src/build-data/policy/bsi.txt


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158

<required>
# block
aes

# modes
gcm
cbc
mode_pad

# stream
ctr

# hash
sha2_32
sha2_64
keccak

# mac
cmac
hmac

# pk_pad
eme_oaep
emsa_pssr
emsa1

# pubkey
dlies
dh
rsa
dsa
ecdsa
ecgdsa
ecdh

# rng
auto_rng
hmac_rng
hmac_drbg
</required>

<if_available>
# block
aes_ni
aes_ssse3

# modes
clmul

# entropy sources
beos_stats
cryptoapi_rng
darwin_secrandom
dev_random
egd
hres_timer
proc_walk
rdrand
rdseed
system_rng
win32_stats

# utils
locking_allocator
simd_altivec
simd_scalar
simd_sse2
</if_available>

<prohibited>
# block
blowfish
camellia
cascade
cast
gost_28147
idea
idea_sse2
kasumi
lion
mars
misty1
noekeon
noekeon_simd
rc2
rc5
rc6
safer
seed
serpent
serpent_simd
tea
threefish
threefish_avx2
twofish
xtea
xtea_simd

# modes
ccm
chacha20poly1305
eax
ocb
siv
cfb
ecb

# stream
chacha
ofb
rc4
salsa20

# pubkey
curve25519
elgamal
gost_3410
mce
mceies
nr
rfc6979
rw

# pk_pad
#eme_pkcs1 // needed for tls
eme_raw
#emsa_pkcs1 // needed for tls
emsa_raw
emsa_x931
emsa1_bsi

# hash
blake2
comb4p
gost_3411
has160
md2
md4
#md5 // needed for tls
rmd128
rmd160
#sha1 // needed for tls
#sha1_sse2 // needed for tls
skein
tiger
whirlpool

# mac
cbc_mac
poly1305
siphash
x919_mac

# rng
x931_rng
unix_procs

</prohibited>