Supported encryption algorithms

CodeSign Protect supports a range of encryption algorithms for use in code signing operations. This article lists all supported algorithms.

NOTE  Not all algorithms listed here are necessarily available in every CodeSign Protect Project. Availability is determined in three steps:

  1. The Master Admin selects which algorithms are available system-wide.

  2. The Code Signing Administrator then chooses which of those algorithms are allowed on individual Environment Templates.

  3. The Project Owner selects an Environment Template when creating a Project, which determines which algorithms are available for the Project.

Algorithm Family Strength Notes
RSA 2048 RSA 112 Not available for certificates
RSA 3072 RSA 128  
RSA 4096 RSA 128  
RSA 8192 RSA 192  
RSA PSS/OAEP 2048 RSA 112 Not available for certificates
RSA PSS/OAEP 3072 RSA 128  
RSA PSS/OAEP 4096 RSA 128  
RSA PSS/OAEP 8192 RSA 192  
ECDSA P-256 Elliptic Curve 128  
ECDSA P-384 Elliptic Curve 192  
ECDSA P-521 Elliptic Curve 256  
Brainpool P-256r1 Elliptic Curve 128  
Brainpool P-384r1 Elliptic Curve 192  
Brainpool P-512r1 Elliptic Curve 256  
SEC P-256k1 Elliptic Curve 128  
SEC P-224k1 Elliptic Curve 112  
Ed25519 Edwards Curve 128  
Ed448 Edwards Curve 224  
ML-DSA44 PQ: FIPS-204 128  
ML-DSA65 PQ: FIPS-204 192  
ML-DSA87 PQ: FIPS-204 256  
SLH-DSA-SHA2-128s PQ: FIPS-205 128  
SLH-DSA-SHA2-128f PQ: FIPS-205 128  
SLH-DSA-SHA2-192s PQ: FIPS-205 192  
SLH-DSA-SHA2-192f PQ: FIPS-205 192  
SLH-DSA-SHA2-256s PQ: FIPS-205 256  
SLH-DSA-SHA2-256f PQ: FIPS-205 256  
SLH-DSA-Shake-128s PQ: FIPS-205 128  
SLH-DSA-Shake-128f PQ: FIPS-205 128  
SLH-DSA-Shake-192s PQ: FIPS-205 192  
SLH-DSA-Shake-192f PQ: FIPS-205 192  
SLH-DSA-Shake-256s PQ: FIPS-205 256  
SLH-DSA-Shake-256f PQ: FIPS-205 256  
HASH-SLH-DSA-SHA2-128s-SHA256 PQ: FIPS-205 128  
HASH-SLH-DSA-SHA2-128f-SHA256 PQ: FIPS-205 128  
HASH-SLH-DSA-SHA2-192s-SHA512 PQ: FIPS-205 192  
HASH-SLH-DSA-SHA2-192f-SHA512 PQ: FIPS-205 192  
HASH-SLH-DSA-SHA2-256s-SHA512 PQ: FIPS-205 256  
HASH-SLH-DSA-SHA2-256f-SHA512 PQ: FIPS-205 256  
HASH-SLH-DSA-Shake-128s-Shake128 PQ: FIPS-205 128  
HASH-SLH-DSA-Shake-128f-Shake128 PQ: FIPS-205 128  
HASH-SLH-DSA-Shake-192s-SHAke256 PQ: FIPS-205 192  
HASH-SLH-DSA-Shake-192f-SHAke256 PQ: FIPS-205 192  
HASH-SLH-DSA-Shake-256s-SHAke256 PQ: FIPS-205 256  
HASH-SLH-DSA-Shake-256f-SHAke256 PQ: FIPS-205 256