Deprecations

[ci skip]

2 files changed, 35 insertions, 0 deletions

diff --git a/doc/deprecated.txt b/doc/deprecated.txt
new file mode 100644
index 000000000..bb7bb28ef
--- /dev/null
+++ b/doc/deprecated.txt
@@ -0,0 +1,28 @@
+Currently deprecated:
+
+- Rabin-Williams signatures
+
+- Nyberg-Rueppel signatures
+
+- MARS, RC2, RC5, RC6, SAFER, TEA
+
+- MD2, HAS-160, RIPEMD-128
+
+- TLS 3DES and SEED ciphersuites in TLS
+
+- DSA auth in TLS (not ECDSA)
+
+- Old (Google specific) ChaCha20 TLS ciphersuites
+
+- All built in ECC groups < 256 bits
+
+- All built in MODP groups < 2048 bits
+
+- All pre-created DSA groups
+
+- All support for BeOS/Haiku including BeOS entropy source
+
+- EGD entropy source
+
+- Unix process exec entropy source
+
diff --git a/doc/news.rst b/doc/news.rst
index 67f458fec..0c9018be0 100644
--- a/doc/news.rst
+++ b/doc/news.rst
@@ -27,6 +27,13 @@ Version 1.11.31, Not Yet Released
   system requires EGD and so the code is now dead weight. If you rely on EGD
   support, you should contact the developers by email or GitHub ASAP.
 
+* The TLS ciphersuites using 3DES and SEED are deprecated and will be removed in
+  a future release.
+
+* Support for BeOS/Haiku has not been tested in 5 years and is in an unknown state.
+  Unless reports are received of successful builds and use on this platform, support
+  for BeOS/Haiku will be removed in a future release.
+
 * Changes in DLIES: Previously the input to the KDF was the concatenation
   of the (ephemeral) public key and the secret value derived by the key
   agreement operation. Now the input is only the secret value obtained