@@ -0,0 +1,2290 @@
+#!/usr/bin/env python%0A%0A%22%22%22%0A%3CProgram Name%3E%0A  settings.py%0A%0A%3CAuthor%3E%0A  Vladimir Diaz %3Cvladimir.v.diaz@gmail.com%3E%0A%0A%3CStarted%3E%0A  December 7, 2016%0A%0A%3CCopyright%3E%0A  See LICENSE for licensing information.%0A%0A%3CPurpose%3E%0A  Store all crypto-related settings used by securesystemslib.%0A%22%22%22%0A%0A# Help with Python 3 compatibility, where the print statement is a function, an%0A# implicit relative import is invalid, and the '/' operator performs true%0A# division.  Example:  print 'hello world' raises a 'SyntaxError' exception.%0Afrom __future__ import print_function%0Afrom __future__ import absolute_import%0Afrom __future__ import division%0Afrom __future__ import unicode_literals%0A%0A%0A%0A%0A%0A# The current %22good enough%22 number of PBKDF2 passphrase iterations.%0A# We recommend that important keys, such as root, be kept offline.%0A# 'toto.settings.PBKDF2_ITERATIONS' should increase as CPU speeds increase, set here%0A# at 100,000 iterations by default (in 2013).  The repository maintainer may opt%0A# to modify the default setting according to their security needs and%0A# computational restrictions.  A strong user password is still important.%0A# Modifying the number of iterations will result in a new derived key+PBDKF2%0A# combination if the key is loaded and re-saved, overriding any previous%0A# iteration setting used in the old '%3Ckeyid%3E' key file.%0A# https://en.wikipedia.org/wiki/PBKDF2%0APBKDF2_ITERATIONS = 100000%0A%0A# Supported cryptography libraries that can be used to generate and verify RSA%0A# keys and signatures:  %5B'pycrypto', 'pyca-cryptography'%5D%0ARSA_CRYPTO_LIBRARY = 'pyca-cryptography'%0A%0A# Supported Ed25519 cryptography libraries: %5B'pynacl', 'ed25519'%5D%0AED25519_CRYPTO_LIBRARY = 'ed25519'%0A%0A# General purpose cryptography. Algorithms and functions that fall under%0A# general purpose include AES, PBKDF2, cryptographically strong random number%0A# generators, and cryptographic hash functions.  The majority of the general%0A# cryptography is needed by the repository and developer tools.%0A# RSA_CRYPTO_LIBRARY and ED25519_CRYPTO_LIBRARY are needed on the client side%0A# of the software updater.%0A# Supported libraries for general-purpose cryptography:  %5B'pycrypto',%0A# 'pyca-cryptography'%5D%0AGENERAL_CRYPTO_LIBRARY = 'pycrypto'%0A%0A# The algorithm(s) in HASH_ALGORITHMS are used to generate key IDs.%0AHASH_ALGORITHMS = %5B'sha256', 'sha512'%5D%0A

Add settings.py (which only stores crypto-related settings)