Skip to content

Algorithm Catalog - 130 Total Algorithms

Complete inventory of cryptographic algorithms supported by ANKASecure platform.

The catalogue in code is the platform's single algorithm vocabulary. AlgorithmCatalogue and CompositeAlgorithmCatalogue in ankasecure-common-algorithms are the authority. Metering, post-quantum classification and the per-family usage counters all derive from it: licensing reads AlgorithmProfile.category(), so a new catalogue entry is metered and audited with no other code change.

The catalogue holds 89 simple profiles (50 classical, 39 post-quantum) and 41 composite profiles, 130 in total. The authoritative list, filtered by the tenant's availability policy, is returned by GET /api/v3/key-management/supported-algorithms (see API Discovery).

Platform Coverage

Category Count Documentation
Simple Algorithms 89 → Simple Algorithms Catalog
Composite Algorithms 41 → Composite Algorithms Catalog
Total Platform Algorithms 130 -

Algorithm Architecture

Simple Algorithms (89 Total)

Single-component cryptographic algorithms for direct cryptographic operations.

Categories:

  • 23 Post-Quantum KEM: ML-KEM (NIST FIPS 203 + ETSI TS 103 744), HQC (NIST Round-4 backup KEM; ETSI standardization in progress), FrodoKEM (BSI, ANSSI, ENISA, ISO/IEC 18033-2:2006/Amd 2:2026), Classic McEliece (ISO/IEC 18033-2:2006/Amd 2:2026; LEGACY, because BSI advises against it in new developments), BIKE, SABER, NTRU, NTRU Prime, SMAUG-T (KpqC; no standards attribution)
  • 16 Post-Quantum Signatures: ML-DSA (NIST FIPS 204), SLH-DSA (NIST FIPS 205), FALCON, and the stateful hash-based XMSS, XMSS^MT, LMS and HSS (NIST SP 800-208; one row per offered parameter set)
  • 17 Classical Asymmetric: RSA (5 key sizes), EC P-curves (3), Brainpool (3), OKP (4), SM2, GOST-EC
  • 19 Symmetric AEAD: AES-GCM/CCM (6), ChaCha20-Poly1305, Camellia-GCM (3), SEED-GCM, SM4-GCM/CCM (2), ARIA-GCM/CCM (6)
  • 14 MAC/PRF: CMAC-AES (3), HMAC-SHA2 (3), HMAC-SHA3 (3), KMAC (2), HMAC-SM3, HMAC-Streebog (2)

Use Cases:

  • Standard encryption/decryption operations
  • Digital signatures and verification
  • Key agreement and key encapsulation
  • Message authentication codes
  • Legacy system compatibility

Standards Coverage (the 14 CryptoStandard bodies): NIST, ETSI, NSA, ISO, BSI, ANSSI, ENISA, IETF, KISA, CRYPTREC, GMT, MYSEAL, NCA_NCS, GOST

→ View complete simple algorithm catalog

Composite Algorithms (41 Combinations)

Hybrid combinations pairing classical + post-quantum algorithms for quantum-resistant protection against harvest-now, decrypt-later attacks.

Composite Modes:

  • 27 COMPOSITE_KEM_COMBINE: Hybrid key encapsulation (AND-decrypt semantics)
  • OKP family: X25519 (4 combinations), X448 (6 combinations)
  • P-curves: P-256 (4), P-384 (6), P-521 (4)
  • Brainpool: brainpoolP256r1 (1), brainpoolP384r1 (1), brainpoolP512r1 (1)

  • PQC components: ML-KEM (15 combinations), HQC (12 combinations)

  • 14 COMPOSITE_SIGNATURE: Dual digital signatures (dual-verify semantics)

  • EdDSA: Ed25519 (2 combinations), Ed448 (2)
  • ECDSA P-curves: P-256 (2), P-384 (3), P-521 (2)
  • ECDSA Brainpool: brainpoolP256r1 (1), brainpoolP384r1 (1), brainpoolP512r1 (1)
  • PQC component: ML-DSA (all combinations)

Security Guarantees:

  • Secure as long as at least one algorithm remains unbroken
  • Security level matching: ±2 NIST level constraint enforced
  • Format: JWE/JWS General JSON Serialization (RFC 7516/7515)
  • KDF options: HKDF-SHA256 (default), HKDF-SHA384, HKDF-SHA512 (NIST SP 800-227 §4.6.2 approved combiner on ML-KEM pairings), CatKDF, CasKDF (ETSI TS 103 744 §8.2.3 / §8.3.3 on the 10 §7.7.2 parameter sets) — the CEK is KeyCombine(K₁, K₂, c₁, c₂, ek₁, ek₂, domain) of SP 800-227 §4.6.1

