Deprecate the low level IDEA functions.

Use of the low level IDEA functions has been informally discouraged for a
long time. We now formally deprecate them.

Applications should instead use the EVP APIs, e.g. EVP_EncryptInit_ex,
EVP_EncryptUpdate, EVP_EncryptFinal_ex, and the equivalently named decrypt
functions.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10819)

diff --git a/apps/speed.c b/apps/speed.c
index dd07527cdeff041f658c180eb3095ee62192bff9..4883fe09367572ed2dad0e43c3aa9af72e285e03 100644 (file)
--- a/apps/speed.c
+++ b/apps/speed.c
@@ -378,7 +378,7 @@ static const OPT_PAIR doit_choices[] = {
     {"rc5-cbc", D_CBC_RC5},
     {"rc5", D_CBC_RC5},
 #endif
     {"rc5-cbc", D_CBC_RC5},
     {"rc5", D_CBC_RC5},
 #endif

-#ifndef OPENSSL_NO_IDEA
+#if !defined(OPENSSL_NO_IDEA) && !defined(OPENSSL_NO_DEPRECATED_3_0)

     {"idea-cbc", D_CBC_IDEA},
     {"idea", D_CBC_IDEA},
 #endif
     {"idea-cbc", D_CBC_IDEA},
     {"idea", D_CBC_IDEA},
 #endif


@@ -1459,7 +1459,7 @@ int speed_main(int argc, char **argv)
 #if !defined(OPENSSL_NO_RC2) && !defined(OPENSSL_NO_DEPRECATED_3_0)
     RC2_KEY rc2_ks;
 #endif
 #if !defined(OPENSSL_NO_RC2) && !defined(OPENSSL_NO_DEPRECATED_3_0)
     RC2_KEY rc2_ks;
 #endif

-#ifndef OPENSSL_NO_IDEA
+#if !defined(OPENSSL_NO_IDEA) && !defined(OPENSSL_NO_DEPRECATED_3_0)

     IDEA_KEY_SCHEDULE idea_ks;
 #endif
 #if !defined(OPENSSL_NO_SEED) && !defined(OPENSSL_NO_DEPRECATED_3_0)
     IDEA_KEY_SCHEDULE idea_ks;
 #endif
 #if !defined(OPENSSL_NO_SEED) && !defined(OPENSSL_NO_DEPRECATED_3_0)


@@ -1969,7 +1969,7 @@ int speed_main(int argc, char **argv)
         Camellia_set_key(key32, 256, &camellia_ks[2]);
     }
 #endif
         Camellia_set_key(key32, 256, &camellia_ks[2]);
     }
 #endif

-#ifndef OPENSSL_NO_IDEA
+#if !defined(OPENSSL_NO_IDEA) && !defined(OPENSSL_NO_DEPRECATED_3_0)

     if (doit[D_CBC_IDEA])
         IDEA_set_encrypt_key(key16, &idea_ks);
 #endif
     if (doit[D_CBC_IDEA])
         IDEA_set_encrypt_key(key16, &idea_ks);
 #endif


@@ -2571,7 +2571,7 @@ int speed_main(int argc, char **argv)
         }
     }
 #endif
         }
     }
 #endif

-#ifndef OPENSSL_NO_IDEA
+#if !defined(OPENSSL_NO_IDEA) && !defined(OPENSSL_NO_DEPRECATED_3_0)

     if (doit[D_CBC_IDEA]) {
         if (async_jobs > 0) {
             BIO_printf(bio_err, "Async mode is not supported with %s\n",
     if (doit[D_CBC_IDEA]) {
         if (async_jobs > 0) {
             BIO_printf(bio_err, "Async mode is not supported with %s\n",


@@ -3507,7 +3507,7 @@ int speed_main(int argc, char **argv)
 #ifndef OPENSSL_NO_DEPRECATED_3_0
         printf("%s ", AES_options());
 #endif
 #ifndef OPENSSL_NO_DEPRECATED_3_0
         printf("%s ", AES_options());
 #endif

