rsa_pkcs1_sha1
使用 SHA-1 的 PKCS#1 v1.5;RFC 9155 禁止在 TLS 1.2 握手签名中使用 SHA-1。
继2020年针对 SHA-1 的选择前缀碰撞攻击之后,RFC 9155 更新了 TLS 1.2,规定不得(MUST NOT)将 MD5 和 SHA-1 用于数字签名。TLS 1.3 只允许 rsa_pkcs1_sha1 出现在证书签名中,以保持向后兼容。
显示 49 项中的 49 项
用于 TLS 1.3 和 signature_algorithms 扩展的 SignatureScheme 码点,包括 ML-DSA 和 SLH-DSA。
| 值 | 名称 | 说明 | 推荐 | 参考文献 |
|---|---|---|---|---|
0x0201说明 | rsa_pkcs1_sha1 | rsa_pkcs1_sha1(0x0201)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-1。 | N | RFC 9846RFC 9155 |
0x0203 | ecdsa_sha1 | ecdsa_sha1(0x0203)的签名算法:ECDSA,哈希算法为 SHA-1。 | N | RFC 9846RFC 9155 |
0x0401说明 | rsa_pkcs1_sha256 | rsa_pkcs1_sha256(0x0401)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-256。 | Y | RFC 9846 |
0x0403说明 | ecdsa_secp256r1_sha256 | ecdsa_secp256r1_sha256(0x0403)的签名算法:ECDSA,曲线为 P-256,哈希算法为 SHA-256。 | Y | RFC 9846 |
0x0420 | rsa_pkcs1_sha256_legacy | rsa_pkcs1_sha256_legacy(0x0420)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-256。这是一种旧版方案,供无法生成 PSS 签名的客户端密钥使用(RFC 9963)。 | N | RFC 9963 |
0x0501 | rsa_pkcs1_sha384 | rsa_pkcs1_sha384(0x0501)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-384。 | Y | RFC 9846 |
0x0503 | ecdsa_secp384r1_sha384 | ecdsa_secp384r1_sha384(0x0503)的签名算法:ECDSA,曲线为 P-384,哈希算法为 SHA-384。 | Y | RFC 9846 |
0x0520 | rsa_pkcs1_sha384_legacy | rsa_pkcs1_sha384_legacy(0x0520)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-384。这是一种旧版方案,供无法生成 PSS 签名的客户端密钥使用(RFC 9963)。 | N | RFC 9963 |
0x0601 | rsa_pkcs1_sha512 | rsa_pkcs1_sha512(0x0601)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-512。 | Y | RFC 9846 |
0x0603 | ecdsa_secp521r1_sha512 | ecdsa_secp521r1_sha512(0x0603)的签名算法:ECDSA,曲线为 P-521,哈希算法为 SHA-512。 | Y | RFC 9846 |
0x0620 | rsa_pkcs1_sha512_legacy | rsa_pkcs1_sha512_legacy(0x0620)的签名算法:RSASSA-PKCS1-v1_5,哈希算法为 SHA-512。这是一种旧版方案,供无法生成 PSS 签名的客户端密钥使用(RFC 9963)。 | N | RFC 9963 |
0x0704 | eccsi_sha256 | eccsi_sha256(0x0704)的签名算法:基于身份的签名方案,哈希算法为 SHA-256。 | N | draft-wang-tls-raw-public-key-with-ibc-02 |
0x0705 | iso_ibs1 | iso_ibs1(0x0705)的签名算法:基于身份的签名方案。 | N | draft-wang-tls-raw-public-key-with-ibc-02 |
0x0706 | iso_ibs2 | iso_ibs2(0x0706)的签名算法:基于身份的签名方案。 | N | draft-wang-tls-raw-public-key-with-ibc-02 |
0x0707 | iso_chinese_ibs | iso_chinese_ibs(0x0707)的签名算法:基于身份的签名方案。 | N | draft-wang-tls-raw-public-key-with-ibc-02 |
0x0708 | sm2sig_sm3 | sm2sig_sm3(0x0708)的签名算法:SM2 签名算法,曲线为 SM2,哈希算法为 SM3。 | N | RFC 8998 |
0x0709 | gostr34102012_256a | gostr34102012_256a(0x0709)的签名算法:GOST R 34.10-2012,曲线为 GC256A,哈希算法为 Streebog-256。 | N | RFC 9367 |
0x070A | gostr34102012_256b | gostr34102012_256b(0x070A)的签名算法:GOST R 34.10-2012,曲线为 GC256B,哈希算法为 Streebog-256。 | N | RFC 9367 |
0x070B | gostr34102012_256c | gostr34102012_256c(0x070B)的签名算法:GOST R 34.10-2012,曲线为 GC256C,哈希算法为 Streebog-256。 | N | RFC 9367 |
0x070C | gostr34102012_256d | gostr34102012_256d(0x070C)的签名算法:GOST R 34.10-2012,曲线为 GC256D,哈希算法为 Streebog-256。 | N | RFC 9367 |
0x070D | gostr34102012_512a | gostr34102012_512a(0x070D)的签名算法:GOST R 34.10-2012,曲线为 GC512A,哈希算法为 Streebog-512。 | N | RFC 9367 |
0x070E | gostr34102012_512b | gostr34102012_512b(0x070E)的签名算法:GOST R 34.10-2012,曲线为 GC512B,哈希算法为 Streebog-512。 | N | RFC 9367 |
0x070F | gostr34102012_512c | gostr34102012_512c(0x070F)的签名算法:GOST R 34.10-2012,曲线为 GC512C,哈希算法为 Streebog-512。 | N | RFC 9367 |
0x0804说明 | rsa_pss_rsae_sha256 | rsa_pss_rsae_sha256(0x0804)的签名算法:RSASSA-PSS(密钥来自 rsaEncryption 证书),哈希算法为 SHA-256。 | Y | RFC 9846 |
0x0805 | rsa_pss_rsae_sha384 | rsa_pss_rsae_sha384(0x0805)的签名算法:RSASSA-PSS(密钥来自 rsaEncryption 证书),哈希算法为 SHA-384。 | Y | RFC 9846 |
0x0806 | rsa_pss_rsae_sha512 | rsa_pss_rsae_sha512(0x0806)的签名算法:RSASSA-PSS(密钥来自 rsaEncryption 证书),哈希算法为 SHA-512。 | Y | RFC 9846 |
0x0807说明 | ed25519 | ed25519(0x0807)的签名算法:EdDSA,曲线为 edwards25519。 | Y | RFC 9846 |
0x0808 | ed448 | ed448(0x0808)的签名算法:EdDSA,曲线为 edwards448。 | Y | RFC 9846 |
0x0809 | rsa_pss_pss_sha256 | rsa_pss_pss_sha256(0x0809)的签名算法:RSASSA-PSS(密钥来自 RSASSA-PSS 证书),哈希算法为 SHA-256。 | Y | RFC 9846 |
0x080A | rsa_pss_pss_sha384 | rsa_pss_pss_sha384(0x080A)的签名算法:RSASSA-PSS(密钥来自 RSASSA-PSS 证书),哈希算法为 SHA-384。 | Y | RFC 9846 |
0x080B | rsa_pss_pss_sha512 | rsa_pss_pss_sha512(0x080B)的签名算法:RSASSA-PSS(密钥来自 RSASSA-PSS 证书),哈希算法为 SHA-512。 | Y | RFC 9846 |
0x081A | ecdsa_brainpoolP256r1tls13_sha256 | ecdsa_brainpoolP256r1tls13_sha256(0x081A)的签名算法:ECDSA,曲线为 brainpoolP256r1,哈希算法为 SHA-256。 | N | RFC 8734 |
0x081B | ecdsa_brainpoolP384r1tls13_sha384 | ecdsa_brainpoolP384r1tls13_sha384(0x081B)的签名算法:ECDSA,曲线为 brainpoolP384r1,哈希算法为 SHA-384。 | N | RFC 8734 |
