diff options
| author | Jack Lloyd <[email protected]> | 2016-07-11 13:09:41 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2016-07-11 13:09:41 -0400 |
| commit | 0572eaa3953316b1469d1f607ec73acd65bdd471 (patch) | |
| tree | 75cafeeef7827df7303f7217cda087197c439165 /src/build-data | |
| parent | 9fc9e763f77ba57dc4458b863edd93b928b92887 (diff) | |
Rename policy 'sane' to 'modern' which better reflects intent.
Add RFC 6979 which became optional along the line. Also add bcrypt and compression,
and add TLS by default. Prohibit EGD.
Diffstat (limited to 'src/build-data')
| -rw-r--r-- | src/build-data/policy/modern.txt (renamed from src/build-data/policy/sane.txt) | 65 |
1 files changed, 36 insertions, 29 deletions
diff --git a/src/build-data/policy/sane.txt b/src/build-data/policy/modern.txt index f75242266..f0b6934f0 100644 --- a/src/build-data/policy/sane.txt +++ b/src/build-data/policy/modern.txt @@ -22,17 +22,17 @@ poly1305 siphash pbkdf2 +bcrypt +compression # required for private key encryption pbes2 -# required for TLS -prf_tls - curve25519 ecdh ecdsa rsa +rfc6979 eme_oaep emsa_pssr @@ -44,6 +44,36 @@ hmac_rng ffi </required> +<if_available> +tls +prf_tls + +clmul +locking_allocator + +aes_ni +aes_ssse3 +serpent_simd +threefish_avx2 + +simd_scalar +simd_sse2 +simd_altivec + +system_rng + +# entropy sources +beos_stats +cryptoapi_rng +darwin_secrandom +dev_random +hres_timer +proc_walk +rdrand +rdseed +win32_stats +</if_available> + <prohibited> cast des @@ -91,32 +121,9 @@ x931_rng passhash9 cryptobox + +# questionable entropy sources +egd unix_procs </prohibited> -<if_available> -clmul -locking_allocator - -aes_ni -aes_ssse3 -serpent_simd -threefish_avx2 - -simd_scalar -simd_sse2 -simd_altivec - -# entropy sources -beos_stats -cryptoapi_rng -darwin_secrandom -dev_random -egd -hres_timer -proc_walk -rdrand -rdseed -system_rng -win32_stats -</if_available> |