complete_t

	Declaration
From	typedef void (^sec_protocol_challenge_complete_t)(sec_identity_t identity)
To	typedef void (^sec_protocol_challenge_complete_t)(sec_identity_t identity)

SecProtocolTypes.h

Added tls_protocol_version_t

Added tls_protocol_version_TLSv10

Added tls_protocol_version_TLSv11

Added tls_protocol_version_TLSv12

Added tls_protocol_version_TLSv13

Added tls_protocol_version_DTLSv10

Added tls_protocol_version_DTLSv12

Added tls_ciphersuite_t

Added tls_ciphersuite_RSA_WITH_3DES_EDE_CBC_SHA

Added tls_ciphersuite_RSA_WITH_AES_128_CBC_SHA

Added tls_ciphersuite_RSA_WITH_AES_256_CBC_SHA

Added tls_ciphersuite_RSA_WITH_AES_128_GCM_SHA256

Added tls_ciphersuite_RSA_WITH_AES_256_GCM_SHA384

Added tls_ciphersuite_RSA_WITH_AES_128_CBC_SHA256

Added tls_ciphersuite_RSA_WITH_AES_256_CBC_SHA256

Added tls_ciphersuite_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

Added tls_ciphersuite_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_128_CBC_SHA

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_256_CBC_SHA

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_128_CBC_SHA256

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_256_CBC_SHA384

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

Added tls_ciphersuite_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_128_GCM_SHA256

Added tls_ciphersuite_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Added tls_ciphersuite_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

Added tls_ciphersuite_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

Added tls_ciphersuite_AES_128_GCM_SHA256

Added tls_ciphersuite_AES_256_GCM_SHA384

Added tls_ciphersuite_CHACHA20_POLY1305_SHA256

Added tls_ciphersuite_group_t

Added tls_ciphersuite_group_default

Added tls_ciphersuite_group_compatibility

Added tls_ciphersuite_group_legacy

Added tls_ciphersuite_group_ats

Added tls_ciphersuite_group_ats_compatibility

Added kDTLSProtocol12

Added sec_identity_access_certificates()

Modified kSSLProtocolUnknown

	Availability
From	Available
To	Deprecated

Modified kTLSProtocol1

	Availability
From	Available
To	Deprecated

Modified kTLSProtocol11

	Availability
From	Available
To	Deprecated

Modified kTLSProtocol12

	Availability
From	Available
To	Deprecated

Modified kDTLSProtocol1

	Availability
From	Available
To	Deprecated

Modified kTLSProtocol13

	Availability
From	Available
To	Deprecated

Modified kTLSProtocolMaxSupported

	Availability
From	Available
To	Deprecated

Modified kSSLProtocol2

	Availability
From	Available
To	Deprecated

Modified kSSLProtocol3

	Availability
From	Available
To	Deprecated

Modified kSSLProtocol3Only

	Availability
From	Available
To	Deprecated

Modified kTLSProtocol1Only

	Availability
From	Available
To	Deprecated

Modified kSSLProtocolAll

	Availability
From	Available
To	Deprecated

Modified sec_identity_copy_ref()

	Declaration
From	SecIdentityRef sec_identity_copy_ref(sec_identity_t identity)
To	SecIdentityRef sec_identity_copy_ref(sec_identity_t identity)

Modified sec_identity_copy_certificates_ref()

	Declaration
From	CFArrayRef sec_identity_copy_certificates_ref(sec_identity_t identity)
To	CFArrayRef sec_identity_copy_certificates_ref(sec_identity_t identity)

SecTrust.h

Added SecTrustWithErrorCallback

Added SecTrustEvaluateAsyncWithError()

Modified SecTrustSetAnchorCertificates()

	Declaration
From	OSStatus SecTrustSetAnchorCertificates(SecTrustRef trust, CFArrayRef anchorCertificates)
To	OSStatus SecTrustSetAnchorCertificates(SecTrustRef trust, CFArrayRef anchorCertificates)

Modified SecTrustEvaluateAsync()

	Availability	Replacement
From	Available	none
To	Deprecated	SecTrustEvaluateAsyncWithError

SecureTransport.h

Modified kSSLSessionOptionBreakOnServerAuth

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionBreakOnCertRequested

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionBreakOnClientAuth

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionFalseStart

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionSendOneByteRecord

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionAllowServerIdentityChange

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionFallback

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionBreakOnClientHello

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionAllowRenegotiation

	Availability
From	Available
To	Deprecated

Modified kSSLSessionOptionEnableSessionTickets

	Availability
From	Available
To	Deprecated

Modified kSSLIdle

	Availability
From	Available
To	Deprecated

Modified kSSLHandshake

	Availability
From	Available
To	Deprecated

Modified kSSLConnected

	Availability
From	Available
To	Deprecated

Modified kSSLClosed

	Availability
From	Available
To	Deprecated

Modified kSSLAborted

	Availability
From	Available
To	Deprecated

Modified kSSLClientCertNone

	Availability
From	Available
To	Deprecated

Modified kSSLClientCertRequested

	Availability
From	Available
To	Deprecated

Modified kSSLClientCertSent

	Availability
From	Available
To	Deprecated

Modified kSSLClientCertRejected

	Availability
From	Available
To	Deprecated

Modified kSSLServerSide

	Availability
From	Available
To	Deprecated

Modified kSSLClientSide

	Availability
From	Available
To	Deprecated

Modified kSSLStreamType

	Availability
From	Available
To	Deprecated

Modified kSSLDatagramType

	Availability
From	Available
To	Deprecated

Modified kSSLSessionConfig_ATSv1

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_ATSv1_noPFS

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_standard

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_TLSv1_fallback

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_legacy

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_legacy_DHE

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified kSSLSessionConfig_anonymous

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLContextGetTypeID()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCreateContext()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetSessionState()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetSessionOption()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetSessionOption()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetIOFuncs()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetSessionConfig()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetProtocolVersionMin()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetProtocolVersionMin()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetProtocolVersionMax()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetProtocolVersionMax()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetCertificate()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetConnection()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetConnection()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetPeerDomainName()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetPeerDomainNameLength()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetPeerDomainName()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCopyRequestedPeerNameLength()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCopyRequestedPeerName()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetDatagramHelloCookie()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetMaxDatagramRecordSize()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetMaxDatagramRecordSize()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetNegotiatedProtocolVersion()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetNumberSupportedCiphers()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetSupportedCiphers()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetNumberEnabledCiphers()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetEnabledCiphers()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetEnabledCiphers()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetSessionTicketsEnabled()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCopyPeerTrust()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetPeerID()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetPeerID()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetNegotiatedCipher()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetALPNProtocols()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCopyALPNProtocols()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetOCSPResponse()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetClientSideAuthenticate()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLAddDistinguishedName()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLCopyDistinguishedNames()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetClientCertificateState()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLHandshake()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLReHandshake()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLWrite()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLRead()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetBufferedReadSize()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLGetDatagramWriteSize()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLClose()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.

Modified SSLSetError()

	Availability	Deprecation Message
From	Available	none
To	Deprecated	No longer supported. Use Network.framework.