ID |
Algorithm |
1 |
RSA (Encrypt or Sign) [HAC] |
2 |
RSA Encrypt-Only [HAC] |
3 |
RSA Sign-Only [HAC] |
16 |
Elgamal (Encrypt-Only) [ELGAMAL] [HAC] |
17 |
DSA (Digital Signature Algorithm) [FIPS186] [HAC] |
18 |
Reserved for Elliptic Curve |
19 |
Reserved for ECDSA |
20 |
Reserved (formerly Elgamal Encrypt or Sign) |
21 |
Reserved for Diffie-Hellman (X9.42, as defined for IETF-S/MIME) |
100 to 110 |
Private/Experimental algorithm |
Implementations MUST implement DSA for signatures, and Elgamal for encryption.
Implementations SHOULD implement RSA keys (1).
RSA Encrypt-Only (2) and RSA Sign-Only are deprecated and SHOULD NOT be generated, but may be interpreted.
See Section 13.5. See Section 13.8 for notes on Elliptic Curve (18), ECDSA (19), Elgamal Encrypt or Sign (20), and X9.42 (21). Implementations MAY implement any other algorithm.
ID |
Algorithm |
0 |
- Plaintext or unencrypted data
|
1 |
|
2 |
- TripleDES (DES-EDE, [SCHNEIER] [HAC] - 168 bit key derived from 192)
|
3 |
- CAST5 (128 bit key, as per [RFC2144])
|
4 |
- Blowfish (128 bit key, 16 rounds) [BLOWFISH]
|
5 |
|
6 |
|
7 |
- AES with 128-bit key [AES]
|
8 |
|
9 |
|
10 |
- Twofish with 256-bit key [TWOFISH]
|
100 to 110 |
- Private/Experimental algorithm
|
Implementations MUST implement TripleDES. Implementations SHOULD implement AES-128 and CAST5.
Implementations that interoperate with PGP 2.6 or earlier need to support IDEA, as that is the only
symmetric cipher those versions use. Implementations MAY implement any other algorithm.
ID |
Algorithm |
0 |
|
1 |
|
2 |
|
3 |
|
100 to 110 |
- Private/Experimental algorithm
|
Implementations MUST implement uncompressed data. Implementations SHOULD implement ZIP.
Implementations MAY implement any other algorithm.
ID |
Algorithm |
Text Name |
1 |
|
"MD5" |
2 |
|
"SHA1" |
3 |
|
"RIPEMD160" |
4 |
|
|
5 |
|
|
6 |
|
|
7 |
|
|
8 |
|
"SHA256" |
9 |
|
"SHA384" |
10 |
|
"SHA512" |
11 |
|
"SHA224" |
100 to 110 |
- Private/Experimental algorithm
|
|
Implementations MUST implement SHA-1.
Implementations MAY implement other algorithms.
MD5 is deprecated.