ADSS Admin Guide

Items

Description

Key Algorithm

Specify the Key Algorithm that will be used to generate the key pair from Go>Sign Desktop.

• RSA
• ECDSA
• DILITHIUM

Note: Keep below points in mind while using DILITHIUM key algorithm: 

• The keys generated using PQC algorithm, i.e. Dilithium, are created solely through software and not via HSMs.
• The DILITHIUM algorithm will be only be used for document signing purposes.
• The below mentioned signature types are supported for DILITHIUM:
• PKCS1
• CMS
• CAdES Baseline (Only if CA key is RSA/EC)
• CAdES Extended (Only if CA key is RSA/EC)
• The DILITHIUM key algorithm will only be available to the user when the Keystore Settings are set to 'Roaming Key' for the Go>Sign Profile.

Curve Type

Select the Curve Type that will be used to generate the key pair from Go>Sign Desktop. ADSS Server supports the following Curve Types:

• NIST P
• SEC2 K
• Brainpool R
• Brainpool T

Note: The Curve Type drop-down will be available only when ECDSA algorithm is selected in key algorithm field.

Key Length

Specify the Key Length against the above selected algorithm. 

• The choices of RSA keys are:
• 1024
• 2048
• 3072
• 4096
• The choices for ECDSA keys are: 
• 160
• 192
• 224
• 256
• 320
• 384
• 512
• 521

Security Level

The Security Level drop-down will be available when Dilithium is selected in the 'Key Algorithm' field. This drop-down allows the user to choose the security level for the selected key algorithm. The security levels for Dilithium are defined below:

• 2
• 3
• 5

Password Strength

Specify the strength of password by providing a desired regular expression. 

See the following link to check some example of regular expressions:
http://www.mkyong.com/regular-expressions/10-java-regular-expression-examples-you-should-know/