-#ifndef OPENSSL_NO_IDEA
+#if !defined(OPENSSL_NO_IDEA) && !defined(OPENSSL_NO_DEPRECATED_3_0)

         printf("%s ", IDEA_options());
 #endif
 #if !defined(OPENSSL_NO_BF) && !defined(OPENSSL_NO_DEPRECATED_3_0)
         printf("%s ", IDEA_options());
 #endif
 #if !defined(OPENSSL_NO_BF) && !defined(OPENSSL_NO_DEPRECATED_3_0)

diff --git a/apps/version.c b/apps/version.c
index deb91338553a6ca98235cb790f02fde3a5bcc940..513bbc81af6be3332a4e93c7097014016f65d3fb 100644 (file)
--- a/apps/version.c
+++ b/apps/version.c
@@ -15,18 +15,9 @@
 #include <openssl/evp.h>
 #include <openssl/crypto.h>
 #include <openssl/bn.h>
 #include <openssl/evp.h>
 #include <openssl/crypto.h>
 #include <openssl/bn.h>

-#ifndef OPENSSL_NO_MD2
-# include <openssl/md2.h>
-#endif

 #ifndef OPENSSL_NO_DES
 # include <openssl/des.h>
 #endif
 #ifndef OPENSSL_NO_DES
 # include <openssl/des.h>
 #endif

-#ifndef OPENSSL_NO_IDEA
-# include <openssl/idea.h>
-#endif
-#ifndef OPENSSL_NO_BF
-# include <openssl/blowfish.h>
-#endif

 
 typedef enum OPTION_choice {
     OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
 
 typedef enum OPTION_choice {
     OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,


@@ -128,9 +119,6 @@ opthelp:
         printf(" %s", BN_options());
 #ifndef OPENSSL_NO_DES
         printf(" %s", DES_options());
         printf(" %s", BN_options());
 #ifndef OPENSSL_NO_DES
         printf(" %s", DES_options());

-#endif
-#ifndef OPENSSL_NO_IDEA
-        printf(" %s", IDEA_options());

 #endif
         printf("\n");
     }
 #endif
         printf("\n");
     }

diff --git a/crypto/evp/e_idea.c b/crypto/evp/e_idea.c
index 8c3a55410898c735b5c8aad120a8ba7631819c9d..97170200a32db44f428373aae4bac3fc18cf4974 100644 (file)
--- a/crypto/evp/e_idea.c
+++ b/crypto/evp/e_idea.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <stdio.h>
 #include "internal/cryptlib.h"
 
 #include <stdio.h>
 #include "internal/cryptlib.h"
 

diff --git a/crypto/idea/i_cbc.c b/crypto/idea/i_cbc.c
index a78841fcfc1c324fe69cd8e759f445f2a50b9a44..987ba05ea1f1f9c9ca1c0763ea95101f5f6f4626 100644 (file)
--- a/crypto/idea/i_cbc.c
+++ b/crypto/idea/i_cbc.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <openssl/idea.h>
 #include "idea_local.h"
 
 #include <openssl/idea.h>
 #include "idea_local.h"
 

diff --git a/crypto/idea/i_cfb64.c b/crypto/idea/i_cfb64.c
index 45c15b947499587df2d021f74f48938e73c19ad8..50784f9027b6ee9828dda25033902f865e9842bc 100644 (file)
--- a/crypto/idea/i_cfb64.c
+++ b/crypto/idea/i_cfb64.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <openssl/idea.h>
 #include "idea_local.h"
 
 #include <openssl/idea.h>
 #include "idea_local.h"
 

diff --git a/crypto/idea/i_ecb.c b/crypto/idea/i_ecb.c
index 9fee1218937842c3248c58c4b0bda34f7044e02d..74cb35ae1103bfca03df34c1d528f8021daf90b7 100644 (file)
--- a/crypto/idea/i_ecb.c
+++ b/crypto/idea/i_ecb.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <openssl/idea.h>
 #include "idea_local.h"
 #include <openssl/opensslv.h>
 #include <openssl/idea.h>
 #include "idea_local.h"
 #include <openssl/opensslv.h>

diff --git a/crypto/idea/i_ofb64.c b/crypto/idea/i_ofb64.c
index 517ded7bd674f89b8217e57d79ca8e1bf8af708a..bca1999ef9d85bde385a30a43887dca1b5854ccf 100644 (file)
--- a/crypto/idea/i_ofb64.c
+++ b/crypto/idea/i_ofb64.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <openssl/idea.h>
 #include "idea_local.h"
 