0x081C | ecdsa_brainpoolP512r1tls13_sha512 | ecdsa_brainpoolP512r1tls13_sha512(0x081C)的签名算法:ECDSA,曲线为 brainpoolP512r1,哈希算法为 SHA-512。 | N | RFC 8734 |
0x0904 | mldsa44 | mldsa44(0x0904)的签名算法:ML-DSA(FIPS 204)(ML-DSA-44)。 | N | RFC-ietf-tls-mldsa-06 |
0x0905说明 | mldsa65 | mldsa65(0x0905)的签名算法:ML-DSA(FIPS 204)(ML-DSA-65)。 | N | RFC-ietf-tls-mldsa-06 |
0x0906 | mldsa87 | mldsa87(0x0906)的签名算法:ML-DSA(FIPS 204)(ML-DSA-87)。 | N | RFC-ietf-tls-mldsa-06 |
0x0911 | slhdsa_sha2_128s | slhdsa_sha2_128s(0x0911)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-128s)。 | N | draft-reddy-tls-slhdsa-01 |
0x0912 | slhdsa_sha2_128f | slhdsa_sha2_128f(0x0912)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-128f)。 | N | draft-reddy-tls-slhdsa-01 |
0x0913 | slhdsa_sha2_192s | slhdsa_sha2_192s(0x0913)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-192s)。 | N | draft-reddy-tls-slhdsa-01 |
0x0914 | slhdsa_sha2_192f | slhdsa_sha2_192f(0x0914)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-192f)。 | N | draft-reddy-tls-slhdsa-01 |
0x0915 | slhdsa_sha2_256s | slhdsa_sha2_256s(0x0915)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-256s)。 | N | draft-reddy-tls-slhdsa-01 |
0x0916 | slhdsa_sha2_256f | slhdsa_sha2_256f(0x0916)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHA2-256f)。 | N | draft-reddy-tls-slhdsa-01 |
0x0917 | slhdsa_shake_128s | slhdsa_shake_128s(0x0917)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-128s)。 | N | draft-reddy-tls-slhdsa-01 |
0x0918 | slhdsa_shake_128f | slhdsa_shake_128f(0x0918)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-128f)。 | N | draft-reddy-tls-slhdsa-01 |
0x0919 | slhdsa_shake_192s | slhdsa_shake_192s(0x0919)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-192s)。 | N | draft-reddy-tls-slhdsa-01 |
0x091A | slhdsa_shake_192f | slhdsa_shake_192f(0x091A)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-192f)。 | N | draft-reddy-tls-slhdsa-01 |
0x091B | slhdsa_shake_256s | slhdsa_shake_256s(0x091B)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-256s)。 | N | draft-reddy-tls-slhdsa-01 |
0x091C | slhdsa_shake_256f | slhdsa_shake_256f(0x091C)的签名算法:SLH-DSA(FIPS 205)(SLH-DSA-SHAKE-256f)。 | N | draft-reddy-tls-slhdsa-01 |
| 范围 | 状态 | 说明 |
|---|---|---|
| 0x0000–0x0200 | reserved | Reserved for backward compatibility |
| 0x0202 | reserved | Reserved for backward compatibility |
| 0x0204–0x0400 | reserved | Reserved for backward compatibility |
| 0x0402 | reserved | Reserved for backward compatibility |
| 0x0404–0x041F | reserved | Reserved for backward compatibility |
| 0x0421–0x0500 | reserved | Reserved for backward compatibility |
| 0x0502 | reserved | Reserved for backward compatibility |
| 0x0504–0x051F | reserved | Reserved for backward compatibility |
| 0x0521–0x0600 | reserved | Reserved for backward compatibility |
| 0x0602 | reserved | Reserved for backward compatibility |
| 0x0604–0x061F | reserved | Reserved for backward compatibility |
| 0x0621–0x0703 | reserved | Reserved for backward compatibility |
| 0x0710–0x07FF | unassigned | Unassigned |
| 0x0800–0x0803 | reserved | Reserved for backward compatibility |
| 0x080C–0x0819 | unassigned | Unassigned |
| 0x081D–0x083F | unassigned | Unassigned |
| 0x0840 | reserved | Reserved for backward compatibility |
| 0x0841 | reserved | Reserved for backward compatibility |
| 0x0842–0x08FF | unassigned | Unassigned |
| 0x0900–0x0903 | reserved | Reserved for backward compatibility |
| 0x0907–0x0910 | unassigned | Unassigned |
| 0x091D–0x09FF | unassigned | Unassigned |
| 0x0A00–0x0A03 | reserved | Reserved for backward compatibility |
| 0x0A04–0x0AFF | unassigned | Unassigned |
| 0x0B00–0x0B03 | reserved | Reserved for backward compatibility |
| 0x0B04–0x0BFF | unassigned | Unassigned |
| 0x0C00–0x0C03 | reserved | Reserved for backward compatibility |
| 0x0C04–0x0CFF | unassigned | Unassigned |
| 0x0D00–0x0D03 | reserved | Reserved for backward compatibility |
| 0x0D04–0x0DFF | unassigned | Unassigned |
| 0x0E00–0x0E03 | reserved | Reserved for backward compatibility |
| 0x0E04–0x0EFF | unassigned | Unassigned |
| 0x0F00–0x0F03 | reserved | Reserved for backward compatibility |
| 0x0F04–0x0FFF | unassigned | Unassigned |
| 0x1000–0x1003 | reserved | Reserved for backward compatibility |
| 0x1004–0x10FF | unassigned | Unassigned |
| 0x1100–0x1103 | reserved | Reserved for backward compatibility |
| 0x1104–0x11FF | unassigned | Unassigned |
| 0x1200–0x1203 | reserved | Reserved for backward compatibility |
| 0x1204–0x12FF | unassigned | Unassigned |
| 0x1300–0x1303 | reserved | Reserved for backward compatibility |
| 0x1304–0x13FF | unassigned | Unassigned |
