OpenSSL Dynamic Engine mechanisms - AWS CloudHSM

OpenSSL Dynamic Engine mechanisms

Learn how to use AWS CloudHSM OpenSSL Dynamic Engine mechanisms.

Sign and verify functions

The AWS CloudHSM OpenSSL Dynamic Engine allows you to use the following mechanisms for Sign and Verify functions.

With Client SDK 5, the data is hashed locally in software. This means there is no limit on the size of the data that can be hashed.

RSA Signature Types

  • SHA1withRSA

  • SHA224withRSA

  • SHA256withRSA

  • SHA384withRSA

  • SHA512withRSA

ECDSA Signature Types

  • SHA1withECDSA

  • SHA224withECDSA

  • SHA256withECDSA

  • SHA384withECDSA

  • SHA512withECDSA