| |
Requirements
|
XMLSec with OpenSSL |
XMLSec with NSS |
XMLSec with GnuTLS |
XMLSec with MSCng |
XMLSec with MSCrypto |
XMLSec with GCrypt |
| Message Digests |
|
SHA-1
|
Required (use is DISCOURAGED) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
SHA2-224
|
Optional |
Yes |
Yes |
No |
No |
No |
No |
|
SHA2-256
|
Required |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
SHA2-384
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
SHA2-512
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
SHA3-224
|
Optional |
Yes |
No |
No |
No |
No |
No |
|
SHA3-256
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
SHA3-384
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
SHA3-512
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
RIPEMD160
|
Optional |
Yes |
No |
No |
No |
No |
Yes |
| GOST-R3411-94 |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
| GOST-R3411-2012 (256 bit) |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
| GOST-R3411-2012 (512 bit) |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
|
MD5
|
DEPRECATED |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Message Authentication Codes
|
|
HMAC-SHA1
|
Required (use is DISCOURAGED) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
HMAC-SHA2-224
|
Optional |
Yes |
Yes |
No |
No |
Yes |
No |
|
HMAC-SHA2-256
|
Required |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
HMAC-SHA2-384
|
Recommended |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
HMAC-SHA2-512
|
Recommended |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
HMAC-RIPEMD160
|
Optional |
Yes |
Yes |
No |
No |
No |
Yes |
|
HMAC-MD5
|
DEPRECATED |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
| Signatures |
|
DSA-SHA1
|
Required (use is DISCOURAGED for signature generation) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
DSA-SHA256
|
Optional |
Yes |
Yes |
Yes |
No |
No |
No |
|
PKCS1 RSA-SHA1
|
Recommended (use is DISCOURAGED for signature generation) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PKCS1 RSA-SHA2-224
|
Optional |
Yes |
Yes |
No |
No |
No |
No |
|
PKCS1 RSA-SHA2-256
|
Required |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PKCS1 RSA-SHA2-384
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PKCS1 RSA-SHA2-512
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
PKCS1 RSA-RIPEMD160
|
Optional |
Yes |
No |
No |
No |
No |
Yes |
|
PKCS1 RSA-MD5
|
DEPRECATED |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
|
ECDSA-RIPEMD160
|
Optional |
Yes |
No |
No |
No |
No |
No |
|
ECDSA-SHA1
|
Optional (use is DISCOURAGED) |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
ECDSA-SHA2-224
|
Optional |
Yes |
Yes |
No |
No |
No |
No |
|
ECDSA-SHA2-256
|
Required |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
ECDSA-SHA2-384
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
ECDSA-SHA2-512
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
ECDSA-SHA3-224
|
Optional |
Yes |
No |
No |
No |
No |
No |
|
ECDSA-SHA3-256
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
ECDSA-SHA3-384
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
ECDSA-SHA3-512
|
Optional |
Yes |
No |
Yes |
No |
No |
Yes |
|
RSASSA-PSS-SHA1 without
Parameters
|
Optional (use is DISCOURAGED) |
Yes |
Yes |
No |
Yes |
No |
Yes |
|
RSASSA-PSS-SHA2-224 without
Parameters
|
Optional |
Yes |
Yes |
No |
No |
No |
No |
|
RSASSA-PSS-SHA2-256 without
Parameters
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
RSASSA-PSS-SHA2-384 without
Parameters
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
RSASSA-PSS-SHA2-512 without
Parameters
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
RSASSA-PSS-SHA3-224 without
Parameters
|
Optional |
Yes |
No |
No |
No |
No |
No |
|
RSASSA-PSS-SHA3-256 without
Parameters
|
Optional |
Yes |
No |
No |
No |
No |
Yes |
|
RSASSA-PSS-SHA3-384 without
Parameters
|
Optional |
Yes |
No |
No |
No |
No |
Yes |
|
RSASSA-PSS-SHA3-512 without
Parameters
|
Optional |
Yes |
No |
No |
No |
No |
Yes |
| GOST-R3410-2001 |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
| GOST-R3410-2012 (256 bit) |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
| GOST-R3411-2012 (512 bit) |
Optional |
Yes (2) |
No |
Yes |
No |
Yes (3) |
No |
| The KeyInfo Element |
|
The DSAKeyValue Element
|
Optional |
Yes (4) |
Yes (4) |
Yes (4) |
Yes (4) |
Yes (4) |
Yes (4) |
|
The RSAKeyValue Element
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
|
The ECKeyValue Element
|
Optional |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
|
The DHKeyValue Element
|
Optional |
Yes |
No |
No |
No |
No |
No |
|
The X509Data Element
|
Optional |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
|
The X509Digest Element
|
Optional |
Yes |
Yes |
Yes |
Yes (5) |
No |
No |
|
The PGPData Element
|
Optional |
No |
No |
No |
No |
No |
No |
|
The SPKIData Element
|
Optional |
No |
No |
No |
No |
No |
No |
|
The
DEREncodedKeyValue Element
|
Optional |
Yes (disabled by default) |
Yes (disabled by default) |
Yes (disabled by default) |
Yes (disabled by default) |
No |
No |