mirror of
https://git.verdigado.com/NB-Public/simple-wkd.git
synced 2024-10-30 09:05:52 +01:00
Add an example sequoia policy. Taken from the Fedora default crypto policies: https://gitlab.com/redhat-crypto/fedora-crypto-policies
This commit is contained in:
parent
82895eddfe
commit
4166e02773
1 changed files with 51 additions and 0 deletions
51
example.policy.toml
Normal file
51
example.policy.toml
Normal file
|
@ -0,0 +1,51 @@
|
||||||
|
[hash_algorithms]
|
||||||
|
md5.collision_resistance = "never"
|
||||||
|
md5.second_preimage_resistance = "never"
|
||||||
|
sha1.collision_resistance = "never"
|
||||||
|
sha1.second_preimage_resistance = "never"
|
||||||
|
ripemd160.collision_resistance = "never"
|
||||||
|
ripemd160.second_preimage_resistance = "never"
|
||||||
|
sha224.collision_resistance = "always"
|
||||||
|
sha224.second_preimage_resistance = "always"
|
||||||
|
sha256.collision_resistance = "always"
|
||||||
|
sha256.second_preimage_resistance = "always"
|
||||||
|
sha384.collision_resistance = "always"
|
||||||
|
sha384.second_preimage_resistance = "always"
|
||||||
|
sha512.collision_resistance = "always"
|
||||||
|
sha512.second_preimage_resistance = "always"
|
||||||
|
default_disposition = "never"
|
||||||
|
|
||||||
|
[symmetric_algorithms]
|
||||||
|
idea = "never"
|
||||||
|
tripledes = "never"
|
||||||
|
cast5 = "never"
|
||||||
|
blowfish = "never"
|
||||||
|
aes128 = "always"
|
||||||
|
aes192 = "never"
|
||||||
|
aes256 = "always"
|
||||||
|
twofish = "never"
|
||||||
|
camellia128 = "never"
|
||||||
|
camellia192 = "never"
|
||||||
|
camellia256 = "never"
|
||||||
|
default_disposition = "never"
|
||||||
|
|
||||||
|
[asymmetric_algorithms]
|
||||||
|
elgamal1024 = "never"
|
||||||
|
elgamal2048 = "never"
|
||||||
|
elgamal3072 = "never"
|
||||||
|
elgamal4096 = "never"
|
||||||
|
brainpoolp256 = "never"
|
||||||
|
brainpoolp512 = "never"
|
||||||
|
rsa1024 = "never"
|
||||||
|
rsa2048 = "always"
|
||||||
|
rsa3072 = "always"
|
||||||
|
rsa4096 = "always"
|
||||||
|
dsa1024 = "never"
|
||||||
|
dsa2048 = "never"
|
||||||
|
dsa3072 = "never"
|
||||||
|
dsa4096 = "never"
|
||||||
|
nistp256 = "always"
|
||||||
|
nistp384 = "always"
|
||||||
|
nistp521 = "always"
|
||||||
|
cv25519 = "always"
|
||||||
|
default_disposition = "never"
|
Loading…
Reference in a new issue