Supported algorithms

July 9, 2026 · View on GitHub

Supported algorithms for Bouncy Hsm version 2.3.0.0 (commit d2f1c520a0e8f4294ebfef857b95ae1b94701f2a).

Mechanisms

Bouncy Hsm supports 210 mechanisms.

BouncyHsm provides PKCS#11 interfaces for versions 2.40, 3.1, and 3.2, these versions are backward compatible. The specification in which the mechanism was added is indicated for each mechanism.

The mechanism can also be used in older versions of the native API.

MechanismMin key sizeMax key sizeDigestSign, VerifySignRecover, VerifyRecoverDeriveEncrypt, DecryptGenerate key pairGenerate keyWrap, UnwrapEncapsulate, Decapsulate
CKM_RSA_PKCS_KEY_PAIR_GEN20486144
CKM_RSA_PKCS20486144
CKM_RSA_979620486144
CKM_MD2_RSA_PKCS20486144
CKM_MD5_RSA_PKCS20486144
CKM_SHA1_RSA_PKCS20486144
CKM_RIPEMD128_RSA_PKCS20486144
CKM_RIPEMD160_RSA_PKCS20486144
CKM_RSA_PKCS_OAEP20486144
CKM_RSA_X9_31_KEY_PAIR_GEN20486144
CKM_SHA1_RSA_X9_3120486144
CKM_RSA_PKCS_PSS20486144
CKM_SHA1_RSA_PKCS_PSS20486144
CKM_ML_KEM_KEY_PAIR_GEN v3.28001568
CKM_ML_KEM v3.28001568
CKM_ML_DSA_KEY_PAIR_GEN v3.213122592
CKM_ML_DSA v3.213122592
CKM_HASH_ML_DSA v3.213122592
CKM_HASH_ML_DSA_SHA224 v3.213122592
CKM_HASH_ML_DSA_SHA256 v3.213122592
CKM_HASH_ML_DSA_SHA384 v3.213122592
CKM_HASH_ML_DSA_SHA512 v3.213122592
CKM_HASH_ML_DSA_SHA3_224 v3.213122592
CKM_HASH_ML_DSA_SHA3_256 v3.213122592
CKM_HASH_ML_DSA_SHA3_384 v3.213122592
CKM_HASH_ML_DSA_SHA3_512 v3.213122592
CKM_HASH_ML_DSA_SHAKE128 v3.213122592
CKM_HASH_ML_DSA_SHAKE256 v3.213122592
CKM_SLH_DSA_KEY_PAIR_GEN v3.23264
CKM_SLH_DSA v3.23264
CKM_HASH_SLH_DSA v3.23264
CKM_HASH_SLH_DSA_SHA224 v3.23264
CKM_HASH_SLH_DSA_SHA256 v3.23264
CKM_HASH_SLH_DSA_SHA384 v3.23264
CKM_HASH_SLH_DSA_SHA512 v3.23264
CKM_HASH_SLH_DSA_SHA3_224 v3.23264
CKM_HASH_SLH_DSA_SHA3_256 v3.23264
CKM_HASH_SLH_DSA_SHA3_384 v3.23264
CKM_HASH_SLH_DSA_SHA3_512 v3.23264
CKM_HASH_SLH_DSA_SHAKE128 v3.23264
CKM_HASH_SLH_DSA_SHAKE256 v3.23264
CKM_SHA256_RSA_PKCS20486144
CKM_SHA384_RSA_PKCS20486144
CKM_SHA512_RSA_PKCS20486144
CKM_SHA256_RSA_PKCS_PSS20486144
CKM_SHA384_RSA_PKCS_PSS20486144
CKM_SHA512_RSA_PKCS_PSS20486144
CKM_SHA224_RSA_PKCS20486144
CKM_SHA224_RSA_PKCS_PSS20486144
CKM_SHA512_22400
CKM_SHA512_224_HMAC110485760
CKM_SHA512_224_HMAC_GENERAL110485760
CKM_SHA512_224_KEY_DERIVATION110485760
