## Expiry time for peer key-exchange keys.
# kx-expire = now + 1 year
+## Bulk crypto transform to use. May be `v0', or `iiv'.
+# bulk = iiv
+
## Symmetric encryption scheme to use.
# cipher = rijndael-cbc
## Signature scheme to use for signing/verifying repository archives.
# sig = dsa
# sig = ecdsa
+# sig = ed25519
## How recently an archive must have been signed to be valid.
# sig-fresh = always