 #include <openssl/idea.h>
 #include "idea_local.h"
 

diff --git a/crypto/idea/i_skey.c b/crypto/idea/i_skey.c
index 0b0221bd81b04ae376498408e9e10ca78f67bbd6..36bc2c9b1b4c86cc3dff61e811e7e40b2e7fc3bf 100644 (file)
--- a/crypto/idea/i_skey.c
+++ b/crypto/idea/i_skey.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <openssl/idea.h>
 #include "idea_local.h"
 
 #include <openssl/idea.h>
 #include "idea_local.h"
 

diff --git a/include/openssl/idea.h b/include/openssl/idea.h
index a0a0ceeb7e61baa6f26ef3db0eb5b636d3b9ea1f..a651ee2e72d82518a9f30675deca4b4e705de47d 100644 (file)
--- a/include/openssl/idea.h
+++ b/include/openssl/idea.h
@@ -23,33 +23,42 @@
 extern "C" {
 #  endif
 
 extern "C" {
 #  endif
 

-typedef unsigned int IDEA_INT;
-
-#  define IDEA_ENCRYPT    1
-#  define IDEA_DECRYPT    0
-

 #  define IDEA_BLOCK      8
 #  define IDEA_KEY_LENGTH 16
 
 #  define IDEA_BLOCK      8
 #  define IDEA_KEY_LENGTH 16
 

+#  ifndef OPENSSL_NO_DEPRECATED_3_0
+
+typedef unsigned int IDEA_INT;
+
+#   define IDEA_ENCRYPT    1
+#   define IDEA_DECRYPT    0
+

 typedef struct idea_key_st {
     IDEA_INT data[9][6];
 } IDEA_KEY_SCHEDULE;
 typedef struct idea_key_st {
     IDEA_INT data[9][6];
 } IDEA_KEY_SCHEDULE;

+#endif

 
 

-const char *IDEA_options(void);
-void IDEA_ecb_encrypt(const unsigned char *in, unsigned char *out,
-                      IDEA_KEY_SCHEDULE *ks);
-void IDEA_set_encrypt_key(const unsigned char *key, IDEA_KEY_SCHEDULE *ks);
-void IDEA_set_decrypt_key(IDEA_KEY_SCHEDULE *ek, IDEA_KEY_SCHEDULE *dk);
-void IDEA_cbc_encrypt(const unsigned char *in, unsigned char *out,
-                      long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
-                      int enc);
-void IDEA_cfb64_encrypt(const unsigned char *in, unsigned char *out,
-                        long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
-                        int *num, int enc);
-void IDEA_ofb64_encrypt(const unsigned char *in, unsigned char *out,
-                        long length, IDEA_KEY_SCHEDULE *ks, unsigned char *iv,
-                        int *num);
-void IDEA_encrypt(unsigned long *in, IDEA_KEY_SCHEDULE *ks);
+DEPRECATEDIN_3_0(const char *IDEA_options(void))
+DEPRECATEDIN_3_0(void IDEA_ecb_encrypt(const unsigned char *in,
+                                       unsigned char *out,
+                                       IDEA_KEY_SCHEDULE *ks))
+DEPRECATEDIN_3_0(void IDEA_set_encrypt_key(const unsigned char *key,
+                                           IDEA_KEY_SCHEDULE *ks))
+DEPRECATEDIN_3_0(void IDEA_set_decrypt_key(IDEA_KEY_SCHEDULE *ek,
+                                           IDEA_KEY_SCHEDULE *dk))
+DEPRECATEDIN_3_0(void IDEA_cbc_encrypt(const unsigned char *in,
+                                       unsigned char *out, long length,
+                                       IDEA_KEY_SCHEDULE *ks,
+                                       unsigned char *iv, int enc))
+DEPRECATEDIN_3_0(void IDEA_cfb64_encrypt(const unsigned char *in,
+                                         unsigned char *out, long length,
+                                         IDEA_KEY_SCHEDULE *ks,
+                                         unsigned char *iv, int *num, int enc))
+DEPRECATEDIN_3_0(void IDEA_ofb64_encrypt(const unsigned char *in,
+                                         unsigned char *out, long length,
+                                         IDEA_KEY_SCHEDULE *ks,
+                                         unsigned char *iv, int *num))
+DEPRECATEDIN_3_0(void IDEA_encrypt(unsigned long *in, IDEA_KEY_SCHEDULE *ks))