| 0x1400–0x1403 | reserved | Reserved for backward compatibility |
| 0x1404–0x14FF | unassigned | Unassigned |
| 0x1500–0x1503 | reserved | Reserved for backward compatibility |
| 0x1504–0x15FF | unassigned | Unassigned |
| 0x1600–0x1603 | reserved | Reserved for backward compatibility |
| 0x1604–0x16FF | unassigned | Unassigned |
| 0x1700–0x1703 | reserved | Reserved for backward compatibility |
| 0x1704–0x17FF | unassigned | Unassigned |
| 0x1800–0x1803 | reserved | Reserved for backward compatibility |
| 0x1804–0x18FF | unassigned | Unassigned |
| 0x1900–0x1903 | reserved | Reserved for backward compatibility |
| 0x1904–0x19FF | unassigned | Unassigned |
| 0x1A00–0x1A03 | reserved | Reserved for backward compatibility |
| 0x1A04–0x1AFF | unassigned | Unassigned |
| 0x1B00–0x1B03 | reserved | Reserved for backward compatibility |
| 0x1B04–0x1BFF | unassigned | Unassigned |
| 0x1C00–0x1C03 | reserved | Reserved for backward compatibility |
| 0x1C04–0x1CFF | unassigned | Unassigned |
| 0x1D00–0x1D03 | reserved | Reserved for backward compatibility |
| 0x1D04–0x1DFF | unassigned | Unassigned |
| 0x1E00–0x1E03 | reserved | Reserved for backward compatibility |
| 0x1E04–0x1EFF | unassigned | Unassigned |
| 0x1F00–0x1F03 | reserved | Reserved for backward compatibility |
| 0x1F04–0x1FFF | unassigned | Unassigned |
| 0x2000–0x2003 | reserved | Reserved for backward compatibility |
| 0x2004–0x20FF | unassigned | Unassigned |
| 0x2100–0x2103 | reserved | Reserved for backward compatibility |
| 0x2104–0x21FF | unassigned | Unassigned |
| 0x2200–0x2203 | reserved | Reserved for backward compatibility |
| 0x2204–0x22FF | unassigned | Unassigned |
| 0x2300–0x2303 | reserved | Reserved for backward compatibility |
| 0x2304–0x23FF | unassigned | Unassigned |
| 0x2400–0x2403 | reserved | Reserved for backward compatibility |
| 0x2404–0x24FF | unassigned | Unassigned |
| 0x2500–0x2503 | reserved | Reserved for backward compatibility |
| 0x2504–0x25FF | unassigned | Unassigned |
| 0x2600–0x2603 | reserved | Reserved for backward compatibility |
| 0x2604–0x26FF | unassigned | Unassigned |
| 0x2700–0x2703 | reserved | Reserved for backward compatibility |
| 0x2704–0x27FF | unassigned | Unassigned |
| 0x2800–0x2803 | reserved | Reserved for backward compatibility |
| 0x2804–0x28FF | unassigned | Unassigned |
| 0x2900–0x2903 | reserved | Reserved for backward compatibility |
| 0x2904–0x29FF | unassigned | Unassigned |
| 0x2A00–0x2A03 | reserved | Reserved for backward compatibility |
| 0x2A04–0x2AFF | unassigned | Unassigned |
| 0x2B00–0x2B03 | reserved | Reserved for backward compatibility |
| 0x2B04–0x2BFF | unassigned | Unassigned |
| 0x2C00–0x2C03 | reserved | Reserved for backward compatibility |
| 0x2C04–0x2CFF | unassigned | Unassigned |
| 0x2D00–0x2D03 | reserved | Reserved for backward compatibility |
| 0x2D04–0x2DFF | unassigned | Unassigned |
| 0x2E00–0x2E03 | reserved | Reserved for backward compatibility |
| 0x2E04–0x2EFF | unassigned | Unassigned |
| 0x2F00–0x2F03 | reserved | Reserved for backward compatibility |
| 0x2F04–0x2FFF | unassigned | Unassigned |
| 0x3000–0x3003 | reserved | Reserved for backward compatibility |
| 0x3004–0x30FF | unassigned | Unassigned |
| 0x3100–0x3103 | reserved | Reserved for backward compatibility |
| 0x3104–0x31FF | unassigned | Unassigned |
| 0x3200–0x3203 | reserved | Reserved for backward compatibility |
| 0x3204–0x32FF | unassigned | Unassigned |
| 0x3300–0x3303 | reserved | Reserved for backward compatibility |
| 0x3304–0x33FF | unassigned | Unassigned |
| 0x3400–0x3403 | reserved | Reserved for backward compatibility |
| 0x3404–0x34FF | unassigned | Unassigned |
| 0x3500–0x3503 | reserved | Reserved for backward compatibility |
| 0x3504–0x35FF | unassigned | Unassigned |
| 0x3600–0x3603 | reserved | Reserved for backward compatibility |
| 0x3604–0x36FF | unassigned | Unassigned |
| 0x3700–0x3703 | reserved | Reserved for backward compatibility |
| 0x3704–0x37FF | unassigned | Unassigned |
| 0x3800–0x3803 | reserved | Reserved for backward compatibility |
| 0x3804–0x38FF | unassigned | Unassigned |
| 0x3900–0x3903 | reserved | Reserved for backward compatibility |
| 0x3904–0x39FF | unassigned | Unassigned |
| 0x3A00–0x3A03 | reserved | Reserved for backward compatibility |
| 0x3A04–0x3AFF | unassigned | Unassigned |
| 0x3B00–0x3B03 | reserved | Reserved for backward compatibility |
| 0x3B04–0x3BFF | unassigned | Unassigned |
| 0x3C00–0x3C03 | reserved | Reserved for backward compatibility |
| 0x3C04–0x3CFF | unassigned | Unassigned |
