# Next generation GOST algorithms

mac = AEAD *STREEBOG* *-OMAC *-OMAC-ACPKM *GOST*

group = *GOST*

hash = *GOST* *STREEBOG*

sign = *GOST*

cipher@TLS = GOST28147-TC26Z-CNT GOST28147-CPA-CFB MAGMA-CTR-ACPKM KUZNYECHIK-CTR-ACPKM

cipher@!TLS = GOST28147-TC26Z-CNT MAGMA-CTR-ACPKM KUZNYECHIK-CTR-ACPKM GOST28147-C*

key_exchange = *GOST*

protocol = TLS1.3 TLS1.2 TLS1.1 TLS1.0

min_tls_version = TLS1.0

# Parameter sizes
# GOST ciphersuites don't use DH params. The value is set to fit SECLEVEL=2 for OpenSSL
min_dh_size = 2048
min_dsa_size = 2048
min_rsa_size = 2048

# GnuTLS only for now
sha1_in_certs = 0
