Help Center/ Data Encryption Workshop/ FAQs/ KMS Related/ Key Algorithms Supported by KMS
Updated on 2025-06-23 GMT+08:00

Key Algorithms Supported by KMS

Table 1 Key algorithms supported by KMS

Key Type

Algorithm Type

Key Specifications

Description

Application Scenario

Symmetric key

AES

AES_256

AES symmetric key

  • Data encryption and decryption
  • DEKs encryption and decryption
    NOTE:

    You can encrypt and decrypt a small amount of data using the the online tool on the console.

    You need to call APIs to encrypt and decrypt a large amount of data.

Digest key

SHA

  • HMAC_256
  • HMAC_384
  • HMAC_512

Digest key

  • Data tampering prevention
  • Data integrity verification

Asymmetric key

RSA

  • RSA_2048
  • RSA_3072
  • RSA_4096

RSA asymmetric password

  • Digital signature and signature verification
  • Data encryption and decryption
    NOTE:

    Asymmetric keys are applicable to signature and signature verification scenarios. Asymmetric keys are not efficient enough for data encryption. Symmetric keys are suitable for encrypting and decrypting data.

Asymmetric key

ECC

  • EC_P256
  • EC_P384

Elliptic curve recommended by NIST

Digital signature and signature verification

Asymmetric key

ML-DSA

NOTE:

To enable the ML-DSA algorithm, submit a service ticket.

  • ML-DSA-44
  • ML-DSA-65
  • ML-DSA-87

Machine learning (ML) algorithm

Quantum-resistant digital signature and signature verification