summaryrefslogtreecommitdiffstats
path: root/crypto
diff options
context:
space:
mode:
authorPauli <paul.dale@oracle.com>2020-01-28 03:38:47 +0100
committerPauli <paul.dale@oracle.com>2020-02-04 11:02:55 +0100
commit5e3f9aa4e9a915f25b36bb085515d4786a253385 (patch)
treef4647a215cc450ea54adef7c8a62c08b962d52f7 /crypto
parentec.h: fix preprocessor indentation (diff)
downloadopenssl-5e3f9aa4e9a915f25b36bb085515d4786a253385.tar.xz
openssl-5e3f9aa4e9a915f25b36bb085515d4786a253385.zip
Deprecate the ECDH functions.
Use of the low level ECDH functions has been informally discouraged for a long time. We now formally deprecate them. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10960)
Diffstat (limited to 'crypto')
-rw-r--r--crypto/ec/ec_kmeth.c6
-rw-r--r--crypto/ec/ec_pmeth.c6
-rw-r--r--crypto/ec/ecdh_kdf.c6
3 files changed, 18 insertions, 0 deletions
diff --git a/crypto/ec/ec_kmeth.c b/crypto/ec/ec_kmeth.c
index 9556a94210..7aa9865d29 100644
--- a/crypto/ec/ec_kmeth.c
+++ b/crypto/ec/ec_kmeth.c
@@ -7,6 +7,12 @@
* https://www.openssl.org/source/license.html
*/
+/*
+ * ECDH and ECDSA low level APIs are deprecated for public use, but still ok
+ * for internal use.
+ */
+#include "internal/deprecated.h"
+
#include <string.h>
#include <openssl/ec.h>
#include <openssl/engine.h>
diff --git a/crypto/ec/ec_pmeth.c b/crypto/ec/ec_pmeth.c
index 1750e43d16..d4a59b57ee 100644
--- a/crypto/ec/ec_pmeth.c
+++ b/crypto/ec/ec_pmeth.c
@@ -7,6 +7,12 @@
* https://www.openssl.org/source/license.html
*/
+/*
+ * ECDH and ECDSA low level APIs are deprecated for public use, but still ok
+ * for internal use.
+ */
+#include "internal/deprecated.h"
+
#include <stdio.h>
#include "internal/cryptlib.h"
#include <openssl/asn1t.h>
diff --git a/crypto/ec/ecdh_kdf.c b/crypto/ec/ecdh_kdf.c
index 000b12a515..bc9c968655 100644
--- a/crypto/ec/ecdh_kdf.c
+++ b/crypto/ec/ecdh_kdf.c
@@ -7,6 +7,12 @@
* https://www.openssl.org/source/license.html
*/
+/*
+ * ECDH low level APIs are deprecated for public use, but still ok for
+ * internal use.
+ */
+#include "internal/deprecated.h"
+
#include <string.h>
#include <openssl/core_names.h>
#include <openssl/ec.h>