Use Cases:

  • Harvest-now, decrypt-later mitigation (quantum-resistant data protection)
  • Standards alignment (NIST CSWP 39 §3.2.4 hybrid cryptographic algorithms, GSA PQC Buyer's Guide considerations, ETSI QSC)
  • Crypto-agility and migration strategies
  • Long-term data confidentiality and signature validity

Standards Alignment: NIST CSWP 39 (§3.2.4 Hybrid Cryptographic Algorithms — see NIST CSWP 39 Alignment — §3.2.4*), GSA PQC Buyer's Guide (considerations for buyers), BSI TR-02102

→ View complete composite algorithm catalog

Algorithm Distribution by Security Level

NIST Security Levels

Level Bit Strength Classical Equivalent Simple Algorithms Composite Algorithms
L1 128-bit AES-128, SHA-256 27 19
L3 192-bit AES-192, SHA-384 24 16
L5 256-bit AES-256, SHA-512 32 6

Algorithm Distribution by Cryptographic Operation

Important: Some classical asymmetric algorithms support multiple operations (both encryption and signing), so they appear in more than one category. This overlap means the sum of algorithms by operation exceeds the total unique count of 89.

Simple Algorithms by Operation

Operation Count Algorithm Breakdown
Encryption/Key Establishment 55 PQ KEM (23) + Key Agreement (2) + Multi-purpose asymmetric (11) + Symmetric AEAD (19)
Digital Signatures 31 PQ Signatures (16) + Multi-purpose asymmetric (11) + Signature-only asymmetric (4)
Message Authentication 14 Symmetric MACs/PRFs (CMAC, HMAC, KMAC)

Total unique algorithms: 89 (not 100 due to overlap of 11 multi-purpose algorithms counted in both encryption and signature categories)

Detailed Breakdown by Operation

Encryption-Capable Algorithms (55 total)

Category Count Algorithms
Post-Quantum KEM 23 ML-KEM-512/768/1024, HQC-128/192/256, FRODO-976/1344, CMCE-460896/6688128, BIKE-128/192/256, LIGHTSABER-128/SABER-192/FIRESABER-256, NTRU-701/1373, NTRUPRIME-761/857, SMAUG-T-MODE1/MODE3/MODE5
Key Agreement (OKP) 2 X25519 (ECDH), X448 (ECDH)
Multi-purpose Asymmetric 11 RSA-2048/3072/4096/6144/8192 (5), P-256/384/521 (3), brainpoolP256r1/384r1/512r1 (3)
Symmetric AEAD 19 AES-GCM/CCM-128/192/256 (6), ChaCha20-Poly1305 (1), Camellia-GCM-128/192/256 (3), SEED-GCM-128 (1), SM4-GCM/CCM-128 (2), ARIA-GCM/CCM-128/192/256 (6)

Use Cases: Data encryption, secure messaging, key agreement, file protection, database encryption

Signature-Capable Algorithms (31 total)

Category Count Algorithms
Post-Quantum Signatures 16 ML-DSA-44/65/87, SLH-DSA-SHA2-128S/128F/192S/192F/256S/256F, FALCON-512/1024, XMSS-SHA2_10_256, XMSSMT-SHA2_20/2_256, LMS-SHA256-M32-H10-W4, LMS-SHA256-M24-H10-W4, LMS-HSS-L2-SHA256-M32-H10-W4
Multi-purpose Asymmetric 11 RSA-2048/3072/4096/6144/8192 (5), P-256/384/521 (3), brainpoolP256r1/384r1/512r1 (3)
Signature-only Asymmetric 4 Ed25519, Ed448, SM2, GOST-R34.10-2012-256

Use Cases: Document signing, code signing, certificate signing, API authentication, non-repudiation

Note: The 11 multi-purpose algorithms (RSA + EC P-curves + Brainpool) appear in both encryption and signature categories.

Message Authentication Algorithms (14 total)

Category Count Algorithms
CMAC (AES-based) 3 CMAC-AES-128/192/256
HMAC (SHA-2 family) 3 HMAC-SHA256/384/512
HMAC (SHA-3 family) 3 HMAC-SHA3-256/384/512
KMAC (Keccak-based) 2 KMAC128/256
Regional Standards 3 HMAC-SM3 (China), HMAC-Streebog-256/512 (Russia)

Use Cases: Message integrity verification, API request authentication, data origin authentication

Technical Note: MACs are symmetric authentication mechanisms, not asymmetric digital signatures. They verify data integrity and authenticity but do not provide non-repudiation (both sender and receiver share the same secret key).

