mirror of
https://github.com/luxfi/dex.git
synced 2026-09-24 00:26:31 +00:00
zeekay
6333d3bdb2
- Remove misplaced github.com/luxfi/dex/pkg/grpc/pb directory - Move nginx config into docker/nginx/ - Consolidate configs/ and node-config/ into config/ - Remove old docker-compose.yml files (use compose.yml) - Remove oracle/ folder (now native in pkg/price/) - Remove fake examples/performance_demo.go
33 lines
989 B
YAML
33 lines
989 B
YAML
# QZMQ Cryptographic Configuration
|
|
crypto:
|
|
# Default suite - hybrid for smooth migration
|
|
suite:
|
|
kem: "x25519+mlkem768"
|
|
sig: "mldsa2"
|
|
aead: "aes256gcm"
|
|
hash: "sha256"
|
|
|
|
# PQ-only mode for maximum security
|
|
pq_only: false
|
|
|
|
# AEAD tag size (always 128-bit for security)
|
|
tag_bits: 128
|
|
|
|
# Key rotation policies
|
|
key_update:
|
|
max_msgs: 4294967296 # 2^32 messages
|
|
max_bytes: 1125899906842624 # 2^50 bytes (~1 PiB)
|
|
max_age_s: 600 # 10 minutes
|
|
|
|
# Budgets and limits
|
|
limits:
|
|
max_handshake_size: 65536 # 64KB max handshake
|
|
max_message_size: 1048576 # 1MB max message
|
|
max_aad_size: 255 # Max additional data
|
|
|
|
# Certificate configuration
|
|
certs:
|
|
algorithm: "mldsa2" # ML-DSA-2 for certificates
|
|
validity_days: 30 # Short-lived certificates
|
|
pin_spki: true # Pin public keys
|
|
verify_chain: true # Full chain verification |