204 # // The DRBG mechanism to use. Default "Hash_DRBG" |
204 # // The DRBG mechanism to use. Default "Hash_DRBG" |
205 # mech_name: |
205 # mech_name: |
206 # "Hash_DRBG" | "HMAC_DRBG" | "CTR_DRBG" |
206 # "Hash_DRBG" | "HMAC_DRBG" | "CTR_DRBG" |
207 # |
207 # |
208 # // The DRBG algorithm name. The "SHA-***" names are for Hash_DRBG and |
208 # // The DRBG algorithm name. The "SHA-***" names are for Hash_DRBG and |
209 # // HMAC_DRBG, default "SHA-256". "3KeyTDEA" and "AES-***" names are for |
209 # // HMAC_DRBG, default "SHA-256". The "AES-***" names are for CTR_DRBG, |
210 # // CTR_DRBG, default "AES-128" when using the limited cryptographic |
210 # // default "AES-128" when using the limited cryptographic or "AES-256" |
211 # // or "AES-256" when using the unlimited. |
211 # // when using the unlimited. |
212 # algorithm_name: |
212 # algorithm_name: |
213 # "SHA-1" | "SHA-224" | "SHA-512/224" | "SHA-256" | |
213 # "SHA-224" | "SHA-512/224" | "SHA-256" | |
214 # "SHA-512/256" | "SHA-384" | "SHA-512" | |
214 # "SHA-512/256" | "SHA-384" | "SHA-512" | |
215 # "3KeyTDEA" | "AES-128" | "AES-192" | "AES-256" |
215 # "AES-128" | "AES-192" | "AES-256" |
216 # |
216 # |
217 # // Security strength requested. Default "128", or "112" |
217 # // Security strength requested. Default "128" |
218 # // if mech_name is CTR_DRBG and algorithm_name is "3KeyTDEA" |
|
219 # strength: |
218 # strength: |
220 # "112" | "128" | "192" | "256" |
219 # "112" | "128" | "192" | "256" |
221 # |
220 # |
222 # // Prediction resistance and reseeding request. Default "none" |
221 # // Prediction resistance and reseeding request. Default "none" |
223 # // "pr_and_reseed" - Both prediction resistance and reseeding |
222 # // "pr_and_reseed" - Both prediction resistance and reseeding |
232 # // to CTR_DRBG. Default "use_df" |
231 # // to CTR_DRBG. Default "use_df" |
233 # df: |
232 # df: |
234 # "use_df" | "no_df" |
233 # "use_df" | "no_df" |
235 # |
234 # |
236 # Examples, |
235 # Examples, |
237 # securerandom.drbg.config=Hash_DRBG,SHA-1,112,none |
236 # securerandom.drbg.config=Hash_DRBG,SHA-224,112,none |
238 # securerandom.drbg.config=CTR_DRBG,AES-256,192,pr_and_reseed,use_df |
237 # securerandom.drbg.config=CTR_DRBG,AES-256,192,pr_and_reseed,use_df |
239 # |
238 # |
240 # The default value is an empty string, which is equivalent to |
239 # The default value is an empty string, which is equivalent to |
241 # securerandom.drbg.config=Hash_DRBG,SHA-256,128,none |
240 # securerandom.drbg.config=Hash_DRBG,SHA-256,128,none |
242 securerandom.drbg.config= |
241 securerandom.drbg.config= |