CKM_SHA512_25600
CKM_SHA512_256_HMAC110485760
CKM_SHA512_256_HMAC_GENERAL110485760
CKM_SHA512_256_KEY_DERIVATION110485760
CKM_SHA512_T00
CKM_SHA3_256_RSA_PKCS v3.120486144
CKM_SHA3_384_RSA_PKCS v3.120486144
CKM_SHA3_512_RSA_PKCS v3.120486144
CKM_SHA3_256_RSA_PKCS_PSS v3.120486144
CKM_SHA3_384_RSA_PKCS_PSS v3.120486144
CKM_SHA3_512_RSA_PKCS_PSS v3.120486144
CKM_SHA3_224_RSA_PKCS v3.120486144
CKM_SHA3_224_RSA_PKCS_PSS v3.120486144
CKM_MD200
CKM_MD2_HMAC110485760
CKM_MD2_HMAC_GENERAL110485760
CKM_MD500
CKM_MD5_HMAC110485760
CKM_MD5_HMAC_GENERAL110485760
CKM_SHA_100
CKM_SHA_1_HMAC110485760
CKM_SHA_1_HMAC_GENERAL110485760
CKM_RIPEMD12800
CKM_RIPEMD128_HMAC110485760
CKM_RIPEMD128_HMAC_GENERAL110485760
CKM_RIPEMD16000
CKM_RIPEMD160_HMAC110485760
CKM_RIPEMD160_HMAC_GENERAL110485760
CKM_SHA25600
CKM_SHA256_HMAC110485760
CKM_SHA256_HMAC_GENERAL110485760
CKM_SHA22400
CKM_SHA224_HMAC110485760
CKM_SHA224_HMAC_GENERAL110485760
CKM_SHA38400
CKM_SHA384_HMAC110485760
CKM_SHA384_HMAC_GENERAL110485760
CKM_SHA51200
CKM_SHA512_HMAC110485760
CKM_SHA512_HMAC_GENERAL110485760
CKM_SHA3_256 v3.100
CKM_SHA3_256_HMAC v3.1110485760
CKM_SHA3_256_HMAC_GENERAL v3.1110485760
CKM_SHA3_256_KEY_GEN v3.1110485760
CKM_SHA3_224 v3.100
CKM_SHA3_224_HMAC v3.1110485760
CKM_SHA3_224_HMAC_GENERAL v3.1110485760
CKM_SHA3_224_KEY_GEN v3.1110485760
CKM_SHA3_384 v3.100
CKM_SHA3_384_HMAC v3.1110485760
CKM_SHA3_384_HMAC_GENERAL v3.1110485760
CKM_SHA3_384_KEY_GEN v3.1110485760
CKM_SHA3_512 v3.100
CKM_SHA3_512_HMAC v3.1110485760
CKM_SHA3_512_HMAC_GENERAL v3.1110485760
CKM_SHA3_512_KEY_GEN v3.1110485760
CKM_GENERIC_SECRET_KEY_GEN110485760
CKM_CONCATENATE_BASE_AND_KEY110485760
CKM_CONCATENATE_BASE_AND_DATA110485760
CKM_CONCATENATE_DATA_AND_BASE110485760
CKM_XOR_BASE_AND_DATA110485760
CKM_EXTRACT_KEY_FROM_KEY110485760
CKM_MD5_KEY_DERIVATION110485760
CKM_MD2_KEY_DERIVATION110485760
CKM_SHA1_KEY_DERIVATION110485760
CKM_SHA256_KEY_DERIVATION110485760
CKM_SHA384_KEY_DERIVATION110485760
CKM_SHA512_KEY_DERIVATION110485760
CKM_SHA224_KEY_DERIVATION110485760
CKM_SHA3_256_KEY_DERIVATION v3.1110485760
CKM_SHA3_224_KEY_DERIVATION v3.1110485760
CKM_SHA3_384_KEY_DERIVATION v3.1110485760
CKM_SHA3_512_KEY_DERIVATION v3.1110485760
CKM_SHAKE_128_KEY_DERIVATION v3.1110485760
CKM_SHAKE_256_KEY_DERIVATION v3.1110485760
CKM_SP800_108_COUNTER_KDF v3.1110485760
