"""
Sample application config -- intentionally uses legacy crypto for Lab 6 scanning.
This is a SYNTHETIC file created for educational scanning, not a real application.
"""

# TLS configuration -- legacy settings (deliberately bad for training purposes)
TLS_VERSION = "TLSv1.2"
TLS_CIPHERS = "AES128-SHA:AES256-SHA:DES-CBC3-SHA"

# Key sizes
RSA_KEY_SIZE = 2048       # used for server certificates
ECDSA_CURVE = "secp256r1"  # P-256

# Hash algorithms
PASSWORD_HASH = "MD5"      # deliberately weak -- scan should flag this
SIGNATURE_HASH = "SHA1"    # deliberately weak -- scan should flag this
DOCUMENT_HASH = "SHA256"   # acceptable

# Encryption at rest
DB_ENCRYPTION = "AES-128-CBC"   # no AEAD -- should prefer AES-256-GCM
BACKUP_ENCRYPTION = "DES"       # deliberately weak
