scuttle/profiles/modern_random.profile.toml

35 lines
1004 B
TOML
Executable File

# Modern Random profile — single-pass PRNG stream with a modern CSPRNG.
[meta]
name = "Modern Random"
version = 1
description = "Single-pass PRNG stream wipe using a modern CSPRNG (default ChaCha20). The recommended general-purpose profile for non-classified media."
nist_class = "clear"
audience = "General-purpose, non-classified media"
[defaults]
prng_pool = ["ChaCha20 (CSPRNG)"]
hash = "SHA-256"
verify = "final"
certificate = "json"
report = ["summary"]
[policy_map]
hdd_cmr = "hdd_overwrite"
hdd_smr = "hdd_overwrite"
ssd_sata = "ssd_overwrite"
ssd_sas = "ssd_overwrite"
ssd_usb = "ssd_overwrite"
ssd_nvme = "nvme_overwrite"
pmem = "pmem_overwrite"
mmc = "embedded_overwrite"
sd = "embedded_overwrite"
ufs = "embedded_overwrite"
virtual = "virtual_overwrite"
[constraints]
require_secure_erase_capable = false
abort_on_verify_failure = true
require_signed_certificate = false
minimum_passes = 1