ALGORITHMS

RSA PKCS1 SHA1

1

rsa-pkcs1-sha1

RSA sign with PKCS1.5

RSA PKCS1 SHA256

2

rsa-pkcs1-sha256

RSA sign with PKCS1.5

RSA PKCS1 SHA384

3

rsa-pkcs1-sha384

RSA sign with PKCS1.5

RSA PKCS1 SHA512

4

rsa-pkcs1-sha512

RSA sign with PKCS1.5

RSA PSS SHA1

5

rsa-pss-sha1

RSA sign with PSS

RSA PSS SHA256

6

rsa-pss-sha256

RSA sign with PSS

RSA PSS SHA384

7

rsa-pss-sha384

RSA sign with PSS

RSA PSS SHA512

8

rsa-pss-sha512

RSA sign with PSS

RSA 2048

9

rsa2048

Generate RSA key

RSA 3072

10

rsa3072

Generate RSA key

RSA 4096

11

rsa4096

Generate RSA key

EC P224

47

ecp224

secp224r1

Generate EC key

EC P256

12

ecp256

secp256r1

Generate EC key

EC P384

13

ecp384

secp384r1

Generate EC key

EC P521

14

ecp521

secp521r1

Generate EC key

EC K256

15

eck256

secp256k1

Generate EC key

EC BP256

16

ecbp256

brainpool256r1

Generate EC key

EC BP384

17

ecbp384

brainpool384r1

Generate EC key

EC BP512

18

ecbp512

brainpool512r1

Generate EC key

HMAC SHA1

19

hmac-sha1

Generate HMAC key

HMAC SHA256

20

hmac-sha256

Generate HMAC key

HMAC SHA384

21

hmac-sha384

Generate HMAC key

HMAC SHA512

22

hmac-sha512

Generate HMAC key

ECDSA SHA1

23

ecdsa-sha1

ECDSA sign

EC ECDH

24

ecdh

RSA OAEP SHA1

25

rsa-oaep-sha1

RSA decrypt with OAEP

RSA OAEP SHA256

26

rsa-oaep-sha256

RSA decrypt with OAEP

RSA OAEP SHA384

27

rsa-oaep-sha384

RSA decrypt with OAEP

RSA OAEP SHA512

28

rsa-oaep-sha512

RSA decrypt with OAEP

Opaque Data

30

opaque-data

Store raw data as an opaque object

Opaque X509 Certificate

31

opaque-x509-certificate

Store X509Certificate as an opaque object

MGF1 SHA1

32

mgf1-sha1

RSA sign with PSS and RSA decrypt with OAEP

MGF1 SHA256

33

mgf1-sha256

RSA sign with PSS and RSA decrypt with OAEP

MGF1 SHA384

34

mgf1-sha384

RSA sign with PSS and RSA decrypt with OAEP

MGF1 SHA512

35

mgf1-sha512

RSA sign with PSS and RSA decrypt with OAEP

SSH Template

36

template-ssh

Store an SSH template (a binary object used to restrict how and when an SSH CA private key should be used)

Yubico OTP AES128

37

aes128-yubico-otp

Generate OTP AEAD key

Yubico AES Authentication

38

aes128-yubico-authentication

Store authentication key

Yubico EC P256 Authentication

49

ecp256-yubico-authentication

Store asymmetric authentication key (Available with firmware version 2.3.1 or later)

Yubico OTP AES192

39

aes192-yubico-otp

Generate OTP AEAD key

Yubico OTP AES256

40

aes256-yubico-otp

Generate OTP AEAD key

AES128 CCM WRAP

29

aes128-ccm-wrap

Generate Wrap key

AES192 CCM WRAP

41

aes192-ccm-wrap

Generate and store wrap key

AES256 CCM WRAP

42

aes256-ccm-wrap

Generate and store wrap key

ECDSA SHA256

43

ecdsa-sha256

ECDSA sign

ECDSA SHA384

44

ecdsa-sha384

ECDSA sign

ECDSA SHA512

45

ecdsa-sha512

ECDSA sign

ED25519

46

ed25519

Generate ED key

AES128

50

aes128

Generate AES key (Available with firmware version 2.3.1 or later)

AES192

51

aes192

Generate AES key (Available with firmware version 2.3.1 or later)

AES256

52

aes256

Generate AES key (Available with firmware version 2.3.1 or later)

AES ECB

53

aes-ecb

AES-ECB encryption/decryption (Available with firmware version 2.3.1 or later)

AES CBC

54

aes-cbc

AES-CBC encryption/decryption (Available with firmware version 2.3.1 or later)