{
  "$schema": "https://schema.stella-ops.org/crypto-plugins-manifest/v1.json",
  "version": "1.0",
  "plugins": [
    {
      "id": "default",
      "name": "DefaultCryptoProvider",
      "assembly": "StellaOps.Cryptography.dll",
      "type": "StellaOps.Cryptography.DefaultCryptoProvider",
      "capabilities": [
        "signing:ES256",
        "signing:ES384",
        "signing:ES512",
        "signing:RS256",
        "signing:RS384",
        "signing:RS512",
        "signing:PS256",
        "signing:PS384",
        "signing:PS512",
        "hashing:SHA256",
        "hashing:SHA384",
        "hashing:SHA512",
        "password:PBKDF2",
        "password:Argon2id"
      ],
      "jurisdiction": "world",
      "compliance": ["NIST", "FIPS-140-3-candidate"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 50
    },
    {
      "id": "libsodium",
      "name": "LibsodiumCryptoProvider",
      "assembly": "StellaOps.Cryptography.dll",
      "type": "StellaOps.Cryptography.LibsodiumCryptoProvider",
      "capabilities": [
        "signing:Ed25519",
        "hashing:Blake2b",
        "symmetric:XSalsa20-Poly1305",
        "password:Argon2id"
      ],
      "jurisdiction": "world",
      "compliance": ["NIST"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 60,
      "conditionalCompilation": "STELLAOPS_CRYPTO_SODIUM"
    },
    {
      "id": "openssl.gost",
      "name": "OpenSslGostProvider",
      "assembly": "StellaOps.Cryptography.Plugin.OpenSslGost.dll",
      "type": "StellaOps.Cryptography.Plugin.OpenSslGost.OpenSslGostProvider",
      "capabilities": [
        "signing:GOST-R-34.10-2012-256",
        "signing:GOST-R-34.10-2012-512",
        "hashing:GOST-R-34.11-2012-256",
        "hashing:GOST-R-34.11-2012-512"
      ],
      "jurisdiction": "russia",
      "compliance": ["GOST", "FSB"],
      "platforms": ["linux", "osx"],
      "priority": 100,
      "options": {
        "enginePath": "/usr/lib/x86_64-linux-gnu/engines-3/gost.so"
      }
    },
    {
      "id": "cryptopro.gost",
      "name": "CryptoProGostCryptoProvider",
      "assembly": "StellaOps.Cryptography.Plugin.CryptoPro.dll",
      "type": "StellaOps.Cryptography.Plugin.CryptoPro.CryptoProGostCryptoProvider",
      "capabilities": [
        "signing:GOST-R-34.10-2001",
        "signing:GOST-R-34.10-2012-256",
        "signing:GOST-R-34.10-2012-512",
        "hashing:GOST-R-34.11-94",
        "hashing:GOST-R-34.11-2012-256",
        "hashing:GOST-R-34.11-2012-512"
      ],
      "jurisdiction": "russia",
      "compliance": ["GOST", "FSB", "ГосСОПКА"],
      "platforms": ["windows"],
      "priority": 110,
      "conditionalCompilation": "STELLAOPS_CRYPTO_PRO"
    },
    {
      "id": "pkcs11.gost",
      "name": "Pkcs11GostCryptoProvider",
      "assembly": "StellaOps.Cryptography.Plugin.Pkcs11Gost.dll",
      "type": "StellaOps.Cryptography.Plugin.Pkcs11Gost.Pkcs11GostCryptoProvider",
      "capabilities": [
        "signing:GOST-R-34.10-2012-256",
        "signing:GOST-R-34.10-2012-512",
        "hashing:GOST-R-34.11-2012-256",
        "hashing:GOST-R-34.11-2012-512"
      ],
      "jurisdiction": "russia",
      "compliance": ["GOST", "FSB", "PKCS#11"],
      "platforms": ["linux", "windows"],
      "priority": 105,
      "options": {
        "libraryPath": "/usr/lib/x86_64-linux-gnu/pkcs11/librtpkcs11ecp.so"
      }
    },
    {
      "id": "wine.csp",
      "name": "WineCspProvider",
      "assembly": "StellaOps.Cryptography.Plugin.WineCsp.dll",
      "type": "StellaOps.Cryptography.Plugin.WineCsp.WineCspProvider",
      "capabilities": [
        "signing:GOST-R-34.10-2012-256",
        "signing:GOST-R-34.10-2012-512",
        "hashing:GOST-R-34.11-2012-256",
        "hashing:GOST-R-34.11-2012-512"
      ],
      "jurisdiction": "russia",
      "compliance": ["GOST"],
      "platforms": ["linux"],
      "priority": 95,
      "options": {
        "winePrefix": "/opt/stellaops/wine"
      }
    },
    {
      "id": "sm.soft",
      "name": "SmSoftCryptoProvider",
      "assembly": "StellaOps.Cryptography.Plugin.SmSoft.dll",
      "type": "StellaOps.Cryptography.Plugin.SmSoft.SmSoftCryptoProvider",
      "capabilities": [
        "signing:SM2",
        "hashing:SM3",
        "symmetric:SM4"
      ],
      "jurisdiction": "china",
      "compliance": ["GM/T", "OSCCA"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 100
