Algorithm Support

This page lists algorithms that are known to work or not work with the current implementation. Also, see the specific SignServer Signer for algorithms that signers can work with and review signer-specific algorithm support pages.

Signature Algorithms


Algorithm Name

Also Known As

Comment

cross mark

SHA1withRSA

RSASSA-PKCS_v1.5 using SHA1


check mark

SHA256withRSA

RSASSA-PKCS_v1.5 using SHA256


check mark

SHA512withRSA

RSASSA-PKCS_v1.5 using SHA512


cross mark

NONEwithRSA

RSASSA-PKCS_v1.5


check mark

SHA256withRSAandMGF1

RSASSA-PSS using SHA256


check mark

SHA512withRSAandMGF1

RSASSA-PSS using SHA512


cross mark

NONEwithRSAandMGF1

RSASSA-PSS


check mark

SHA256withECDSA

ECDSA using SHA256


check mark

SHA512withECDSA

ECDSA using SHA512


check mark

NONEwithECDSA

ECDSA

The Fortanix service requires the caller to specify which hash algorithm has been used, so the client must explicitly specify the client-side hashing used in the request metadata properties, see Client-Side Hashing.

Supported digest algorithms:

  • SHA-256

  • SHA-384

  • SHA-512

check mark

Ed25519

Pure EdDSA with Edwards25519

Depending on the Signer.

cross mark

Ed448

Pure EdDSA with Edwards448

Not yet implemented.

check mark

ML-DSA-44



check mark

ML-DSA-65



check mark

ML-DSA-87



Key Algorithms


Algorithm Name

Key Specification

Comment

check mark

RSA

  • 1024

  • 2048

  • 4096

Other key lengths are likely also working.


check mark

ECDSA

Named curves:

  • secp224r1

  • secp256r1 / prime256v1 / P-256

  • secp384r1

  • secp521r1

More named curves are likely working.

check mark

EdDSA

Ed25519


check mark

ML-DSA

  • ML-DSA-44

  • ML-DSA-65

  • ML-DSA-87