X-Git-Url: https://git.distorted.org.uk/~mdw/tripe/blobdiff_plain/06a174dfe42020da6138e22c82803cbba9c66b49..f3664e7cedd454195c68963496f80501020cd347:/keys/tripe-keys.master diff --git a/keys/tripe-keys.master b/keys/tripe-keys.master index 35b868ce..4fe35f3a 100644 --- a/keys/tripe-keys.master +++ b/keys/tripe-keys.master @@ -18,16 +18,20 @@ ###-------------------------------------------------------------------------- ### Crypto parameters. -## The key-exchange type. May be `dh' or `ec'. +## The key-exchange type. May be `dh', `ec', `x25519', or `x448'. # kx = dh ## Key-generation parameters for key exchange group. # kx-param = -LS -b3072 -B256 -# kx-param = -Pnist-p256 +# kx-param = -Cnist-p256 +# kx-param = ## Expiry time for peer key-exchange keys. # kx-expire = now + 1 year +## Bulk crypto transform to use. May be `v0', `iiv', or `naclbox'. +# bulk = iiv + ## Symmetric encryption scheme to use. # cipher = rijndael-cbc @@ -41,6 +45,7 @@ ## How recently an archive must have been signed to be valid. # sig-fresh = always +# sig-fresh = 28 days ago ## When the master signing key expires. # sig-expire = forever