Azure Key Vault Crypto Token Algorithm Support

This page lists algorithms that are known to work or not work with the current implementation. Also, see the specific SignServer Signer for algorithms that signers can work with and review signer-specific algorithm support pages.

The following lists supported algorithms that are known to work with most workers and therefore the list may not be complete.

For algorithms supporting withECDSA, a signature algorithm matching the ECDSA curve must be specified in the SIGNATUREALGORITHM property. For example, use SHA384withECDSA for a key using secp384r1/P-384.

Signature Algorithms

 Support

Algorithm Name

Also Known As

Comment

cross mark

SHA1withRSA

RSASSA-PKCS_v1.5 using SHA1

 

check mark

SHA256withRSA

RSASSA-PKCS_v1.5 using SHA256

 

check mark

SHA384withRSA

RSASSA-PKCS_v1.5 using SHA384


check mark

SHA512withRSA

RSASSA-PKCS_v1.5 using SHA512

 

cross mark

NONEwithRSA

RSASSA-PKCS_v1.5

 

cross mark

SHA256withRSAandMGF1

RSASSA-PSS using SHA256


cross mark

SHA384withRSAandMGF1

RSASSA-PSS using SHA384


cross mark

SHA512withRSAandMGF1

RSASSA-PSS using SHA512

 

cross mark

NONEwithRSAandMGF1

RSASSA-PSS

 

warning

SHA256withECDSA

ECDSA using SHA256

Azure Key Vault requires the Signature Algorithm to be specified. See warning above.

warning

SHA384withECDSA

ECDSA using SHA384

Azure Key Vault requires the Signature Algorithm to be specified. See warning above.

warning

SHA512withECDSA

ECDSA using SHA512

Azure Key Vault requires the Signature Algorithm to be specified. See warning above.

cross mark

NONEwithECDSA

ECDSA


Key Algorithms

 Support

Algorithm Name

Key Specification

check mark

RSA

  • 2048

  • 3072

  • 4096

check mark

ECDSA

Named curves:

  • secp256r1 / prime256v1 / P-256

  • secp384r1 / P-384

  • secp521r1 / P-521

 

Add a comment