 
 #  ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #   define idea_options          IDEA_options
 
 #  ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #   define idea_options          IDEA_options

diff --git a/providers/implementations/ciphers/cipher_idea.c b/providers/implementations/ciphers/cipher_idea.c
index 5602655f76625adeb601abd49f9f2b5422c8261b..2c089634a42771d3c0801f084b83eac0126b6f20 100644 (file)
--- a/providers/implementations/ciphers/cipher_idea.c
+++ b/providers/implementations/ciphers/cipher_idea.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 /* Dispatch functions for Idea cipher modes ecb, cbc, ofb, cfb */
 
 #include "cipher_idea.h"
 /* Dispatch functions for Idea cipher modes ecb, cbc, ofb, cfb */
 
 #include "cipher_idea.h"

diff --git a/providers/implementations/ciphers/cipher_idea_hw.c b/providers/implementations/ciphers/cipher_idea_hw.c
index d722cc7a271bf060fd4500f0cce29640a2275900..7718791b088f7ccfc4c255d0643c1ac053731fd5 100644 (file)
--- a/providers/implementations/ciphers/cipher_idea_hw.c
+++ b/providers/implementations/ciphers/cipher_idea_hw.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include "cipher_idea.h"
 
 static int cipher_hw_idea_initkey(PROV_CIPHER_CTX *ctx,
 #include "cipher_idea.h"
 
 static int cipher_hw_idea_initkey(PROV_CIPHER_CTX *ctx,

diff --git a/test/build.info b/test/build.info
index 837dbba934157bd280a282713127cd3797990671..cf03ce4c1ac21579698109055d381b9ee2e3f43d 100644 (file)
--- a/test/build.info
+++ b/test/build.info
@@ -32,7 +32,7 @@ IF[{- !$disabled{tests} -}]
           versions \
           aborttest test_test \
           sanitytest rsa_complex exdatatest bntest \
           versions \
           aborttest test_test \
           sanitytest rsa_complex exdatatest bntest \

-          ectest ecstresstest ecdsatest gmdifftest pbelutest ideatest \
+          ectest ecstresstest ecdsatest gmdifftest pbelutest \

           hmactest \
           destest mdc2test \
           dhtest enginetest \
           hmactest \
           destest mdc2test \
           dhtest enginetest \


@@ -110,10 +110,6 @@ IF[{- !$disabled{tests} -}]
   INCLUDE[pbelutest]=../include ../apps/include
   DEPEND[pbelutest]=../libcrypto libtestutil.a
 
   INCLUDE[pbelutest]=../include ../apps/include
   DEPEND[pbelutest]=../libcrypto libtestutil.a
 

-  SOURCE[ideatest]=ideatest.c
-  INCLUDE[ideatest]=../include ../apps/include
-  DEPEND[ideatest]=../libcrypto libtestutil.a
-

   SOURCE[hmactest]=hmactest.c
   INCLUDE[hmactest]=../include ../apps/include
   DEPEND[hmactest]=../libcrypto libtestutil.a
   SOURCE[hmactest]=hmactest.c
   INCLUDE[hmactest]=../include ../apps/include
   DEPEND[hmactest]=../libcrypto libtestutil.a


@@ -505,7 +501,7 @@ IF[{- !$disabled{tests} -}]
   IF[1]
     PROGRAMS{noinst}=asn1_internal_test modes_internal_test x509_internal_test \
                      tls13encryptiontest wpackettest ctype_internal_test \
   IF[1]
     PROGRAMS{noinst}=asn1_internal_test modes_internal_test x509_internal_test \
                      tls13encryptiontest wpackettest ctype_internal_test \

-                     rdrand_sanitytest property_test \
+                     rdrand_sanitytest property_test ideatest \

                      rsa_sp800_56b_test bn_internal_test \
                      rc2test rc4test rc5test \
                      asn1_dsa_internal_test
                      rsa_sp800_56b_test bn_internal_test \
                      rc2test rc4test rc5test \
                      asn1_dsa_internal_test


@@ -553,6 +549,10 @@ IF[{- !$disabled{tests} -}]
     INCLUDE[tls13encryptiontest]=.. ../include ../apps/include
     DEPEND[tls13encryptiontest]=../libcrypto ../libssl.a libtestutil.a
 
     INCLUDE[tls13encryptiontest]=.. ../include ../apps/include
     DEPEND[tls13encryptiontest]=../libcrypto ../libssl.a libtestutil.a
 

+    SOURCE[ideatest]=ideatest.c
+    INCLUDE[ideatest]=../include ../apps/include
+    DEPEND[ideatest]=../libcrypto.a libtestutil.a
+

