AzureKeyVaultCryptoToken Algorithm Support

This page lists algorithms that are known to work or not work with the current implementation. Also, see the specific SignServer Signer for algorithms that signers can work with and review signer-specific algorithm support pages.

The following lists supported algorithms that are known to work with most workers and therefore the list may not be complete.

For algorithms supporting withECDSA, a signature algorithm matching the ECDSA curve must be specified in the SIGNATUREALGORITHM property. For example, use SHA384withECDSA for a key using secp384r1/P-384.

Signature Algorithms

Algorithm Name	Also Known As	Comment
SHA1withRSA	RSASSA-PKCS_v1.5 using SHA1
SHA256withRSA	RSASSA-PKCS_v1.5 using SHA256
SHA384withRSA	RSASSA-PKCS_v1.5 using SHA384
SHA512withRSA	RSASSA-PKCS_v1.5 using SHA512
NONEwithRSA	RSASSA-PKCS_v1.5
SHA256withRSAandMGF1	RSASSA-PSS using SHA256
SHA384withRSAandMGF1	RSASSA-PSS using SHA384
SHA512withRSAandMGF1	RSASSA-PSS using SHA512
NONEwithRSAandMGF1	RSASSA-PSS
SHA256withECDSA	ECDSA using SHA256	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
SHA384withECDSA	ECDSA using SHA384	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
SHA512withECDSA	ECDSA using SHA512	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
NONEwithECDSA	ECDSA

Key Algorithms

Algorithm Name

Key Specification

Comment

RSA

2048
3072
4096

ECDSA

Named curves:

secp256r1 / prime256v1 / P-256
secp384r1 / P-384
secp521r1 / P-521

Add a comment