Security macOS 10.12 to 10.13 API Differences

CipherSuite.h
Added TLS_AES_128_GCM_SHA256
Added TLS_AES_256_GCM_SHA384
Added TLS_CHACHA20_POLY1305_SHA256
Added TLS_AES_128_CCM_SHA256
Added TLS_AES_128_CCM_8_SHA256
Added TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
Added TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
CMSDecoder.h
Modified CMSDecoderSetSearchKeychain()
AvailabilityDeprecation Message
FromAvailablenone
ToDeprecatedTo change the search keychains call SecKeychainSetSearchList.

CSCommon.h
Added errSecCSSignatureUntrusted
Added errSecMultipleExecSegments
cssmapple.h
Added CSSM_WORDID_KEYBAG_KEY
Added CSSM_SAMPLE_TYPE_KEYBAG_KEY
Added CSSM_APPLE_UNLOCK_TYPE_KEYBAG
eisl.h
Modified EISL_CreateCertificateChainWithCredentialData()
Declaration
Fromconst ISL_VERIFIED_CERTIFICATE_CHAIN_PTR EISL_CreateCertificateChainWithCredentialData(const ISL_CONST_DATA RootIssuer, const ISL_CONST_DATA PublicKey, const ISL_CONST_DATA CredentialsImage, const ISL_CONST_DATA ModuleSearchPath)
ToISL_VERIFIED_CERTIFICATE_CHAIN_PTR EISL_CreateCertificateChainWithCredentialData(const ISL_CONST_DATA RootIssuer, const ISL_CONST_DATA PublicKey, const ISL_CONST_DATA CredentialsImage, const ISL_CONST_DATA ModuleSearchPath)

SecBase.h
Added errSecMissingEntitlement
SecCertificate.h
Added SecCertificateCopySerialNumberData()
Modified SecCertificateCopySerialNumber()
AvailabilityDeprecation Message
FromAvailablenone
ToDeprecatedSecCertificateCopySerialNumber is deprecated. Use SecCertificateCopySerialNumberData instead.

Modified SecCertificateCopyNormalizedIssuerContent()
AvailabilityDeprecation Message
FromAvailablenone
ToDeprecatedSecCertificateCopyNormalizedIssuerContent is deprecated. Use SecCertificateCopyNormalizedIssuerSequence instead.

Modified SecCertificateCopyNormalizedSubjectContent()
AvailabilityDeprecation Message
FromAvailablenone
ToDeprecatedSecCertificateCopyNormalizedSubjectContent is deprecated. Use SecCertificateCopyNormalizedSubjectSequence instead.

SecCode.h
Added kSecCSSkipResourceDirectory
SecItem.h
Added kSecAttrPersistantReference
Added kSecAttrPersistentReference
SecKey.h
Added kSecKeyAlgorithmRSASignatureDigestPSSSHA1
Added kSecKeyAlgorithmRSASignatureDigestPSSSHA224
Added kSecKeyAlgorithmRSASignatureDigestPSSSHA256
Added kSecKeyAlgorithmRSASignatureDigestPSSSHA384
Added kSecKeyAlgorithmRSASignatureDigestPSSSHA512
Added kSecKeyAlgorithmRSASignatureMessagePSSSHA1
Added kSecKeyAlgorithmRSASignatureMessagePSSSHA224
Added kSecKeyAlgorithmRSASignatureMessagePSSSHA256
Added kSecKeyAlgorithmRSASignatureMessagePSSSHA384
Added kSecKeyAlgorithmRSASignatureMessagePSSSHA512
Added kSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA224AESGCM
Added kSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA256AESGCM
Added kSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA384AESGCM
Added kSecKeyAlgorithmECIESEncryptionStandardVariableIVX963SHA512AESGCM
Added kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA224AESGCM
Added kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA256AESGCM
Added kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA384AESGCM
Added kSecKeyAlgorithmECIESEncryptionCofactorVariableIVX963SHA512AESGCM
SecKeychain.h
Modified SecKeychainCopyAccess()
Availability
FromAvailable
ToDeprecated

Modified SecKeychainSetAccess()
Availability
FromAvailable
ToDeprecated

SecRandom.h
Modified SecRandomCopyBytes()
Declaration
Fromint SecRandomCopyBytes(SecRandomRef _Nullable rnd, size_t count, uint8_t * _Nonnull bytes)
Toint SecRandomCopyBytes(SecRandomRef _Nullable rnd, size_t count, void * _Nonnull bytes)

SecStaticCode.h
Added kSecCSUseSoftwareSigningCert
SecTrust.h
Modified kSecTrustCertificateTransparencyWhiteList
Availability
FromAvailable
ToDeprecated

Modified SecTrustSetKeychains()
Availability
FromAvailable
ToDeprecated

SecureTransport.h
Added kTLSProtocol13
Added kTLSProtocolMaxSupported
Added kSSLSessionOptionEnableSessionTickets
Added SSLSetSessionTicketsEnabled()
Added SSLSetALPNProtocols()
Added SSLCopyALPNProtocols()
Added SSLSetOCSPResponse()
Added SSLSetError()
Modified kSSLSessionConfig_default
Availability
FromAvailable
ToDeprecated

Modified kSSLSessionConfig_RC4_fallback
Availability
FromAvailable
ToDeprecated

Modified kSSLSessionConfig_TLSv1_RC4_fallback
Availability
FromAvailable
ToDeprecated

Modified kSSLSessionConfig_3DES_fallback
Availability
FromAvailable
ToDeprecated

Modified kSSLSessionConfig_TLSv1_3DES_fallback
Availability
FromAvailable
ToDeprecated