Supported algorithms

The IBMCAC provider supports a range of KeyPairGenerator, Signature, Cipher, and Keystore algorithms.

The supported algorithms are shown in the following table:
Table 1. Algorithms supported by the IBMCAC provider.
Algorithm Algorithm Name Description
KeyPairGenerator
  • RSA
Generates RSA key pairs. The default keysize is 2048.
Signature
  • Start of changes for service refresh 6 fix pack 25RSA-PSSEnd of changes for service refresh 6 fix pack 25
  • SHA1withRSA
  • MD5withRSA
  • MD2withRSA
  • SHA256withRSA
  • SHA384withRSA
  • SHA512withRSA
Creates and validates signatures using various message digest and encryption algorithms, as specified in the algorithm name.
Cipher
  • RSA
  • RSA/ECB/PKCS1Padding
Performs RSA encryption and decryption.
Keystore
  • Windows-MY
  • Windows-ROOT

Windows-MY is the keystore type that identifies the native Windows MY keystore. This keystore contains the private keys and the associated certificate chains for a user.

The Windows-ROOT keystore type identifies the native Windows ROOT keystore. This keystore contains the certificate of the root certificate authorities and other self-signed trusted certificates.

SecureRandon
  • Windows-PRNG
The native pseudo-random number generator.