| 0x3D00–0x3D03 | reserved | Reserved for backward compatibility |
| 0x3D04–0x3DFF | unassigned | Unassigned |
| 0x3E00–0x3E03 | reserved | Reserved for backward compatibility |
| 0x3E04–0x3EFF | unassigned | Unassigned |
| 0x3F00–0x3F03 | reserved | Reserved for backward compatibility |
| 0x3F04–0x3FFF | unassigned | Unassigned |
| 0x4000–0x4003 | reserved | Reserved for backward compatibility |
| 0x4004–0x40FF | unassigned | Unassigned |
| 0x4100–0x4103 | reserved | Reserved for backward compatibility |
| 0x4104–0x41FF | unassigned | Unassigned |
| 0x4200–0x4203 | reserved | Reserved for backward compatibility |
| 0x4204–0x42FF | unassigned | Unassigned |
| 0x4300–0x4303 | reserved | Reserved for backward compatibility |
| 0x4304–0x43FF | unassigned | Unassigned |
| 0x4400–0x4403 | reserved | Reserved for backward compatibility |
| 0x4404–0x44FF | unassigned | Unassigned |
| 0x4500–0x4503 | reserved | Reserved for backward compatibility |
| 0x4504–0x45FF | unassigned | Unassigned |
| 0x4600–0x4603 | reserved | Reserved for backward compatibility |
| 0x4604–0x46FF | unassigned | Unassigned |
| 0x4700–0x4703 | reserved | Reserved for backward compatibility |
| 0x4704–0x47FF | unassigned | Unassigned |
| 0x4800–0x4803 | reserved | Reserved for backward compatibility |
| 0x4804–0x48FF | unassigned | Unassigned |
| 0x4900–0x4903 | reserved | Reserved for backward compatibility |
| 0x4904–0x49FF | unassigned | Unassigned |
| 0x4A00–0x4A03 | reserved | Reserved for backward compatibility |
| 0x4A04–0x4AFF | unassigned | Unassigned |
| 0x4B00–0x4B03 | reserved | Reserved for backward compatibility |
| 0x4B04–0x4BFF | unassigned | Unassigned |
| 0x4C00–0x4C03 | reserved | Reserved for backward compatibility |
| 0x4C04–0x4CFF | unassigned | Unassigned |
| 0x4D00–0x4D03 | reserved | Reserved for backward compatibility |
| 0x4D04–0x4DFF | unassigned | Unassigned |
| 0x4E00–0x4E03 | reserved | Reserved for backward compatibility |
| 0x4E04–0x4EFF | unassigned | Unassigned |
| 0x4F00–0x4F03 | reserved | Reserved for backward compatibility |
| 0x4F04–0x4FFF | unassigned | Unassigned |
| 0x5000–0x5003 | reserved | Reserved for backward compatibility |
| 0x5004–0x50FF | unassigned | Unassigned |
| 0x5100–0x5103 | reserved | Reserved for backward compatibility |
| 0x5104–0x51FF | unassigned | Unassigned |
| 0x5200–0x5203 | reserved | Reserved for backward compatibility |
| 0x5204–0x52FF | unassigned | Unassigned |
| 0x5300–0x5303 | reserved | Reserved for backward compatibility |
| 0x5304–0x53FF | unassigned | Unassigned |
| 0x5400–0x5403 | reserved | Reserved for backward compatibility |
| 0x5404–0x54FF | unassigned | Unassigned |
| 0x5500–0x5503 | reserved | Reserved for backward compatibility |
| 0x5504–0x55FF | unassigned | Unassigned |
| 0x5600–0x5603 | reserved | Reserved for backward compatibility |
| 0x5604–0x56FF | unassigned | Unassigned |
| 0x5700–0x5703 | reserved | Reserved for backward compatibility |
| 0x5704–0x57FF | unassigned | Unassigned |
| 0x5800–0x5803 | reserved | Reserved for backward compatibility |
| 0x5804–0x58FF | unassigned | Unassigned |
| 0x5900–0x5903 | reserved | Reserved for backward compatibility |
| 0x5904–0x59FF | unassigned | Unassigned |
| 0x5A00–0x5A03 | reserved | Reserved for backward compatibility |
| 0x5A04–0x5AFF | unassigned | Unassigned |
| 0x5B00–0x5B03 | reserved | Reserved for backward compatibility |
| 0x5B04–0x5BFF | unassigned | Unassigned |
| 0x5C00–0x5C03 | reserved | Reserved for backward compatibility |
| 0x5C04–0x5CFF | unassigned | Unassigned |
| 0x5D00–0x5D03 | reserved | Reserved for backward compatibility |
| 0x5D04–0x5DFF | unassigned | Unassigned |
| 0x5E00–0x5E03 | reserved | Reserved for backward compatibility |
| 0x5E04–0x5EFF | unassigned | Unassigned |
| 0x5F00–0x5F03 | reserved | Reserved for backward compatibility |
| 0x5F04–0x5FFF | unassigned | Unassigned |
| 0x6000–0x6003 | reserved | Reserved for backward compatibility |
| 0x6004–0x60FF | unassigned | Unassigned |
| 0x6100–0x6103 | reserved | Reserved for backward compatibility |
| 0x6104–0x61FF | unassigned | Unassigned |
| 0x6200–0x6203 | reserved | Reserved for backward compatibility |
| 0x6204–0x62FF | unassigned | Unassigned |
| 0x6300–0x6303 | reserved | Reserved for backward compatibility |
| 0x6304–0x63FF | unassigned | Unassigned |
| 0x6400–0x6403 | reserved | Reserved for backward compatibility |
| 0x6404–0x64FF | unassigned | Unassigned |
| 0x6500–0x6503 | reserved | Reserved for backward compatibility |
| 0x6504–0x65FF | unassigned | Unassigned |
