# Cryptographic Policy

RHEL knows [system-wide cryptographic policies](https://access.redhat.com/articles/3666211).
The default one is `DEFAULT`, but it can be modified with


```
base::crypto_policy: 'DEFAULT:SHA1'
```
or
```
base::crypto_policy: 'FUTURE'
```


Note that the policy is only applied on the start of a process.