JOSE, JWK and COSE

COSE algorithms, key types and curves

COSE algorithm identifiers, key types and elliptic curves used by CWT, WebAuthn, mdoc and other CBOR formats, with the recommendations of the IANA registry.

105 of 105 shown

COSE algorithms · 86 entries

COSE algorithm identifiers used in CWT, WebAuthn, mDL and other CBOR formats.

Value	Name	Description	References
`-65535`	`RS1`	RS1 (COSE algorithm -65535): RSASSA-PKCS1-v1_5 using SHA-1. Family: RSASSA-PKCS1-v1_5. Recommended: deprecated.	RFC 8812 RFC 9053
`-65534`	`A128CTR`	A128CTR (COSE algorithm -65534): AES-CTR w/ 128-bit key. Family: AES-CTR without authentication. Recommended: deprecated.	RFC 9459
`-65533`	`A192CTR`	A192CTR (COSE algorithm -65533): AES-CTR w/ 192-bit key. Family: AES-CTR without authentication. Recommended: deprecated.	RFC 9459
`-65532`	`A256CTR`	A256CTR (COSE algorithm -65532): AES-CTR w/ 256-bit key. Family: AES-CTR without authentication. Recommended: deprecated.	RFC 9459
`-65531`	`A128CBC`	A128CBC (COSE algorithm -65531): AES-CBC w/ 128-bit key. Family: AES-CBC without authentication. Recommended: deprecated.	RFC 9459
`-65530`	`A192CBC`	A192CBC (COSE algorithm -65530): AES-CBC w/ 192-bit key. Family: AES-CBC without authentication. Recommended: deprecated.	RFC 9459
`-65529`	`A256CBC`	A256CBC (COSE algorithm -65529): AES-CBC w/ 256-bit key. Family: AES-CBC without authentication. Recommended: deprecated.	RFC 9459
`-268`	`ESB512`	ESB512 (COSE algorithm -268): ECDSA using BrainpoolP512r1 curve and SHA-512. Family: ECDSA. Recommended: no.brainpoolP512r1	RFC 9864, Section 2.1
`-267`	`ESB384`	ESB384 (COSE algorithm -267): ECDSA using BrainpoolP384r1 curve and SHA-384. Family: ECDSA. Recommended: no.brainpoolP384r1	RFC 9864, Section 2.1
`-266`	`ESB320`	ESB320 (COSE algorithm -266): ECDSA using BrainpoolP320r1 curve and SHA-384. Family: ECDSA. Recommended: no.brainpoolP320r1	RFC 9864, Section 2.1
`-265`	`ESB256`	ESB256 (COSE algorithm -265): ECDSA using BrainpoolP256r1 curve and SHA-256. Family: ECDSA. Recommended: no.brainpoolP256r1	RFC 9864, Section 2.1
`-264`	`KT256`	KT256 (COSE algorithm -264): KT256 XOF. Family: an extendable-output function. Recommended: no.	RFC 9861
`-263`	`KT128`	KT128 (COSE algorithm -263): KT128 XOF. Family: an extendable-output function. Recommended: no.	RFC 9861
`-262`	`TurboSHAKE256`	TurboSHAKE256 (COSE algorithm -262): TurboSHAKE256 XOF. Family: an extendable-output function. Recommended: no.	RFC 9861
`-261`	`TurboSHAKE128`	TurboSHAKE128 (COSE algorithm -261): TurboSHAKE128 XOF. Family: an extendable-output function. Recommended: no.	RFC 9861
`-260`	`WalnutDSA`	WalnutDSA (COSE algorithm -260): WalnutDSA signature. Family: WalnutDSA. Recommended: no.	RFC 9021 RFC 9053
`-259`	`RS512`	RS512 (COSE algorithm -259): RSASSA-PKCS1-v1_5 using SHA-512. Family: RSASSA-PKCS1-v1_5. Recommended: no.	RFC 8812 RFC 9053
`-258`	`RS384`	RS384 (COSE algorithm -258): RSASSA-PKCS1-v1_5 using SHA-384. Family: RSASSA-PKCS1-v1_5. Recommended: no.	RFC 8812 RFC 9053
`-257`Note	`RS256`	RS256 (COSE algorithm -257): RSASSA-PKCS1-v1_5 using SHA-256. Family: RSASSA-PKCS1-v1_5. Recommended: no.	RFC 8812 RFC 9053
`-53`	`Ed448`	Ed448 (COSE algorithm -53): EdDSA using the Ed448 parameter set in [Section 5.2 of RFC 8032]. Family: EdDSA. Recommended: yes.edwards448	RFC 9864, Section 2.2