| 0x6600–0x6603 | reserved | Reserved for backward compatibility |
| 0x6604–0x66FF | unassigned | Unassigned |
| 0x6700–0x6703 | reserved | Reserved for backward compatibility |
| 0x6704–0x67FF | unassigned | Unassigned |
| 0x6800–0x6803 | reserved | Reserved for backward compatibility |
| 0x6804–0x68FF | unassigned | Unassigned |
| 0x6900–0x6903 | reserved | Reserved for backward compatibility |
| 0x6904–0x69FF | unassigned | Unassigned |
| 0x6A00–0x6A03 | reserved | Reserved for backward compatibility |
| 0x6A04–0x6AFF | unassigned | Unassigned |
| 0x6B00–0x6B03 | reserved | Reserved for backward compatibility |
| 0x6B04–0x6BFF | unassigned | Unassigned |
| 0x6C00–0x6C03 | reserved | Reserved for backward compatibility |
| 0x6C04–0x6CFF | unassigned | Unassigned |
| 0x6D00–0x6D03 | reserved | Reserved for backward compatibility |
| 0x6D04–0x6DFF | unassigned | Unassigned |
| 0x6E00–0x6E03 | reserved | Reserved for backward compatibility |
| 0x6E04–0x6EFF | unassigned | Unassigned |
| 0x6F00–0x6F03 | reserved | Reserved for backward compatibility |
| 0x6F04–0x6FFF | unassigned | Unassigned |
| 0x7000–0x7003 | reserved | Reserved for backward compatibility |
| 0x7004–0x70FF | unassigned | Unassigned |
| 0x7100–0x7103 | reserved | Reserved for backward compatibility |
| 0x7104–0x71FF | unassigned | Unassigned |
| 0x7200–0x7203 | reserved | Reserved for backward compatibility |
| 0x7204–0x72FF | unassigned | Unassigned |
| 0x7300–0x7303 | reserved | Reserved for backward compatibility |
| 0x7304–0x73FF | unassigned | Unassigned |
| 0x7400–0x7403 | reserved | Reserved for backward compatibility |
| 0x7404–0x74FF | unassigned | Unassigned |
| 0x7500–0x7503 | reserved | Reserved for backward compatibility |
| 0x7504–0x75FF | unassigned | Unassigned |
| 0x7600–0x7603 | reserved | Reserved for backward compatibility |
| 0x7604–0x76FF | unassigned | Unassigned |
| 0x7700–0x7703 | reserved | Reserved for backward compatibility |
| 0x7704–0x77FF | unassigned | Unassigned |
| 0x7800–0x7803 | reserved | Reserved for backward compatibility |
| 0x7804–0x78FF | unassigned | Unassigned |
| 0x7900–0x7903 | reserved | Reserved for backward compatibility |
| 0x7904–0x79FF | unassigned | Unassigned |
| 0x7A00–0x7A03 | reserved | Reserved for backward compatibility |
| 0x7A04–0x7AFF | unassigned | Unassigned |
| 0x7B00–0x7B03 | reserved | Reserved for backward compatibility |
| 0x7B04–0x7BFF | unassigned | Unassigned |
| 0x7C00–0x7C03 | reserved | Reserved for backward compatibility |
| 0x7C04–0x7CFF | unassigned | Unassigned |
| 0x7D00–0x7D03 | reserved | Reserved for backward compatibility |
| 0x7D04–0x7DFF | unassigned | Unassigned |
| 0x7E00–0x7E03 | reserved | Reserved for backward compatibility |
| 0x7E04–0x7EFF | unassigned | Unassigned |
| 0x7F00–0x7F03 | reserved | Reserved for backward compatibility |
| 0x7F04–0x7FFF | unassigned | Unassigned |
| 0x8000–0x8003 | reserved | Reserved for backward compatibility |
| 0x8004–0x80FF | unassigned | Unassigned |
| 0x8100–0x8103 | reserved | Reserved for backward compatibility |
| 0x8104–0x81FF | unassigned | Unassigned |
| 0x8200–0x8203 | reserved | Reserved for backward compatibility |
| 0x8204–0x82FF | unassigned | Unassigned |
| 0x8300–0x8303 | reserved | Reserved for backward compatibility |
| 0x8304–0x83FF | unassigned | Unassigned |
| 0x8400–0x8403 | reserved | Reserved for backward compatibility |
| 0x8404–0x84FF | unassigned | Unassigned |
| 0x8500–0x8503 | reserved | Reserved for backward compatibility |
| 0x8504–0x85FF | unassigned | Unassigned |
| 0x8600–0x8603 | reserved | Reserved for backward compatibility |
| 0x8604–0x86FF | unassigned | Unassigned |
| 0x8700–0x8703 | reserved | Reserved for backward compatibility |
| 0x8704–0x87FF | unassigned | Unassigned |
| 0x8800–0x8803 | reserved | Reserved for backward compatibility |
| 0x8804–0x88FF | unassigned | Unassigned |
| 0x8900–0x8903 | reserved | Reserved for backward compatibility |
| 0x8904–0x89FF | unassigned | Unassigned |
| 0x8A00–0x8A03 | reserved | Reserved for backward compatibility |
| 0x8A04–0x8AFF | unassigned | Unassigned |
| 0x8B00–0x8B03 | reserved | Reserved for backward compatibility |
| 0x8B04–0x8BFF | unassigned | Unassigned |
| 0x8C00–0x8C03 | reserved | Reserved for backward compatibility |
| 0x8C04–0x8CFF | unassigned | Unassigned |
| 0x8D00–0x8D03 | reserved | Reserved for backward compatibility |
| 0x8D04–0x8DFF | unassigned | Unassigned |
| 0x8E00–0x8E03 | reserved | Reserved for backward compatibility |
| 0x8E04–0x8EFF | unassigned | Unassigned |
