Skip to content

Commit

Permalink
algorithm recommendations
Browse files Browse the repository at this point in the history
  • Loading branch information
@bbaassssiiee
bbaassssiiee authored Mar 4, 2022
1 parent eb4537f commit 90c7a65
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -35,12 +35,12 @@ Crypto policies were introduced in Fedora 21 and are also used in RHEL8, Centos

## Algorithm recommendations

The recommended crypto is configured in `vars/main.yml`. Check legal with your compliance officer.
The recommended crypto is configured when the `STRICT` crypto_policy is selected:

- `Ciphers`
- `HostKeyAlgorithms`
- `KexAlgorithms`
- `MACs`
- `Ciphers: [email protected],[email protected],[email protected],aes256-ctr,aes192-ctr,aes128-ctr`
- `HostKeyAlgorithms: [email protected],ssh-ed25519`
- `KexAlgorithms: curve25519-sha256,[email protected],diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256`
- `MACs: [email protected],[email protected],[email protected]`

## Default Variables

Expand Down

0 comments on commit 90c7a65

Please sign in to comment.