old_contents: #!/usr/bin/env python
  # -*- coding: utf-8 -*-
  """Constants related to the Transit secrets engine."""
  
  ALLOWED_KEY_TYPES = [
      'aes256-gcm96',
      'chacha20-poly1305',
      'ed25519',
      'ecdsa-p256',
      'rsa-2048',
      'rsa-4096',
  ]
  
  ALLOWED_EXPORT_KEY_TYPES = [
      'encryption-key',
      'signing-key',
      'hmac-key',
  ]
  
  ALLOWED_DATA_KEY_TYPES = [
      'plaintext',
      'ciphertext',
  ]
  
  ALLOWED_DATA_KEY_BITS = [
      128,
      256,
      512
  ]
  
  ALLOWED_HASH_DATA_ALGORITHMS = [
      'sha2-224',
      'sha2-256',
      'sha2-384',
      'sha2-512',
  ]
  
  ALLOWED_HASH_DATA_FORMATS = [
      'hex',
      'base64'
  ]
  
  ALLOWED_SIGNATURE_ALGORITHMS = [
      'pss',
      'pkcs1v15',
  ]
  
  ALLOWED_MARSHALING_ALGORITHMS = [
      'asn1',
      'jws',
  ]
  
new_contents: #!/usr/bin/env python
  # -*- coding: utf-8 -*-
  """Constants related to the Transit secrets engine."""
  
  ALLOWED_KEY_TYPES = [
      'aes256-gcm96',
      'chacha20-poly1305',
      'ed25519',
      'ecdsa-p256',
      'ecdsa-p384',
      'rsa-2048',
      'rsa-3072',
      'rsa-4096',
  ]
  
  ALLOWED_EXPORT_KEY_TYPES = [
      'encryption-key',
      'signing-key',
      'hmac-key',
  ]
  
  ALLOWED_DATA_KEY_TYPES = [
      'plaintext',
      'ciphertext',
  ]
  
  ALLOWED_DATA_KEY_BITS = [
      128,
      256,
      512
  ]
  
  ALLOWED_HASH_DATA_ALGORITHMS = [
      'sha2-224',
      'sha2-256',
      'sha2-384',
      'sha2-512',
  ]
  
  ALLOWED_HASH_DATA_FORMATS = [
      'hex',
      'base64'
  ]
  
  ALLOWED_SIGNATURE_ALGORITHMS = [
      'pss',
      'pkcs1v15',
  ]
  
  ALLOWED_MARSHALING_ALGORITHMS = [
      'asn1',
      'jws',
  ]
  
subject: add P-384 and RSA-3072