Updated on 2026-08-24 GMT+08:00

Key Algorithms Supported by KMS

**Table 1** Key algorithms supported by KMS
Key Type	Algorithm Type	Key Specifications	Description	Scenario
Symmetric key	AES	AES_256 (AES-256-GCM authentication encryption)	AES symmetric key	Data encryption and decryption DEK encryption and decryption NOTE: You can encrypt and decrypt a small amount of data using the online tool on the console. You need to call APIs to encrypt and decrypt a large amount of data.
Digest key	SHA	HMAC_256 HMAC_384 HMAC_512	Digest key	Data tampering prevention Data integrity verification
Asymmetric key	RSA	RSA_2048 RSA_3072 RSA_4096	RSA asymmetric key	Digital signature and signature verification Data encryption and decryption NOTE: Asymmetric keys are applicable to signature and signature verification scenarios. Asymmetric keys are not efficient enough for data encryption. Symmetric keys are suitable for encrypting and decrypting data.
Asymmetric key	ECC	EC_P256 EC_P384	Elliptic curve recommended by NIST	Digital signature and signature verification
Asymmetric key	ED25519	ED25519	Elliptic curve in Edwards form	Digital signature and signature verification
Asymmetric key	ML-DSA NOTE: To enable the ML-DSA algorithm, submit a service ticket.	ML-DSA-44 ML-DSA-65 ML-DSA-87	Modular lattice digital signature algorithm	Quantum-resistant digital signature and signature verification
Asymmetric key	SECP256K1	SECP256K1	Elliptic curve cryptography (ECC)	Digital signature and signature verification

Parent topic: KMS Related