###--------------------------------------------------------------------------
### Crypto parameters.
-## The key-exchange type. May be `dh' or `ec'.
+## The key-exchange type. May be `dh', `ec', `x25519', or `x448'.
# kx = dh
## Key-generation parameters for key exchange group.
# kx-param = -LS -b3072 -B256
-# kx-param = -Pnist-p256
+# kx-param = -Cnist-p256
+# kx-param =
## Expiry time for peer key-exchange keys.
# kx-expire = now + 1 year
## How recently an archive must have been signed to be valid.
# sig-fresh = always
+# sig-fresh = 28 days ago
## When the master signing key expires.
# sig-expire = forever