tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
	}
}

// TLSCiphersBackwardCompatible returns a list of supported
// TLS transport cipher suite IDs.
//
// In contrast to TLSCiphers, the list contains additional
// ciphers for backward compatibility. In particular, AES-CBC
// and non-ECDHE ciphers.
func TLSCiphersBackwardCompatible() []uint16 {
	return []uint16{
		tls.TLS_CHACHA20_POLY1305_SHA256, // TLS 1.3

	iv, nonce := random[:16], random[16:]

	var aead cipher.AEAD
	switch keyType {
	case kms.AES256:
		mac := hmac.New(sha256.New, s.key)
		mac.Write(iv)
		sealingKey := mac.Sum(nil)

		block, err := aes.NewCipher(sealingKey)
		if err != nil {
			return nil, err
		}
		aead, err = cipher.NewGCM(block)
		if err != nil {
			return nil, err
		}
	case kms.ChaCha20:

The [`jstmpllitinterp` setting](/pkg/html/template#hdr-Security_Model) no longer has
any effect.

Go 1.23 changed the default TLS cipher suites used by clients and servers when
not explicitly configured, removing 3DES cipher suites. The default can be reverted
using the [`tls3des` setting](/pkg/crypto/tls/#Config.CipherSuites).
This setting will be removed in Go 1.27.

func (e ETag) IsEncrypted() bool {
	// An encrypted ETag must be at least 32 bytes long.
	// It contains the encrypted ETag value + an authentication
	// code generated by the AEAD cipher.
	//
	// Here is an incorrect implementation of IsEncrypted:
	//
	//   return len(e) > 16 && !bytes.ContainsRune(e, '-')
	//
	// An encrypted ETag may contain some random bytes - e.g.

			allowPubKeys = filterAlgos(arg, strings.Split(tokens[1], ","), supportedPubKeyAuthAlgos)
		case "kex-algos":
			allowKexAlgos = filterAlgos(arg, strings.Split(tokens[1], ","), supportedKexAlgos)
		case "cipher-algos":
			allowCiphers = filterAlgos(arg, strings.Split(tokens[1], ","), supportedCiphers)
		case "mac-algos":
			allowMACs = filterAlgos(arg, strings.Split(tokens[1], ","), supportedMACs)
		case "trusted-user-ca-key":

CR1, key_12 BLT CR1, key_10 key_14: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_12: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_10: P8_LXVB16X(R6,R0,V9) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHERLAST) XOR_STORE(V9,V0,R5,R0)...

CR1, key_12 BLT CR1, key_10 key_14: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_12: DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) key_10: P8_LXVB16X(R6,R0,V9) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHER) DO1_CIPHER(V0,V8,R4,VCIPHERLAST) XOR_STORE(V9,V0,R5,R0)...

    val minlog = "com.esotericsoftware.minlog:minlog"
    val nativePlatform = "net.rubygrapefruit:native-platform"
    val objenesis = "org.objenesis:objenesis"
    val plexusCipher = "org.sonatype.plexus:plexus-cipher"
    val plexusClassworlds = "org.codehaus.plexus:plexus-classworlds"
    val plexusInterpolation = "org.codehaus.plexus:plexus-interpolation"
    val plexusSecDispatcher = "org.codehaus.plexus:plexus-sec-dispatcher"

      }
    }
  }

  /**
   * Test for 2-bit characteristics. A characteristic is a delta in the input which is repeated in
   * the output. For example, if f() is a block cipher and c is a characteristic, then f(x^c) =
   * f(x)^c with greater than expected probability. The test for funneling is merely a test for
   * 1-bit characteristics.
   *

      }
    }
  }

  /**
   * Test for 2-bit characteristics. A characteristic is a delta in the input which is repeated in
   * the output. For example, if f() is a block cipher and c is a characteristic, then f(x^c) =
   * f(x)^c with greater than expected probability. The test for funneling is merely a test for
   * 1-bit characteristics.
   *