Composite Algorithms by Operation

Operation Count Mode Classical Components PQC Components
Hybrid Encryption 27 COMPOSITE_KEM_COMBINE X25519/X448 (10), P-256/384/521 (14), Brainpool (3) ML-KEM-512/768/1024 (15), HQC-128/192/256 (12)
Composite Signatures 14 COMPOSITE_SIGNATURE Ed25519/Ed448 (4), P-256/384/521 (7), Brainpool (3) ML-DSA-44/65/87 (all)

Security Model: Composite algorithms are secure as long as at least one component (classical OR post-quantum) remains unbroken.

Multi-Purpose Algorithms (Overlap Clarification)

These 11 classical asymmetric algorithms support BOTH encryption and signing operations:

Algorithm Key Size Operations Standards Security Level
RSA-2048 2048 bits encrypt, decrypt, sign, verify CRYPTREC, IETF, ISO, MYSEAL, NIST L1 (sunset 2030)
RSA-3072 3072 bits encrypt, decrypt, sign, verify ANSSI, BSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L1
RSA-4096 4096 bits encrypt, decrypt, sign, verify ANSSI, BSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L3
RSA-6144 6144 bits encrypt, decrypt, sign, verify ANSSI, BSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L3
RSA-8192 8192 bits encrypt, decrypt, sign, verify ANSSI, BSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L5
P-256 (EC) 256 bits encrypt, decrypt, sign, verify ANSSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L1
P-384 (EC) 384 bits encrypt, decrypt, sign, verify ANSSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L3
P-521 (EC) 521 bits encrypt, decrypt, sign, verify ANSSI, CRYPTREC, ENISA, ETSI, IETF, ISO, MYSEAL, NCA_NCS, NIST L5
brainpoolP256r1 256 bits encrypt, decrypt, sign, verify ANSSI, BSI, ENISA, ETSI, IETF, ISO L1 (sunset 2031)
brainpoolP384r1 384 bits encrypt, decrypt, sign, verify ANSSI, BSI, ENISA, ETSI, IETF, ISO L3 (sunset 2031)
brainpoolP512r1 512 bits encrypt, decrypt, sign, verify ANSSI, BSI, ENISA, ETSI, IETF, ISO L5 (sunset 2031)

Implementation Details:

  • RSA: Uses different padding schemes (OAEP for encryption, PSS for signing)
  • EC/Brainpool: ECDH for key agreement (encryption), ECDSA for signatures
  • Composite Keys: RSA excluded from composite mode (allowedInComposite=false), only EC curves allowed

Algorithm Distribution by Category

Simple Algorithms by Cryptographic Category

Category Algorithms Standards Status
Post-Quantum KEM 23 NIST, ETSI, BSI, ANSSI, ENISA, ISO RECOMMENDED (ML-KEM, HQC, FrodoKEM), LEGACY (Classic McEliece), EXPERIMENTAL (BIKE, SABER, NTRU, NTRU Prime, SMAUG-T)
Post-Quantum Signatures 16 NIST, ETSI, BSI, ANSSI, ENISA RECOMMENDED (ML-DSA, SLH-DSA, FALCON, XMSS / XMSS^MT, LMS / HSS)
Classical Asymmetric 17 NIST, ISO, BSI, GMT, GOST RECOMMENDED (with sunset dates for RSA-2048, Brainpool)
Symmetric AEAD 19 NIST, ISO, IETF, GMT, KISA RECOMMENDED (all)
MAC/PRF 14 NIST, ISO, GMT, GOST RECOMMENDED (migrate CMAC-AES-128 to 192/256)

Composite Algorithms by Mode

Mode Combinations Aligned with Purpose
COMPOSITE_KEM_COMBINE 27 NIST CSWP 39, ETSI QSC Hybrid encryption (quantum-resistant confidentiality)
COMPOSITE_SIGNATURE 14 NIST CSWP 39, GSA PQC One composite signature from two algorithms, valid only when both verify (quantum-resistant authenticity)

Regional/National Standards Coverage

ANKASecure supports national cryptographic standards from 5 jurisdictions across 18 regional/national algorithms:

