Reference
Registries
The code points protocols put on the wire, from the IANA registries, Chrome's Certificate Transparency log list and CCADB, rebuilt from snapshots of the upstream files with their retrieval dates and licenses.
TLS
- TLS cipher suites with OpenSSL, GnuTLS and NSS namesEvery cipher suite of the IANA TLS registry with its code point, OpenSSL, GnuTLS and NSS names, protocol versions and a rating that explains each weak suite.372 entries
- TLS supported groups: curves, FFDHE and ML-KEMNamed groups for TLS key exchange from the IANA registry: elliptic curves, finite-field groups, ML-KEM and hybrid post-quantum groups, with code points.75 entries
- TLS signature schemes (SignatureScheme values)SignatureScheme code points of TLS 1.3 and the signature_algorithms extension, from ECDSA and RSA-PSS to EdDSA, ML-DSA and SLH-DSA, with IANA recommendations.49 entries
- TLS extensions (ExtensionType values)TLS ExtensionType values of the IANA registry with the TLS 1.3 handshake messages each extension may appear in, deprecated code points and GREASE values.80 entries
JOSE, JWK and COSE
- JOSE algorithms: alg and enc values for JWS and JWEJWS and JWE algorithm identifiers of the IANA JOSE registry, from HS256 and ES256 to ML-DSA and HPKE, with their implementation requirements and RFCs.67 entries
- JOSE header parameters for JWS and JWERegistered JWS and JWE header parameters such as alg, kid, typ, crit, jwk and x5c, with what each one means, where it is registered and the defining document.35 entries
- JWK parameters, key types and curvesJSON Web Key members, kty values and crv names of the IANA JOSE registry, including which members carry private key material and must never be published.42 entries · 3 tables
- COSE algorithms, key types and curvesCOSE algorithm identifiers, key types and elliptic curves used by CWT, WebAuthn, mdoc and other CBOR formats, with the recommendations of the IANA registry.105 entries · 3 tables
SSH
DNSSEC and DANE
- DNSSEC algorithm numbers and DS digest typesDNSKEY and RRSIG algorithm numbers and DS digest types of the IANA registry, with the RFC 9904 guidance on what to use for signing, delegation and validation.26 entries · 2 tables
- DANE TLSA fields: usage, selector, matching typeThe three numeric fields of a DANE TLSA record — certificate usage, selector and matching type — with their acronyms and meaning, from the IANA DANE registry.13 entries · 3 tables
HPKE
Web PKI
- Certificate Transparency logs in Chrome's log listThe Certificate Transparency logs of Chrome's log list with their operator, state, key, API and the window of certificate expiry dates each log accepts.85 entries
- Root certificates in Apple, Chrome, Microsoft and MozillaRoot certificates of the Apple, Chrome, Microsoft and Mozilla root stores from CCADB, with the inclusion status in each store, the owner, key and expiry.368 entries
- Object identifiersOIDs of X.509, CMS, PKCS and post-quantum PKI in a tree of arcs, with DER encodings and references.938 entries