From bd1e16a9ed5376f17385f8b1a3b7a94522a930ec Mon Sep 17 00:00:00 2001 From: inference Date: Thu, 8 Jun 2023 01:16:31 +0100 Subject: [PATCH] Add Security Levels documentation. --- security/security_levels.adoc | 68 +++++++++++++++++++++++++++++++++++ 1 file changed, 68 insertions(+) create mode 100644 security/security_levels.adoc diff --git a/security/security_levels.adoc b/security/security_levels.adoc new file mode 100644 index 0000000..44da28e --- /dev/null +++ b/security/security_levels.adoc @@ -0,0 +1,68 @@ += Security Levels + +Version: 1.0.1.6 + + +== S0 + +Intended access: Public + +Encryption: None + +Signing: Optional + +== S1 + +Intended access: Authorised users of S1 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* +* Twofish + +== S2 + +Intended access: Authorised users of S2 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* +* Twofish + +== S3 + +Intended access: Authorised users of s3 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* + +== S4 + +Intended access: Authorised users of s4 or lower security levels + +Encryption: Enforced + +Signing: Enforced + +Permitted symmetrical encryption ciphers (order of preference): + +* AES +* ChaCha20* + +*Preferred when hardware-accelerated AES is unavailable.