Plain Signer Algorithm Support

The following lists algorithm support for the Plain Signer.

The signer also relies on support for the algorithm in the Crypto Token used, so also review that the desired algorithm is supported by the configured crypto token. 

The following lists supported algorithms that are tested and known to work with a Crypto Token supporting it and therefore the list may not be complete.

Signature Algorithms


Algorithm Name

Also Known As

Comment

check mark

SHA1withRSA

RSASSA-PKCS1_v1.5 using SHA1


check mark

SHA256withRSA

RSASSA-PKCS1_v1.5 using SHA256


check mark

SHA384withRSA

RSASSA-PKCS1_v1.5 using SHA384


check mark

SHA512withRSA

RSASSA-PKCS1_v1.5 using SHA512


check mark

NONEwithRSA

RSASSA-PKCS1_v1.5

See

Client-Side Hashing

as special encoding of the request might be needed unless client-side hashing is specified explicitly in request metadata.

check mark

SHA1withRSAandMGF1

RSASSA-PSS using SHA1


check mark

SHA256withRSAandMGF1

RSASSA-PSS using SHA256


check mark

SHA384withRSAandMGF1

RSASSA-PSS using SHA384


check mark

SHA512withRSAandMGF1

RSASSA-PSS using SHA512


check mark

NONEwithRSAandMGF1

RSASSA-PSS

See

Client-Side Hashing

as request metadata might be needed with the request.

check mark

SHA1withECDSA

ECDSA using SHA1


check mark

SHA256withECDSA

ECDSA using SHA256


check mark

SHA384withECDSA

ECDSA using SHA384


check mark

SHA512withECDSA

ECDSA using SHA512


check mark

NONEwithECDSA

ECDSA

See

Client-Side Hashing

for what the input should be.

check mark

Ed25519

Pure EdDSA with Edwards25519


check mark

Ed448

Pure EdDSA with Edwards448


check mark

ML-DSA-44

Pure ML-DSA-44


check mark

ML-DSA-65

Pure ML-DSA-65


check mark

ML-DSA-87

Pure ML-DSA-87


check mark

SLH-DSA-SHA2-128F

Pure SLH-DSA-SHA2-128F


check mark

SLH-DSA-SHA2-128S

Pure SLH-DSA-SHA2-128S


check mark

SLH-DSA-SHA2-192F

Pure SLH-DSA-SHA2-192F


check mark

SLH-DSA-SHA2-192S

Pure SLH-DSA-SHA2-192S


check mark

SLH-DSA-SHA2-256F

Pure SLH-DSA-SHA2-256F


check mark

SLH-DSA-SHA2-256S

Pure SLH-DSA-SHA2-256S


check mark

SLH-DSA-SHAKE-128F

Pure SLH-DSA-SHAKE-128F


check mark

SLH-DSA-SHAKE-128S

Pure SLH-DSA-SHAKE-128S


check mark

SLH-DSA-SHAKE-192F

Pure SLH-DSA-SHAKE-192F


check mark

SLH-DSA-SHAKE-192S

Pure SLH-DSA-SHAKE-192S


check mark

SLH-DSA-SHAKE-256F

Pure SLH-DSA-SHAKE-256F


check mark

SLH-DSA-SHAKE-256S

Pure SLH-DSA-SHAKE-256S


Digest Algorithms Supported with Explicit Client-Side Hashing


Algorithm Name

Comment

check mark

SHA1


check mark

SHA256


check mark

SHA384


check mark

SHA512