# Custom profile — operator-defined; the operator specifies method/prng/hash via CLI.

[meta]
name        = "Custom"
version     = 1
description = "Operator-defined: the operator specifies method, PRNG, hash, and verify level via CLI flags. The profile engine still applies the policy_map to pick the right policy for the device's media class."
nist_class  = "clear"
audience    = "Operators who need full control"

[defaults]
prng_pool    = ["ChaCha20 (CSPRNG)"]
hash         = "SHA-256"
verify       = "final"
certificate  = "json"
report       = ["summary"]

[policy_map]
hdd_cmr   = "hdd_overwrite"
hdd_smr   = "hdd_overwrite"
ssd_sata  = "ssd_overwrite"
ssd_sas   = "ssd_overwrite"
ssd_usb   = "ssd_overwrite"
ssd_nvme  = "nvme_overwrite"
pmem      = "pmem_overwrite"
mmc       = "embedded_overwrite"
sd        = "embedded_overwrite"
ufs       = "embedded_overwrite"
virtual   = "virtual_overwrite"

[constraints]
require_secure_erase_capable = false
abort_on_verify_failure      = true
require_signed_certificate   = false
minimum_passes               = 1