RSA is excluded entirely, including RSA-PSS, not just RSASSA-PKCS1-v1_5. The primary reasons are that RSA signatures are a poor size fit alongside ML-DSA, and JOSE deployments (e.g. FAPI Security Profile 1.0 Part 2, Section 8.6) already mandate PS256 or ES256 and explicitly discourage RSASSA-PKCS1-v1_5.
Cheers, -Tiru On Wed, 13 May 2026 at 13:35, Jochen Zilske <[email protected]> wrote: > Hi all, > > I assume the rationale for not including the RSA-based signature > algorithms (RS256, RS384, RS512) from RFC 7518 as traditional algorithms > eligible for composition is that they use RSASSA-PKCS1-v1_5, correct? > > Kind regards > Jochen Zilske > _______________________________________________ > jose mailing list -- [email protected] > To unsubscribe send an email to [email protected] >
_______________________________________________ jose mailing list -- [email protected] To unsubscribe send an email to [email protected]
