Security macOS 10.13 to 10.14 API Differences

CMSDecoder.h

CMSEncoder.h

Modified CMSEncoderSetEncapsulatedContentType()

	Availability	Replacement
From	Available	none
To	Deprecated	CMSEncoderSetEncapsulatedContentTypeOID

Modified CMSEncode()

	Availability	Replacement
From	Available	none
To	Deprecated	CMSEncodeContent

CSCommon.h

Added errSecCSInvalidEntitlements

Added errSecCSInvalidRuntimeVersion

Added errSecCSRevokedNotarization

Added kSecCodeSignatureRuntime

Added kSecCodeStatusDebugged

Added kSecCodeStatusPlatform

Added kSecCodeSignatureHashSHA512

cssmapple.h

Modified CSSM_TP_APPLE_EVIDENCE_INFO

	Availability
From	Available
To	Deprecated

cssmkrapi.h

Modified CSSM_KRSUBSERVICE

	Availability
From	Available
To	Deprecated

Modified CSSM_KRSUBSERVICE_PTR

	Availability
From	Available
To	Deprecated

cssmspi.h

Modified CSSM_SPI_ModuleEventHandler

	Availability
From	Available
To	Deprecated

cssmtype.h

Modified CSSM_API_ModuleEventHandler

	Availability
From	Available
To	Deprecated

Modified CSSM_CALLBACK

	Availability
From	Available
To	Deprecated

Modified CSSM_LIST_ELEMENT

	Availability
From	Available
To	Deprecated

Modified CSSM_API_MEMORY_FUNCS

	Availability
From	Available
To	Deprecated

Modified CSSM_API_MEMORY_FUNCS_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_CHALLENGE_CALLBACK

	Availability
From	Available
To	Deprecated

Modified CSSM_CERTGROUP

	Availability
From	Available
To	Deprecated

Modified CSSM_CERTGROUP_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_ACL_SUBJECT_CALLBACK

	Availability
From	Available
To	Deprecated

Modified CSSM_WRAP_KEY

	Availability
From	Available
To	Deprecated

Modified CSSM_WRAP_KEY_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_CONTEXT_ATTRIBUTE

	Availability
From	Available
To	Deprecated

Modified CSSM_CONTEXT_ATTRIBUTE_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_TP_VERIFICATION_RESULTS_CALLBACK

	Availability
From	Available
To	Deprecated

Modified CSSM_OID

	Availability
From	Available
To	Deprecated

Modified CSSM_OID_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_CRLGROUP

	Availability
From	Available
To	Deprecated

Modified CSSM_CRLGROUP_PTR

	Availability
From	Available
To	Deprecated

Modified CSSM_DB_ATTRIBUTE_INFO

	Availability
From	Available
To	Deprecated

Modified CSSM_DB_ATTRIBUTE_INFO_PTR

	Availability
From	Available
To	Deprecated

mds.h

Modified MDS_DB_HANDLE

	Availability
From	Available
To	Deprecated

SecAccessControl.h

Modified kSecAccessControlTouchIDAny

	Availability	Replacement
From	Available	none
To	Deprecated	kSecAccessControlBiometryAny

Modified kSecAccessControlTouchIDCurrentSet

	Availability	Replacement
From	Available	none
To	Deprecated	kSecAccessControlBiometryCurrentSet

SecBase.h

Removed #def SEC_OS_IPHONE_INCLUDES

SecCertificate.h

Added SecCertificateCopyKey()

Modified SecCertificateCopyPublicKey()

	Availability	Replacement
From	Available	none
To	Deprecated	SecCertificateCopyKey

SecCode.h

Added kSecCodeInfoRuntimeVersion

SecProtocolMetadata.h

Added OS_sec_protocol_metadata

Added sec_protocol_metadata_t

Added sec_protocol_metadata_get_negotiated_protocol()

Added sec_protocol_metadata_copy_peer_public_key()

Added sec_protocol_metadata_get_negotiated_protocol_version()

Added sec_protocol_metadata_get_negotiated_ciphersuite()

Added sec_protocol_metadata_get_early_data_accepted()

Added sec_protocol_metadata_access_peer_certificate_chain()

Added sec_protocol_metadata_access_ocsp_response()

Added sec_protocol_metadata_access_supported_signature_algorithms()

Added sec_protocol_metadata_access_distinguished_names()

Added sec_protocol_metadata_peers_are_equal()

Added sec_protocol_metadata_challenge_parameters_are_equal()

Added sec_protocol_metadata_create_secret()

Added sec_protocol_metadata_create_secret_with_context()

SecProtocolObject.h

Added #def SEC_OBJECT_DECL

Added #def SEC_ASSUME_NONNULL_BEGIN

Added #def SEC_ASSUME_NONNULL_END

Added #def SEC_RETURNS_RETAINED

Added sec_retain()

Added sec_release()

Added OS_sec_object

Added sec_object_t

SecProtocolOptions.h

Added OS_sec_protocol_options

Added sec_protocol_options_t

Added sec_protocol_options_set_local_identity()

Added sec_protocol_options_add_tls_ciphersuite()

Added sec_protocol_options_add_tls_ciphersuite_group()

Added sec_protocol_options_set_tls_min_version()

Added sec_protocol_options_set_tls_max_version()

Added sec_protocol_options_add_tls_application_protocol()

Added sec_protocol_options_set_tls_server_name()

Added sec_protocol_options_set_tls_diffie_hellman_parameters()

Added sec_protocol_options_add_pre_shared_key()

Added sec_protocol_options_set_tls_tickets_enabled()

Added sec_protocol_options_set_tls_is_fallback_attempt()

Added sec_protocol_options_set_tls_resumption_enabled()

Added sec_protocol_options_set_tls_false_start_enabled()

Added sec_protocol_options_set_tls_ocsp_enabled()

Added sec_protocol_options_set_tls_sct_enabled()

Added sec_protocol_options_set_tls_renegotiation_enabled()

Added sec_protocol_options_set_peer_authentication_required()

Added sec_protocol_key_update_complete_t

Added sec_protocol_key_update_t

Added sec_protocol_challenge_complete_t

Added sec_protocol_challenge_t

Added sec_protocol_verify_complete_t

Added sec_protocol_verify_t

Added sec_protocol_options_set_key_update_block()

Added sec_protocol_options_set_challenge_block()

Added sec_protocol_options_set_verify_block()

SecProtocolTypes.h

Added OS_sec_trust

Added sec_trust_t

Added OS_sec_identity

Added sec_identity_t

Added OS_sec_certificate

Added sec_certificate_t

Added sec_trust_create()

Added sec_trust_copy_ref()

Added sec_identity_create()

Added sec_identity_create_with_certificates()

Added sec_identity_copy_ref()

Added sec_identity_copy_certificates_ref()

Added sec_certificate_create()

Added sec_certificate_copy_ref()

SecStaticCode.h

Added kSecCSValidatePEH

SecTrust.h

Added SecTrustEvaluateWithError()

Modified SecTrustEvaluate()

	Declaration
From	OSStatus SecTrustEvaluate(SecTrustRef _Nonnull trust, SecTrustResultType * _Nullable result)
To	OSStatus SecTrustEvaluate(SecTrustRef _Nonnull trust, SecTrustResultType * _Nonnull result)

SecureTransport.h

Added SSLCiphersuiteGroup

Added kSSLCiphersuiteGroupDefault

Added kSSLCiphersuiteGroupCompatibility

Added kSSLCiphersuiteGroupLegacy

Added kSSLCiphersuiteGroupATS

Added kSSLCiphersuiteGroupATSCompatibility