# This is an example of a subpolicy
# enforcing ECDHE and ECDHE with PSK key exchanges

key_exchange = ECDHE ECDHE-PSK
group = -FFDHE-*