| 0x8F00–0x8F03 | reserved | Reserved for backward compatibility |
| 0x8F04–0x8FFF | unassigned | Unassigned |
| 0x9000–0x9003 | reserved | Reserved for backward compatibility |
| 0x9004–0x90FF | unassigned | Unassigned |
| 0x9100–0x9103 | reserved | Reserved for backward compatibility |
| 0x9104–0x91FF | unassigned | Unassigned |
| 0x9200–0x9203 | reserved | Reserved for backward compatibility |
| 0x9204–0x92FF | unassigned | Unassigned |
| 0x9300–0x9303 | reserved | Reserved for backward compatibility |
| 0x9304–0x93FF | unassigned | Unassigned |
| 0x9400–0x9403 | reserved | Reserved for backward compatibility |
| 0x9404–0x94FF | unassigned | Unassigned |
| 0x9500–0x9503 | reserved | Reserved for backward compatibility |
| 0x9504–0x95FF | unassigned | Unassigned |
| 0x9600–0x9603 | reserved | Reserved for backward compatibility |
| 0x9604–0x96FF | unassigned | Unassigned |
| 0x9700–0x9703 | reserved | Reserved for backward compatibility |
| 0x9704–0x97FF | unassigned | Unassigned |
| 0x9800–0x9803 | reserved | Reserved for backward compatibility |
| 0x9804–0x98FF | unassigned | Unassigned |
| 0x9900–0x9903 | reserved | Reserved for backward compatibility |
| 0x9904–0x99FF | unassigned | Unassigned |
| 0x9A00–0x9A03 | reserved | Reserved for backward compatibility |
| 0x9A04–0x9AFF | unassigned | Unassigned |
| 0x9B00–0x9B03 | reserved | Reserved for backward compatibility |
| 0x9B04–0x9BFF | unassigned | Unassigned |
| 0x9C00–0x9C03 | reserved | Reserved for backward compatibility |
| 0x9C04–0x9CFF | unassigned | Unassigned |
| 0x9D00–0x9D03 | reserved | Reserved for backward compatibility |
| 0x9D04–0x9DFF | unassigned | Unassigned |
| 0x9E00–0x9E03 | reserved | Reserved for backward compatibility |
| 0x9E04–0x9EFF | unassigned | Unassigned |
| 0x9F00–0x9F03 | reserved | Reserved for backward compatibility |
| 0x9F04–0x9FFF | unassigned | Unassigned |
| 0xA000–0xA003 | reserved | Reserved for backward compatibility |
| 0xA004–0xA0FF | unassigned | Unassigned |
| 0xA100–0xA103 | reserved | Reserved for backward compatibility |
| 0xA104–0xA1FF | unassigned | Unassigned |
| 0xA200–0xA203 | reserved | Reserved for backward compatibility |
| 0xA204–0xA2FF | unassigned | Unassigned |
| 0xA300–0xA303 | reserved | Reserved for backward compatibility |
| 0xA304–0xA3FF | unassigned | Unassigned |
| 0xA400–0xA403 | reserved | Reserved for backward compatibility |
| 0xA404–0xA4FF | unassigned | Unassigned |
| 0xA500–0xA503 | reserved | Reserved for backward compatibility |
| 0xA504–0xA5FF | unassigned | Unassigned |
| 0xA600–0xA603 | reserved | Reserved for backward compatibility |
| 0xA604–0xA6FF | unassigned | Unassigned |
| 0xA700–0xA703 | reserved | Reserved for backward compatibility |
| 0xA704–0xA7FF | unassigned | Unassigned |
| 0xA800–0xA803 | reserved | Reserved for backward compatibility |
| 0xA804–0xA8FF | unassigned | Unassigned |
| 0xA900–0xA903 | reserved | Reserved for backward compatibility |
| 0xA904–0xA9FF | unassigned | Unassigned |
| 0xAA00–0xAA03 | reserved | Reserved for backward compatibility |
| 0xAA04–0xAAFF | unassigned | Unassigned |
| 0xAB00–0xAB03 | reserved | Reserved for backward compatibility |
| 0xAB04–0xABFF | unassigned | Unassigned |
| 0xAC00–0xAC03 | reserved | Reserved for backward compatibility |
| 0xAC04–0xACFF | unassigned | Unassigned |
| 0xAD00–0xAD03 | reserved | Reserved for backward compatibility |
| 0xAD04–0xADFF | unassigned | Unassigned |
| 0xAE00–0xAE03 | reserved | Reserved for backward compatibility |
| 0xAE04–0xAEFF | unassigned | Unassigned |
| 0xAF00–0xAF03 | reserved | Reserved for backward compatibility |
| 0xAF04–0xAFFF | unassigned | Unassigned |
| 0xB000–0xB003 | reserved | Reserved for backward compatibility |
| 0xB004–0xB0FF | unassigned | Unassigned |
| 0xB100–0xB103 | reserved | Reserved for backward compatibility |
| 0xB104–0xB1FF | unassigned | Unassigned |
| 0xB200–0xB203 | reserved | Reserved for backward compatibility |
| 0xB204–0xB2FF | unassigned | Unassigned |
| 0xB300–0xB303 | reserved | Reserved for backward compatibility |
| 0xB304–0xB3FF | unassigned | Unassigned |
| 0xB400–0xB403 | reserved | Reserved for backward compatibility |
| 0xB404–0xB4FF | unassigned | Unassigned |
| 0xB500–0xB503 | reserved | Reserved for backward compatibility |
| 0xB504–0xB5FF | unassigned | Unassigned |
| 0xB600–0xB603 | reserved | Reserved for backward compatibility |
| 0xB604–0xB6FF | unassigned | Unassigned |
| 0xB700–0xB703 | reserved | Reserved for backward compatibility |
| 0xB704–0xB7FF | unassigned | Unassigned |
| 0xB800–0xB803 | reserved | Reserved for backward compatibility |
