###--------------------------------------------------------------------------
### Crypto parameters.
-## The key-exchange type. May be `dh' or `ec'.
+## The key-exchange type. May be `dh', `ec', `x25519', or `x448'.
# kx = dh
## Key-generation parameters for key exchange group.
# kx-param = -LS -b3072 -B256
-# kx-param = -Pnist-p256
+# kx-param = -Cnist-p256
+# kx-param =
## Expiry time for peer key-exchange keys.
# kx-expire = now + 1 year