@@ -793,16 +793,14 @@ The VPN provider shall use a preshared key to mitigate post-quantum decryption
#### 5.2.14.3 **MI-CRYPT-2**: Use conformant encryption
> TODO-HAS: Fill in below
VPN encryption shall use cryptographic algorithms, keys, and parameters as described in EUCC Guidelines Cryptography v2 [3] or demonstrably equivalent state-of-the-art mechanisms.
* Reference: TR-CRYPT
* Objective: Confidentiality
* Preparation:
* Activities:
* Verdict:
* Evidence:
* Preparation: Perform a factory reset or new installation of the VPN client.
* Activities: Start the VPN connection using the default configuration. Capture traffic on all interfaces.
* Verdict: The traffic pertaining to the VPN connection uses the algorithms, keys and parameters as descibed in EUCC guidelines or demonstrably equivalent state-of-the-art mechanisms.
* Evidence: Packet capture showing the encryption headers.
#### 5.2.14.4 Mapping of mitigations to risk factors and security profiles