     SOURCE[wpackettest]=wpackettest.c
     INCLUDE[wpackettest]=../include ../apps/include
     DEPEND[wpackettest]=../libcrypto ../libssl.a libtestutil.a
     SOURCE[wpackettest]=wpackettest.c
     INCLUDE[wpackettest]=../include ../apps/include
     DEPEND[wpackettest]=../libcrypto ../libssl.a libtestutil.a

diff --git a/test/ideatest.c b/test/ideatest.c
index e572984c4f63fed80df8d4ceb519ba3b2765c0c9..2ef5a49ce78284000a356e700cd8280a1aec6b1f 100644 (file)
--- a/test/ideatest.c
+++ b/test/ideatest.c
@@ -7,6 +7,13 @@
  * https://www.openssl.org/source/license.html
  */
 
  * https://www.openssl.org/source/license.html
  */
 

+/*
+ * IDEA low level APIs are deprecated for public use, but still ok for internal
+ * use where we're using them to implement the higher level EVP interface, as is
+ * the case here.
+ */
+#include "internal/deprecated.h"
+

 #include <string.h>
 
 #include "internal/nelem.h"
 #include <string.h>
 
 #include "internal/nelem.h"

diff --git a/util/libcrypto.num b/util/libcrypto.num
index 2d034afaa4b032c0ba981814b51fd3c19db51d5f..c1f3978fbc1566010a63640a491ecfb468b6ec0e 100644 (file)
--- a/util/libcrypto.num
+++ b/util/libcrypto.num
@@ -140,7 +140,7 @@ PKCS12_BAGS_new                         142 3_0_0   EXIST::FUNCTION:
 CMAC_CTX_new                            143    3_0_0   EXIST::FUNCTION:CMAC
 ASIdentifierChoice_new                  144    3_0_0   EXIST::FUNCTION:RFC3779
 EVP_PKEY_asn1_set_public                145    3_0_0   EXIST::FUNCTION:
 CMAC_CTX_new                            143    3_0_0   EXIST::FUNCTION:CMAC
 ASIdentifierChoice_new                  144    3_0_0   EXIST::FUNCTION:RFC3779
 EVP_PKEY_asn1_set_public                145    3_0_0   EXIST::FUNCTION:

-IDEA_set_decrypt_key                    146    3_0_0   EXIST::FUNCTION:IDEA
+IDEA_set_decrypt_key                    146    3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 X509_STORE_CTX_set_flags                147    3_0_0   EXIST::FUNCTION:
 BIO_ADDR_rawmake                        148    3_0_0   EXIST::FUNCTION:SOCK
 EVP_PKEY_asn1_set_ctrl                  149    3_0_0   EXIST::FUNCTION:
 X509_STORE_CTX_set_flags                147    3_0_0   EXIST::FUNCTION:
 BIO_ADDR_rawmake                        148    3_0_0   EXIST::FUNCTION:SOCK
 EVP_PKEY_asn1_set_ctrl                  149    3_0_0   EXIST::FUNCTION:


@@ -642,7 +642,7 @@ PEM_SignInit                            658 3_0_0   EXIST::FUNCTION:
 EVP_CIPHER_CTX_set_key_length           659    3_0_0   EXIST::FUNCTION:
 X509_delete_ext                         660    3_0_0   EXIST::FUNCTION:
 OCSP_resp_get0_produced_at              661    3_0_0   EXIST::FUNCTION:OCSP
 EVP_CIPHER_CTX_set_key_length           659    3_0_0   EXIST::FUNCTION:
 X509_delete_ext                         660    3_0_0   EXIST::FUNCTION:
 OCSP_resp_get0_produced_at              661    3_0_0   EXIST::FUNCTION:OCSP

-IDEA_encrypt                            662    3_0_0   EXIST::FUNCTION:IDEA
+IDEA_encrypt                            662    3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 CRYPTO_nistcts128_encrypt_block         663    3_0_0   EXIST::FUNCTION:
 EVP_MD_do_all                           664    3_0_0   EXIST::FUNCTION:
 EC_KEY_oct2priv                         665    3_0_0   EXIST::FUNCTION:EC
 CRYPTO_nistcts128_encrypt_block         663    3_0_0   EXIST::FUNCTION:
 EVP_MD_do_all                           664    3_0_0   EXIST::FUNCTION:
 EC_KEY_oct2priv                         665    3_0_0   EXIST::FUNCTION:EC