| 0xB804–0xB8FF | unassigned | Unassigned |
| 0xB900–0xB903 | reserved | Reserved for backward compatibility |
| 0xB904–0xB9FF | unassigned | Unassigned |
| 0xBA00–0xBA03 | reserved | Reserved for backward compatibility |
| 0xBA04–0xBAFF | unassigned | Unassigned |
| 0xBB00–0xBB03 | reserved | Reserved for backward compatibility |
| 0xBB04–0xBBFF | unassigned | Unassigned |
| 0xBC00–0xBC03 | reserved | Reserved for backward compatibility |
| 0xBC04–0xBCFF | unassigned | Unassigned |
| 0xBD00–0xBD03 | reserved | Reserved for backward compatibility |
| 0xBD04–0xBDFF | unassigned | Unassigned |
| 0xBE00–0xBE03 | reserved | Reserved for backward compatibility |
| 0xBE04–0xBEFF | unassigned | Unassigned |
| 0xBF00–0xBF03 | reserved | Reserved for backward compatibility |
| 0xBF04–0xBFFF | unassigned | Unassigned |
| 0xC000–0xC003 | reserved | Reserved for backward compatibility |
| 0xC004–0xC0FF | unassigned | Unassigned |
| 0xC100–0xC103 | reserved | Reserved for backward compatibility |
| 0xC104–0xC1FF | unassigned | Unassigned |
| 0xC200–0xC203 | reserved | Reserved for backward compatibility |
| 0xC204–0xC2FF | unassigned | Unassigned |
| 0xC300–0xC303 | reserved | Reserved for backward compatibility |
| 0xC304–0xC3FF | unassigned | Unassigned |
| 0xC400–0xC403 | reserved | Reserved for backward compatibility |
| 0xC404–0xC4FF | unassigned | Unassigned |
| 0xC500–0xC503 | reserved | Reserved for backward compatibility |
| 0xC504–0xC5FF | unassigned | Unassigned |
| 0xC600–0xC603 | reserved | Reserved for backward compatibility |
| 0xC604–0xC6FF | unassigned | Unassigned |
| 0xC700–0xC703 | reserved | Reserved for backward compatibility |
| 0xC704–0xC7FF | unassigned | Unassigned |
| 0xC800–0xC803 | reserved | Reserved for backward compatibility |
| 0xC804–0xC8FF | unassigned | Unassigned |
| 0xC900–0xC903 | reserved | Reserved for backward compatibility |
| 0xC904–0xC9FF | unassigned | Unassigned |
| 0xCA00–0xCA03 | reserved | Reserved for backward compatibility |
| 0xCA04–0xCAFF | unassigned | Unassigned |
| 0xCB00–0xCB03 | reserved | Reserved for backward compatibility |
| 0xCB04–0xCBFF | unassigned | Unassigned |
| 0xCC00–0xCC03 | reserved | Reserved for backward compatibility |
| 0xCC04–0xCCFF | unassigned | Unassigned |
| 0xCD00–0xCD03 | reserved | Reserved for backward compatibility |
| 0xCD04–0xCDFF | unassigned | Unassigned |
| 0xCE00–0xCE03 | reserved | Reserved for backward compatibility |
| 0xCE04–0xCEFF | unassigned | Unassigned |
| 0xCF00–0xCF03 | reserved | Reserved for backward compatibility |
| 0xCF04–0xCFFF | unassigned | Unassigned |
| 0xD000–0xD003 | reserved | Reserved for backward compatibility |
| 0xD004–0xD0FF | unassigned | Unassigned |
| 0xD100–0xD103 | reserved | Reserved for backward compatibility |
| 0xD104–0xD1FF | unassigned | Unassigned |
| 0xD200–0xD203 | reserved | Reserved for backward compatibility |
| 0xD204–0xD2FF | unassigned | Unassigned |
| 0xD300–0xD303 | reserved | Reserved for backward compatibility |
| 0xD304–0xD3FF | unassigned | Unassigned |
| 0xD400–0xD403 | reserved | Reserved for backward compatibility |
| 0xD404–0xD4FF | unassigned | Unassigned |
| 0xD500–0xD503 | reserved | Reserved for backward compatibility |
| 0xD504–0xD5FF | unassigned | Unassigned |
| 0xD600–0xD603 | reserved | Reserved for backward compatibility |
| 0xD604–0xD6FF | unassigned | Unassigned |
| 0xD700–0xD703 | reserved | Reserved for backward compatibility |
| 0xD704–0xD7FF | unassigned | Unassigned |
| 0xD800–0xD803 | reserved | Reserved for backward compatibility |
| 0xD804–0xD8FF | unassigned | Unassigned |
| 0xD900–0xD903 | reserved | Reserved for backward compatibility |
| 0xD904–0xD9FF | unassigned | Unassigned |
| 0xDA00–0xDA03 | reserved | Reserved for backward compatibility |
| 0xDA04–0xDAFF | unassigned | Unassigned |
| 0xDB00–0xDB03 | reserved | Reserved for backward compatibility |
| 0xDB04–0xDBFF | unassigned | Unassigned |
| 0xDC00–0xDC03 | reserved | Reserved for backward compatibility |
| 0xDC04–0xDCFF | unassigned | Unassigned |
| 0xDD00–0xDD03 | reserved | Reserved for backward compatibility |
| 0xDD04–0xDDFF | unassigned | Unassigned |
| 0xDE00–0xDE03 | reserved | Reserved for backward compatibility |
| 0xDE04–0xDEFF | unassigned | Unassigned |
| 0xDF00–0xDF03 | reserved | Reserved for backward compatibility |
| 0xDF04–0xDFFF | unassigned | Unassigned |
| 0xE000–0xE003 | reserved | Reserved for backward compatibility |
| 0xE004–0xE0FF | unassigned | Unassigned |
| 0xE100–0xE103 | reserved | Reserved for backward compatibility |
