Supported Algorithms

Message digests (hashes)

  • SHA1
  • SHA224
  • SHA256
  • SHA384
  • SHA512


Message authentication codes (MAC)

  • HMAC
  • AES CMAC


Unauthenticated ciphers

  • AES CTR / CCM* / CBC / ECB
  • ChaCha20


Authenticated encryption with associated data (AEAD)

  • AES CCM / GCM
  • AEAD-ChaCha20-Poly1305


Key derivation

  • HKDF
  • PBKDF2 HMAC
  • PBKDF2 CMAC PRF 128


Asymmetric signature

  • RSA 1024 / 2048 bit
  • ECDSA P224 / P256
  • Ed25519


Asymmetric encryption

  • RSA 1024 / 2048 bit


Key agreement

  • ECDH P224 / P256
  • X25519


Password-authenticated key exchange (PAKE)

  • EC-JPAKE P256
  • SPAKE2+ P256 HMAC
  • SRP 3072 bit


Random number generation

  • CTR DRBG
  • HMAC DRBG