    },
    {
      "id": "sm.remote",
      "name": "SmRemoteHttpProvider",
      "assembly": "StellaOps.Cryptography.Plugin.SmRemote.dll",
      "type": "StellaOps.Cryptography.Plugin.SmRemote.SmRemoteHttpProvider",
      "capabilities": [
        "signing:SM2",
        "hashing:SM3"
      ],
      "jurisdiction": "china",
      "compliance": ["GM/T", "OSCCA"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 90,
      "options": {
        "baseAddress": "http://localhost:8900"
      }
    },
    {
      "id": "pq.soft",
      "name": "PqSoftCryptoProvider",
      "assembly": "StellaOps.Cryptography.Plugin.PqSoft.dll",
      "type": "StellaOps.Cryptography.Plugin.PqSoft.PqSoftCryptoProvider",
      "capabilities": [
        "signing:ML-DSA-44",
        "signing:ML-DSA-65",
        "signing:ML-DSA-87",
        "signing:SLH-DSA-SHA2-128s",
        "signing:SLH-DSA-SHA2-128f",
        "signing:SLH-DSA-SHAKE-128s",
        "signing:SLH-DSA-SHAKE-128f",
        "hashing:SHA3-256",
        "hashing:SHA3-512",
        "hashing:SHAKE256"
      ],
      "jurisdiction": "world",
      "compliance": ["NIST-PQC", "FIPS-203", "FIPS-205"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 70
    },
    {
      "id": "fips.soft",
      "name": "FipsSoftCryptoProvider",
      "assembly": "StellaOps.Cryptography.dll",
      "type": "StellaOps.Cryptography.FipsSoftCryptoProvider",
      "capabilities": [
        "signing:ES256",
        "signing:ES384",
        "signing:ES512",
        "signing:RS256",
        "signing:RS384",
        "signing:RS512",
        "hashing:SHA256",
        "hashing:SHA384",
        "hashing:SHA512"
      ],
      "jurisdiction": "world",
      "compliance": ["FIPS-140-3"],
      "platforms": ["linux", "windows"],
      "priority": 80
    },
    {
      "id": "eidas.soft",
      "name": "EidasSoftCryptoProvider",
      "assembly": "StellaOps.Cryptography.dll",
      "type": "StellaOps.Cryptography.EidasSoftCryptoProvider",
      "capabilities": [
        "signing:ES256",
        "signing:ES384",
        "signing:ES512",
        "signing:RS256",
        "signing:RS384",
        "signing:RS512",
        "hashing:SHA256",
        "hashing:SHA384",
        "hashing:SHA512"
      ],
      "jurisdiction": "eu",
      "compliance": ["eIDAS", "ETSI-TS-119-312"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 85
    },
    {
      "id": "kcmvp.hash",
      "name": "KcmvpHashOnlyProvider",
      "assembly": "StellaOps.Cryptography.dll",
      "type": "StellaOps.Cryptography.KcmvpHashOnlyProvider",
      "capabilities": [
        "hashing:SHA256",
        "hashing:SHA384",
        "hashing:SHA512"
      ],
      "jurisdiction": "korea",
      "compliance": ["KCMVP"],
      "platforms": ["linux", "windows"],
      "priority": 75
    },
    {
      "id": "offline-verification",
      "name": "OfflineVerificationCryptoProvider",
      "assembly": "StellaOps.Cryptography.Plugin.OfflineVerification.dll",
      "type": "StellaOps.Cryptography.Plugin.OfflineVerification.OfflineVerificationCryptoProvider",
      "capabilities": [
        "signing:ES256",
        "signing:ES384",
        "signing:ES512",
        "signing:RS256",
        "signing:RS384",
        "signing:RS512",
        "signing:PS256",
        "signing:PS384",
        "signing:PS512",
        "hashing:SHA-256",
        "hashing:SHA-384",
        "hashing:SHA-512",
        "verification:ES256",
        "verification:ES384",
        "verification:ES512",
        "verification:RS256",
        "verification:RS384",
        "verification:RS512"
      ],
      "jurisdiction": "world",
      "compliance": ["NIST", "offline-airgap"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 45,
      "enabledByDefault": true
    },
    {
      "id": "sim.crypto.remote",
      "name": "SimRemoteProvider",
      "assembly": "StellaOps.Cryptography.Plugin.SimRemote.dll",
      "type": "StellaOps.Cryptography.Plugin.SimRemote.SimRemoteProvider",
      "capabilities": [
        "signing:*",
        "hashing:*",
        "verification:*"
      ],
      "jurisdiction": "world",
      "compliance": ["test-only"],
      "platforms": ["linux", "windows", "osx"],
      "priority": 10,
      "options": {
        "baseAddress": "http://localhost:8901"
      },
      "enabledByDefault": false
    }
  ]
}