/* Configuration file */
VERSION=1;
PSA_DEFAULT=ELE:ALT;
[SECURE_SUBSYSTEM]
    ELE;
    /* No Start/Stop method specified. Default is 1. */
    [SECURITY_OPERATION]
        GENERATE_KEY;
        KEY_TYPE_VALUES=AES:SECP_R1:BRAINPOOL_R1:HMAC:RSA:ED25519:X25519:ED448:X448;
        SECP_R1_SIZE_RANGE=224:521;
        BRAINPOOL_R1_SIZE_RANGE=224:384;
        HMAC_SIZE_RANGE=224:512;
        RSA_SIZE_RANGE=2048:4096;
        ED25519_SIZE_RANGE=255:255;
        X25519_SIZE_RANGE=255:255;
        ED448_SIZE_RANGE=448:448;
        X448_SIZE_RANGE=448:448;
    [SECURITY_OPERATION]
        DERIVE_KEY;
        OP_TYPE_VALUES=TLS12_OP_KEY_EXCHANGE:TLS13_KEY_EXCHANGE:OEM_MASTER_KEY:CKDF;
    [SECURITY_OPERATION]
        EXPORT_KEY;
    [SECURITY_OPERATION]
        DELETE_KEY;
    [SECURITY_OPERATION]
        HASH;
    [SECURITY_OPERATION]
        HASH_MULTI_PART;
    [SECURITY_OPERATION]
        SIGN;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA:TLS_1_2;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:CLIENT:SERVER:PURE_EDDSA:EDDSA_PH;
    [SECURITY_OPERATION]
        VERIFY;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA:TLS_1_2;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:CLIENT:SERVER:PURE_EDDSA:EDDSA_PH;
    [SECURITY_OPERATION]
        SIGN_MULTI_PART;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:CLIENT:SERVER:PURE_EDDSA:EDDSA_PH;
    [SECURITY_OPERATION]
        VERIFY_MULTI_PART;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:CLIENT:SERVER:PURE_EDDSA:EDDSA_PH;
    [SECURITY_OPERATION]
        RNG;
    [SECURITY_OPERATION]
        CIPHER;
        KEY_TYPE_VALUES=AES;
        MODE_VALUES=CBC:CFB:CTR:ECB:OFB;
    [SECURITY_OPERATION]
        MAC;
    [SECURITY_OPERATION]
        DEVICE_ATTESTATION;
    [SECURITY_OPERATION]
        STORAGE_STORE;
        KEY_TYPE_VALUES=AES;
        MODE_VALUES=CBC:CFB:CTR:ECB:OFB;
        MAC_ALGO_VALUES=CMAC;
    [SECURITY_OPERATION]
        STORAGE_RETRIEVE;
    [SECURITY_OPERATION]
        STORAGE_DELETE;
    [SECURITY_OPERATION]
        DEVICE_LIFECYCLE;
    [SECURITY_OPERATION]
        AEAD;
        KEY_TYPE_VALUES=AES;
        MODE_VALUES=CCM:GCM:CHACHA20_POLY1305;
    [SECURITY_OPERATION]
        DEVICE_REPROVISION;
    [SECURITY_OPERATION]
        ASYMM_ENCRYPT;
        ENC_ALGO_VALUES=RSA;
        MODE_VALUES=PKCS1_1_5:OAEP;
    [SECURITY_OPERATION]
        ASYMM_DECRYPT;
        ENC_ALGO_VALUES=RSA;
        MODE_VALUES=PKCS1_1_5:OAEP;
[SECURE_SUBSYSTEM]
    TEE;
    /* No Start/Stop method specified. Default is 1. */
    [SECURITY_OPERATION]
        GENERATE_KEY;
        KEY_TYPE_VALUES=AES:DES:DES3:SM4:BRAINPOOL_R1:SECP_R1:HMAC:RSA:ED25519;
    [SECURITY_OPERATION]
        DERIVE_KEY;
        OP_TYPE_VALUES=HKDF:ECDH;
    [SECURITY_OPERATION]
        IMPORT_KEY;
    [SECURITY_OPERATION]
        EXPORT_KEY;
    [SECURITY_OPERATION]
        DELETE_KEY;
    [SECURITY_OPERATION]
        HASH;
    [SECURITY_OPERATION]
        HASH_MULTI_PART;
    [SECURITY_OPERATION]
        SIGN;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:PURE_EDDSA:EDDSA_PH:EDDSA_CTX;
    [SECURITY_OPERATION]
        VERIFY;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:PURE_EDDSA:EDDSA_PH:EDDSA_CTX;
    [SECURITY_OPERATION]
        SIGN_MULTI_PART;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:PURE_EDDSA:EDDSA_PH:EDDSA_CTX;
    [SECURITY_OPERATION]
        VERIFY_MULTI_PART;
        SIGN_ALGO_VALUES=ECDSA:RSA:EDDSA;
        SIGN_TYPE_VALUES=PKCS1_1_5:PSS:PURE_EDDSA:EDDSA_PH:EDDSA_CTX;
    [SECURITY_OPERATION]
        RNG;
    [SECURITY_OPERATION]
        CIPHER;
        KEY_TYPE_VALUES=AES:DES:DES3:SM4;
        MODE_VALUES=CBC:CTR:CTS:ECB:XTS;
    [SECURITY_OPERATION]
        CIPHER_MULTI_PART;
        KEY_TYPE_VALUES=AES:DES:DES3:SM4;
        MODE_VALUES=CBC:CTR:CTS:ECB:XTS;
    [SECURITY_OPERATION]
        MAC;
    [SECURITY_OPERATION]
        STORAGE_STORE;
    [SECURITY_OPERATION]
        STORAGE_RETRIEVE;
    [SECURITY_OPERATION]
        STORAGE_DELETE;
    [SECURITY_OPERATION]
        AEAD;
        KEY_TYPE_VALUES=AES;
        MODE_VALUES=CCM:GCM;
    [SECURITY_OPERATION]
        AEAD_MULTI_PART;
        KEY_TYPE_VALUES=AES;
        MODE_VALUES=CCM:GCM;
    [SECURITY_OPERATION]
        ASYMM_ENCRYPT;
        ENC_ALGO_VALUES=RSA;
        MODE_VALUES=PKCS1_1_5:OAEP:NO_PAD;
    [SECURITY_OPERATION]
        ASYMM_DECRYPT;
        ENC_ALGO_VALUES=RSA;
        MODE_VALUES=PKCS1_1_5:OAEP:NO_PAD;
[SECURE_SUBSYSTEM]
    ELE;
    [SECURITY_OPERATION]
        /* Importing plain text key in ELE is not possible, must be a blob */
        IMPORT_KEY;
    [SECURITY_OPERATION]
        /* TLS 1.3 Specific derivation operation */
        DERIVE_KEY;
        OP_TYPE_VALUES=ECDH:HKDF;
