diff options
| author | Jack Lloyd <[email protected]> | 2016-07-11 13:09:41 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2016-07-11 13:09:41 -0400 |
| commit | 0572eaa3953316b1469d1f607ec73acd65bdd471 (patch) | |
| tree | 75cafeeef7827df7303f7217cda087197c439165 | |
| parent | 9fc9e763f77ba57dc4458b863edd93b928b92887 (diff) | |
Rename policy 'sane' to 'modern' which better reflects intent.
Add RFC 6979 which became optional along the line. Also add bcrypt and compression,
and add TLS by default. Prohibit EGD.
| -rw-r--r-- | src/build-data/policy/modern.txt (renamed from src/build-data/policy/sane.txt) | 65 |
1 files changed, 36 insertions, 29 deletions
diff --git a/src/build-data/policy/sane.txt b/src/build-data/policy/modern.txt index f75242266..f0b6934f0 100644 --- a/src/build-data/policy/sane.txt +++ b/src/build-data/policy/modern.txt @@ -22,17 +22,17 @@ poly1305 siphash pbkdf2 +bcrypt +compression # required for private key encryption pbes2 -# required for TLS -prf_tls - curve25519 ecdh ecdsa rsa +rfc6979 eme_oaep emsa_pssr @@ -44,6 +44,36 @@ hmac_rng ffi </required> +<if_available> +tls +prf_tls + +clmul +locking_allocator + +aes_ni +aes_ssse3 +serpent_simd +threefish_avx2 + +simd_scalar +simd_sse2 +simd_altivec + +system_rng + +# entropy sources +beos_stats +cryptoapi_rng +darwin_secrandom +dev_random +hres_timer +proc_walk +rdrand +rdseed +win32_stats +</if_available> + <prohibited> cast des @@ -91,32 +121,9 @@ x931_rng passhash9 cryptobox + +# questionable entropy sources +egd unix_procs </prohibited> -<if_available> -clmul -locking_allocator - -aes_ni -aes_ssse3 -serpent_simd -threefish_avx2 - -simd_scalar -simd_sse2 -simd_altivec - -# entropy sources -beos_stats -cryptoapi_rng -darwin_secrandom -dev_random -egd -hres_timer -proc_walk -rdrand -rdseed -system_rng -win32_stats -</if_available> |