`-52`	`ESP512`	ESP512 (COSE algorithm -52): ECDSA using P-521 curve and SHA-512. Family: ECDSA. Recommended: yes.P-521	RFC 9864, Section 2.1
`-51`	`ESP384`	ESP384 (COSE algorithm -51): ECDSA using P-384 curve and SHA-384. Family: ECDSA. Recommended: yes.P-384	RFC 9864, Section 2.1
`-50`	`ML-DSA-87`	ML-DSA-87 (COSE algorithm -50): CBOR Object Signing Algorithm for ML-DSA-87. Family: ML-DSA. Recommended: yes.	RFC 9964
`-49`	`ML-DSA-65`	ML-DSA-65 (COSE algorithm -49): CBOR Object Signing Algorithm for ML-DSA-65. Family: ML-DSA. Recommended: yes.	RFC 9964
`-48`	`ML-DSA-44`	ML-DSA-44 (COSE algorithm -48): CBOR Object Signing Algorithm for ML-DSA-44. Family: ML-DSA. Recommended: yes.	RFC 9964
`-47`	`ES256K`	ES256K (COSE algorithm -47): ECDSA using secp256k1 curve and SHA-256. Family: ECDSA. Recommended: no.secp256k1	RFC 8812 RFC 9053
`-46`	`HSS-LMS`	HSS-LMS (COSE algorithm -46): HSS/LMS hash-based digital signature. Family: HSS/LMS hash-based signatures. Recommended: yes.	RFC 8778 RFC 9053
`-45`	`SHAKE256`	SHAKE256 (COSE algorithm -45): SHAKE-256 512-bit Hash Value. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-44`	`SHA-512`	SHA-512 (COSE algorithm -44): SHA-2 512-bit Hash. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-43`	`SHA-384`	SHA-384 (COSE algorithm -43): SHA-2 384-bit Hash. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-42`	`RSAES-OAEP w/ SHA-512`	RSAES-OAEP w/ SHA-512 (COSE algorithm -42): RSAES-OAEP w/ SHA-512. Family: RSAES-OAEP encryption. Recommended: yes.	RFC 8230 RFC 9053
`-41`	`RSAES-OAEP w/ SHA-256`	RSAES-OAEP w/ SHA-256 (COSE algorithm -41): RSAES-OAEP w/ SHA-256. Family: RSAES-OAEP encryption. Recommended: yes.	RFC 8230 RFC 9053
`-40`	`RSAES-OAEP w/ RFC 8017 default parameters`	RSAES-OAEP w/ RFC 8017 default parameters (COSE algorithm -40): RSAES-OAEP w/ SHA-1. Family: RSAES-OAEP encryption. Recommended: yes.	RFC 8230 RFC 9053
`-39`	`PS512`	PS512 (COSE algorithm -39): RSASSA-PSS w/ SHA-512. Family: RSASSA-PSS. Recommended: yes.	RFC 8230 RFC 9053
`-38`	`PS384`	PS384 (COSE algorithm -38): RSASSA-PSS w/ SHA-384. Family: RSASSA-PSS. Recommended: yes.	RFC 8230 RFC 9053
`-37`	`PS256`	PS256 (COSE algorithm -37): RSASSA-PSS w/ SHA-256. Family: RSASSA-PSS. Recommended: yes.	RFC 8230 RFC 9053
`-36`	`ES512`	ES512 (COSE algorithm -36): ECDSA w/ SHA-512. Family: ECDSA. Recommended: deprecated.	RFC 9053 RFC 9864
`-35`	`ES384`	ES384 (COSE algorithm -35): ECDSA w/ SHA-384. Family: ECDSA. Recommended: deprecated.	RFC 9053 RFC 9864
`-34`	`ECDH-SS + A256KW`	ECDH-SS + A256KW (COSE algorithm -34): ECDH SS w/ Concat KDF and AES Key Wrap w/ 256-bit key. Family: static-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-33`	`ECDH-SS + A192KW`	ECDH-SS + A192KW (COSE algorithm -33): ECDH SS w/ Concat KDF and AES Key Wrap w/ 192-bit key. Family: static-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-32`	`ECDH-SS + A128KW`	ECDH-SS + A128KW (COSE algorithm -32): ECDH SS w/ Concat KDF and AES Key Wrap w/ 128-bit key. Family: static-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-31`	`ECDH-ES + A256KW`	ECDH-ES + A256KW (COSE algorithm -31): ECDH ES w/ Concat KDF and AES Key Wrap w/ 256-bit key. Family: ephemeral-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-30`	`ECDH-ES + A192KW`	ECDH-ES + A192KW (COSE algorithm -30): ECDH ES w/ Concat KDF and AES Key Wrap w/ 192-bit key. Family: ephemeral-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-29`	`ECDH-ES + A128KW`	ECDH-ES + A128KW (COSE algorithm -29): ECDH ES w/ Concat KDF and AES Key Wrap w/ 128-bit key. Family: ephemeral-static ECDH followed by AES key wrap. Recommended: yes.	RFC 9053