| 0xE104–0xE1FF | unassigned | Unassigned |
| 0xE200–0xE203 | reserved | Reserved for backward compatibility |
| 0xE204–0xE2FF | unassigned | Unassigned |
| 0xE300–0xE303 | reserved | Reserved for backward compatibility |
| 0xE304–0xE3FF | unassigned | Unassigned |
| 0xE400–0xE403 | reserved | Reserved for backward compatibility |
| 0xE404–0xE4FF | unassigned | Unassigned |
| 0xE500–0xE503 | reserved | Reserved for backward compatibility |
| 0xE504–0xE5FF | unassigned | Unassigned |
| 0xE600–0xE603 | reserved | Reserved for backward compatibility |
| 0xE604–0xE6FF | unassigned | Unassigned |
| 0xE700–0xE703 | reserved | Reserved for backward compatibility |
| 0xE704–0xE7FF | unassigned | Unassigned |
| 0xE800–0xE803 | reserved | Reserved for backward compatibility |
| 0xE804–0xE8FF | unassigned | Unassigned |
| 0xE900–0xE903 | reserved | Reserved for backward compatibility |
| 0xE904–0xE9FF | unassigned | Unassigned |
| 0xEA00–0xEA03 | reserved | Reserved for backward compatibility |
| 0xEA04–0xEAFF | unassigned | Unassigned |
| 0xEB00–0xEB03 | reserved | Reserved for backward compatibility |
| 0xEB04–0xEBFF | unassigned | Unassigned |
| 0xEC00–0xEC03 | reserved | Reserved for backward compatibility |
| 0xEC04–0xECFF | unassigned | Unassigned |
| 0xED00–0xED03 | reserved | Reserved for backward compatibility |
| 0xED04–0xEDFF | unassigned | Unassigned |
| 0xEE00–0xEE03 | reserved | Reserved for backward compatibility |
| 0xEE04–0xEEFF | unassigned | Unassigned |
| 0xEF00–0xEF03 | reserved | Reserved for backward compatibility |
| 0xEF04–0xEFFF | unassigned | Unassigned |
| 0xF000–0xF003 | reserved | Reserved for backward compatibility |
| 0xF004–0xF0FF | unassigned | Unassigned |
| 0xF100–0xF103 | reserved | Reserved for backward compatibility |
| 0xF104–0xF1FF | unassigned | Unassigned |
| 0xF200–0xF203 | reserved | Reserved for backward compatibility |
| 0xF204–0xF2FF | unassigned | Unassigned |
| 0xF300–0xF303 | reserved | Reserved for backward compatibility |
| 0xF304–0xF3FF | unassigned | Unassigned |
| 0xF400–0xF403 | reserved | Reserved for backward compatibility |
| 0xF404–0xF4FF | unassigned | Unassigned |
| 0xF500–0xF503 | reserved | Reserved for backward compatibility |
| 0xF504–0xF5FF | unassigned | Unassigned |
| 0xF600–0xF603 | reserved | Reserved for backward compatibility |
| 0xF604–0xF6FF | unassigned | Unassigned |
| 0xF700–0xF703 | reserved | Reserved for backward compatibility |
| 0xF704–0xF7FF | unassigned | Unassigned |
| 0xF800–0xF803 | reserved | Reserved for backward compatibility |
| 0xF804–0xF8FF | unassigned | Unassigned |
| 0xF900–0xF903 | reserved | Reserved for backward compatibility |
| 0xF904–0xF9FF | unassigned | Unassigned |
| 0xFA00–0xFA03 | reserved | Reserved for backward compatibility |
| 0xFA04–0xFAFF | unassigned | Unassigned |
| 0xFB00–0xFB03 | reserved | Reserved for backward compatibility |
| 0xFB04–0xFBFF | unassigned | Unassigned |
| 0xFC00–0xFC03 | reserved | Reserved for backward compatibility |
| 0xFC04–0xFCFF | unassigned | Unassigned |
| 0xFD00–0xFD03 | reserved | Reserved for backward compatibility |
| 0xFD04–0xFDFF | unassigned | Unassigned |
| 0xFE00–0xFFFF | private | Reserved for Private Use |
来源:Transport Layer Security (TLS) Parameters(IANA),获取于 2026-10-20。数据许可证:CC0-1.0。 TLS SignatureScheme
使用 SHA-1 的 PKCS#1 v1.5;RFC 9155 禁止在 TLS 1.2 握手签名中使用 SHA-1。
继2020年针对 SHA-1 的选择前缀碰撞攻击之后,RFC 9155 更新了 TLS 1.2,规定不得(MUST NOT)将 MD5 和 SHA-1 用于数字签名。TLS 1.3 只允许 rsa_pkcs1_sha1 出现在证书签名中,以保持向后兼容。
使用 SHA-256 的 RSASSA-PKCS1-v1_5,在 TLS 1.3 中只保留用于证书内部的签名。
TLS 1.3 实现必须(MUST)支持用于证书签名的 rsa_pkcs1_sha256(RFC 8446 §9.1),因为 Web PKI 中的大多数证书都以这种方式签名;但握手签名本身不得使用 PKCS#1 v1.5。RFC 9963 新增了 rsa_pkcs1_sha256_legacy,供无法生成 PSS 签名的客户端密钥(例如某些智能卡)使用。
基于 P-256、使用 SHA-256 的 ECDSA,是每个 TLS 1.3 实现都必须支持的三种签名方案之一。
RFC 8446 §9.1 规定 ecdsa_secp256r1_sha256 是必须实现的方案。在 TLS 1.3 中,该方案固定了曲线:P-384 密钥不能用它签名。在 TLS 1.2 中,同一个码点表示使用 SHA-256 的 ECDSA,曲线则取决于密钥本身。
使用 SHA-256 的 RSASSA-PSS,用于普通 rsaEncryption 证书中的密钥:TLS 1.3 就以这种方式对握手签名。
TLS 1.3 禁止在 CertificateVerify 中使用 PKCS#1 v1.5 签名,因此持有 RSA 证书的服务器会用 rsa_pss_rsae_sha256 对握手签名,即使其证书中的密钥类型是 rsaEncryption。RFC 8446 §9.1 规定必须实现该方案。rsa_pss_pss_* 方案则用于证书声明为 RSASSA-PSS 的密钥。
TLS 1.3 和证书中的 Ed25519 签名(RFC 8410)。
ed25519(0x0807)让 TLS 1.3 服务器可以用 Ed25519 密钥完成身份验证;IANA 将其标记为推荐。限制其普及的一直是 Web PKI 证书颁发机构的支持情况,因此它主要出现在私有 PKI 和双向 TLS 中。参见 edwards25519。
用于 TLS 1.3 的 ML-DSA-65(FIPS 204),安全强度大致相当于 AES-192 的后量子签名。
mldsa65(0x0905)用 ML-DSA-65 对 TLS 1.3 握手签名。签名为 3,309 字节,公钥为 1,952 字节,因此与 ECDSA 相比,证书链会增大数 KB。该码点来自 draft-ietf-tls-mldsa,该草案已获批作为 RFC 发布。