default-policy.json 2.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115
  1. {
  2. "primitives": {
  3. "messageDigest": {
  4. "algorithm": "SHA256"
  5. },
  6. "keyDerivation": {
  7. "pbkdf": {
  8. "keyLengthBytes": 16,
  9. "minSaltLengthBytes": 32,
  10. "hashAlgorithm": "SHA256",
  11. "numIterations": 32000
  12. }
  13. }
  14. },
  15. "symmetric": {
  16. "secretKey": {
  17. "encryption": {
  18. "lengthBytes": 16
  19. },
  20. "mac": {
  21. "lengthBytes": 32
  22. }
  23. },
  24. "cipher": {
  25. "algorithm": {
  26. "name": "AES-GCM",
  27. "keyLengthBytes": 16,
  28. "tagLengthBytes": 16
  29. },
  30. "ivLengthBytes": 12
  31. },
  32. "mac": {
  33. "hashAlgorithm": "SHA256"
  34. }
  35. },
  36. "asymmetric": {
  37. "keyPair": {
  38. "encryption": {
  39. "algorithm": "RSA",
  40. "keyLengthBits": 2048,
  41. "publicExponent": 65537
  42. }
  43. },
  44. "signer": {
  45. "algorithm": "RSA",
  46. "hashAlgorithm": "SHA256",
  47. "padding": {
  48. "name": "PSS",
  49. "hashAlgorithm": "SHA256",
  50. "saltLengthBytes": 32,
  51. "maskGenerator": {
  52. "name": "MGF1",
  53. "hashAlgorithm": "SHA256"
  54. }
  55. },
  56. "publicExponent": 65537
  57. },
  58. "cipher": {
  59. "algorithm": {
  60. "name": "RSA-KEM",
  61. "secretKeyLengthBytes": 16,
  62. "ivLengthBytes": 12,
  63. "tagLengthBytes": 16,
  64. "keyDeriver": {
  65. "name": "KDF1",
  66. "hashAlgorithm": "SHA256"
  67. },
  68. "symmetricCipher": "AES-GCM"
  69. }
  70. }
  71. },
  72. "proofs": {
  73. "messageDigest": {
  74. "algorithm": "SHA256"
  75. }
  76. },
  77. "digitalEnvelope": {
  78. "symmetric": {
  79. "secretKey": {
  80. "encryption": {
  81. "lengthBytes": 16
  82. },
  83. "mac": {
  84. "lengthBytes": 32
  85. }
  86. },
  87. "cipher": {
  88. "algorithm": {
  89. "name": "AES-GCM",
  90. "keyLengthBytes": 16,
  91. "tagLengthBytes": 16
  92. },
  93. "ivLengthBytes": 12
  94. },
  95. "mac": {
  96. "hashAlgorithm": "SHA256"
  97. }
  98. },
  99. "asymmetric": {
  100. "cipher": {
  101. "algorithm": {
  102. "name": "RSA-KEM",
  103. "secretKeyLengthBytes": 16,
  104. "ivLengthBytes": 12,
  105. "tagLengthBytes": 16,
  106. "keyDeriver": {
  107. "name": "KDF1",
  108. "hashAlgorithm": "SHA256"
  109. },
  110. "symmetricCipher": "AES-GCM"
  111. }
  112. }
  113. }
  114. }
  115. }