Algorithms

AlgorithmPurposeOTP 17OTP 18FallbackDefinition
AES CBC 128-bitEncryptionXXjose_jwa_aesNIST.800-38A
AES CBC 192-bitEncryptionjose_jwa_aesNIST.800-38A
AES CBC 256-bitEncryptionXXjose_jwa_aesNIST.800-38A
AES CTR 128-bitEncryptionXXNIST.800-38A
AES CTR 192-bitEncryptionXXNIST.800-38A
AES CTR 256-bitEncryptionXXNIST.800-38A
AES ECB 128-bitEncryptionXjose_jwa_aesNIST.800-38A
AES ECB 192-bitEncryptionjose_jwa_aesNIST.800-38A
AES ECB 256-bitEncryptionXjose_jwa_aesNIST.800-38A
AES GCM 128-bitEncryptionXjose_jwa_aesNIST.800-38D
AES GCM 192-bitEncryptionXjose_jwa_aesNIST.800-38D
AES GCM 256-bitEncryptionXjose_jwa_aesNIST.800-38D
RSAES-OAEPEncryptionXXjose_jwa_pkcs1RFC 3447
RSAES-OAEP-256Encryptionjose_jwa_pkcs1RFC 3447
RSAES-PKCS1-v1_5EncryptionXXjose_jwa_pkcs1RFC 3447
RSASSA-PKCS1-v1_5SignatureXXjose_jwa_pkcs1RFC 3447
RSASSA-PSSSignaturejose_jwa_pkcs1RFC 3447

There are also several “helper” algorithms used with the above that have no native implementations currently in OTP:

AlgorithmPurposeFallbackDefinition
AES Key WrapKey Wrapjose_jwa_aes_kwRFC 3394
Concat KDFKey Derivationjose_jwa_concat_kdfNIST.800-56A
MGF1Mask Generationjose_jwa_pkcs1RFC 3447
PBKDF1Key Derivationjose_jwa_pkcs5RFC 2898
PBKDF2Key Derivationjose_jwa_pkcs5RFC 2898
PKCS #7 PaddingPaddingjose_jwa_pkcs7RFC 2315

The following are algorithms related to the draft CFRG ECDH and signatures in JOSE:

AlgorithmPurposeExternalFallbackDefinition
Ed25519Signaturelibsodiumjose_jwa_curve25519EdDSA
Ed25519phSignaturelibsodiumjose_jwa_curve25519EdDSA
Ed448Signaturejose_jwa_curve448EdDSA
Ed448phSignaturejose_jwa_curve448EdDSA
SHAKE256Hashingkeccakf1600jose_jwa_sha3Keccak
X25519Key Exchangelibsodiumjose_jwa_curve25519RFC 7748
X448Key Exchangejose_jwa_curve448RFC 7748