Signing and Signature Verification Overview and Algorithm Specifications

To ensure data integrity and non-repudiation, you can use the generated or imported key to perform signing and signature verification.

Supported Algorithms

The following table lists the supported specifications for signing and signature verification.

The key management service specifications include mandatory specifications and optional specifications. Mandatory specifications are algorithm specifications that must be supported. Optional specifications can be used based on actual situation. Before using the optional specifications, refer to the documents provided by the vendor to ensure that the specifications are supported.

You are advised to use mandatory specifications in your development for compatibility purposes.

Algorithm/MD Algorithm/Padding Mode Description API Level Mandatory
RSA/MD5/PKCS1_V1_5
RSA/SHA1/PKCS1_V1_5
RSA/SHA224/PKCS1_V1_5
RSA/SHA224/PSS
- 8+ No
RSA/SHA256/PKCS1_V1_5
RSA/SHA384/PKCS1_V1_5
RSA/SHA512/PKCS1_V1_5
RSA/SHA256/PSS
RSA/SHA384/PSS
RSA/SHA512/PSS
- 8+ Yes
RSA/NoDigest/PKCS1_V1_5 TAG HuksKeyDigest.HUSK_DIGEST_NONE must be specified with NoDigest. 9+ No
DSA/SHA1
DSA/SHA224
DSA/SHA256
DSA/SHA384
DSA/SHA512
- 8+ No
DSA/NoDigest TAG HuksKeyDigest.HUSK_DIGEST_NONE must be specified with NoDigest. 9+ No
ECC/SHA1
ECC/SHA224
- 8+ No
ECC/SHA256
ECC/SHA384
ECC/SHA512
- 8+ Yes
ECC/NoDigest TAG HuksKeyDigest.HUSK_DIGEST_NONE must be specified with NoDigest. 9+ No
ED22519/NoDigest TAG HuksKeyDigest.HUSK_DIGEST_NONE must be specified with NoDigest. 8+ Yes
SM2/SM3 - 9+ Yes