@@ -954,7 +954,7 @@ BN_is_bit_set                           978 3_0_0   EXIST::FUNCTION:
 AES_ofb128_encrypt                      979    3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0
 X509_STORE_add_lookup                   980    3_0_0   EXIST::FUNCTION:
 ASN1_GENERALSTRING_new                  981    3_0_0   EXIST::FUNCTION:
 AES_ofb128_encrypt                      979    3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0
 X509_STORE_add_lookup                   980    3_0_0   EXIST::FUNCTION:
 ASN1_GENERALSTRING_new                  981    3_0_0   EXIST::FUNCTION:

-IDEA_options                            982    3_0_0   EXIST::FUNCTION:IDEA
+IDEA_options                            982    3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 d2i_X509_REQ                            983    3_0_0   EXIST::FUNCTION:
 i2d_TS_STATUS_INFO                      984    3_0_0   EXIST::FUNCTION:TS
 X509_PURPOSE_get_by_id                  985    3_0_0   EXIST::FUNCTION:
 d2i_X509_REQ                            983    3_0_0   EXIST::FUNCTION:
 i2d_TS_STATUS_INFO                      984    3_0_0   EXIST::FUNCTION:TS
 X509_PURPOSE_get_by_id                  985    3_0_0   EXIST::FUNCTION:


@@ -1844,7 +1844,7 @@ X509_STORE_CTX_set0_trusted_stack       1886      3_0_0   EXIST::FUNCTION:
 BIO_ADDR_service_string                 1887   3_0_0   EXIST::FUNCTION:SOCK
 ASN1_BOOLEAN_it                         1888   3_0_0   EXIST::FUNCTION:
 TS_RESP_CTX_set_time_cb                 1889   3_0_0   EXIST::FUNCTION:TS
 BIO_ADDR_service_string                 1887   3_0_0   EXIST::FUNCTION:SOCK
 ASN1_BOOLEAN_it                         1888   3_0_0   EXIST::FUNCTION:
 TS_RESP_CTX_set_time_cb                 1889   3_0_0   EXIST::FUNCTION:TS

-IDEA_cbc_encrypt                        1890   3_0_0   EXIST::FUNCTION:IDEA
+IDEA_cbc_encrypt                        1890   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 BN_CTX_secure_new                       1891   3_0_0   EXIST::FUNCTION:
 OCSP_ONEREQ_add_ext                     1892   3_0_0   EXIST::FUNCTION:OCSP
 CMS_uncompress                          1893   3_0_0   EXIST::FUNCTION:CMS
 BN_CTX_secure_new                       1891   3_0_0   EXIST::FUNCTION:
 OCSP_ONEREQ_add_ext                     1892   3_0_0   EXIST::FUNCTION:OCSP
 CMS_uncompress                          1893   3_0_0   EXIST::FUNCTION:CMS


@@ -2448,7 +2448,7 @@ BIO_f_zlib                              2498      3_0_0   EXIST::FUNCTION:COMP,ZLIB
 AES_cfb128_encrypt                      2499   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0
 ENGINE_set_EC                           2500   3_0_0   EXIST::FUNCTION:ENGINE
 d2i_ECPKParameters                      2501   3_0_0   EXIST::FUNCTION:EC
 AES_cfb128_encrypt                      2499   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0
 ENGINE_set_EC                           2500   3_0_0   EXIST::FUNCTION:ENGINE
 d2i_ECPKParameters                      2501   3_0_0   EXIST::FUNCTION:EC

-IDEA_ofb64_encrypt                      2502   3_0_0   EXIST::FUNCTION:IDEA
+IDEA_ofb64_encrypt                      2502   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 CAST_decrypt                            2503   3_0_0   EXIST::FUNCTION:CAST,DEPRECATEDIN_3_0
 TS_STATUS_INFO_get0_failure_info        2504   3_0_0   EXIST::FUNCTION:TS
 ENGINE_unregister_pkey_meths            2506   3_0_0   EXIST::FUNCTION:ENGINE
 CAST_decrypt                            2503   3_0_0   EXIST::FUNCTION:CAST,DEPRECATEDIN_3_0
 TS_STATUS_INFO_get0_failure_info        2504   3_0_0   EXIST::FUNCTION:TS
 ENGINE_unregister_pkey_meths            2506   3_0_0   EXIST::FUNCTION:ENGINE