`-28`	`ECDH-SS + HKDF-512`	ECDH-SS + HKDF-512 (COSE algorithm -28): ECDH SS w/ HKDF - generate key directly. Family: static-static ECDH. Recommended: yes.	RFC 9053
`-27`	`ECDH-SS + HKDF-256`	ECDH-SS + HKDF-256 (COSE algorithm -27): ECDH SS w/ HKDF - generate key directly. Family: static-static ECDH. Recommended: yes.	RFC 9053
`-26`	`ECDH-ES + HKDF-512`	ECDH-ES + HKDF-512 (COSE algorithm -26): ECDH ES w/ HKDF - generate key directly. Family: ephemeral-static ECDH. Recommended: yes.	RFC 9053
`-25`	`ECDH-ES + HKDF-256`	ECDH-ES + HKDF-256 (COSE algorithm -25): ECDH ES w/ HKDF - generate key directly. Family: ephemeral-static ECDH. Recommended: yes.	RFC 9053
`-19`	`Ed25519`	Ed25519 (COSE algorithm -19): EdDSA using the Ed25519 parameter set in [Section 5.1 of RFC 8032]. Family: EdDSA. Recommended: yes.edwards25519	RFC 9864, Section 2.2
`-18`	`SHAKE128`	SHAKE128 (COSE algorithm -18): SHAKE-128 256-bit Hash Value. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-17`	`SHA-512/256`	SHA-512/256 (COSE algorithm -17): SHA-2 512-bit Hash truncated to 256-bits. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-16`	`SHA-256`	SHA-256 (COSE algorithm -16): SHA-2 256-bit Hash. Family: a hash function. Recommended: yes.	RFC 9054 RFC 9053
`-15`	`SHA-256/64`	SHA-256/64 (COSE algorithm -15): SHA-2 256-bit Hash truncated to 64-bits. Family: a hash function. Recommended: only for filtering, never for security.	RFC 9054 RFC 9053
`-14`	`SHA-1`	SHA-1 (COSE algorithm -14): SHA-1 Hash. Family: a hash function. Recommended: only for filtering, never for security.	RFC 9054 RFC 9053
`-13`	`direct+HKDF-AES-256`	direct+HKDF-AES-256 (COSE algorithm -13): Shared secret w/ AES-MAC 256-bit key. Family: a shared key expanded with HKDF. Recommended: yes.	RFC 9053
`-12`	`direct+HKDF-AES-128`	direct+HKDF-AES-128 (COSE algorithm -12): Shared secret w/ AES-MAC 128-bit key. Family: a shared key expanded with HKDF. Recommended: yes.	RFC 9053
`-11`	`direct+HKDF-SHA-512`	direct+HKDF-SHA-512 (COSE algorithm -11): Shared secret w/ HKDF and SHA-512. Family: a shared key expanded with HKDF. Recommended: yes.	RFC 9053
`-10`	`direct+HKDF-SHA-256`	direct+HKDF-SHA-256 (COSE algorithm -10): Shared secret w/ HKDF and SHA-256. Family: a shared key expanded with HKDF. Recommended: yes.	RFC 9053
`-9`	`ESP256`	ESP256 (COSE algorithm -9): ECDSA using P-256 curve and SHA-256. Family: ECDSA. Recommended: yes.P-256	RFC 9864, Section 2.1
`-8`Note	`EdDSA`	EdDSA (COSE algorithm -8): EdDSA. Family: EdDSA. Recommended: deprecated.	RFC 9053 RFC 9864
`-7`Note	`ES256`	ES256 (COSE algorithm -7): ECDSA w/ SHA-256. Family: ECDSA. Recommended: deprecated.	RFC 9053 RFC 9864
`-6`	`direct`	direct (COSE algorithm -6): Direct use of CEK. Family: direct use of a shared symmetric key. Recommended: yes.	RFC 9053
`-5`	`A256KW`	A256KW (COSE algorithm -5): AES Key Wrap w/ 256-bit key. Family: AES key wrap. Recommended: yes.	RFC 9053