Region Algorithms Standards Policy Template
🇨🇳 China 4 (SM2, SM4×2, HMAC-SM3) GMT + ISO/IEC CHINA_GMT_COMPLIANT
🇯🇵 Japan 3 (Camellia×3) CRYPTREC + ISO/IEC JAPAN_CRYPTREC
🇰🇷 South Korea 7 (SEED, ARIA×6) KISA + ISO/IEC (SEED only) KOREA_KCMVP
🇷🇺 Russia 3 (GOST-EC, Streebog×2) GOST + ISO/IEC GOST_COMPLIANT
🌐 IETF (Global) 1 (ChaCha20-Poly1305) IETF RFC IETF_RFC

Market Coverage: 2B+ people, $30T+ GDP across 5 jurisdictions

ISO/IEC attribution: 11 of the 18 regional algorithms (none on ARIA or ChaCha20-Poly1305)

API Discovery

Supported Algorithms Endpoint

GET /api/v3/key-management/supported-algorithms

Response: Returns all 130 algorithms (89 simple + 41 composite) with full metadata, filtered by tenant availability policy.

Query Parameters (server-side filtering):

Parameter Type Logic Description
category string = CLASSICAL, POST_QUANTUM, or HYBRID
status string = RECOMMENDED, EXPERIMENTAL, or LEGACY
minSecurityLevel int >= Minimum NIST level (1, 3, 5)
maxSecurityLevel int <= Maximum NIST level (1, 3, 5)
keyOps array AND Required operations (must support ALL)
standards array AND Required standards (must have ALL)
kty array OR Key types (matches ANY). One of the twenty-one published key-type tokens; COMPOSITE selects every hybrid pairing
compositeMode array OR Composite constructions (matches ANY): COMPOSITE_KEM_COMBINE, COMPOSITE_SIGNATURE. The axis on which hybrid entries are distinguished; every hybrid entry carries the same kty (COMPOSITE)
alg array OR Algorithms (matches ANY)

Example Queries:

# All post-quantum algorithms (simple only)
GET /api/v3/key-management/supported-algorithms?category=POST_QUANTUM

# All hybrid/composite algorithms
GET /api/v3/key-management/supported-algorithms?category=HYBRID

# High security, NIST-approved algorithms
GET /api/v3/key-management/supported-algorithms?minSecurityLevel=3&standards=NIST

# NIST-approved composite encryption algorithms
GET /api/v3/key-management/supported-algorithms?category=HYBRID&keyOps=encrypt,decrypt&standards=NIST

# Every hybrid entry, selected by the coarse key type
GET /api/v3/key-management/supported-algorithms?kty=COMPOSITE

# Only the composite-signature construction
GET /api/v3/key-management/supported-algorithms?compositeMode=COMPOSITE_SIGNATURE

Response Fields (per algorithm):

  • kty: Key type — one of the twenty-one published tokens ML-KEM, HQC, FRODO, CMCE, BIKE, SABER, NTRU, NTRUPRIME, SMAUG-T, ML-DSA, SLH-DSA, FALCON, XMSS, LMS, EC, RSA, oct, OKP, SM2, GOST-EC, COMPOSITE. Every hybrid pairing publishes the single coarse token COMPOSITE; a composite mode name is never a kty
  • compositeMode: For a composite entry only — the construction, COMPOSITE_KEM_COMBINE (hybrid encryption) or COMPOSITE_SIGNATURE (composite signature). Absent for simple algorithms
  • alg: Algorithm identifier (ML-KEM-768, X25519+ML-KEM-768, etc.)
  • keyOps: Permitted operations (encrypt, decrypt, sign, verify)
  • status: RECOMMENDED, EXPERIMENTAL, or LEGACY
  • sunsetDate: Planned deprecation date (ISO 8601, optional)
  • advisory: Migration or security guidance (optional)
  • securityLevel: NIST security level (1-5)
  • standards: Endorsing standards (NIST, BSI, ANSSI, etc.)
  • category: CLASSICAL, POST_QUANTUM, or HYBRID

Standards & Regulatory Alignment

ANKASecure algorithms align with 14 international and national cryptographic standards, enabling global regulatory compliance:

Global Standards

  • NIST (United States): ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), CSWP 39 (crypto agility; hybrid cryptographic algorithms, §3.2.4)
  • ISO/IEC JTC 1 (Global): 11 of the 18 regional algorithms carry an ISO/IEC attribution
  • IETF (Internet Protocols): ChaCha20-Poly1305, ML-KEM, ML-DSA, XMSS-SHA2_10_256, XMSSMT-SHA2_20/2_256, LMS-SHA256-M32-H10-W4, LMS-HSS-L2-SHA256-M32-H10-W4