CKM_SP800_108_FEEDBACK_KDF v3.1110485760
CKM_SP800_108_DOUBLE_PIPELINE_KDF v3.1110485760
CKM_CAMELLIA_KEY_GEN1632
CKM_CAMELLIA_ECB1632
CKM_CAMELLIA_CBC1632
CKM_CAMELLIA_CBC_PAD1632
CKM_CAMELLIA_ECB_ENCRYPT_DATA1632
CKM_CAMELLIA_CBC_ENCRYPT_DATA1632
CKM_ECDSA_KEY_PAIR_GEN192521
CKM_ECDSA192521
CKM_ECDSA_SHA1192521
CKM_ECDSA_SHA224192521
CKM_ECDSA_SHA256192521
CKM_ECDSA_SHA384192521
CKM_ECDSA_SHA512192521
CKM_ECDSA_SHA3_224 v3.1192521
CKM_ECDSA_SHA3_256 v3.1192521
CKM_ECDSA_SHA3_384 v3.1192521
CKM_ECDSA_SHA3_512 v3.1192521
CKM_ECDH1_DERIVE192521
CKM_ECDH1_COFACTOR_DERIVE192521
CKM_EC_EDWARDS_KEY_PAIR_GEN v3.13257
CKM_EC_MONTGOMERY_KEY_PAIR_GEN v3.13257
CKM_EDDSA v3.13257
CKM_AES_KEY_GEN1632
CKM_AES_ECB1632
CKM_AES_CBC1632
CKM_AES_CBC_PAD1632
CKM_AES_CTR1632
CKM_AES_GCM1632
CKM_AES_CCM1632
CKM_AES_CTS1632
CKM_AES_CMAC1632
CKM_AES_CMAC_GENERAL1632
CKM_AES_GMAC1632
CKM_AES_ECB_ENCRYPT_DATA1632
CKM_AES_CBC_ENCRYPT_DATA1632
CKM_GOSTR341100
CKM_GOSTR3411_HMAC110485760
CKM_CHACHA20_KEY_GEN v3.13232
CKM_CHACHA20 v3.13232
CKM_POLY1305_KEY_GEN v3.13232
CKM_POLY1305 v3.13232
CKM_AES_OFB1632
CKM_AES_CFB641632
CKM_AES_CFB81632
CKM_AES_CFB1281632
CKM_AES_CFB11632
CKM_AES_KEY_WRAP_PAD1632
CKM_SHA_1_KEY_GEN v3.1110485760
CKM_SHA224_KEY_GEN v3.1110485760
CKM_SHA256_KEY_GEN v3.1110485760
CKM_SHA384_KEY_GEN v3.1110485760
CKM_SHA512_KEY_GEN v3.1110485760
CKM_SHA512_224_KEY_GEN v3.1110485760
CKM_SHA512_256_KEY_GEN v3.1110485760
CKM_SHA512_T_KEY_GEN v3.1110485760
CKM_BLAKE2B_160 v3.100
CKM_BLAKE2B_160_HMAC v3.1110485760
CKM_BLAKE2B_160_HMAC_GENERAL v3.1110485760
CKM_BLAKE2B_160_KEY_DERIVE v3.1110485760
CKM_BLAKE2B_160_KEY_GEN v3.1110485760
CKM_BLAKE2B_256 v3.100
CKM_BLAKE2B_256_HMAC v3.1110485760
CKM_BLAKE2B_256_HMAC_GENERAL v3.1110485760
CKM_BLAKE2B_256_KEY_DERIVE v3.1110485760
CKM_BLAKE2B_256_KEY_GEN v3.1110485760
CKM_BLAKE2B_384 v3.100
CKM_BLAKE2B_384_HMAC v3.1110485760
CKM_BLAKE2B_384_HMAC_GENERAL v3.1110485760
CKM_BLAKE2B_384_KEY_DERIVE v3.1110485760
CKM_BLAKE2B_384_KEY_GEN v3.1110485760
CKM_BLAKE2B_512 v3.100
CKM_BLAKE2B_512_HMAC v3.1110485760
CKM_BLAKE2B_512_HMAC_GENERAL v3.1110485760
CKM_BLAKE2B_512_KEY_DERIVE v3.1110485760
CKM_BLAKE2B_512_KEY_GEN v3.1110485760
CKM_SALSA20 v3.13232
CKM_CHACHA20_POLY1305 v3.13232
CKM_HKDF_DERIVE v3.1110485760
CKM_SALSA20_KEY_GEN v3.13232

