{
  "profile": "open-alert-draft/0.20",
  "securityProfile": "tls13-gost-kuz-mgm/1",
  "transport": "TLS1.3",
  "cipherSuite": "TLS_GOSTR341112_256_WITH_KUZNYECHIK_MGM_L",
  "cipherSuiteId": "0xc103",
  "aead": "kuznyechik-mgm",
  "keyBits": 256,
  "tagBytes": 16,
  "hashAlgorithm": "streebog256",
  "keySchedule": "RFC9367+RFC8446",
  "recordKeyDerivation": "TLSTREE/RFC9367",
  "authentication": "external-psk-mutual",
  "pskBits": 256,
  "pskMode": "psk_dhe_ke",
  "group": "GC256A",
  "groupId": "0x0022",
  "curve": "id-tc26-gost-3410-2012-256-paramSetA",
  "recordSizeLimit": 512,
  "maxApplicationBytesPerRecord": 511,
  "maxXmlBytes": 1024,
  "earlyData": false,
  "sessionTickets": false,
  "resumption": false,
  "plaintextFallback": false,
  "handshakeTimeoutMs": 20000,
  "maxConcurrentHandshakes": 2,
  "references": [
    "https://www.rfc-editor.org/rfc/rfc9367.html",
    "https://www.rfc-editor.org/rfc/rfc9058.html",
    "https://www.rfc-editor.org/rfc/rfc6986.html",
    "https://www.rfc-editor.org/rfc/rfc7836.html",
    "https://www.rfc-editor.org/rfc/rfc8449.html"
  ],
  "admission": {
    "maxPendingClientHellos": 4,
    "firstClientHelloMs": 3000,
    "preflightMs": 8000,
    "cookieBytes": 32,
    "freshRetryRequired": true,
    "ownerReservedHandshakes": 1,
    "maxClientHelloBytes": 4096,
    "pskIdentities": 1,
    "maxHandshakesPerPrincipal": 1
  },
  "signatureEncoding": "r32-le-s32-le",
  "trustProfile": "open-alert-trust/2",
  "profileSelection": "server-policy-order",
  "media": {
    "profile": "rtp-alert/4",
    "transport": [
      "tls",
      "tcp"
    ],
    "delivery": "unicast",
    "recordFramingBytes": 2,
    "rtpHeaderBytes": 32,
    "maxPacketBytes": 192,
    "maxAgeMs": 3000,
    "clockRoundTripMaxMs": 1000,
    "clockRefreshMs": 2000,
    "clockValidityMs": 10000,
    "clockRelativeDriftPpm": 500,
    "sourceQueueMaxMs": 1000,
    "sourceQueueMaxPackets": 50,
    "maxReceiverFramedBytes": 194,
    "silenceSuppression": false,
    "audioAbsenceMs": 5000
  },
  "explicitPlainMode": true,
  "defaultSecurityPolicy": "optional",
  "automaticDowngrade": false,
  "handshakeDeadlineOrigin": "tcpAcceptedAt",
  "pskIdentityEncoding": "ASCII(keyId), 1..32 bytes, no NUL, no hex decoding"
}