Azure Key Vault Crypto Token Algorithm Support

This page lists algorithms that are known to work or not work with the current implementation. Also, see the specific SignServer Signer for algorithms that signers can work with and review signer-specific algorithm support pages.

The following lists supported algorithms that are known to work with most workers and therefore the list may not be complete.

For algorithms supporting withECDSA, a signature algorithm matching the ECDSA curve must be specified in the SIGNATUREALGORITHM property. For example, use SHA384withECDSA for a key using secp384r1/P-384.

Signature Algorithms

Algorithm Name	Also Known As	Comment
SHA256withECDSA	ECDSA using SHA256	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
SHA384withECDSA	ECDSA using SHA384	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
SHA512withECDSA	ECDSA using SHA512	Azure Key Vault requires the Signature Algorithm to be specified. See warning above.
NONEwithECDSA	ECDSA
SHA1withRSA	RSASSA-PKCS_v1.5 using SHA1
SHA256withRSA	RSASSA-PKCS_v1.5 using SHA256
SHA384withRSA	RSASSA-PKCS_v1.5 using SHA384
SHA512withRSA	RSASSA-PKCS_v1.5 using SHA512
NONEwithRSA	RSASSA-PKCS_v1.5
SHA256withRSAandMGF1	RSASSA-PSS using SHA256
SHA384withRSAandMGF1	RSASSA-PSS using SHA384
SHA512withRSAandMGF1	RSASSA-PSS using SHA512
NONEwithRSAandMGF1	RSASSA-PSS

Key Algorithms

Support

Algorithm Name

Key Specification

RSA

2048
3072
4096

ECDSA

Named curves:

secp256r1 / prime256v1 / P-256
secp384r1 / P-384
secp521r1 / P-521

Digest Algorithms

Support	Algorithm Name	Comment
	SHA256
	SHA384
	SHA512