
# re-prioritizing the ones from the base policies
group = -X25519-MLKEM768 -P256-MLKEM768 -P384-MLKEM1024 -MLKEM768-X25519
group = -MLKEM1024-X448
group = +*MLKEM*

sign = +RSA3072-SPHINCSSHAKE128FSIMPLE
sign = +P256-SPHINCSSHAKE128FSIMPLE
sign = +SPHINCSSHAKE128FSIMPLE
sign = +P384-SPHINCSSHA2192FSIMPLE
sign = +SPHINCSSHA2192FSIMPLE
sign = +RSA3072-SPHINCSSHA2128SSIMPLE
sign = +P256-SPHINCSSHA2128SSIMPLE
sign = +SPHINCSSHA2128SSIMPLE
sign = +RSA3072-SPHINCSSHA2128FSIMPLE
sign = +P256-SPHINCSSHA2128FSIMPLE
sign = +SPHINCSSHA2128FSIMPLE
sign = +P521-FALCONPADDED1024
sign = +FALCONPADDED1024
sign = +P521-FALCON1024
sign = +FALCON1024
sign = +RSA3072-FALCONPADDED512
sign = +P256-FALCONPADDED512
sign = +FALCONPADDED512
sign = +RSA3072-FALCON512
sign = +P256-FALCON512
sign = +FALCON512
sign = +MLDSA87-ED448
sign = +MLDSA87-BP384
sign = +MLDSA87-P384
sign = +P521-MLDSA87
sign = +MLDSA65-ED25519
sign = +MLDSA65-BP256
sign = +MLDSA65-P256
sign = +MLDSA65-RSA3072
sign = +MLDSA65-PSS3072
sign = +P384-MLDSA65
sign = +MLDSA44-BP256
sign = +MLDSA44-P256
sign = +MLDSA44-ED25519
sign = +MLDSA44-RSA2048
sign = +MLDSA44-PSS2048
sign = +RSA3072-MLDSA44
sign = +P256-MLDSA44
# re-prioritizing the ones from the base policies
sign = -MLDSA44 -MLDSA65 -MLDSA87
sign = +MLDSA87
sign = +MLDSA65
sign = +MLDSA44

key_exchange = +SNTRUP
key_exchange = +KEM*
