Page Properties | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
|
...
For all web traffic sent over the public Internet containing confidential, the TLS v1.2 3 protocol or better must be utilized.
...
The following table includes the recommended usage for cryptographic keys:
Domain | Key Type | Algorithm | Key Length | Max Expiration |
---|---|---|---|---|
Web Certificate | Digital Signature | DSA or RSA PCKS#1 | 2048 bit | Up to 2 years for normal certificates, up to 10 years for root certificates. |
Web Cipher | Encryption | AES | 256 bit | N/A |
Confidential | Encryption | AES | 256 bit | 1 Year |
Password | Hash | Bcrypt, PBKDF2, or scrypt, ECDH | 256 bit+10K Stretch | N/A |
Laptop HDD | Encryption | AES | 128 or 256 bit | N/A |
Exceptions
Requests for an exception to this policy must be submitted to Raphael Santos for approval.
...