`-4`	`A192KW`	A192KW (COSE algorithm -4): AES Key Wrap w/ 192-bit key. Family: AES key wrap. Recommended: yes.	RFC 9053
`-3`	`A128KW`	A128KW (COSE algorithm -3): AES Key Wrap w/ 128-bit key. Family: AES key wrap. Recommended: yes.	RFC 9053
`1`	`A128GCM`	A128GCM (COSE algorithm 1): AES-GCM mode w/ 128-bit key, 128-bit tag. Family: AES-GCM. Recommended: yes.	RFC 9053
`2`	`A192GCM`	A192GCM (COSE algorithm 2): AES-GCM mode w/ 192-bit key, 128-bit tag. Family: AES-GCM. Recommended: yes.	RFC 9053
`3`	`A256GCM`	A256GCM (COSE algorithm 3): AES-GCM mode w/ 256-bit key, 128-bit tag. Family: AES-GCM. Recommended: yes.	RFC 9053
`4`	`HMAC 256/64`	HMAC 256/64 (COSE algorithm 4): HMAC w/ SHA-256 truncated to 64 bits. Family: HMAC. Recommended: yes.	RFC 9053
`5`	`HMAC 256/256`	HMAC 256/256 (COSE algorithm 5): HMAC w/ SHA-256. Family: HMAC. Recommended: yes.	RFC 9053
`6`	`HMAC 384/384`	HMAC 384/384 (COSE algorithm 6): HMAC w/ SHA-384. Family: HMAC. Recommended: yes.	RFC 9053
`7`	`HMAC 512/512`	HMAC 512/512 (COSE algorithm 7): HMAC w/ SHA-512. Family: HMAC. Recommended: yes.	RFC 9053
`10`	`AES-CCM-16-64-128`	AES-CCM-16-64-128 (COSE algorithm 10): AES-CCM mode 128-bit key, 64-bit tag, 13-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`11`	`AES-CCM-16-64-256`	AES-CCM-16-64-256 (COSE algorithm 11): AES-CCM mode 256-bit key, 64-bit tag, 13-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`12`	`AES-CCM-64-64-128`	AES-CCM-64-64-128 (COSE algorithm 12): AES-CCM mode 128-bit key, 64-bit tag, 7-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`13`	`AES-CCM-64-64-256`	AES-CCM-64-64-256 (COSE algorithm 13): AES-CCM mode 256-bit key, 64-bit tag, 7-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`14`	`AES-MAC 128/64`	AES-MAC 128/64 (COSE algorithm 14): AES-MAC 128-bit key, 64-bit tag. Family: AES-CBC-MAC. Recommended: yes.	RFC 9053
`15`	`AES-MAC 256/64`	AES-MAC 256/64 (COSE algorithm 15): AES-MAC 256-bit key, 64-bit tag. Family: AES-CBC-MAC. Recommended: yes.	RFC 9053
`24`	`ChaCha20/Poly1305`	ChaCha20/Poly1305 (COSE algorithm 24): ChaCha20/Poly1305 w/ 256-bit key, 128-bit tag. Family: ChaCha20-Poly1305. Recommended: yes.	RFC 9053
`25`	`AES-MAC 128/128`	AES-MAC 128/128 (COSE algorithm 25): AES-MAC 128-bit key, 128-bit tag. Family: AES-CBC-MAC. Recommended: yes.	RFC 9053
`26`	`AES-MAC 256/128`	AES-MAC 256/128 (COSE algorithm 26): AES-MAC 256-bit key, 128-bit tag. Family: AES-CBC-MAC. Recommended: yes.	RFC 9053
`30`	`AES-CCM-16-128-128`	AES-CCM-16-128-128 (COSE algorithm 30): AES-CCM mode 128-bit key, 128-bit tag, 13-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`31`	`AES-CCM-16-128-256`	AES-CCM-16-128-256 (COSE algorithm 31): AES-CCM mode 256-bit key, 128-bit tag, 13-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`32`	`AES-CCM-64-128-128`	AES-CCM-64-128-128 (COSE algorithm 32): AES-CCM mode 128-bit key, 128-bit tag, 7-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`33`	`AES-CCM-64-128-256`	AES-CCM-64-128-256 (COSE algorithm 33): AES-CCM mode 256-bit key, 128-bit tag, 7-byte nonce. Family: AES-CCM. Recommended: yes.	RFC 9053
`34`	`IV-GENERATION`	IV-GENERATION (COSE algorithm 34): For doing IV generation for symmetric algorithms.. Family: IV generation for symmetric algorithms. Recommended: no.	RFC 9053

