Previous Topic: Open Format Cookie DetailsNext Topic: Web Services Security Guides

Federation Guides › Partnership Federation Guide › Encryption and Decryption Algorithms

Encryption and Decryption Algorithms

This section contains the following topics:

Open Format Cookie Encryption Algorithms

Digital Signing and Private Key Algorithms

Back Channel Communication Algorithms

Java SDK Encryption Algorithms

Crypto Algorithm

Open Format Cookie Encryption Algorithms

The open format cookie supports the following options for password-based encryptions:

FIPS_Compat and FIPS_Migration Modes

PBE/SHA1/AES/CBC/PKCS12PBE-1000-128

PBE/SHA1/AES/CBC/PKCS12PBE-1000-192

PBE/SHA1/AES/CBC/PKCS12PBE-1000-256

PBE/SHA256/AES/CBC/PKCS12PBE-1000-128

PBE/SHA256/AES/CBC/PKCS12PBE-1000-192

PBE/SHA256/AES/CBC/PKCS12PBE-1000-256

PBE/SHA1/3DES_EDE/CBC/PKCS12PBE-1000-3

PBE/SHA256/3DES_EDE/CBC/PKCS12PBE-1000-3

FIPS_Only Mode

AES128/CBC/PKCS5Padding

AES192/CBC/PKCS5Padding

AES256/CBC/PKCS5Padding

3DES_EDE/CBC/PKCS5Padding

Digital Signing and Private Key Algorithms

CA SiteMinder® uses the following algorithms for partnership signing options.

Encryption Key Algorithms

RSA-V15, RSA-OEAP

Encryption Block Algorithms

3DES, AES-128, AES-256

CA SiteMinder® uses the following algorithms for Private Key generation (Certificate/Keys):

Key Algorithm

RSA

Sign Algorithms

MD5withRSA, SHA1withRSA, SHA256withRSA & SHA512withRSA

Back Channel Communication Algorithms

For back channel communication related to HTTP-Artifact single sign-on and SAML 2.0 Single Logout, CA SiteMinder® supports the following ciphers, depending upon the FIPS mode:

FIPS_Compat and FIPS_Migration Modes—RC4 and AES

RSA_With_RC4_SHA

RSA_With_RC4_MD5

RSA_With_AES_128_CBC_SHA

RSA_With_AES_256_CBC_SHA

FIPS_Only Mode—AES only

RSA_With_AES_128_CBC_SHA

RSA_With_AES_256_CBC_SHA

Java SDK Encryption Algorithms

The CA SiteMinder® Federation Java SDK supports the following encryption algorithms:

Without a Password

"AES/CBC/PKCS5Padding"

With a Password

"PBE/SHA1/AES/CBC/PKCS12PBE-5-128"

Crypto Algorithm

FMCrypto Encryption/Decryption Algorithm

AES_128