Elliptic curves

Bouncy Hsm supports 84 different named elliptic curves.

KindCurveOID
X962prime192v11.2.840.10045.3.1.1
X962prime192v21.2.840.10045.3.1.2
X962prime192v31.2.840.10045.3.1.3
X962prime239v11.2.840.10045.3.1.4
X962prime239v21.2.840.10045.3.1.5
X962prime239v31.2.840.10045.3.1.6
X962prime256v11.2.840.10045.3.1.7
X962c2pnb163v11.2.840.10045.3.0.1
X962c2pnb163v21.2.840.10045.3.0.2
X962c2pnb163v31.2.840.10045.3.0.3
X962c2pnb176w11.2.840.10045.3.0.4
X962c2tnb191v11.2.840.10045.3.0.5
X962c2tnb191v21.2.840.10045.3.0.6
X962c2tnb191v31.2.840.10045.3.0.7
X962c2pnb208w11.2.840.10045.3.0.10
X962c2tnb239v11.2.840.10045.3.0.11
X962c2tnb239v21.2.840.10045.3.0.12
X962c2tnb239v31.2.840.10045.3.0.13
X962c2pnb272w11.2.840.10045.3.0.16
X962c2pnb304w11.2.840.10045.3.0.17
X962c2tnb359v11.2.840.10045.3.0.18
X962c2pnb368w11.2.840.10045.3.0.19
X962c2tnb431r11.2.840.10045.3.0.20
SACsecp112r11.3.132.0.6
SACsecp112r21.3.132.0.7
SACsecp128r11.3.132.0.28
SACsecp128r21.3.132.0.29
SACsecp160k11.3.132.0.9
SACsecp160r11.3.132.0.8
SACsecp160r21.3.132.0.30
SACsecp192k11.3.132.0.31
SACsecp192r11.2.840.10045.3.1.1
SACsecp224k11.3.132.0.32
SACsecp224r11.3.132.0.33
SACsecp256k11.3.132.0.10
SACsecp256r11.2.840.10045.3.1.7
SACsecp384r11.3.132.0.34
SACsecp521r11.3.132.0.35
SACsect113r11.3.132.0.4
SACsect113r21.3.132.0.5
SACsect131r11.3.132.0.22
SACsect131r21.3.132.0.23
SACsect163k11.3.132.0.1
SACsect163r11.3.132.0.2
SACsect163r21.3.132.0.15
SACsect193r11.3.132.0.24
SACsect193r21.3.132.0.25
SACsect233k11.3.132.0.26
SACsect233r11.3.132.0.27
SACsect239k11.3.132.0.3
SACsect283k11.3.132.0.16
SACsect283r11.3.132.0.17
SACsect409k11.3.132.0.36
SACsect409r11.3.132.0.37
SACsect571k11.3.132.0.38
SACsect571r11.3.132.0.39
NISTB-1631.3.132.0.15
NISTB-2331.3.132.0.27
NISTB-2831.3.132.0.17
NISTB-4091.3.132.0.37
NISTB-5711.3.132.0.39
NISTK-1631.3.132.0.1
NISTK-2331.3.132.0.26
NISTK-2831.3.132.0.16
NISTK-4091.3.132.0.36
NISTK-5711.3.132.0.38
NISTP-1921.2.840.10045.3.1.1
NISTP-2241.3.132.0.33
NISTP-2561.2.840.10045.3.1.7
NISTP-3841.3.132.0.34
NISTP-5211.3.132.0.35
TeleTrusTbrainpoolP160r11.3.36.3.3.2.8.1.1.1
TeleTrusTbrainpoolP160t11.3.36.3.3.2.8.1.1.2
TeleTrusTbrainpoolP192r11.3.36.3.3.2.8.1.1.3
TeleTrusTbrainpoolP192t11.3.36.3.3.2.8.1.1.4
TeleTrusTbrainpoolP224r11.3.36.3.3.2.8.1.1.5
TeleTrusTbrainpoolP224t11.3.36.3.3.2.8.1.1.6
TeleTrusTbrainpoolP256r11.3.36.3.3.2.8.1.1.7
TeleTrusTbrainpoolP256t11.3.36.3.3.2.8.1.1.8
TeleTrusTbrainpoolP320r11.3.36.3.3.2.8.1.1.9
TeleTrusTbrainpoolP320t11.3.36.3.3.2.8.1.1.10
TeleTrusTbrainpoolP384r11.3.36.3.3.2.8.1.1.11
TeleTrusTbrainpoolP384t11.3.36.3.3.2.8.1.1.12
TeleTrusTbrainpoolP512r11.3.36.3.3.2.8.1.1.13
TeleTrusTbrainpoolP512t11.3.36.3.3.2.8.1.1.14
AnciiFRP256v11.2.250.1.223.101.256.1
ECGost3410GostR3410-2001-CryptoPro-A1.2.643.2.2.35.1
ECGost3410GostR3410-2001-CryptoPro-B1.2.643.2.2.35.2
ECGost3410GostR3410-2001-CryptoPro-C1.2.643.2.2.35.3
ECGost3410GostR3410-2001-CryptoPro-XchA1.2.643.2.2.36.0
ECGost3410GostR3410-2001-CryptoPro-XchB1.2.643.2.2.36.1
ECGost3410Tc26-Gost-3410-12-256-paramSetA1.2.643.7.1.2.1.1.1
ECGost3410Tc26-Gost-3410-12-256-paramSetB1.2.643.7.1.2.1.1.2
ECGost3410Tc26-Gost-3410-12-256-paramSetC1.2.643.7.1.2.1.1.3
ECGost3410Tc26-Gost-3410-12-256-paramSetD1.2.643.7.1.2.1.1.4
ECGost3410Tc26-Gost-3410-12-512-paramSetA1.2.643.7.1.2.1.2.1
ECGost3410Tc26-Gost-3410-12-512-paramSetB1.2.643.7.1.2.1.2.2
ECGost3410Tc26-Gost-3410-12-512-paramSetC1.2.643.7.1.2.1.2.3
GMNwapip192v11.2.156.10197.1.301.101
GMNwapi192v11.2.156.11235.1.1.1
GMNsm2p256v11.2.156.10197.1.301