Unassigned and reserved ranges · 10 entries

Range	Status	Description
-9007199254740991–-65537	private	Reserved for Private Use
-65536	unassigned	Unassigned
-65528–-269	unassigned	Unassigned
-256–-54	unassigned	Unassigned
-24–-20	unassigned	Unassigned
-2–-1	unassigned	Unassigned
0	reserved	Reserved
8–9	unassigned	Unassigned
16–23	unassigned	Unassigned
27–29	unassigned	Unassigned

Source: CBOR Object Signing and Encryption (COSE) (IANA), retrieved 2026-10-20. Data license: CC0-1.0. COSE Algorithms

Notes on notable entries

RS256

COSE algorithm −257, RSASSA-PKCS1-v1_5 with SHA-256, used by Windows Hello passkeys.

−257 is registered by RFC 8812 for WebAuthn: Windows Hello and TPM-backed authenticators frequently create RSA keys, so relying parties should accept it alongside −7.

EdDSA

COSE algorithm −8, EdDSA on whatever curve the key names; deprecated by RFC 9864.

WebAuthn redefines −8 to mean Ed25519 only, a workaround RFC 9864 §1 cites when it introduces the fully specified Ed25519 (−19) and Ed448 (−53) and deprecates −8.

ES256

COSE algorithm −7, ECDSA with SHA-256 on any curve — the algorithm most passkeys use.

WebAuthn authenticators report their key's algorithm as a COSE identifier, and −7 (ES256) with a P-256 key is by far the most common. Unlike JOSE, COSE's ES256 does not fix the curve, so RFC 9864 deprecates it in favour of ESP256 (−9); existing WebAuthn deployments keep using −7.

COSE key types · 7 entries

Registered COSE key types (kty).

Value	Name	Description	References
`1`	`OKP`	Octet Key Pair	RFC 9053
`2`	`EC2`	Elliptic Curve Keys w/ x- and y-coordinate pair	RFC 9053
`3`	`RSA`	RSA Key	RFC 8230 RFC 9053
`4`	`Symmetric`	Symmetric Keys	RFC 9053
`5`	`HSS-LMS`	Public key for HSS/LMS hash-based digital signature	RFC 8778 RFC 9053
`6`	`WalnutDSA`	WalnutDSA public key	RFC 9021 RFC 9053
`7`	`AKP`	COSE Key Type for Algorithm Key Pairs	RFC 9964

Source: CBOR Object Signing and Encryption (COSE) (IANA), retrieved 2026-10-20. Data license: CC0-1.0. COSE Key Types

COSE elliptic curves · 12 entries

Registered COSE curve identifiers (crv).

Value	Name	Key type	Description	Recommended	References
`1`	`P-256`	`EC2`	NIST P-256 also known as secp256r1P-256	Yes	RFC 9053
`2`	`P-384`	`EC2`	NIST P-384 also known as secp384r1P-384	Yes	RFC 9053
`3`	`P-521`	`EC2`	NIST P-521 also known as secp521r1P-521	Yes	RFC 9053
`4`	`X25519`	`OKP`	X25519 for use w/ ECDH onlycurve25519	Yes	RFC 9053
`5`	`X448`	`OKP`	X448 for use w/ ECDH onlycurve448	Yes	RFC 9053
`6`	`Ed25519`	`OKP`	Ed25519 for use w/ EdDSA onlyedwards25519	Yes	RFC 9053
`7`	`Ed448`	`OKP`	Ed448 for use w/ EdDSA onlyedwards448	Yes	RFC 9053
`8`	`secp256k1`	`EC2`	SECG secp256k1 curvesecp256k1	No	RFC 8812
`256`	`brainpoolP256r1`	`EC2`	BrainpoolP256r1brainpoolP256r1	No	ISO/IEC 18013-5:2021, 9.1.5.2
`257`	`brainpoolP320r1`	`EC2`	BrainpoolP320r1brainpoolP320r1	No	ISO/IEC 18013-5:2021, 9.1.5.2
`258`	`brainpoolP384r1`	`EC2`	BrainpoolP384r1brainpoolP384r1	No	ISO/IEC 18013-5:2021, 9.1.5.2
`259`	`brainpoolP512r1`	`EC2`	BrainpoolP512r1brainpoolP512r1	No	ISO/IEC 18013-5:2021, 9.1.5.2

Unassigned and reserved ranges · 4 entries

Range	Status	Description
-9007199254740991–-65537	private	Reserved for Private Use
-65536–-1	unassigned	Unassigned
0	reserved	Reserved
9–255	unassigned	Unassigned

Source: CBOR Object Signing and Encryption (COSE) (IANA), retrieved 2026-10-20. Data license: CC0-1.0. COSE Elliptic Curves

All registries