min version: TLS1.3
rules:
- Perfect Forward Secrecy: yes
- FIPS 140-3 (2019): yes
cipher suites:
- TLS_AES_256_GCM_SHA384
signature schemes:
- mldsa87
curves:
certificate preferences apply locally
certificate signature schemes:
- mldsa87
certificate keys:
- mldsa_87
pq:
- revision: 5
- kem groups:
-- MLKEM1024