Edwards curves

Bouncy Hsm supports 2 different named edwards curves.

KindCurveCurve NameOID
EdwardsEd25519id-Ed255191.3.101.112
EdwardsEd448id-Ed4481.3.101.113

Montgomery curves

Bouncy Hsm supports 2 different named montgomery curves.

KindCurveCurve NameOID
MontgomeryX25519id-X255191.3.101.110
MontgomeryX448id-X4481.3.101.111

ML-DSA keys

Bouncy Hsm supports 3 different ML-DSA key parameters.

Key
ML-DSA-44
ML-DSA-65
ML-DSA-87

SLH-DSA keys

Bouncy Hsm supports 12 different SLH-DSA key parameters.

Key
SLH-DSA-SHA2-128S
SLH-DSA-SHAKE-128S
SLH-DSA-SHA2-128F
SLH-DSA-SHAKE-128F
SLH-DSA-SHA2-192S
SLH-DSA-SHAKE-192S
SLH-DSA-SHA2-192F
SLH-DSA-SHAKE-192F
SLH-DSA-SHA2-256S
SLH-DSA-SHAKE-256S
SLH-DSA-SHA2-256F
SLH-DSA-SHAKE-256F

ML-KEM keys

Bouncy Hsm supports 3 different ML-KEM key parameters.

Key
ML-KEM-512
ML-KEM-768
ML-KEM-1024