@@ -2531,7 +2531,7 @@ ENGINE_load_ssl_client_cert             2584      3_0_0   EXIST::FUNCTION:ENGINE
 X509_STORE_CTX_set_verify_cb            2585   3_0_0   EXIST::FUNCTION:
 CRYPTO_clear_realloc                    2586   3_0_0   EXIST::FUNCTION:
 OPENSSL_strnlen                         2587   3_0_0   EXIST::FUNCTION:
 X509_STORE_CTX_set_verify_cb            2585   3_0_0   EXIST::FUNCTION:
 CRYPTO_clear_realloc                    2586   3_0_0   EXIST::FUNCTION:
 OPENSSL_strnlen                         2587   3_0_0   EXIST::FUNCTION:

-IDEA_ecb_encrypt                        2588   3_0_0   EXIST::FUNCTION:IDEA
+IDEA_ecb_encrypt                        2588   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 ASN1_STRING_set_default_mask            2589   3_0_0   EXIST::FUNCTION:
 TS_VERIFY_CTX_add_flags                 2590   3_0_0   EXIST::FUNCTION:TS
 FIPS_mode                               2591   3_0_0   EXIST::FUNCTION:
 ASN1_STRING_set_default_mask            2589   3_0_0   EXIST::FUNCTION:
 TS_VERIFY_CTX_add_flags                 2590   3_0_0   EXIST::FUNCTION:TS
 FIPS_mode                               2591   3_0_0   EXIST::FUNCTION:


@@ -3102,7 +3102,7 @@ a2i_ASN1_INTEGER                        3166      3_0_0   EXIST::FUNCTION:
 OCSP_sendreq_bio                        3167   3_0_0   EXIST::FUNCTION:OCSP
 PKCS12_SAFEBAG_create_crl               3168   3_0_0   EXIST::FUNCTION:
 d2i_X509_NAME                           3169   3_0_0   EXIST::FUNCTION:
 OCSP_sendreq_bio                        3167   3_0_0   EXIST::FUNCTION:OCSP
 PKCS12_SAFEBAG_create_crl               3168   3_0_0   EXIST::FUNCTION:
 d2i_X509_NAME                           3169   3_0_0   EXIST::FUNCTION:

-IDEA_cfb64_encrypt                      3170   3_0_0   EXIST::FUNCTION:IDEA
+IDEA_cfb64_encrypt                      3170   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 BN_mod_sub                              3171   3_0_0   EXIST::FUNCTION:
 ASN1_NULL_new                           3172   3_0_0   EXIST::FUNCTION:
 HMAC_Init                               3173   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_1_1_0
 BN_mod_sub                              3171   3_0_0   EXIST::FUNCTION:
 ASN1_NULL_new                           3172   3_0_0   EXIST::FUNCTION:
 HMAC_Init                               3173   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_1_1_0


@@ -3129,7 +3129,7 @@ OCSP_request_verify                     3194      3_0_0   EXIST::FUNCTION:OCSP
 CRYPTO_THREAD_run_once                  3195   3_0_0   EXIST::FUNCTION:
 TS_REQ_print_bio                        3196   3_0_0   EXIST::FUNCTION:TS
 SCT_get_version                         3197   3_0_0   EXIST::FUNCTION:CT
 CRYPTO_THREAD_run_once                  3195   3_0_0   EXIST::FUNCTION:
 TS_REQ_print_bio                        3196   3_0_0   EXIST::FUNCTION:TS
 SCT_get_version                         3197   3_0_0   EXIST::FUNCTION:CT

-IDEA_set_encrypt_key                    3198   3_0_0   EXIST::FUNCTION:IDEA
+IDEA_set_encrypt_key                    3198   3_0_0   EXIST::FUNCTION:DEPRECATEDIN_3_0,IDEA

 ENGINE_get_DH                           3199   3_0_0   EXIST::FUNCTION:ENGINE
 i2d_ASIdentifierChoice                  3200   3_0_0   EXIST::FUNCTION:RFC3779
 SRP_Calc_A                              3201   3_0_0   EXIST::FUNCTION:SRP
 ENGINE_get_DH                           3199   3_0_0   EXIST::FUNCTION:ENGINE
 i2d_ASIdentifierChoice                  3200   3_0_0   EXIST::FUNCTION:RFC3779
 SRP_Calc_A                              3201   3_0_0   EXIST::FUNCTION:SRP