European Standards

  • ENISA (EU): ECCG Agreed Cryptographic Mechanisms — ML-KEM-768/1024, ML-DSA-65/87, SLH-DSA at 192/256 bits, FrodoKEM, XMSS-SHA2_10_256, LMS-SHA256-M32-H10-W4, the P-curves and Brainpool curves
  • BSI TR-02102-1 (Germany): ML-KEM-768/1024, ML-DSA-65/87, SLH-DSA-SHA2-192S/192F/256S/256F, FRODO-976/1344, XMSS-SHA2_10_256, XMSSMT-SHA2_20/2_256, LMS-SHA256-M32-H10-W4, LMS-SHA256-M24-H10-W4, LMS-HSS-L2-SHA256-M32-H10-W4, brainpoolP256r1/384r1/512r1, RSA-3072/4096/6144/8192, AES-GCM/CCM-128/192/256, CMAC-AES-128/192/256, HMAC-SHA256/384/512, HMAC-SHA3-256/384/512, KMAC128/256 (no Falcon, no EdDSA, no P-curves, and no Classic McEliece, which BSI advises against in new developments) — the complete BSI attribution set of the single-algorithm catalogue; six composite profiles also carry BSI (brainpoolP256r1+ML-KEM-768, brainpoolP384r1+ML-KEM-1024, brainpoolP512r1+ML-KEM-1024, brainpoolP256r1+ML-DSA-65, brainpoolP384r1+ML-DSA-87, brainpoolP512r1+ML-DSA-87)
  • ANSSI (France): ML-KEM-768/1024, ML-DSA-65/87, SLH-DSA-SHA2-192S/192F/256S/256F, FALCON-1024, FRODO-976/1344, XMSS-SHA2_10_256, LMS-SHA256-M32-H10-W4, LMS-SHA256-M24-H10-W4, P-256/384/521, brainpoolP256r1/384r1/512r1, RSA-3072/4096/6144/8192, AES-GCM/CCM-128/192/256, CMAC-AES-128/192/256, HMAC-SHA256/384/512, HMAC-SHA3-256/384/512, KMAC128/256 — the complete ANSSI attribution set of the single-algorithm catalogue (16 composite profiles also carry ANSSI); ANSSI additionally requires post-quantum mechanisms to be used in hybrid
  • ETSI (EU Telecom): TS 103 744 (hybrid key establishment), TS 119 312 (ML-DSA, SLH-DSA, EdDSA and hybrid signature pairs); HQC standardization in progress

Asia-Pacific Standards

  • CRYPTREC (Japan): ML-KEM, ML-DSA, Camellia, XMSS-SHA2_10_256, LMS-SHA256-M32-H10-W4
  • GMT (China): SM2, SM4, SM3 algorithms
  • KISA (South Korea): SEED, ARIA algorithms (SMAUG-T, from Korea's KpqC competition, carries no KISA attribution)
  • MySEAL 2.0 (Malaysia/ASEAN): Southeast Asia critical infrastructure

Defense & Specialized Standards

  • NSA CNSA 2.0 (US Defense): exactly nine profiles — ML-KEM-1024, ML-DSA-87, XMSS-SHA2_10_256, LMS-SHA256-M32-H10-W4, LMS-SHA256-M24-H10-W4, AES-GCM-256, AES-CCM-256, HMAC-SHA384, HMAC-SHA512 (never the multi-tree HSS or XMSS^MT rows)
  • GOST (Russia + CIS): GOST R 34.10/34.11 cryptographic family
  • NCA-NCS (Saudi Arabia/GCC): Critical infrastructure standards

Regional Policy Templates (NOT standards bodies)

NCSC (United Kingdom), CCN-CERT / ENS (Spain) and ACN (Italy) ship as regional policy templates (NCSC_UK_PQC, CCN_CERT_ENS, ACN_ITALY_PQC), not as CryptoStandard members, and are never carried as an algorithm standards attribution:

  • NCSC (United Kingdom): ML-KEM, ML-DSA, SLH-DSA
  • CCN-CERT / ENS (Spain): ENISA + NIST PQC positioning
  • ACN (Italy): ENISA + NIST alignment

→ Complete standards alignment guide

Quick Navigation

Resource Description
Simple Algorithms (89) Complete catalog of single-component algorithms
Composite Algorithms (41) Complete catalog of hybrid algorithm combinations
Performance Benchmarks Algorithm performance metrics and comparisons
Integrity Guarantee Cryptographic security assurances
Standards Alignment Regulatory compliance matrix
Policy Templates (29)* Pre-configured compliance templates

Last Updated: 2026-02-24

Version: 3.2.0

Maintained By: ANKASecure Platform Team

* restricted content — see higher-tier documentation