diff --git a/security/security_levels.adoc b/security/security_levels.adoc new file mode 100644 index 0000000..44da28e --- /dev/null +++ b/security/security_levels.adoc @@ -0,0 +1,68 @@ += Security Levels + +Version: 1.0.1.6 + + +== S0 + +Intended access: Public + +Encryption: None + +Signing: Optional + +== S1 + +Intended access: Authorised users of S1 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* +* Twofish + +== S2 + +Intended access: Authorised users of S2 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* +* Twofish + +== S3 + +Intended access: Authorised users of s3 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* + +== S4 + +Intended access: Authorised users of s4 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* + +*Preferred when hardware-accelerated AES is unavailable.